This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: U0oAdcEjbxUtsMoozGyQk90Sbbo5p1wLjSpGOLQ5sTc= Subject key identifier: 88:A5:A1:00:D8:F5:BA:C0:B7:D0:A0:18:11:EF:AC:7B:05:0D:FF:7F Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B33E91FB8BF24AC9773FC010CC1DF8ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 17E0 Signing time: Fri 19 Dec 2025 00:01:14 +0000 Manifest this update: Fri 19 Dec 2025 00:01:14 +0000 Manifest next update: Sat 20 Dec 2025 00:01:14 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: ki2gRAVbQNa84ECdWoqyLjUJMOeE1kjIR+9lapy9/Wc=) 2: E7SLkwJAxvjAzliejcGDOW9mHcY.roa (hash: njtMniTkl1kkSOA4/fnmej3XFNim3WfE/ukB+KwvtvE=) 3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=) 4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=) 5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=) 6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=) 7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:1f:b8:bf:24:ac:97:73:fc:01:0c:c1:df:8a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Dec 19 00:01:14 2025 GMT Not After : Dec 20 00:01:14 2025 GMT Subject: CN=88a5a100d8f5bac0b7d0a01811efac7b050dff7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:2a:78:35:1e:8f:dc:c2:bf:8d:d6:c0:32: 99:eb:33:37:7d:9f:f2:8d:c2:88:2f:f8:de:28:d4: d8:45:f5:d3:4f:08:bc:03:82:dc:08:81:d3:af:6c: c6:cf:ef:a8:93:ac:cc:d2:f1:b6:62:66:32:76:3c: b5:68:07:be:84:b9:b5:24:c6:67:92:2e:95:d3:8f: 72:43:10:b3:cf:41:6f:37:a0:c0:31:04:fa:e1:22: cb:87:2a:97:3b:dd:c4:d3:06:b1:7a:22:40:51:f6: a6:86:0c:44:85:cb:ee:14:81:75:ae:a9:18:29:17: e2:a4:8f:89:4f:28:5e:dd:70:68:f7:bf:4f:9d:bf: 71:01:e5:b2:8a:10:92:4c:22:e3:d8:a1:16:bc:4c: 9d:82:ec:dc:6a:fc:82:77:0a:e8:3d:55:15:37:37: 58:dd:fa:70:f9:7e:3b:cc:5e:a0:cf:4f:2e:72:fe: a8:59:03:bf:93:05:32:fa:10:37:64:00:d9:16:e1: b8:31:33:91:ce:04:b3:14:72:cb:68:11:f8:e5:81: 50:3d:71:0f:6f:86:5e:6a:28:1d:2b:d7:ee:b8:74: e7:41:b9:d0:fd:95:2a:d0:d7:8a:b2:ff:62:07:af: f0:04:17:87:b2:68:6e:92:fe:cc:94:28:8e:b7:d3: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A5:A1:00:D8:F5:BA:C0:B7:D0:A0:18:11:EF:AC:7B:05:0D:FF:7F X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:92:54:25:e6:5e:92:c7:46:1e:bc:4e:43:b5:c8:cd:8b:25: 48:af:2e:b6:96:87:75:6a:84:0a:d9:20:fa:b0:71:4a:a5:51: c2:03:62:1a:77:0e:ba:c9:e9:e4:14:04:da:7e:56:49:fc:c2: 0f:74:ef:94:68:11:23:62:c1:5e:8c:dc:f1:0c:16:b4:6b:f3: 06:d0:3c:df:7c:4f:ac:a6:5d:54:03:de:13:c6:65:8d:85:94: 61:e7:dd:ba:23:97:c0:72:86:ef:cb:6a:c6:d3:a5:31:01:b4: 85:c3:93:d6:94:47:df:a6:67:ac:c4:5f:1f:e2:5d:88:fd:d7: 4e:8f:c8:4d:2c:c0:5a:33:67:8c:d1:dc:60:4b:95:f0:9e:f8: 63:df:2c:7c:a3:89:d6:3e:62:cc:f1:53:fb:31:fd:9b:3e:6b: 3d:10:26:30:b4:5e:ab:50:92:7d:d3:74:a1:c0:c6:a0:71:af: 69:da:c2:6b:d3:da:ab:5f:88:95:85:5d:31:64:aa:e1:a8:64: 6e:a2:7f:b4:fc:c9:5e:c8:b3:71:f5:29:d7:4c:fe:bf:77:2c: 5f:54:bc:f0:7a:07:c1:67:13:e1:51:43:eb:9a:dc:f6:11:80: ab:86:1c:23:c1:b1:68:e2:52:8e:5b:dc:61:e0:c6:a8:c5:2c: 41:db:f3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6R+4vySsl3P8AQzB34q8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjUxMjE5MDAwMTE0WhcNMjUxMjIwMDAwMTE0WjAzMTEwLwYDVQQD Eyg4OGE1YTEwMGQ4ZjViYWMwYjdkMGEwMTgxMWVmYWM3YjA1MGRmZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFAqeDUej9zCv43WwDKZ6zM3fZ/y jcKIL/jeKNTYRfXTTwi8A4LcCIHTr2zGz++ok6zM0vG2YmYydjy1aAe+hLm1JMZn ki6V049yQxCzz0FvN6DAMQT64SLLhyqXO93E0waxeiJAUfamhgxEhcvuFIF1rqkY KRfipI+JTyhe3XBo979Pnb9xAeWyihCSTCLj2KEWvEydguzcavyCdwroPVUVNzdY 3fpw+X47zF6gz08ucv6oWQO/kwUy+hA3ZADZFuG4MTORzgSzFHLLaBH45YFQPXEP b4ZeaigdK9fuuHTnQbnQ/ZUq0NeKsv9iB6/wBBeHsmhukv7MlCiOt9M6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiloQDY9brAt9CgGBHvrHsFDf9/MB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJJUJeZe ksdGHrxOQ7XIzYslSK8utpaHdWqECtkg+rBxSqVRwgNiGncOusnp5BQE2n5WSfzC D3TvlGgRI2LBXozc8QwWtGvzBtA833xPrKZdVAPeE8ZljYWUYefduiOXwHKG78tq xtOlMQG0hcOT1pRH36ZnrMRfH+JdiP3XTo/ITSzAWjNnjNHcYEuV8J74Y98sfKOJ 1j5izPFT+zH9mz5rPRAmMLReq1CSfdN0ocDGoHGvadrCa9Paq1+IlYVdMWSq4ahk bqJ/tPzJXsizcfUp10z+v3csX1S88HoHwWcT4VFD65rc9hGAq4YcI8GxaOJSjlvc YeDGqMUsQdvzGA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:13 2025 by rpki-client