This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json) Hash identifier: 2J9kAYYPgxPeUXVrWGyxJp9cxqm+nwEeRNk25T1lUUM= Subject key identifier: 72:6F:62:B8:66:B7:0A:2C:C0:DE:E6:96:C3:4D:A0:A7:A8:2F:3C:81 Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Certificate serial: 019B31564C852E311DDAFA9F2F6A68859316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 12:01:37 +0000 Manifest this update: Thu 18 Dec 2025 12:01:37 +0000 Manifest next update: Fri 19 Dec 2025 12:01:37 +0000 Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: lbVOpWgzDkvGCPm7XRf2E6/NYhDROsG/7y4BzvG2S5c=) 2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:4c:85:2e:31:1d:da:fa:9f:2f:6a:68:85:93:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Validity Not Before: Dec 18 12:01:37 2025 GMT Not After : Dec 19 12:01:37 2025 GMT Subject: CN=726f62b866b70a2cc0dee696c34da0a7a82f3c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:17:ad:55:f9:0d:47:fc:98:3d:a3:04:bb: 82:79:b9:4e:b9:33:6f:46:56:37:3e:97:f4:f2:72: db:66:37:54:ca:7c:08:69:7c:c1:29:2e:69:a6:98: 75:f4:4b:a1:09:e8:c0:e1:4c:9d:09:76:54:3e:29: 03:48:5f:b0:7d:28:98:83:3d:56:f1:cd:f4:03:46: 6f:69:bf:58:39:be:79:6d:27:a8:0a:c8:c7:8b:4a: 45:ab:6a:3f:f8:ba:f5:b8:ee:32:4f:7f:59:c9:a2: 31:c8:b9:6b:12:06:60:20:eb:f1:60:a2:7a:e4:ba: 08:69:2a:e6:86:3b:7b:35:8d:07:46:27:7a:82:b1: 31:eb:49:09:6a:e7:08:e7:af:92:98:02:39:be:68: de:7d:5a:53:95:4b:5a:d7:44:4a:60:dd:8f:0d:73: e0:0f:ba:1d:63:4b:ca:ea:65:51:30:1c:34:32:2d: f1:75:df:0a:4e:d9:0d:91:50:17:7b:c1:d4:87:e0: 6a:28:55:87:23:5d:c1:40:22:06:b5:45:ae:a6:b5: 3d:9b:93:a7:6c:bf:b0:eb:03:90:b1:3d:88:ec:ac: 24:b1:06:28:de:80:44:f7:c3:dc:ab:27:0f:78:8f: 14:aa:45:2f:6e:78:09:a6:29:7f:73:a5:c7:38:f0: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6F:62:B8:66:B7:0A:2C:C0:DE:E6:96:C3:4D:A0:A7:A8:2F:3C:81 X509v3 Authority Key Identifier: keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b8:ee:da:7c:ef:cb:0c:f7:bc:c2:14:6d:92:e1:c3:9c:e4: ec:9c:22:ae:fc:6d:51:e5:1f:c5:d1:e8:24:c2:17:01:48:f3: 3a:79:06:df:a1:27:a9:35:e2:59:b2:9e:e3:9d:b0:f5:7b:05: eb:75:50:14:02:8e:e4:e1:6e:30:f3:4b:df:5e:60:1c:dc:3f: 72:4b:fe:80:47:3e:53:61:c2:c2:80:00:d0:62:8e:57:79:19: 66:a2:9b:80:45:40:b1:de:3f:9c:c7:e6:d4:60:aa:af:c1:1f: 0d:e9:28:4c:19:b6:34:41:02:34:c7:65:41:3f:ea:ee:75:b5: 3e:ed:28:00:60:4d:01:f3:2f:ae:01:36:27:92:36:18:f5:6b: 30:c7:4c:72:f9:1e:19:3f:ed:9b:f0:81:42:32:20:19:f9:9a: 79:ff:fa:e3:4e:17:2c:77:6a:7a:6e:34:27:33:76:59:96:f4: df:30:3a:28:76:3f:c9:22:fa:73:b1:c2:88:75:6a:fe:7a:02: d9:1a:eb:b9:f1:0f:29:69:a7:ff:66:a4:74:b2:f4:53:44:03: f0:9c:39:42:1f:57:72:4d:7e:e6:26:3f:c7:e8:dc:3d:9f:ba: d0:52:02:ea:cc:a5:a6:75:42:29:b4:24:4d:85:ee:fe:c9:e5: 72:a6:41:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVkyFLjEd2vqfL2pohZMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz ZGQxNzgwHhcNMjUxMjE4MTIwMTM3WhcNMjUxMjE5MTIwMTM3WjAzMTEwLwYDVQQD Eyg3MjZmNjJiODY2YjcwYTJjYzBkZWU2OTZjMzRkYTBhN2E4MmYzYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss8XrVX5DUf8mD2jBLuCeblOuTNv RlY3Ppf08nLbZjdUynwIaXzBKS5ppph19EuhCejA4UydCXZUPikDSF+wfSiYgz1W 8c30A0Zvab9YOb55bSeoCsjHi0pFq2o/+Lr1uO4yT39ZyaIxyLlrEgZgIOvxYKJ6 5LoIaSrmhjt7NY0HRid6grEx60kJaucI56+SmAI5vmjefVpTlUta10RKYN2PDXPg D7odY0vK6mVRMBw0Mi3xdd8KTtkNkVAXe8HUh+BqKFWHI13BQCIGtUWuprU9m5On bL+w6wOQsT2I7KwksQYo3oBE98PcqycPeI8UqkUvbngJpil/c6XHOPBNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJvYrhmtwoswN7mlsNNoKeoLzyBMB8GA1UdIwQY MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2 LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbju2nzv ywz3vMIUbZLhw5zk7JwirvxtUeUfxdHoJMIXAUjzOnkG36EnqTXiWbKe452w9XsF 63VQFAKO5OFuMPNL315gHNw/ckv+gEc+U2HCwoAA0GKOV3kZZqKbgEVAsd4/nMfm 1GCqr8EfDekoTBm2NEECNMdlQT/q7nW1Pu0oAGBNAfMvrgE2J5I2GPVrMMdMcvke GT/tm/CBQjIgGfmaef/6404XLHdqem40JzN2WZb03zA6KHY/ySL6c7HCiHVq/noC 2RrrufEPKWmn/2akdLL0U0QD8Jw5Qh9Xck1+5iY/x+jcPZ+60FIC6sylpnVCKbQk TYXu/snlcqZBrQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:23:38 2025 by rpki-client