This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json) Hash identifier: mG52V3nGPfdzJk0JETt1KRv7VpFJLZi1NVG0blTSxg8= Subject key identifier: 45:8A:F1:83:38:16:E8:C1:66:62:85:47:57:A5:74:DA:DE:A1:96:08 Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86 Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86 Certificate serial: 019B2E1DFE2CDEC715AB2E30DB1618EE45AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft Manifest number: 0A0A Signing time: Wed 17 Dec 2025 21:01:15 +0000 Manifest this update: Wed 17 Dec 2025 21:01:15 +0000 Manifest next update: Thu 18 Dec 2025 21:01:15 +0000 Files and hashes: 1: Cc4909gwaI-DgMxZjqOBV0ftw7g.roa (hash: puxPlTPwGGajuBJpoUjLb8aY1yOEYFbygGRRSG/6dfY=) 2: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=) 3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: U89P6H0YHIohCUJQXrGsEgdIMXWfkG1QF3ZK3cVEXhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:fe:2c:de:c7:15:ab:2e:30:db:16:18:ee:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86 Validity Not Before: Dec 17 21:01:15 2025 GMT Not After : Dec 18 21:01:15 2025 GMT Subject: CN=458af1833816e8c16662854757a574dadea19608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:a7:86:8e:8c:71:ee:d7:25:47:72:a4:78: 1e:e4:96:0a:f7:3e:c3:a0:b6:ac:84:fc:a6:0b:d5: 16:f3:a7:0f:3f:90:c8:d3:d7:09:84:b2:fd:82:1e: 00:5f:48:bd:ab:6e:ac:c7:20:1d:ea:7e:48:48:4b: d4:11:61:f4:d0:04:4e:ae:f1:df:7e:ce:bf:e3:f0: 4c:a3:1d:60:4d:49:5e:d8:bb:5c:dc:0a:12:b4:00: ff:51:e2:7b:1b:5a:7a:b7:38:f9:11:c0:3b:31:1b: 97:ab:88:9f:1f:00:ba:5a:8d:a1:f5:5d:18:12:3b: ae:d7:00:7a:f8:28:8c:54:10:bc:ed:23:a3:d9:49: 2d:dd:4c:d3:37:15:06:b0:76:fe:ac:57:9a:70:f1: 7c:36:66:98:7b:46:d7:a1:c2:b0:5a:66:71:3d:f3: 59:dc:33:1c:cd:37:4b:ca:60:98:a7:a6:a4:d6:49: 06:17:df:f6:0d:82:a0:70:17:a4:f9:41:fb:44:fc: 90:8d:95:05:4e:5d:c7:58:e8:1f:20:df:0a:8c:89: 60:59:80:7a:8b:0c:40:da:34:9b:f3:07:5b:e2:d0: 74:8c:cf:e4:ba:08:ba:4b:08:27:4b:75:9d:82:ab: 70:17:8d:6b:12:38:30:c4:94:bf:0b:df:e8:f1:37: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:F1:83:38:16:E8:C1:66:62:85:47:57:A5:74:DA:DE:A1:96:08 X509v3 Authority Key Identifier: keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:16:cb:2b:57:d6:83:2d:2d:07:7a:9b:fa:01:0e:98:27:e5: a4:a6:96:b7:6a:86:1a:97:53:28:dd:55:5f:15:1c:6a:3a:62: f4:50:5a:4d:c1:c3:00:74:c3:29:94:23:c4:e9:37:62:e0:2f: 2e:7c:87:0e:1a:3f:15:85:d3:f6:f3:46:e9:b8:b6:f1:1a:94: ff:89:8c:bf:dc:2e:dc:84:2f:e4:cb:d4:85:30:97:85:79:39: 6a:53:0d:5f:8b:1a:71:34:fe:db:14:6d:75:bf:b0:f8:e7:fb: 01:71:e1:9c:35:34:84:41:dc:fa:20:8c:9f:dc:57:ef:3a:69: a0:cd:e8:82:89:77:e2:de:9e:98:eb:c5:8b:76:f9:db:88:ab: c6:1c:b9:6e:2d:7e:e3:2f:c0:79:0e:84:fd:b1:18:9b:a3:08: 3b:37:48:1c:30:a8:3d:b3:01:10:f4:d6:9e:3f:f5:42:f3:bb: 96:5e:fb:18:67:6c:87:b1:5a:0e:82:49:0a:fc:1c:72:ac:ed: f3:f6:42:05:52:58:4d:9d:5d:d7:37:a2:1a:69:d9:a1:ce:94: 5e:7c:e7:bd:8b:31:13:d1:c3:e9:17:74:51:09:11:a0:af:1e: 07:02:76:7a:c8:60:38:b9:52:b7:76:81:93:71:37:ee:c6:78: a3:79:83:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHf4s3scVqy4w2xYY7kWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjEzMWUzZTE1MDU4ZDkzZmZkZGI2MGFjNzA4M2JlZjg5 ZDJlODYwHhcNMjUxMjE3MjEwMTE1WhcNMjUxMjE4MjEwMTE1WjAzMTEwLwYDVQQD Eyg0NThhZjE4MzM4MTZlOGMxNjY2Mjg1NDc1N2E1NzRkYWRlYTE5NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKWnho6Mce7XJUdypHge5JYK9z7D oLashPymC9UW86cPP5DI09cJhLL9gh4AX0i9q26sxyAd6n5ISEvUEWH00AROrvHf fs6/4/BMox1gTUle2Ltc3AoStAD/UeJ7G1p6tzj5EcA7MRuXq4ifHwC6Wo2h9V0Y Ejuu1wB6+CiMVBC87SOj2Ukt3UzTNxUGsHb+rFeacPF8NmaYe0bXocKwWmZxPfNZ 3DMczTdLymCYp6ak1kkGF9/2DYKgcBek+UH7RPyQjZUFTl3HWOgfIN8KjIlgWYB6 iwxA2jSb8wdb4tB0jM/kugi6SwgnS3WdgqtwF41rEjgwxJS/C9/o8Te2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWK8YM4FujBZmKFR1eldNreoZYIMB8GA1UdIwQY MBaAFKTxMePhUFjZP/3bYKxwg774nS6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQt ZjcxYTQ5ZWJhNDhhLzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQtZjcxYTQ5ZWJhNDhh LzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxbLK1fW gy0tB3qb+gEOmCflpKaWt2qGGpdTKN1VXxUcajpi9FBaTcHDAHTDKZQjxOk3YuAv LnyHDho/FYXT9vNG6bi28RqU/4mMv9wu3IQv5MvUhTCXhXk5alMNX4sacTT+2xRt db+w+Of7AXHhnDU0hEHc+iCMn9xX7zppoM3ogol34t6emOvFi3b524irxhy5bi1+ 4y/AeQ6E/bEYm6MIOzdIHDCoPbMBEPTWnj/1QvO7ll77GGdsh7FaDoJJCvwccqzt 8/ZCBVJYTZ1d1zeiGmnZoc6UXnznvYsxE9HD6Rd0UQkRoK8eBwJ2eshgOLlSt3aB k3E37sZ4o3mDPg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:54:34 2025 by rpki-client