This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json) Hash identifier: 3GgSGJP+OfCGoW5GqwYeSsP7WL/lmtlrIQd3hiM5evg= Subject key identifier: 5C:64:7C:4B:4A:42:7D:85:09:2E:82:4F:DE:6C:D6:40:36:1E:5D:D1 Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903 Certificate serial: 019B3DC7900B32F2B62AB4CA37F937F3FE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft Manifest number: 1043 Signing time: Sat 20 Dec 2025 22:00:47 +0000 Manifest this update: Sat 20 Dec 2025 22:00:47 +0000 Manifest next update: Sun 21 Dec 2025 22:00:47 +0000 Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: vPivPuW2XqZtjZyv/9+67gHfa0VqKDwrLvLT7YrXa+M=) 2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:90:0b:32:f2:b6:2a:b4:ca:37:f9:37:f3:fe:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2834429775e6555e5742492286254b1da9f1903 Validity Not Before: Dec 20 22:00:47 2025 GMT Not After : Dec 21 22:00:47 2025 GMT Subject: CN=5c647c4b4a427d85092e824fde6cd640361e5dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:49:48:79:41:e1:3a:19:57:cc:88:f5:ad: f5:ee:16:9d:b4:6f:fe:93:9e:ee:19:1f:7f:9f:ed: 4e:cb:2d:f2:b0:95:2f:ce:0d:85:51:55:bc:3b:03: 57:f9:8d:a9:51:a1:9e:46:ed:52:3f:15:1a:83:2e: 1e:3c:f4:7c:87:fd:e5:ba:d8:a7:fd:a4:a7:f0:f1: 61:b1:23:ed:e8:ce:50:f7:9a:f1:3e:ce:03:18:8c: 04:94:e3:cf:8b:a6:e5:0b:88:b1:fa:de:86:87:3f: 8d:49:e1:72:db:1c:de:34:df:9e:95:07:df:19:ee: b8:54:ff:19:60:c2:ef:e7:57:b1:05:02:64:b8:4b: 72:09:06:20:6c:2e:c0:90:78:5a:e5:86:7b:6a:cd: 8e:67:b2:3c:42:c4:1b:93:0e:6f:09:05:24:27:db: cf:b9:fd:87:0a:8c:fa:1f:73:09:e3:a1:e9:61:26: b9:aa:9e:ba:8f:9c:a3:41:5b:fe:3d:42:be:d3:86: 08:a5:f1:22:aa:a8:e2:33:c8:5d:dc:42:54:0f:37: d7:60:2c:d3:52:35:94:7b:53:d8:a2:db:3f:ab:e3: 0d:27:b9:e1:21:f1:e3:cd:67:7f:bd:ac:c0:fb:e6: 4a:0c:21:20:01:d3:42:bd:d7:86:bf:8c:bc:58:07: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:64:7C:4B:4A:42:7D:85:09:2E:82:4F:DE:6C:D6:40:36:1E:5D:D1 X509v3 Authority Key Identifier: keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:17:b4:5a:16:a8:78:1c:3f:eb:8e:15:c1:c0:3d:6a:8e:2b: d9:4c:40:8c:bc:d7:54:0d:69:57:48:7c:f1:9c:e3:7f:61:e2: bb:ed:62:dc:0d:14:92:af:9d:24:d8:0b:61:2c:53:33:42:12: da:22:f7:c9:4d:ca:b2:c9:19:7c:c8:2a:13:97:bc:4f:c7:b6: 47:76:ba:34:58:3c:10:b1:7d:bc:81:ea:62:c7:40:dc:61:8e: 3e:c5:37:78:03:83:a5:49:25:18:60:64:b6:bd:da:fa:bd:80: 33:40:b9:7f:0a:e5:90:c7:39:27:65:13:ad:a9:92:5a:34:00: 59:c2:07:5d:6d:5a:03:f2:be:97:30:c7:d9:3b:58:a8:5b:67: 91:29:2e:52:a3:ef:aa:4f:84:37:45:3f:d7:66:d6:ad:2b:a5: 2f:97:13:81:3a:0c:c6:e6:1e:55:72:95:6f:65:66:7e:d5:aa: c7:d6:94:81:c9:f9:91:af:31:98:2b:9b:41:b3:ed:4b:a8:f3: fb:94:dc:1b:3f:a3:0f:92:a8:85:c7:16:82:76:56:ec:ea:1b: 7d:da:6c:aa:73:bb:84:2c:dd:f7:72:80:32:b5:58:a6:c3:38: 67:d7:ce:c9:b1:69:3c:dd:0d:5f:e5:6f:52:87:3e:a1:ae:3e: 0d:6d:29:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5ALMvK2KrTKN/k38/6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5 ZjE5MDMwHhcNMjUxMjIwMjIwMDQ3WhcNMjUxMjIxMjIwMDQ3WjAzMTEwLwYDVQQD Eyg1YzY0N2M0YjRhNDI3ZDg1MDkyZTgyNGZkZTZjZDY0MDM2MWU1ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PxJSHlB4ToZV8yI9a317hadtG/+ k57uGR9/n+1Oyy3ysJUvzg2FUVW8OwNX+Y2pUaGeRu1SPxUagy4ePPR8h/3lutin /aSn8PFhsSPt6M5Q95rxPs4DGIwElOPPi6blC4ix+t6Ghz+NSeFy2xzeNN+elQff Ge64VP8ZYMLv51exBQJkuEtyCQYgbC7AkHha5YZ7as2OZ7I8QsQbkw5vCQUkJ9vP uf2HCoz6H3MJ46HpYSa5qp66j5yjQVv+PUK+04YIpfEiqqjiM8hd3EJUDzfXYCzT UjWUe1PYots/q+MNJ7nhIfHjzWd/vazA++ZKDCEgAdNCvdeGv4y8WAc3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxkfEtKQn2FCS6CT95s1kA2Hl3RMB8GA1UdIwQY MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBe0Whao eBw/644VwcA9ao4r2UxAjLzXVA1pV0h88Zzjf2Hiu+1i3A0Ukq+dJNgLYSxTM0IS 2iL3yU3KsskZfMgqE5e8T8e2R3a6NFg8ELF9vIHqYsdA3GGOPsU3eAODpUklGGBk tr3a+r2AM0C5fwrlkMc5J2UTramSWjQAWcIHXW1aA/K+lzDH2TtYqFtnkSkuUqPv qk+EN0U/12bWrSulL5cTgToMxuYeVXKVb2VmftWqx9aUgcn5ka8xmCubQbPtS6jz +5TcGz+jD5KohccWgnZW7OobfdpsqnO7hCzd93KAMrVYpsM4Z9fOybFpPN0NX+Vv Uoc+oa4+DW0pNg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:50 2025 by rpki-client