This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: Q1fxxVKgSH7c7AtlqVuY8S3WeLOxP88U2Kk9GobqXSE= Subject key identifier: 14:62:A6:27:7B:4D:23:98:7F:72:23:6B:26:8D:18:69:A2:CD:E3:6F Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B38A2131DC894FA6AAC0674755ACCB9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1794 Signing time: Fri 19 Dec 2025 22:01:44 +0000 Manifest this update: Fri 19 Dec 2025 22:01:44 +0000 Manifest next update: Sat 20 Dec 2025 22:01:44 +0000 Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: slAqpudbeJ5PuykcJsV2lHgq8A/bk1dVGYlOSgbmKNo=) 2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=) 3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=) 4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=) 5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=) 6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=) 7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=) 8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=) 9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:13:1d:c8:94:fa:6a:ac:06:74:75:5a:cc:b9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Dec 19 22:01:44 2025 GMT Not After : Dec 20 22:01:44 2025 GMT Subject: CN=1462a6277b4d23987f72236b268d1869a2cde36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:b7:02:c7:aa:33:df:5c:08:87:6e:71:4d: 73:d0:e7:b4:ac:36:bf:f2:2b:19:a6:92:81:06:b7: ab:28:5e:ec:17:7f:0d:31:fe:74:1c:3b:00:dd:ca: 79:c5:7c:c0:bf:68:da:71:3c:b4:53:ba:e5:09:5e: 52:96:30:ee:28:6d:34:58:b1:d0:67:ff:3e:8c:93: 8d:d2:a0:80:29:13:f3:a2:d6:18:a2:dd:d9:ec:a5: 31:39:5a:68:54:e6:32:df:b2:e6:bd:5c:42:64:48: 93:41:18:35:c3:68:6a:60:86:ef:17:06:c8:9b:2e: 58:d1:91:07:90:ee:05:7e:e0:8f:43:01:a1:6e:86: 0e:23:a3:ea:a7:43:c7:2a:b5:1a:dc:04:cd:bd:8f: f2:7e:e3:eb:2d:b1:fe:84:8c:d0:f1:02:4b:2a:23: 5c:ff:3f:69:72:5a:7c:f2:15:62:d2:f0:d0:72:0b: 92:7b:52:1e:fd:3b:d1:89:08:82:22:41:6b:84:7c: 14:58:96:c8:e1:c4:e9:5b:32:d9:de:86:11:c8:4e: ea:b8:db:42:61:02:11:d2:75:cd:c2:59:f9:19:b2: 19:fa:52:84:ee:b6:3b:1a:d6:29:4f:8e:f8:db:4d: fc:40:84:4f:a7:3f:f2:8f:94:d7:e1:f1:66:4e:18: be:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:A6:27:7B:4D:23:98:7F:72:23:6B:26:8D:18:69:A2:CD:E3:6F X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1a:38:57:35:08:ec:13:3a:83:5f:22:c3:01:97:a3:b4:aa: 18:fd:5d:e2:49:de:6c:68:05:2c:a8:5b:72:50:e0:16:11:e5: f6:43:f7:c6:35:32:7f:15:7e:65:03:52:94:58:03:e3:04:3a: c2:97:6a:99:5a:70:19:2e:33:36:be:68:eb:9c:36:ef:c8:54: 9e:eb:d7:bd:5e:ff:d9:f4:d5:ab:ea:04:10:b3:02:ac:fa:1d: cc:4a:9f:15:44:63:e3:bf:89:3e:24:d3:7a:fc:72:54:74:d0: 65:89:39:0f:c5:2c:86:f2:46:6f:69:89:b4:48:d1:66:57:f8: 94:20:93:8b:ee:e3:56:99:aa:df:b8:c6:50:d6:f8:a9:47:ee: 0c:14:b4:c1:09:17:4e:9f:40:1d:1c:53:46:e5:12:99:a9:e6: a0:9e:54:c1:11:36:a0:77:0a:93:18:95:41:9a:59:69:71:08: 2a:0f:e5:7d:6d:e6:e1:66:97:0d:6d:9e:7e:96:11:d5:8f:36: ae:60:be:a0:e5:18:80:8d:96:4a:7d:75:db:35:62:92:47:32: ba:bb:cb:bd:99:60:15:66:c2:95:44:c0:48:7e:b4:c4:de:c0: 3a:a6:e4:82:8f:f3:d7:ff:35:b4:67:9b:ba:a1:af:0a:f0:20: 44:7f:ed:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ohMdyJT6aqwGdHVazLmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjUxMjE5MjIwMTQ0WhcNMjUxMjIwMjIwMTQ0WjAzMTEwLwYDVQQD EygxNDYyYTYyNzdiNGQyMzk4N2Y3MjIzNmIyNjhkMTg2OWEyY2RlMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+C3AseqM99cCIducU1z0Oe0rDa/ 8isZppKBBrerKF7sF38NMf50HDsA3cp5xXzAv2jacTy0U7rlCV5SljDuKG00WLHQ Z/8+jJON0qCAKRPzotYYot3Z7KUxOVpoVOYy37LmvVxCZEiTQRg1w2hqYIbvFwbI my5Y0ZEHkO4FfuCPQwGhboYOI6Pqp0PHKrUa3ATNvY/yfuPrLbH+hIzQ8QJLKiNc /z9pclp88hVi0vDQcguSe1Ie/TvRiQiCIkFrhHwUWJbI4cTpWzLZ3oYRyE7quNtC YQIR0nXNwln5GbIZ+lKE7rY7GtYpT4742038QIRPpz/yj5TX4fFmThi+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRipid7TSOYf3IjayaNGGmizeNvMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRo4VzUI 7BM6g18iwwGXo7SqGP1d4knebGgFLKhbclDgFhHl9kP3xjUyfxV+ZQNSlFgD4wQ6 wpdqmVpwGS4zNr5o65w278hUnuvXvV7/2fTVq+oEELMCrPodzEqfFURj47+JPiTT evxyVHTQZYk5D8UshvJGb2mJtEjRZlf4lCCTi+7jVpmq37jGUNb4qUfuDBS0wQkX Tp9AHRxTRuUSmanmoJ5UwRE2oHcKkxiVQZpZaXEIKg/lfW3m4WaXDW2efpYR1Y82 rmC+oOUYgI2WSn112zVikkcyurvLvZlgFWbClUTASH60xN7AOqbkgo/z1/81tGeb uqGvCvAgRH/tHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:27:37 2025 by rpki-client