This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json) Hash identifier: Z11JqAgxgtVXPAl/bRm0OhB7d08GLAUjOf1pAbYGiBU= Subject key identifier: 9A:4A:BC:4C:3F:73:60:BF:11:F4:16:9B:8A:F9:3C:DA:6E:19:6A:4D Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f Certificate serial: 019B6E45B47D4B2290BF81A072D0A8CA7211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft Manifest number: 09E0 Signing time: Tue 30 Dec 2025 08:00:20 +0000 Manifest this update: Tue 30 Dec 2025 08:00:20 +0000 Manifest next update: Wed 31 Dec 2025 08:00:20 +0000 Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: LCfoMEtxTA3v5pOjvCVeuOWfLDSD3CO9FWLbXxJ1nfc=) 2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:b4:7d:4b:22:90:bf:81:a0:72:d0:a8:ca:72:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f Validity Not Before: Dec 30 08:00:20 2025 GMT Not After : Dec 31 08:00:20 2025 GMT Subject: CN=9a4abc4c3f7360bf11f4169b8af93cda6e196a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:5e:46:a4:95:db:ab:7b:0c:55:cf:5f:f0: eb:19:23:43:06:10:97:53:24:62:41:32:e4:4f:be: 88:7c:f9:cb:10:0a:d6:6d:c8:15:31:99:73:96:81: 4c:fe:0b:c1:b8:07:42:71:7d:3c:20:bf:8f:08:b9: 65:8b:1d:39:a3:09:ec:de:91:ab:71:b9:ef:b2:fb: 39:b5:b5:e2:2c:e6:b0:ba:1f:89:53:a7:33:b0:2e: 9b:05:29:e6:19:f8:24:0d:2e:ce:bb:fd:ed:58:93: 8a:6f:83:65:b3:56:39:9f:25:a1:04:ea:b1:85:47: 6f:9a:8a:a6:69:97:38:ac:39:c0:8d:02:cf:97:b2: 4f:a9:f0:98:92:da:04:91:83:b5:3c:a7:7e:81:9a: c9:98:d2:ce:d8:6c:fc:fa:ff:c6:e8:50:58:08:87: ae:cc:4d:e2:b6:b3:8c:a5:fe:44:86:b0:b6:32:a3: d2:35:a0:95:8f:cf:57:9b:82:4c:49:9a:ea:d7:2a: 3a:fb:f8:fd:37:03:3b:97:3e:fe:14:7a:4f:92:38: 3e:f3:18:5a:b7:a5:cd:5f:50:66:41:cc:4b:13:16: 10:5c:d3:d7:87:90:f1:4a:e6:42:87:5e:a2:95:c7: ee:54:8d:09:c1:4f:3d:ab:24:27:69:27:80:24:b8: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4A:BC:4C:3F:73:60:BF:11:F4:16:9B:8A:F9:3C:DA:6E:19:6A:4D X509v3 Authority Key Identifier: keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:75:a8:35:1f:e6:73:60:3a:b3:c6:3e:13:8d:c7:9f:9a:b1: 8f:a6:08:70:90:8e:f6:c3:93:2a:ee:81:a5:6a:57:cc:a2:74: 31:c2:18:96:29:de:16:81:06:e1:68:99:c3:01:8c:74:99:47: 89:cc:b4:c3:76:5b:3f:14:87:2b:1a:89:8d:37:bb:7a:97:82: 86:f6:27:9a:7a:b5:cd:61:37:cf:a7:0c:00:22:2b:5e:c1:28: 60:0c:80:a4:d1:1f:0c:d0:a8:65:90:c5:3a:a8:9a:62:93:a2: 00:9d:c0:ca:ca:c3:ad:3e:a5:9f:3f:fe:1a:9e:4a:bf:05:d4: 2b:11:88:e4:9d:44:14:a3:ec:9f:40:a6:00:eb:ad:ed:53:a4: 17:6e:ed:e8:2e:48:49:22:1f:fb:06:87:a3:dd:61:99:80:ef: c3:00:34:9e:ee:c6:c9:a9:a2:9e:09:d4:e6:da:33:40:79:53: 34:ee:51:0d:49:46:c5:c0:cf:68:91:5a:e1:84:de:64:34:9a: dd:8d:73:20:bd:a5:cd:67:82:35:d8:84:25:12:96:a1:26:f4: f1:0d:10:48:03:81:18:14:b7:6e:ed:68:73:9a:4c:45:66:bf: 45:35:9b:77:37:38:6a:7d:0a:a6:5d:f0:d2:5c:45:b0:cd:b0: 58:31:73:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRbR9SyKQv4GgctCoynIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx NzkxMmYwHhcNMjUxMjMwMDgwMDIwWhcNMjUxMjMxMDgwMDIwWjAzMTEwLwYDVQQD Eyg5YTRhYmM0YzNmNzM2MGJmMTFmNDE2OWI4YWY5M2NkYTZlMTk2YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12teRqSV26t7DFXPX/DrGSNDBhCX UyRiQTLkT76IfPnLEArWbcgVMZlzloFM/gvBuAdCcX08IL+PCLllix05owns3pGr cbnvsvs5tbXiLOawuh+JU6czsC6bBSnmGfgkDS7Ou/3tWJOKb4Nls1Y5nyWhBOqx hUdvmoqmaZc4rDnAjQLPl7JPqfCYktoEkYO1PKd+gZrJmNLO2Gz8+v/G6FBYCIeu zE3itrOMpf5EhrC2MqPSNaCVj89Xm4JMSZrq1yo6+/j9NwM7lz7+FHpPkjg+8xha t6XNX1BmQcxLExYQXNPXh5DxSuZCh16ilcfuVI0JwU89qyQnaSeAJLjyqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpKvEw/c2C/EfQWm4r5PNpuGWpNMB8GA1UdIwQY MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3WoNR/m c2A6s8Y+E43Hn5qxj6YIcJCO9sOTKu6BpWpXzKJ0McIYlineFoEG4WiZwwGMdJlH icy0w3ZbPxSHKxqJjTe7epeChvYnmnq1zWE3z6cMACIrXsEoYAyApNEfDNCoZZDF OqiaYpOiAJ3AysrDrT6lnz/+Gp5KvwXUKxGI5J1EFKPsn0CmAOut7VOkF27t6C5I SSIf+waHo91hmYDvwwA0nu7GyamingnU5tozQHlTNO5RDUlGxcDPaJFa4YTeZDSa 3Y1zIL2lzWeCNdiEJRKWoSb08Q0QSAOBGBS3bu1oc5pMRWa/RTWbdzc4an0Kpl3w 0lxFsM2wWDFzHA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:14:04 2025 by rpki-client