This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json) Hash identifier: Te2bUw8WWMvIrKSN9DJXclEhPSWf9BbBFxV3zFU1764= Subject key identifier: B6:D5:00:B0:10:E1:20:62:1D:91:01:61:85:E6:66:52:80:90:A6:6E Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Certificate serial: 019B3AFE50893DCAA586F9B5557CDAB5C267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft Manifest number: 1211 Signing time: Sat 20 Dec 2025 09:01:43 +0000 Manifest this update: Sat 20 Dec 2025 09:01:43 +0000 Manifest next update: Sun 21 Dec 2025 09:01:43 +0000 Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: LocjcT1pZwGDfOTbBYEQf8WSOXKQsP/yzBzklqx6uCk=) 2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:50:89:3d:ca:a5:86:f9:b5:55:7c:da:b5:c2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Validity Not Before: Dec 20 09:01:43 2025 GMT Not After : Dec 21 09:01:43 2025 GMT Subject: CN=b6d500b010e120621d91016185e666528090a66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6c:58:85:7e:a6:73:bb:fd:9a:b3:65:dd:6c: 1f:39:78:7e:18:60:2d:35:87:d0:be:42:00:af:e4: fd:a5:e0:4a:97:7d:61:f0:63:cf:f6:01:96:2d:02: 4c:94:4d:69:b9:19:4f:20:69:ac:af:7f:dc:bf:2e: 24:2b:fc:4a:c8:57:75:db:88:5e:80:eb:18:de:28: e0:95:ef:d5:4a:6e:5b:6f:8a:bb:f8:ed:44:4c:4f: 1c:a4:0c:16:ab:9c:21:5d:f7:e9:de:66:f5:46:65: 68:cb:a2:80:fa:57:26:e2:02:4f:82:94:35:94:a4: 58:01:7e:95:5b:e8:e6:80:73:5e:e6:a7:1e:64:eb: 8a:7f:2d:41:99:4d:a3:41:f0:26:f8:e4:be:52:27: ba:f9:39:0d:a3:f7:70:0c:2a:34:c8:1d:ac:d8:6d: b3:4b:6c:14:51:b3:1f:63:d4:76:0c:5e:74:91:10: 93:0d:4b:9a:c0:11:de:13:ba:26:48:85:a8:b0:19: 7f:24:c2:f1:b5:18:b6:24:44:16:cb:bf:ea:f9:82: 7c:f4:c7:05:48:32:a3:8a:de:e8:2f:ce:c2:91:16: 93:90:99:80:08:d6:da:8a:f2:c7:3f:7a:0b:4d:53: 04:3b:78:af:09:63:b6:e1:09:0a:ae:45:c6:d2:7f: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D5:00:B0:10:E1:20:62:1D:91:01:61:85:E6:66:52:80:90:A6:6E X509v3 Authority Key Identifier: keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:16:b5:d0:90:14:83:79:9e:71:12:4a:98:ad:6d:05:ef: c4:08:c7:7f:d1:22:52:06:95:6d:74:15:e3:6c:85:15:37:d4: a9:4b:88:29:b3:01:00:86:01:bb:ae:d6:13:d6:07:50:1c:94: 9a:48:51:fc:9d:ec:b7:58:b0:71:34:2e:55:6b:cb:db:d8:89: 79:a9:3f:12:c0:0f:f9:6d:b4:2d:a3:d9:c6:95:76:d8:65:c4: e7:2c:d7:fa:95:7d:4f:75:43:a5:40:97:95:42:5f:20:e0:2b: 2b:d1:60:42:45:fd:40:3c:f8:93:d5:27:79:f0:bb:b5:e4:60: ca:ed:b9:1c:9e:e2:4c:27:42:8d:7b:b9:73:55:37:55:1c:1f: 20:73:19:40:d6:2d:a3:56:28:8c:89:ea:01:ce:c5:cb:49:04: 28:56:d6:43:0b:64:f6:00:ea:aa:b1:16:ac:51:bf:74:b6:62: 23:f2:72:47:0b:ae:5c:6a:11:b8:67:10:58:ed:f0:2c:42:4e: 34:ba:8b:47:d3:51:8a:8f:43:15:3b:7c:ad:0e:10:44:29:23: 29:5e:67:d7:98:63:80:19:8a:1e:20:c5:7b:96:6c:d8:d7:a2: 5f:ef:4b:d6:96:b5:89:fe:bc:af:85:51:0e:1a:bf:e2:2f:db: ac:23:bd:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/lCJPcqlhvm1VXzatcJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk ZDhjMzAwHhcNMjUxMjIwMDkwMTQzWhcNMjUxMjIxMDkwMTQzWjAzMTEwLwYDVQQD EyhiNmQ1MDBiMDEwZTEyMDYyMWQ5MTAxNjE4NWU2NjY1MjgwOTBhNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GxYhX6mc7v9mrNl3WwfOXh+GGAt NYfQvkIAr+T9peBKl31h8GPP9gGWLQJMlE1puRlPIGmsr3/cvy4kK/xKyFd124he gOsY3ijgle/VSm5bb4q7+O1ETE8cpAwWq5whXffp3mb1RmVoy6KA+lcm4gJPgpQ1 lKRYAX6VW+jmgHNe5qceZOuKfy1BmU2jQfAm+OS+Uie6+TkNo/dwDCo0yB2s2G2z S2wUUbMfY9R2DF50kRCTDUuawBHeE7omSIWosBl/JMLxtRi2JEQWy7/q+YJ89McF SDKjit7oL87CkRaTkJmACNbaivLHP3oLTVMEO3ivCWO24QkKrkXG0n/TAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbVALAQ4SBiHZEBYYXmZlKAkKZuMB8GA1UdIwQY MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqMWtdCQ FIN5nnESSpitbQXvxAjHf9EiUgaVbXQV42yFFTfUqUuIKbMBAIYBu67WE9YHUByU mkhR/J3st1iwcTQuVWvL29iJeak/EsAP+W20LaPZxpV22GXE5yzX+pV9T3VDpUCX lUJfIOArK9FgQkX9QDz4k9UnefC7teRgyu25HJ7iTCdCjXu5c1U3VRwfIHMZQNYt o1YojInqAc7Fy0kEKFbWQwtk9gDqqrEWrFG/dLZiI/JyRwuuXGoRuGcQWO3wLEJO NLqLR9NRio9DFTt8rQ4QRCkjKV5n15hjgBmKHiDFe5Zs2NeiX+9L1pa1if68r4VR Dhq/4i/brCO9DQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:02 2025 by rpki-client