This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json) Hash identifier: gowB2F0kQKoM50yKi1vo29iwrSeEG+dw31WJnP5yCPQ= Subject key identifier: 4B:13:48:27:1E:AE:69:EC:83:09:3B:37:18:C8:DD:3F:09:1A:B3:93 Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Certificate serial: 019B51BD4814EB52A8A3E56DDEB9ED21898A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft Manifest number: 0B38 Signing time: Wed 24 Dec 2025 19:01:57 +0000 Manifest this update: Wed 24 Dec 2025 19:01:57 +0000 Manifest next update: Thu 25 Dec 2025 19:01:57 +0000 Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: L7Pzv2Uk9di83utiwN8D2cBSbsrLRwFEkhDeTYFwnpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:48:14:eb:52:a8:a3:e5:6d:de:b9:ed:21:89:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Validity Not Before: Dec 24 19:01:57 2025 GMT Not After : Dec 25 19:01:57 2025 GMT Subject: CN=4b1348271eae69ec83093b3718c8dd3f091ab393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:f0:bb:9e:83:fa:3a:d1:a6:aa:99:e8:28: 0a:8e:14:56:7d:11:70:e8:84:01:c3:5e:0c:cb:8d: fd:1b:36:ba:c5:52:1f:9d:16:b6:24:af:04:24:66: 38:0f:00:7c:a6:33:c7:fd:f0:9a:22:07:98:ce:7d: 83:d4:63:ef:94:83:a0:51:83:bd:04:70:8f:c5:6f: 36:fc:f5:d9:9b:7e:87:fc:d6:08:bf:53:db:83:69: 29:29:2d:2a:96:e0:9a:5d:93:21:01:0e:05:6b:e4: ea:37:88:59:0b:ae:3f:08:0b:3e:2a:78:e8:34:8d: 35:d3:41:f5:59:4f:f2:ab:85:7a:14:fa:e1:1e:e8: cd:a2:a0:0a:35:ef:5b:de:14:ad:86:cc:ca:49:c1: 41:31:fa:2d:85:38:1d:73:41:1b:49:46:5e:e4:2c: 31:24:f6:56:3d:16:9c:09:fd:70:21:80:9d:9e:7e: 85:0b:81:6a:c7:15:92:37:15:59:4a:8d:17:36:d7: 06:16:fd:c7:e0:e5:af:76:4b:a9:ac:cf:a5:67:e3: 6a:0b:04:15:f8:b9:d5:63:97:3d:a8:2c:6d:cf:95: 85:12:5a:ec:44:ba:2f:82:07:8b:9a:aa:3d:77:9e: 1f:74:ec:0d:87:24:ed:39:84:53:03:09:73:7b:4f: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:13:48:27:1E:AE:69:EC:83:09:3B:37:18:C8:DD:3F:09:1A:B3:93 X509v3 Authority Key Identifier: keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:80:1f:29:b2:8e:fa:36:5c:de:ed:9d:7c:86:7c:10:b9:e5: 0c:e5:6c:11:58:59:1c:0b:07:82:84:bf:c7:ba:60:3b:88:59: fe:e5:51:6f:8a:f5:1c:cb:e2:55:78:78:13:1c:3b:f5:bb:52: f6:dd:90:d4:21:24:58:ed:63:1f:60:1d:9d:84:ec:60:b2:de: 55:e3:cb:6f:48:e6:4f:97:93:5d:e3:f3:74:5d:c5:c0:40:e6: 8f:2f:09:62:93:bb:c5:f8:64:c5:60:8e:a2:eb:79:c6:cb:1f: 78:68:3a:e4:27:8c:43:b0:46:14:a2:1e:63:a9:84:6f:97:30: 3d:b2:38:8c:c6:32:7f:80:35:d7:cf:c0:15:45:35:c9:57:aa: 47:d1:23:20:72:37:fd:6d:a7:a8:15:01:0e:32:74:87:87:51: 43:2f:5a:82:d4:ce:f5:9c:1e:c9:73:b1:65:36:fa:21:0c:75: c0:bf:c4:65:0e:31:4a:61:52:93:c6:54:33:66:6f:cf:ae:c1: a0:a1:c8:9d:9a:7a:31:a7:11:41:9d:04:c6:2a:8a:63:60:de: d4:24:db:2a:52:e5:98:a9:aa:b4:fc:ea:31:ba:8f:2f:80:ed: 87:0e:c8:7d:9e:69:4d:7f:09:2c:85:f2:c4:fa:62:49:7b:98: 85:df:d2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUgU61Koo+Vt3rntIYmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk YzkyZWMwHhcNMjUxMjI0MTkwMTU3WhcNMjUxMjI1MTkwMTU3WjAzMTEwLwYDVQQD Eyg0YjEzNDgyNzFlYWU2OWVjODMwOTNiMzcxOGM4ZGQzZjA5MWFiMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3wu56D+jrRpqqZ6CgKjhRWfRFw 6IQBw14My439Gza6xVIfnRa2JK8EJGY4DwB8pjPH/fCaIgeYzn2D1GPvlIOgUYO9 BHCPxW82/PXZm36H/NYIv1Pbg2kpKS0qluCaXZMhAQ4Fa+TqN4hZC64/CAs+Knjo NI0100H1WU/yq4V6FPrhHujNoqAKNe9b3hSthszKScFBMfothTgdc0EbSUZe5Cwx JPZWPRacCf1wIYCdnn6FC4FqxxWSNxVZSo0XNtcGFv3H4OWvdkuprM+lZ+NqCwQV +LnVY5c9qCxtz5WFElrsRLovggeLmqo9d54fdOwNhyTtOYRTAwlze0/+7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsTSCcermnsgwk7NxjI3T8JGrOTMB8GA1UdIwQY MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoAfKbKO +jZc3u2dfIZ8ELnlDOVsEVhZHAsHgoS/x7pgO4hZ/uVRb4r1HMviVXh4Exw79btS 9t2Q1CEkWO1jH2AdnYTsYLLeVePLb0jmT5eTXePzdF3FwEDmjy8JYpO7xfhkxWCO out5xssfeGg65CeMQ7BGFKIeY6mEb5cwPbI4jMYyf4A118/AFUU1yVeqR9EjIHI3 /W2nqBUBDjJ0h4dRQy9agtTO9ZweyXOxZTb6IQx1wL/EZQ4xSmFSk8ZUM2Zvz67B oKHInZp6MacRQZ0ExiqKY2De1CTbKlLlmKmqtPzqMbqPL4Dthw7IfZ5pTX8JLIXy xPpiSXuYhd/SEw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:33:51 2025 by rpki-client