This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json) Hash identifier: wyTjYj55r3sE+TcwtmdQf20zexBY0YX1a/QuTIWqi1I= Subject key identifier: 71:CB:23:B3:84:26:48:90:A3:2D:C5:F2:07:BF:5F:94:26:27:4B:96 Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a Certificate serial: 019B3C7E64FB4C59A797CB9E318153504BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft Manifest number: 07A2 Signing time: Sat 20 Dec 2025 16:01:14 +0000 Manifest this update: Sat 20 Dec 2025 16:01:14 +0000 Manifest next update: Sun 21 Dec 2025 16:01:14 +0000 Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: ln7ZtBE0UTovl5VoONS4DBHIg9J7mi1y91C/xHIRriE=) 2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:64:fb:4c:59:a7:97:cb:9e:31:81:53:50:4b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a Validity Not Before: Dec 20 16:01:14 2025 GMT Not After : Dec 21 16:01:14 2025 GMT Subject: CN=71cb23b384264890a32dc5f207bf5f9426274b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:e5:e5:74:61:f6:fb:db:ba:11:75:e7:d5: bb:46:6e:4a:09:e4:93:c7:83:da:a7:06:52:d4:82: 81:d7:1f:de:ba:95:68:fb:31:cb:3c:23:6f:da:de: be:1e:07:0d:ac:e7:20:c2:4d:c8:c4:de:89:c7:c4: cc:e4:4a:8a:c2:f3:8e:8c:39:e7:dd:d2:de:de:e3: 8d:0d:bd:2c:2f:7e:60:7e:4c:52:e4:ee:44:78:5f: 49:f8:0b:a9:70:b5:2c:18:6b:f4:ac:d3:4e:2f:7d: bb:87:65:9c:f0:fc:b7:14:f7:15:a6:e3:48:3e:ac: 13:63:8e:f7:d2:61:5c:a7:0b:0a:b0:c4:68:28:c4: 61:f2:18:97:24:0e:57:2b:cf:10:04:0e:cb:a0:d0: 6e:f2:59:d0:af:bb:e6:9e:16:e1:c3:21:fe:09:56: 00:b6:04:27:fe:27:3b:c4:91:ea:2d:e8:b1:fd:46: c8:1b:b2:d8:b6:4e:7f:6b:e9:e0:1b:8b:0b:1b:f2: dd:5f:0f:16:bd:e6:cc:99:38:cd:32:e3:73:f6:47: 4f:99:8a:81:9c:18:57:4a:5e:34:b2:e1:36:cd:22: 67:11:85:fb:31:31:3c:b2:b8:d5:2a:8c:df:a7:e6: 5f:c6:a4:c2:b7:1e:ef:e0:30:c8:21:79:1d:26:ba: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CB:23:B3:84:26:48:90:A3:2D:C5:F2:07:BF:5F:94:26:27:4B:96 X509v3 Authority Key Identifier: keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:73:58:51:cb:c8:c2:bb:f7:61:21:2c:25:c3:b9:f7:3a:76: 47:bc:ce:47:66:55:dc:2d:6c:82:ea:54:e0:41:cf:a7:5e:67: 75:18:f3:87:4a:ad:11:2a:48:1e:65:df:22:7e:d9:4a:6b:cb: 70:3b:76:f9:c5:5f:b3:56:f8:17:5c:35:de:52:84:f2:f7:36: a8:54:46:52:47:70:f1:e0:53:97:11:c4:d6:9d:8c:ab:97:f8: e9:74:0c:f4:1d:32:72:d8:4c:39:07:78:48:60:17:31:60:0d: 0d:3b:c8:87:64:4d:60:04:ba:65:08:68:b2:62:a0:26:01:fb: ae:6a:e7:6e:87:9a:98:45:28:00:95:f7:88:5d:c8:a9:ee:9f: 28:9e:26:8d:49:6d:5b:df:af:5b:69:c1:e5:de:d1:9f:cf:a5: d7:c4:3b:53:d6:c2:37:2e:68:1d:4f:9d:a2:33:10:f6:5b:39: e0:92:ab:a1:27:f0:6c:3a:17:d0:46:bc:cd:2f:3a:d0:60:b7: 8f:eb:bd:63:86:cd:f9:36:90:ef:b2:63:f1:3d:44:4f:be:0b: db:61:cf:10:20:1e:38:58:3f:ce:5a:16:a2:70:a7:2f:77:8d: 2e:03:ff:8f:2c:87:6f:6e:6d:85:41:d0:33:57:c4:52:55:d0: aa:f4:39:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmT7TFmnl8ueMYFTUEutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjViMDhkYzQzM2Y4ZTlmNzc3MjdjYjUxZjZiYTI0YmRk NWYzOWEwHhcNMjUxMjIwMTYwMTE0WhcNMjUxMjIxMTYwMTE0WjAzMTEwLwYDVQQD Eyg3MWNiMjNiMzg0MjY0ODkwYTMyZGM1ZjIwN2JmNWY5NDI2Mjc0Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysPl5XRh9vvbuhF159W7Rm5KCeST x4PapwZS1IKB1x/eupVo+zHLPCNv2t6+HgcNrOcgwk3IxN6Jx8TM5EqKwvOOjDnn 3dLe3uONDb0sL35gfkxS5O5EeF9J+AupcLUsGGv0rNNOL327h2Wc8Py3FPcVpuNI PqwTY4730mFcpwsKsMRoKMRh8hiXJA5XK88QBA7LoNBu8lnQr7vmnhbhwyH+CVYA tgQn/ic7xJHqLeix/UbIG7LYtk5/a+ngG4sLG/LdXw8WvebMmTjNMuNz9kdPmYqB nBhXSl40suE2zSJnEYX7MTE8srjVKozfp+ZfxqTCtx7v4DDIIXkdJrrutwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHLI7OEJkiQoy3F8ge/X5QmJ0uWMB8GA1UdIwQY MBaAFOK1sI3EM/jp93cny1H2uiS91fOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTkt M2U2ZmJlMzc5ZTgzLzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTktM2U2ZmJlMzc5ZTgz LzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnNYUcvI wrv3YSEsJcO59zp2R7zOR2ZV3C1sgupU4EHPp15ndRjzh0qtESpIHmXfIn7ZSmvL cDt2+cVfs1b4F1w13lKE8vc2qFRGUkdw8eBTlxHE1p2Mq5f46XQM9B0ycthMOQd4 SGAXMWANDTvIh2RNYAS6ZQhosmKgJgH7rmrnboeamEUoAJX3iF3Iqe6fKJ4mjUlt W9+vW2nB5d7Rn8+l18Q7U9bCNy5oHU+dojMQ9ls54JKroSfwbDoX0Ea8zS860GC3 j+u9Y4bN+TaQ77Jj8T1ET74L22HPECAeOFg/zloWonCnL3eNLgP/jyyHb25thUHQ M1fEUlXQqvQ5ig== -----END CERTIFICATE-----Generated at Sun Dec 21 00:04:46 2025 by rpki-client