This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json) Hash identifier: fc8jRyqMzgJ2m8UMMLgfN+Hef2IlfIO2RuOd4hqqMlM= Subject key identifier: 11:86:99:32:BC:05:E7:97:39:FC:69:53:AC:BE:8D:17:31:62:E5:7F Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Certificate serial: 019B41DB21B8DA7FD20AC619DC79BA34F700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 17:00:38 +0000 Manifest this update: Sun 21 Dec 2025 17:00:38 +0000 Manifest next update: Mon 22 Dec 2025 17:00:38 +0000 Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=) 2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: YBb9kT7OmZqOQkMMPPwsXhb/TCK3HGGz5bMSu6JUKH0=) 3: lAPGewAMTsg2zoYnnReshsfQhuc.roa (hash: cQriD0k+t33lYmHxMgkTAtEHjw/RaZJ3vs4rH148M98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:21:b8:da:7f:d2:0a:c6:19:dc:79:ba:34:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Validity Not Before: Dec 21 17:00:38 2025 GMT Not After : Dec 22 17:00:38 2025 GMT Subject: CN=11869932bc05e79739fc6953acbe8d173162e57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:eb:b9:7a:01:e9:83:79:95:c4:e0:f5:dd: 78:b2:42:d7:af:a4:fb:a9:00:9f:59:c5:9b:a7:64: 07:b1:c7:d7:a0:4f:97:6c:18:8a:3e:35:d9:63:df: b2:9a:1c:2e:5f:51:2a:d5:ca:d4:07:29:da:81:9e: f4:97:1d:02:25:17:79:52:01:e4:77:40:4a:c0:bb: 7b:68:4c:eb:07:51:c1:dc:cd:41:26:fe:fb:d5:8f: 88:6c:fc:ce:fc:1c:08:37:3f:7d:33:2e:5a:fa:29: 50:60:37:6a:1a:e0:ea:d8:4b:67:56:4c:77:0d:07: 2e:33:48:27:79:7f:93:96:4d:e8:8f:19:9c:c7:3a: 0c:0b:0b:3f:4c:1e:c4:ac:5a:21:b6:35:70:81:eb: eb:6f:26:01:cc:59:8e:6a:a7:c5:02:dd:9a:c0:79: ab:fd:f0:dc:80:36:1a:8c:e3:2b:d2:96:4c:cf:99: 28:61:61:59:ad:f6:3d:23:34:be:15:f6:ab:43:28: 80:c9:6f:19:c1:5a:46:42:18:c7:b9:88:de:05:df: b7:a1:75:27:03:87:77:9a:2a:a1:cc:d0:88:e6:6c: 37:f2:7c:0d:f3:ee:f3:49:02:10:c9:8a:20:3a:6a: c8:2d:8e:7a:33:6d:ce:a1:b0:89:1f:0e:c9:0e:00: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:99:32:BC:05:E7:97:39:FC:69:53:AC:BE:8D:17:31:62:E5:7F X509v3 Authority Key Identifier: keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a0:86:87:0a:26:0a:7f:bb:3d:fe:fa:9c:e8:39:b3:51:7f: ab:d9:95:75:ba:08:95:fd:bd:bd:c2:05:dd:b6:4f:aa:82:5d: 77:5e:8e:4e:b5:3f:dc:eb:e5:1f:e0:c7:3c:a0:a2:8e:1c:00: 1c:cd:9a:06:bb:80:18:d1:9f:38:27:58:74:29:ad:6c:55:91: c6:ab:c3:e7:22:dd:94:7e:fa:79:96:97:eb:e6:ef:83:c5:f4: 4b:92:f1:39:0b:97:f1:51:5e:6c:dd:dc:01:44:c7:fe:bc:35: 5c:1d:c8:2d:5a:40:45:01:24:3d:bd:0c:1e:fb:cf:0c:9c:0c: 6e:6b:39:a0:4a:3b:15:34:96:4e:e6:36:b0:55:39:20:8f:9f: 68:c9:3d:6e:2b:9f:19:c9:4f:b5:f9:33:79:e5:d6:36:42:27: da:cc:cf:a6:b8:11:d3:e9:71:22:0f:e5:7f:0c:12:2e:41:05: 3c:40:1c:94:94:c4:c6:ab:9d:81:18:ba:58:d7:57:2a:47:d1: 65:64:54:40:d6:6f:9a:1f:eb:3a:af:29:e7:bd:ba:f1:be:92: ed:cc:e4:37:01:59:16:7b:9c:05:94:ef:d4:c3:b1:a2:ad:ba: 49:94:3e:94:b0:c1:a4:79:d5:d3:8f:2e:8b:80:f9:94:1a:1f: 96:33:17:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2yG42n/SCsYZ3Hm6NPcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGEyM2QzYjkzMGQ0YzFmM2FjNzMwNjVkNzFhNjA3YzM1 ZDI5MDAwHhcNMjUxMjIxMTcwMDM4WhcNMjUxMjIyMTcwMDM4WjAzMTEwLwYDVQQD EygxMTg2OTkzMmJjMDVlNzk3MzlmYzY5NTNhY2JlOGQxNzMxNjJlNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXXruXoB6YN5lcTg9d14skLXr6T7 qQCfWcWbp2QHscfXoE+XbBiKPjXZY9+ymhwuX1Eq1crUBynagZ70lx0CJRd5UgHk d0BKwLt7aEzrB1HB3M1BJv771Y+IbPzO/BwINz99My5a+ilQYDdqGuDq2EtnVkx3 DQcuM0gneX+Tlk3ojxmcxzoMCws/TB7ErFohtjVwgevrbyYBzFmOaqfFAt2awHmr /fDcgDYajOMr0pZMz5koYWFZrfY9IzS+FfarQyiAyW8ZwVpGQhjHuYjeBd+3oXUn A4d3miqhzNCI5mw38nwN8+7zSQIQyYogOmrILY56M23OobCJHw7JDgBZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGGmTK8BeeXOfxpU6y+jRcxYuV/MB8GA1UdIwQY MBaAFOLaI9O5MNTB86xzBl1xpgfDXSkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzIt ODI3YTBhYzA0YTlkLzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzItODI3YTBhYzA0YTlk LzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKCGhwom Cn+7Pf76nOg5s1F/q9mVdboIlf29vcIF3bZPqoJdd16OTrU/3OvlH+DHPKCijhwA HM2aBruAGNGfOCdYdCmtbFWRxqvD5yLdlH76eZaX6+bvg8X0S5LxOQuX8VFebN3c AUTH/rw1XB3ILVpARQEkPb0MHvvPDJwMbms5oEo7FTSWTuY2sFU5II+faMk9biuf GclPtfkzeeXWNkIn2szPprgR0+lxIg/lfwwSLkEFPEAclJTExqudgRi6WNdXKkfR ZWRUQNZvmh/rOq8p57268b6S7czkNwFZFnucBZTv1MOxoq26SZQ+lLDBpHnV048u i4D5lBofljMXxg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:41 2025 by rpki-client