This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json) Hash identifier: 95ePpajkyvAzz8qeaKzSutKg1xp+3dt3B3Fah6/kt3k= Subject key identifier: 6D:0A:F1:F2:AE:34:8B:66:8A:2B:C1:A7:86:12:5B:F9:22:DE:2F:C1 Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Certificate serial: 019B424901C750F12755F00351AAC532BBAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft Manifest number: 13B8 Signing time: Sun 21 Dec 2025 19:00:39 +0000 Manifest this update: Sun 21 Dec 2025 19:00:39 +0000 Manifest next update: Mon 22 Dec 2025 19:00:39 +0000 Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: r0VvWsDPbPGrqEQkTxqdLdsIRMk2CMuKdd/IlBtdRBI=) 2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=) 3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:01:c7:50:f1:27:55:f0:03:51:aa:c5:32:bb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Validity Not Before: Dec 21 19:00:39 2025 GMT Not After : Dec 22 19:00:39 2025 GMT Subject: CN=6d0af1f2ae348b668a2bc1a786125bf922de2fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:2f:dc:86:4c:d5:8d:ae:46:4e:66:4a:97: 2f:3d:df:03:75:d9:a0:f7:a7:b3:6d:45:fc:2f:8e: 4c:f2:95:6b:19:e5:01:33:cd:7e:ae:ae:ac:eb:17: 6e:d1:dc:78:70:55:50:c3:dd:d3:08:f5:35:ad:09: d4:e2:f6:b3:91:15:82:c1:97:ae:3f:d4:58:71:70: 2c:c2:d3:d9:ad:42:a8:27:f7:e6:e7:65:82:c4:20: 6a:88:d8:9c:03:1c:30:69:5c:f1:d5:af:50:42:70: 5e:3c:fa:39:48:5c:aa:31:06:b1:d2:80:5f:89:92: bf:6b:d0:d3:1b:e4:b8:fd:02:f3:46:bb:78:40:39: fa:18:39:0c:f3:cd:1a:ee:15:02:36:00:29:05:5b: 92:ce:67:91:ba:a4:31:c4:5e:1d:f6:83:16:6f:b9: 51:bf:56:82:f1:4c:85:79:a1:9a:d6:b4:5a:c8:5e: 42:9e:8d:d3:c8:d8:06:9a:30:c6:22:57:e7:9c:5d: c3:98:45:55:a0:bb:23:81:ed:a3:85:65:d9:06:20: b5:70:c3:2f:5e:4c:6c:57:c3:fb:77:84:e2:3b:fa: 53:d8:28:cf:99:d2:5c:ab:5d:4f:3b:7f:66:e6:43: 44:86:6e:2b:61:b1:e5:33:16:9c:30:83:17:a9:a9: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:F1:F2:AE:34:8B:66:8A:2B:C1:A7:86:12:5B:F9:22:DE:2F:C1 X509v3 Authority Key Identifier: keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:44:6b:f8:70:2c:26:96:0d:2c:31:89:c1:f3:2d:d5:ed: 4d:44:fc:f2:ff:bb:63:b2:71:4c:94:89:2e:e8:91:35:91:2e: ca:55:26:29:a4:cb:12:35:e6:c2:b6:b2:87:98:46:07:4f:6e: 71:81:1a:81:6f:dd:71:ce:a4:33:2c:bf:09:81:23:e6:b0:a2: 9c:af:04:00:40:47:00:5c:16:1d:ea:c3:4b:5d:4c:6d:e3:cd: 0e:92:33:5b:77:51:a1:cb:0d:1f:1a:c3:46:59:61:bb:5a:f9: 1d:76:80:53:2a:bc:5c:0e:bf:48:9a:de:cd:06:3a:9f:e5:4b: 6d:04:dd:9f:15:e2:1b:31:47:23:ce:7e:2e:82:c2:50:71:af: 47:41:ee:48:f8:45:1d:eb:fb:89:81:48:fb:6f:20:77:9c:3f: 23:7a:82:22:15:47:1c:e5:5c:2d:aa:d0:ab:ee:85:f5:2f:12: 14:52:f2:67:74:8e:42:ba:e6:18:6f:a9:70:3a:b6:46:01:61: 34:43:af:bd:68:dd:4e:99:7c:9a:2b:85:5f:65:e3:bb:98:94: 1b:e0:10:c0:45:24:1a:72:9c:f3:c7:ab:aa:9f:b0:af:29:b3: b3:6d:81:06:1c:5a:9a:13:47:e7:28:b9:98:8d:ab:3f:b6:b5: 73:14:b1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSQHHUPEnVfADUarFMruqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh ZjdlMDAwHhcNMjUxMjIxMTkwMDM5WhcNMjUxMjIyMTkwMDM5WjAzMTEwLwYDVQQD Eyg2ZDBhZjFmMmFlMzQ4YjY2OGEyYmMxYTc4NjEyNWJmOTIyZGUyZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp4v3IZM1Y2uRk5mSpcvPd8Dddmg 96ezbUX8L45M8pVrGeUBM81+rq6s6xdu0dx4cFVQw93TCPU1rQnU4vazkRWCwZeu P9RYcXAswtPZrUKoJ/fm52WCxCBqiNicAxwwaVzx1a9QQnBePPo5SFyqMQax0oBf iZK/a9DTG+S4/QLzRrt4QDn6GDkM880a7hUCNgApBVuSzmeRuqQxxF4d9oMWb7lR v1aC8UyFeaGa1rRayF5Cno3TyNgGmjDGIlfnnF3DmEVVoLsjge2jhWXZBiC1cMMv XkxsV8P7d4TiO/pT2CjPmdJcq11PO39m5kNEhm4rYbHlMxacMIMXqalQpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0K8fKuNItmiivBp4YSW/ki3i/BMB8GA1UdIwQY MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt YmE0ZDA2ZGYwYmU1LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWItYmE0ZDA2ZGYwYmU1 LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifZEa/hw LCaWDSwxicHzLdXtTUT88v+7Y7JxTJSJLuiRNZEuylUmKaTLEjXmwrayh5hGB09u cYEagW/dcc6kMyy/CYEj5rCinK8EAEBHAFwWHerDS11MbePNDpIzW3dRocsNHxrD Rllhu1r5HXaAUyq8XA6/SJrezQY6n+VLbQTdnxXiGzFHI85+LoLCUHGvR0HuSPhF Hev7iYFI+28gd5w/I3qCIhVHHOVcLarQq+6F9S8SFFLyZ3SOQrrmGG+pcDq2RgFh NEOvvWjdTpl8miuFX2Xju5iUG+AQwEUkGnKc88erqp+wrymzs22BBhxamhNH5yi5 mI2rP7a1cxSxcw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:55:51 2025 by rpki-client