This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json) Hash identifier: wMa1KHh/ulhEndDg645IQjgjaOjL1AfiRcjCfqprJBU= Subject key identifier: A7:E3:76:70:94:52:2D:D1:56:51:7D:C0:D7:0C:84:C2:32:3D:17:7D Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Certificate serial: 019B35A0ED4BE0150B62D26F7BDB402A9BD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft Manifest number: 1618 Signing time: Fri 19 Dec 2025 08:01:37 +0000 Manifest this update: Fri 19 Dec 2025 08:01:37 +0000 Manifest next update: Sat 20 Dec 2025 08:01:37 +0000 Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 6IhG+DuGBKAg/0byAcmBXZRIaT41eJ1q+kO2a97dD88=) 2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:ed:4b:e0:15:0b:62:d2:6f:7b:db:40:2a:9b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Validity Not Before: Dec 19 08:01:37 2025 GMT Not After : Dec 20 08:01:37 2025 GMT Subject: CN=a7e3767094522dd156517dc0d70c84c2323d177d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:ca:61:b6:62:f6:17:47:f6:16:a1:02:30: 54:47:a3:bc:1e:f5:f8:fd:0b:6a:37:5b:6f:82:44: c8:1d:3f:74:f9:e9:97:95:6e:3f:ba:60:40:ff:ae: bd:66:e0:c4:2e:80:1a:af:79:83:3e:c0:d1:8b:af: de:80:ce:a4:f5:96:08:00:c6:51:bc:3f:c5:04:91: 72:55:8a:ae:a8:82:fb:d5:f4:13:79:17:79:17:c7: 13:94:20:35:40:2a:ed:84:eb:92:ed:24:08:25:3f: a9:76:b8:77:40:21:bd:6a:77:8d:a8:7b:3e:7f:ff: e8:97:fe:ac:bd:2f:6f:45:d9:05:14:35:69:e5:0e: 60:9f:18:f7:64:85:5b:43:f5:1e:2e:61:5a:c4:75: 96:54:66:ef:19:05:14:f6:a8:49:7b:64:b0:d4:69: ce:00:9b:b8:f2:74:7b:a0:90:57:ad:be:1d:0f:48: f8:33:c3:28:2c:d4:5c:fb:18:fd:76:d7:05:57:ad: a7:56:49:f3:c4:48:c6:f4:d2:21:3d:99:ff:2c:90: 86:5f:35:7a:e2:c9:a2:35:f0:60:f5:81:02:a3:ea: 4a:84:b8:8a:2d:4d:f6:67:d2:26:bd:d7:3d:78:60: fc:ba:af:69:21:b2:05:ca:52:49:bf:99:a0:52:19: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:76:70:94:52:2D:D1:56:51:7D:C0:D7:0C:84:C2:32:3D:17:7D X509v3 Authority Key Identifier: keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:31:21:f9:8b:19:77:7c:61:8f:d1:c2:d5:e0:cb:d9:3b: c7:cb:71:14:b0:50:07:1d:7e:c8:49:81:51:b1:54:bd:40:a2: 8a:7d:e4:c6:44:fa:dd:b4:70:18:6c:c4:89:eb:a1:b2:08:b8: 38:43:7f:7d:9f:f5:86:af:88:4d:05:4b:11:7f:93:40:2c:43: 44:7b:af:da:e9:40:33:d3:a8:c7:5e:25:b9:2b:25:fc:1c:6c: 78:29:9b:73:5f:9d:94:8e:c3:a1:c3:83:4c:9c:bf:1b:a7:9a: 52:f3:67:bb:ba:21:e1:94:55:0e:a8:59:b7:19:5f:fa:78:f7: 7c:4f:e6:7c:88:0b:fb:5b:a0:97:39:96:05:de:99:63:32:6d: 54:d7:86:9a:77:a7:8a:e4:a2:34:cb:4f:16:e3:05:40:2f:07: 43:9e:04:5f:ec:ad:b9:3a:c1:5b:e9:50:82:d7:0b:89:7d:c8: f6:c0:44:6f:4b:ea:19:bf:65:ba:73:3d:f2:69:19:4a:b0:d6: 87:de:a4:3c:62:b2:84:03:8f:20:81:a1:7b:97:eb:2d:33:54: 3a:ad:f9:e7:c2:7a:36:be:a1:6f:8a:c1:4a:02:bd:9f:2e:78: 80:12:5b:9c:61:29:c1:ab:30:51:50:ea:74:0b:1a:ba:17:b7: f7:55:0e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oO1L4BULYtJve9tAKpvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk MzQ0OWUwHhcNMjUxMjE5MDgwMTM3WhcNMjUxMjIwMDgwMTM3WjAzMTEwLwYDVQQD EyhhN2UzNzY3MDk0NTIyZGQxNTY1MTdkYzBkNzBjODRjMjMyM2QxNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvzKYbZi9hdH9hahAjBUR6O8HvX4 /QtqN1tvgkTIHT90+emXlW4/umBA/669ZuDELoAar3mDPsDRi6/egM6k9ZYIAMZR vD/FBJFyVYquqIL71fQTeRd5F8cTlCA1QCrthOuS7SQIJT+pdrh3QCG9aneNqHs+ f//ol/6svS9vRdkFFDVp5Q5gnxj3ZIVbQ/UeLmFaxHWWVGbvGQUU9qhJe2Sw1GnO AJu48nR7oJBXrb4dD0j4M8MoLNRc+xj9dtcFV62nVknzxEjG9NIhPZn/LJCGXzV6 4smiNfBg9YECo+pKhLiKLU32Z9Imvdc9eGD8uq9pIbIFylJJv5mgUhlUgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfjdnCUUi3RVlF9wNcMhMIyPRd9MB8GA1UdIwQY MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5 LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdwxIfmL GXd8YY/RwtXgy9k7x8txFLBQBx1+yEmBUbFUvUCiin3kxkT63bRwGGzEieuhsgi4 OEN/fZ/1hq+ITQVLEX+TQCxDRHuv2ulAM9Oox14luSsl/BxseCmbc1+dlI7DocOD TJy/G6eaUvNnu7oh4ZRVDqhZtxlf+nj3fE/mfIgL+1uglzmWBd6ZYzJtVNeGmnen iuSiNMtPFuMFQC8HQ54EX+ytuTrBW+lQgtcLiX3I9sBEb0vqGb9lunM98mkZSrDW h96kPGKyhAOPIIGhe5frLTNUOq3558J6Nr6hb4rBSgK9ny54gBJbnGEpwaswUVDq dAsauhe391UOew== -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:40 2025 by rpki-client