This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json) Hash identifier: hWX28k4znEWri2smbZuO/44caWdNe3NLz/8hty69SYA= Subject key identifier: C7:20:A0:06:70:37:7D:5B:14:1C:0A:F1:DD:CA:27:E5:9B:ED:B4:C2 Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7 Certificate serial: 019B45B871D15EA165E3B16D64173A033DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft Manifest number: 0322 Signing time: Mon 22 Dec 2025 11:01:13 +0000 Manifest this update: Mon 22 Dec 2025 11:01:13 +0000 Manifest next update: Tue 23 Dec 2025 11:01:13 +0000 Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: O0XiyGBD6WXHbe3REM1sEZXaNPA+HmLCB1tPlpNZHpY=) 2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:71:d1:5e:a1:65:e3:b1:6d:64:17:3a:03:3d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7 Validity Not Before: Dec 22 11:01:13 2025 GMT Not After : Dec 23 11:01:13 2025 GMT Subject: CN=c720a00670377d5b141c0af1ddca27e59bedb4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:c5:d5:d5:9b:2f:d5:c8:6e:12:eb:40:a4: 9a:64:e1:d9:c0:05:70:1c:e5:23:fe:56:3a:24:c1: d2:60:8e:b8:8b:dd:5b:30:3b:5d:bf:be:64:95:27: 95:0a:b6:14:a3:25:64:90:b0:67:5c:98:cb:0e:86: 2b:ac:69:a7:2b:0a:f7:c3:dc:37:ee:eb:9c:40:32: 5f:92:6e:b4:9f:77:13:96:7b:4b:87:b2:92:7d:3c: 56:37:f5:bc:cd:d2:e5:fa:6d:db:ff:5c:a3:e6:e0: c9:d2:9f:c1:aa:ce:fd:fb:1d:a8:2a:3a:e7:84:9a: 90:9d:aa:d9:36:77:01:a1:88:4f:2f:6f:af:38:f6: 9d:71:01:63:af:2e:93:36:0f:9a:11:8e:ef:b1:f4: 9f:ed:ce:5d:af:90:af:03:75:a0:a5:40:3d:b8:ad: 4b:76:38:c5:b0:97:42:94:af:8c:f6:0b:8a:b2:64: 8d:5d:ba:12:7f:3c:83:44:c4:ba:92:3b:08:78:3e: cc:13:99:7f:a1:e4:42:fb:6c:75:62:ca:22:0b:c8: 0d:f9:db:d1:6c:28:b6:63:19:f5:3c:72:6e:0d:93: f1:5e:b4:c6:2f:03:9b:2e:7f:cf:04:50:14:8b:44: 5b:1b:bd:0e:d8:01:26:82:19:ae:02:f3:58:a1:73: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:A0:06:70:37:7D:5B:14:1C:0A:F1:DD:CA:27:E5:9B:ED:B4:C2 X509v3 Authority Key Identifier: keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:a7:b4:d3:f2:8b:eb:a4:45:b9:92:f2:f4:58:57:4d:0c: 6e:8c:c8:90:cf:e7:39:fe:1d:72:6b:d5:4a:4e:5b:42:df:57: d9:46:a4:c4:d5:c1:a0:9e:8b:3e:d1:9d:f1:3a:29:03:42:0b: d8:37:a7:dd:04:22:d3:dc:cb:0a:f8:85:03:ae:b7:c5:0c:c9: 0f:81:21:d6:de:04:e0:e2:43:01:c4:3d:81:50:25:ac:ca:32: db:82:5d:cb:d9:44:ac:d4:63:a8:1b:13:5b:14:65:34:77:3a: 16:00:95:95:aa:12:c6:66:28:53:c7:d9:c2:67:7f:2c:dc:49: 14:ab:3a:5b:9b:63:24:58:24:bf:b8:77:b8:83:8a:4a:ba:54: f8:6e:a9:fb:cb:be:4d:94:55:6f:e8:5a:a8:4e:aa:4b:85:67: e2:f9:15:b7:f1:34:7f:90:7d:f8:92:78:50:45:0b:c9:33:19: 51:20:62:80:16:99:31:21:9c:cf:cc:d0:a8:c7:98:b9:af:67: 21:20:ba:4f:2c:90:4e:30:be:e8:59:6d:a5:fd:24:59:b1:8c: af:33:f0:f4:37:42:52:3b:b2:ba:bc:eb:4f:d9:4e:4e:27:b7: 4d:7b:34:6b:03:3e:45:96:57:f6:76:23:85:c1:54:75:3a:74: 07:55:19:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuHHRXqFl47FtZBc6Az2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzc2YjA4MzhmYTBlMWRhMWJlNGVkY2NmODkyNGJkNDEz YjFkYjcwHhcNMjUxMjIyMTEwMTEzWhcNMjUxMjIzMTEwMTEzWjAzMTEwLwYDVQQD EyhjNzIwYTAwNjcwMzc3ZDViMTQxYzBhZjFkZGNhMjdlNTliZWRiNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzfF1dWbL9XIbhLrQKSaZOHZwAVw HOUj/lY6JMHSYI64i91bMDtdv75klSeVCrYUoyVkkLBnXJjLDoYrrGmnKwr3w9w3 7uucQDJfkm60n3cTlntLh7KSfTxWN/W8zdLl+m3b/1yj5uDJ0p/Bqs79+x2oKjrn hJqQnarZNncBoYhPL2+vOPadcQFjry6TNg+aEY7vsfSf7c5dr5CvA3WgpUA9uK1L djjFsJdClK+M9guKsmSNXboSfzyDRMS6kjsIeD7ME5l/oeRC+2x1YsoiC8gN+dvR bCi2Yxn1PHJuDZPxXrTGLwObLn/PBFAUi0RbG70O2AEmghmuAvNYoXMQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcgoAZwN31bFBwK8d3KJ+Wb7bTCMB8GA1UdIwQY MBaAFOB3awg4+g4dob5O3M+JJL1BOx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjIt NzM5YTkxYzYyMGFjLzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjItNzM5YTkxYzYyMGFj LzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPWntNPy i+ukRbmS8vRYV00MbozIkM/nOf4dcmvVSk5bQt9X2UakxNXBoJ6LPtGd8TopA0IL 2Den3QQi09zLCviFA663xQzJD4Eh1t4E4OJDAcQ9gVAlrMoy24Jdy9lErNRjqBsT WxRlNHc6FgCVlaoSxmYoU8fZwmd/LNxJFKs6W5tjJFgkv7h3uIOKSrpU+G6p+8u+ TZRVb+haqE6qS4Vn4vkVt/E0f5B9+JJ4UEULyTMZUSBigBaZMSGcz8zQqMeYua9n ISC6TyyQTjC+6Fltpf0kWbGMrzPw9DdCUjuyurzrT9lOTie3TXs0awM+RZZX9nYj hcFUdTp0B1UZfA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:51 2025 by rpki-client