This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json) Hash identifier: d25agVQZhBLMnsjHHr7U7R3m7eXN5PbwKg4zKPPw14w= Subject key identifier: 6E:29:7E:1D:74:58:62:8D:BB:62:34:35:15:93:3D:91:D0:64:F1:17 Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Certificate serial: 019B3C7E76801721E189CE90D1F3C847DA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft Manifest number: 1499 Signing time: Sat 20 Dec 2025 16:01:19 +0000 Manifest this update: Sat 20 Dec 2025 16:01:19 +0000 Manifest next update: Sun 21 Dec 2025 16:01:19 +0000 Files and hashes: 1: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: /1rbro1wPY793mAZAQ1nZvt0BeoRKkcONifqtYlPwew=) 2: KUdT6ERAiaY5ZjAg0l7_pkDNLCw.roa (hash: JWvFQTdlTw7oZyEK0anyzQ0bLLNEO6CoBLxhpsT9tmY=) 3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:76:80:17:21:e1:89:ce:90:d1:f3:c8:47:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Validity Not Before: Dec 20 16:01:19 2025 GMT Not After : Dec 21 16:01:19 2025 GMT Subject: CN=6e297e1d7458628dbb62343515933d91d064f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:4a:4d:93:b1:fc:ea:2f:ca:37:92:55:23: b5:a5:a3:3d:75:88:12:d1:28:58:10:33:5a:0f:83: b6:43:80:6a:fa:22:1b:8e:dc:98:8f:f1:40:9f:2a: 3a:85:95:0e:a8:d8:fb:0a:e8:4d:17:37:75:80:66: 3c:dc:18:12:61:d5:aa:72:bf:5b:85:3b:ac:c4:6e: ba:60:87:98:cb:aa:6d:30:8b:68:2a:52:ba:cb:c5: 59:25:25:b4:d8:a9:bb:4a:57:dd:38:87:70:6f:57: 10:f2:8e:09:24:ba:aa:6f:b7:fa:22:96:2a:91:2e: e0:8d:43:2a:01:f8:76:d4:01:8c:7c:cd:6e:04:cf: 2c:53:8a:79:58:8e:a1:93:53:28:37:c7:80:cb:19: ae:37:68:5a:8d:d3:75:58:75:7a:58:4c:73:d0:2b: 0c:63:49:bc:f3:f3:1a:bf:d9:24:e7:61:48:98:8b: 95:7c:1d:5a:0b:3b:44:db:37:98:1c:01:cd:8c:f7: a7:0f:b3:8e:de:35:1b:18:73:e7:22:ac:23:de:cc: 2a:fa:d9:69:dd:8e:e1:c1:11:56:7e:ab:b5:42:f9: 2a:11:33:85:13:00:71:50:21:ae:35:40:06:07:c8: 49:cc:d1:c9:79:6f:d0:c0:3f:c4:c5:00:88:b6:7e: 80:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:7E:1D:74:58:62:8D:BB:62:34:35:15:93:3D:91:D0:64:F1:17 X509v3 Authority Key Identifier: keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:77:3c:f8:62:cb:76:e8:5a:0b:53:2b:70:88:78:06:af:01: b7:ac:2e:8a:e5:07:bc:80:0f:b5:bb:7f:de:a7:07:c2:30:e1: 52:d5:85:e0:4f:e4:59:6d:19:3f:69:0e:5f:26:7c:5f:bc:9b: 4f:4f:07:bd:9e:93:ac:cb:06:66:56:53:dc:50:6c:0c:b4:57: 07:5c:df:16:81:93:69:07:cb:fc:14:32:2d:39:2c:0e:1a:6b: a6:21:f9:96:d0:98:c0:58:fa:85:1d:d6:a9:56:fa:e7:eb:75: 87:37:e8:c8:59:21:ef:1c:5e:02:e6:e4:13:4b:38:68:2c:55: ac:60:9f:d2:28:e3:8b:4f:85:81:a5:00:d7:fd:00:26:ed:26: b4:3e:6a:f4:bb:29:4f:46:f8:67:2f:db:ea:54:56:96:e5:a3: 66:dd:fb:37:d7:da:5f:e7:9e:00:c1:fd:40:4b:3a:8a:6a:f3: 9f:66:2d:4d:64:af:05:c0:c7:8e:3a:16:9e:c3:4e:eb:85:74: 67:58:9d:c2:4c:57:67:69:d7:68:36:22:87:46:7b:5a:63:92: a6:23:c8:5f:b9:01:1c:77:5a:19:12:93:7b:1b:71:82:fc:14: a7:62:4c:8d:a0:15:18:cb:bf:ee:a8:7b:02:db:d2:71:80:8f: d7:62:d2:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnaAFyHhic6Q0fPIR9oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw NGI1ZGMwHhcNMjUxMjIwMTYwMTE5WhcNMjUxMjIxMTYwMTE5WjAzMTEwLwYDVQQD Eyg2ZTI5N2UxZDc0NTg2MjhkYmI2MjM0MzUxNTkzM2Q5MWQwNjRmMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRKTZOx/OovyjeSVSO1paM9dYgS 0ShYEDNaD4O2Q4Bq+iIbjtyYj/FAnyo6hZUOqNj7CuhNFzd1gGY83BgSYdWqcr9b hTusxG66YIeYy6ptMItoKlK6y8VZJSW02Km7SlfdOIdwb1cQ8o4JJLqqb7f6IpYq kS7gjUMqAfh21AGMfM1uBM8sU4p5WI6hk1MoN8eAyxmuN2hajdN1WHV6WExz0CsM Y0m88/Mav9kk52FImIuVfB1aCztE2zeYHAHNjPenD7OO3jUbGHPnIqwj3swq+tlp 3Y7hwRFWfqu1QvkqETOFEwBxUCGuNUAGB8hJzNHJeW/QwD/ExQCItn6AxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4pfh10WGKNu2I0NRWTPZHQZPEXMB8GA1UdIwQY MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHc8+GLL duhaC1MrcIh4Bq8Bt6wuiuUHvIAPtbt/3qcHwjDhUtWF4E/kWW0ZP2kOXyZ8X7yb T08HvZ6TrMsGZlZT3FBsDLRXB1zfFoGTaQfL/BQyLTksDhprpiH5ltCYwFj6hR3W qVb65+t1hzfoyFkh7xxeAubkE0s4aCxVrGCf0ijji0+FgaUA1/0AJu0mtD5q9Lsp T0b4Zy/b6lRWluWjZt37N9faX+eeAMH9QEs6imrzn2YtTWSvBcDHjjoWnsNO64V0 Z1idwkxXZ2nXaDYih0Z7WmOSpiPIX7kBHHdaGRKTextxgvwUp2JMjaAVGMu/7qh7 AtvScYCP12LSwA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:33:35 2025 by rpki-client