This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json) Hash identifier: Bu/78mA6dCdEU8iZUVbpFV2SRWc86jDE5NnuWM1K2jA= Subject key identifier: 2D:DE:F0:50:B3:91:4D:48:EE:0A:6C:58:DA:FF:96:DA:4E:D4:06:FD Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f Certificate serial: 019B5FAF9D47197009F3BC72AE1A5E75CCFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft Manifest number: 179D Signing time: Sat 27 Dec 2025 12:01:43 +0000 Manifest this update: Sat 27 Dec 2025 12:01:43 +0000 Manifest next update: Sun 28 Dec 2025 12:01:43 +0000 Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=) 2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: hIXBFLDGK6V53cSVhh9MSSWcNMqWDZyUsc0D3uFTFFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:9d:47:19:70:09:f3:bc:72:ae:1a:5e:75:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f Validity Not Before: Dec 27 12:01:43 2025 GMT Not After : Dec 28 12:01:43 2025 GMT Subject: CN=2ddef050b3914d48ee0a6c58daff96da4ed406fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:ab:ab:d0:1b:23:5d:28:bc:33:2a:28:57: 02:fd:91:fd:2c:69:4b:7d:e2:1d:e1:9e:0a:0a:c2: 39:a0:2f:6d:3e:7e:13:73:8a:37:79:08:e5:d6:78: 86:a0:71:99:7d:d4:8f:55:3b:44:c7:a4:29:b9:aa: 67:f1:89:1d:42:5f:7d:cd:d7:f7:a6:36:16:e8:bd: 72:83:7b:05:5d:9c:e9:8d:83:1d:33:21:14:57:22: 90:d8:ac:91:04:35:65:8a:e5:db:cc:a5:ba:db:09: b9:c6:b6:d1:74:3f:23:72:8d:3c:d3:06:94:7b:e1: f5:00:65:1e:79:a8:4f:c9:13:14:a6:7f:38:69:71: b6:1e:a4:9b:88:13:95:8e:65:21:ea:60:aa:4e:1f: 6c:29:3b:26:21:d0:bf:5f:29:d1:2d:d1:fb:c0:ae: b9:21:cb:f2:38:ba:d2:e9:19:03:ff:ff:fc:a9:21: c5:d7:44:48:7e:05:5b:d8:84:fc:ac:ca:07:b0:d6: 01:48:d1:5d:8b:82:e2:92:2b:fb:e4:b0:52:04:cf: 25:89:cd:0a:94:bc:d6:44:f8:5c:66:6a:64:e3:ac: 1a:3a:6e:db:07:e2:35:1e:56:5f:4d:d3:ae:55:bc: 01:d2:fa:7d:33:dd:07:ff:e7:e0:79:09:40:26:bb: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DE:F0:50:B3:91:4D:48:EE:0A:6C:58:DA:FF:96:DA:4E:D4:06:FD X509v3 Authority Key Identifier: keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:5d:1e:a4:8e:84:0c:cd:19:64:5b:72:65:f5:ae:bc:e4: 1b:30:11:e7:d2:45:07:f1:10:21:57:f2:e6:f3:b8:fe:8d:22: cd:73:ef:3b:f0:e8:5f:a6:9a:87:c6:85:ba:84:0b:ef:00:1c: 1b:37:49:79:49:7d:d6:d7:52:14:88:23:19:08:e3:e4:69:8a: 82:a1:86:8f:6a:be:b6:ff:41:9e:96:fd:ba:fd:05:41:6b:00: d3:01:91:33:d0:9d:cf:a6:ba:bf:5e:62:04:bd:27:6c:87:5a: a2:8c:c3:4d:2c:7a:8c:b6:c0:18:a5:c5:b9:3a:40:d0:23:a9: 48:8f:12:a8:31:39:38:ce:1a:4e:f5:d1:77:19:a3:db:06:3e: d4:60:e8:0d:15:67:26:69:af:1c:5a:bd:e9:be:d9:5d:26:5c: 75:9d:6a:5b:8a:52:5e:a6:75:c6:f4:9e:e0:7f:6c:ec:7c:a4: f8:b1:6d:d0:42:5b:85:59:7d:df:83:d1:9f:b2:c2:fb:35:80: 00:5d:d6:66:98:ca:39:ed:a7:16:cb:5d:f3:e9:c6:aa:7f:b5: 20:7e:36:bb:f0:57:26:38:58:f2:e2:a8:65:29:10:dd:7d:b8: 19:5b:50:39:28:26:f5:07:d6:66:04:50:b1:8d:20:69:e9:a9: a0:71:e6:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr51HGXAJ87xyrhpedcz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw OTY4OWYwHhcNMjUxMjI3MTIwMTQzWhcNMjUxMjI4MTIwMTQzWjAzMTEwLwYDVQQD EygyZGRlZjA1MGIzOTE0ZDQ4ZWUwYTZjNThkYWZmOTZkYTRlZDQwNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5arq9AbI10ovDMqKFcC/ZH9LGlL feId4Z4KCsI5oC9tPn4Tc4o3eQjl1niGoHGZfdSPVTtEx6Qpuapn8YkdQl99zdf3 pjYW6L1yg3sFXZzpjYMdMyEUVyKQ2KyRBDVliuXbzKW62wm5xrbRdD8jco080waU e+H1AGUeeahPyRMUpn84aXG2HqSbiBOVjmUh6mCqTh9sKTsmIdC/XynRLdH7wK65 IcvyOLrS6RkD///8qSHF10RIfgVb2IT8rMoHsNYBSNFdi4Likiv75LBSBM8lic0K lLzWRPhcZmpk46waOm7bB+I1HlZfTdOuVbwB0vp9M90H/+fgeQlAJrsiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3e8FCzkU1I7gpsWNr/ltpO1Ab9MB8GA1UdIwQY MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknJdHqSO hAzNGWRbcmX1rrzkGzAR59JFB/EQIVfy5vO4/o0izXPvO/DoX6aah8aFuoQL7wAc GzdJeUl91tdSFIgjGQjj5GmKgqGGj2q+tv9Bnpb9uv0FQWsA0wGRM9Cdz6a6v15i BL0nbIdaoozDTSx6jLbAGKXFuTpA0COpSI8SqDE5OM4aTvXRdxmj2wY+1GDoDRVn JmmvHFq96b7ZXSZcdZ1qW4pSXqZ1xvSe4H9s7Hyk+LFt0EJbhVl934PRn7LC+zWA AF3WZpjKOe2nFstd8+nGqn+1IH42u/BXJjhY8uKoZSkQ3X24GVtQOSgm9QfWZgRQ sY0gaempoHHmnQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:24 2025 by rpki-client