This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json) Hash identifier: 4Vig1oD8v6pGM9kXUfTeSa8yJ/NXOu5rQ5tdwqvLDcg= Subject key identifier: 8A:13:A2:B0:D7:F1:85:05:89:7F:75:CA:AB:B5:B0:1F:AC:6D:7E:65 Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27 Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327 Certificate serial: 019B5117F5C09339FC62EDABBBA5A26BC1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 16:01:23 +0000 Manifest this update: Wed 24 Dec 2025 16:01:23 +0000 Manifest next update: Thu 25 Dec 2025 16:01:23 +0000 Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: WpHs7KvTu6DjHpr54SG6aDJR1fLxLxijknVbApfT5V0=) 2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:f5:c0:93:39:fc:62:ed:ab:bb:a5:a2:6b:c1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327 Validity Not Before: Dec 24 16:01:23 2025 GMT Not After : Dec 25 16:01:23 2025 GMT Subject: CN=8a13a2b0d7f18505897f75caabb5b01fac6d7e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:6c:d4:b7:95:1a:f3:e8:85:15:f2:dc:55: 18:85:bb:5c:87:0e:8e:a9:c8:de:f9:6a:8a:1d:fc: 83:b7:ec:f7:16:6d:18:62:b9:67:0a:be:74:1c:03: 3f:ac:86:33:af:3f:e6:9e:c7:88:4a:1a:ab:ee:62: 53:59:fb:ab:ae:72:09:83:85:16:1e:4f:05:ec:0c: 21:3a:8e:22:7e:18:1e:c4:bf:cf:89:2a:cd:db:4a: 89:ad:b9:c9:8e:e4:da:54:6f:3e:c2:49:63:f0:f2: 82:4b:93:bd:a5:ec:8c:41:91:76:6a:69:9b:2f:f3: a9:01:0e:c6:6f:71:cf:8b:30:24:7b:b9:72:41:9b: b2:60:68:6f:85:f2:6b:44:a5:9c:e3:9b:c7:1a:82: c1:0a:b6:f2:85:ae:49:0c:5a:01:23:17:24:de:a6: 80:f6:31:61:af:cc:36:df:4a:8d:76:97:d6:f4:c5: 21:17:27:70:ac:32:9a:b4:3c:55:97:bc:da:b7:b1: 4b:8e:69:67:40:70:43:58:e6:af:6e:2f:64:fd:aa: e2:48:bd:7e:b6:9e:3d:14:52:3f:d3:a3:93:5a:70: bd:0f:32:20:58:62:fe:12:22:bc:51:76:4f:aa:29: 25:05:91:17:0f:61:48:a4:84:d9:66:bd:12:47:3c: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:A2:B0:D7:F1:85:05:89:7F:75:CA:AB:B5:B0:1F:AC:6D:7E:65 X509v3 Authority Key Identifier: keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ba:bc:15:08:ab:b5:b8:6d:ff:d5:ad:11:b2:e7:75:0d:6c: 55:9b:e8:89:6b:16:a8:3a:74:0f:cf:f5:d6:d5:06:84:da:a8: ee:40:24:37:be:8a:c2:a9:1b:a7:c0:4a:49:1b:3e:ac:f1:f1: 8d:d3:63:b2:03:35:a1:b6:19:8c:d3:9f:22:ec:a9:12:16:97: 9f:d4:94:4a:be:f6:fb:05:79:95:da:f9:fa:24:74:dc:71:a2: 67:fc:aa:14:6c:20:40:05:d1:38:12:3b:f3:be:13:af:94:dd: 83:a0:ab:7d:99:23:c9:87:2e:f3:fc:93:50:9e:1d:eb:0d:e0: cc:ac:08:31:8f:a5:67:00:a4:d4:5f:06:f1:71:ff:b5:eb:3f: 4d:7e:90:b5:bd:9e:98:e4:e1:5d:12:ca:48:df:74:1a:b0:b7: 56:98:74:7d:7b:93:62:1d:af:8f:07:0d:b2:e6:ac:b8:92:be: f5:73:cb:8d:6a:77:8f:ce:c6:15:46:39:20:09:0e:8a:55:3f: d2:fb:b8:8b:36:db:17:37:21:c0:99:de:ab:06:a3:a8:4d:49: d5:a6:a7:00:b9:7c:37:d7:26:7e:90:e8:06:a4:8a:81:c9:9e: 5d:2c:61:b6:fc:29:18:4e:b2:f2:92:a3:52:b0:91:c4:55:f6: 8c:3b:84:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF/XAkzn8Yu2ru6Wia8GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMGY4N2RhYjk2YjUwZjc2ZWVhNDliMTgxZWE5NGQyNmEy MDUzMjcwHhcNMjUxMjI0MTYwMTIzWhcNMjUxMjI1MTYwMTIzWjAzMTEwLwYDVQQD Eyg4YTEzYTJiMGQ3ZjE4NTA1ODk3Zjc1Y2FhYmI1YjAxZmFjNmQ3ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfFs1LeVGvPohRXy3FUYhbtchw6O qcje+WqKHfyDt+z3Fm0YYrlnCr50HAM/rIYzrz/mnseIShqr7mJTWfurrnIJg4UW Hk8F7AwhOo4ifhgexL/PiSrN20qJrbnJjuTaVG8+wklj8PKCS5O9peyMQZF2ammb L/OpAQ7Gb3HPizAke7lyQZuyYGhvhfJrRKWc45vHGoLBCrbyha5JDFoBIxck3qaA 9jFhr8w230qNdpfW9MUhFydwrDKatDxVl7zat7FLjmlnQHBDWOavbi9k/ariSL1+ tp49FFI/06OTWnC9DzIgWGL+EiK8UXZPqiklBZEXD2FIpITZZr0SRzxMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoTorDX8YUFiX91yqu1sB+sbX5lMB8GA1UdIwQY MBaAFOIPh9q5a1D3bupJsYHqlNJqIFMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAt ZmEwMmMxMjY1ZDVlLzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAtZmEwMmMxMjY1ZDVl LzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7q8FQir tbht/9WtEbLndQ1sVZvoiWsWqDp0D8/11tUGhNqo7kAkN76Kwqkbp8BKSRs+rPHx jdNjsgM1obYZjNOfIuypEhaXn9SUSr72+wV5ldr5+iR03HGiZ/yqFGwgQAXROBI7 874Tr5Tdg6CrfZkjyYcu8/yTUJ4d6w3gzKwIMY+lZwCk1F8G8XH/tes/TX6Qtb2e mOThXRLKSN90GrC3Vph0fXuTYh2vjwcNsuasuJK+9XPLjWp3j87GFUY5IAkOilU/ 0vu4izbbFzchwJneqwajqE1J1aanALl8N9cmfpDoBqSKgcmeXSxhtvwpGE6y8pKj UrCRxFX2jDuE1w== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:53 2025 by rpki-client