This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json) Hash identifier: y1+DLs3GW790+OBFJPeby6/NCuOpmOuHZTHtcBewZ4Y= Subject key identifier: C2:C9:90:10:CF:82:1B:2C:61:20:2A:5A:AC:38:B2:0A:A2:7B:91:2F Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019B53AB7BC3ABABD560DC2A6549ECB4D10E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft Manifest number: 07FA Signing time: Thu 25 Dec 2025 04:01:45 +0000 Manifest this update: Thu 25 Dec 2025 04:01:45 +0000 Manifest next update: Fri 26 Dec 2025 04:01:45 +0000 Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: s4rZVDGElbV324OZfsu8AZFQzrB3KFy4aoehRQ56hq8=) 2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=) 3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:7b:c3:ab:ab:d5:60:dc:2a:65:49:ec:b4:d1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Dec 25 04:01:45 2025 GMT Not After : Dec 26 04:01:45 2025 GMT Subject: CN=c2c99010cf821b2c61202a5aac38b20aa27b912f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:81:9d:60:1e:ab:26:11:61:97:f8:7d:9d: cf:0d:48:f0:88:ac:35:e4:bd:4f:6b:41:a5:d0:a6: 22:d1:21:86:b8:ff:40:c7:ba:a0:67:8f:e1:c0:09: 72:49:e7:2d:fd:06:05:0f:e0:34:6b:96:7d:fc:42: 4e:2f:27:2a:e2:7d:48:bf:d1:42:f0:99:95:22:a7: 71:e9:9a:73:61:8a:6a:96:29:a5:f2:a3:29:c9:c8: 9e:4f:07:e4:6e:fd:8e:3d:67:2e:90:73:b1:4d:7e: cd:b4:bd:d2:f9:88:1a:ae:09:43:b8:52:c8:d2:d5: 9a:d1:14:88:09:4e:da:56:5f:18:a1:55:37:81:b1: ea:91:ef:ec:67:5a:c6:eb:33:75:6b:61:a7:f5:95: 60:ef:33:cb:94:f6:50:e0:b0:85:09:e2:09:cf:80: 1f:99:9a:c7:29:5e:bd:7c:a6:91:9d:a0:a5:1c:05: 0a:73:b9:87:2b:51:1f:06:f4:0f:2c:e4:fe:43:17: 28:e1:cf:d0:f9:ea:9b:8a:cc:8b:b5:60:6c:1f:70: 44:c2:a0:7f:8b:65:d2:cf:d1:40:c7:89:b5:bc:37: 2d:52:71:56:ac:6f:81:2e:31:a9:c5:2d:2d:1d:59: dc:12:3b:78:0b:7b:76:3d:81:c4:22:df:bf:4a:ca: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:90:10:CF:82:1B:2C:61:20:2A:5A:AC:38:B2:0A:A2:7B:91:2F X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d5:51:cd:56:cc:17:44:b3:db:51:63:d5:3c:f7:97:d3:ad: f5:18:b9:a1:e4:cc:0c:e1:a6:8f:ee:dd:37:03:60:1f:4a:f2: 3b:55:a9:20:53:5c:09:20:30:9b:be:34:6f:eb:de:35:af:72: a6:d3:cf:b1:6f:0f:eb:84:c5:f2:95:51:90:e1:a0:15:c8:cf: a8:e3:b2:04:97:0c:7b:59:a1:5c:0f:3d:e2:76:93:54:49:e0: ff:f2:83:dd:9b:4a:60:27:91:b7:13:50:5c:81:5c:67:23:8f: 83:e4:50:e4:f5:88:fe:40:d9:a5:b8:82:ae:7e:af:5e:3f:53: 4a:dc:3d:1e:db:8b:6e:e4:0f:2c:3d:e4:2e:79:09:e5:61:93: 01:f2:66:53:e4:10:67:9e:93:4c:44:d2:63:04:b7:f6:54:e9: e8:e0:1b:52:da:94:84:cd:8d:fe:79:13:1d:67:ef:1d:4a:8f: fa:6e:d1:81:95:be:4e:ae:f1:fd:5b:d6:22:77:fc:4a:b5:05: a4:d6:09:5f:66:a0:f5:a0:47:2a:24:81:26:8c:a1:71:43:ce: f6:23:c6:6f:ae:91:c9:b4:d2:7f:d3:07:67:65:3e:c2:2c:d5: d7:9c:67:71:1d:8b:dd:ff:48:96:d3:07:19:a7:e5:9d:b5:a3: 3d:22:fa:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq3vDq6vVYNwqZUnstNEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjUxMjI1MDQwMTQ1WhcNMjUxMjI2MDQwMTQ1WjAzMTEwLwYDVQQD EyhjMmM5OTAxMGNmODIxYjJjNjEyMDJhNWFhYzM4YjIwYWEyN2I5MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8aBnWAeqyYRYZf4fZ3PDUjwiKw1 5L1Pa0Gl0KYi0SGGuP9Ax7qgZ4/hwAlySect/QYFD+A0a5Z9/EJOLycq4n1Iv9FC 8JmVIqdx6ZpzYYpqliml8qMpycieTwfkbv2OPWcukHOxTX7NtL3S+YgarglDuFLI 0tWa0RSICU7aVl8YoVU3gbHqke/sZ1rG6zN1a2Gn9ZVg7zPLlPZQ4LCFCeIJz4Af mZrHKV69fKaRnaClHAUKc7mHK1EfBvQPLOT+Qxco4c/Q+eqbisyLtWBsH3BEwqB/ i2XSz9FAx4m1vDctUnFWrG+BLjGpxS0tHVncEjt4C3t2PYHEIt+/SsozlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLJkBDPghssYSAqWqw4sgqie5EvMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdVRzVbM F0Sz21Fj1Tz3l9Ot9Ri5oeTMDOGmj+7dNwNgH0ryO1WpIFNcCSAwm740b+veNa9y ptPPsW8P64TF8pVRkOGgFcjPqOOyBJcMe1mhXA894naTVEng//KD3ZtKYCeRtxNQ XIFcZyOPg+RQ5PWI/kDZpbiCrn6vXj9TStw9HtuLbuQPLD3kLnkJ5WGTAfJmU+QQ Z56TTETSYwS39lTp6OAbUtqUhM2N/nkTHWfvHUqP+m7RgZW+Tq7x/VvWInf8SrUF pNYJX2ag9aBHKiSBJoyhcUPO9iPGb66RybTSf9MHZ2U+wizV15xncR2L3f9IltMH GaflnbWjPSL6DQ== -----END CERTIFICATE-----Generated at Thu Dec 25 08:35:38 2025 by rpki-client