This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json) Hash identifier: NgwXvBBLKjc816Q2j8ccYHhdcHKvoz2NnJSDofpRGnI= Subject key identifier: D8:6F:B0:21:A9:FF:5C:E7:8E:08:E9:50:24:CD:D3:2E:84:31:7D:1D Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Certificate serial: 019B522A76060FF8D4B89B19FB3E9009195C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft Manifest number: 0918 Signing time: Wed 24 Dec 2025 21:01:13 +0000 Manifest this update: Wed 24 Dec 2025 21:01:13 +0000 Manifest next update: Thu 25 Dec 2025 21:01:13 +0000 Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: 7uL59FRmu7SlLP+6/3UMHTguj/E5KXqKV4yu+8gB77c=) 2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:76:06:0f:f8:d4:b8:9b:19:fb:3e:90:09:19:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Validity Not Before: Dec 24 21:01:13 2025 GMT Not After : Dec 25 21:01:13 2025 GMT Subject: CN=d86fb021a9ff5ce78e08e95024cdd32e84317d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:d3:9c:c8:f9:33:b8:46:6d:c0:03:5c:a1: 1d:3a:6d:25:d4:2c:a2:50:98:56:21:e6:d7:ef:c1: 60:48:a9:1c:22:48:22:4d:18:54:91:06:87:8c:59: 04:86:71:3b:aa:67:66:5e:b9:06:64:1f:bc:84:4c: a0:69:e7:7b:1e:1b:86:72:33:14:32:5c:84:d2:b6: f9:62:74:0e:74:12:81:e8:60:af:5c:3d:7b:fc:f5: 5b:86:83:9a:1e:11:51:f1:9f:1b:38:95:37:4e:2d: 7c:5b:80:7c:ad:cc:2f:4f:94:f5:a1:0d:48:f6:31: 7e:e9:3d:25:5a:25:db:70:5f:1a:f9:b0:43:ec:d4: 3f:a1:2a:e6:eb:17:b3:0a:56:2b:73:d4:84:3c:27: 4c:02:22:01:13:7c:9d:34:78:98:9c:a2:4d:d9:c1: 8d:f4:27:71:4f:d2:c3:7c:ac:80:98:b3:ec:49:ac: 0d:b3:04:47:07:58:58:6a:55:6d:f0:48:3f:ac:0d: 20:ed:2d:ad:0f:50:b7:38:4e:a9:4c:d9:62:0c:fb: 2f:43:18:76:12:81:a3:71:04:dc:04:52:30:ca:7e: 06:25:8b:36:f0:80:25:31:d1:1a:3f:f7:60:5b:6f: 3a:72:58:b6:a9:53:2d:27:12:87:94:5e:bc:82:9b: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:B0:21:A9:FF:5C:E7:8E:08:E9:50:24:CD:D3:2E:84:31:7D:1D X509v3 Authority Key Identifier: keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:89:23:0a:bb:75:56:bd:4c:a2:14:17:ca:76:7a:71:38: c3:0f:90:3b:59:fd:5d:4e:7b:db:04:44:9f:e2:ca:99:59:73: 7c:82:ec:8d:37:d0:e4:43:98:ec:a4:84:86:e8:0c:72:8a:8e: 68:bc:b0:c6:74:9a:59:69:21:4e:d2:46:36:35:ac:61:37:fc: 0e:f3:9c:43:67:3c:74:cd:fa:c1:07:aa:22:8d:77:30:46:a0: 50:b6:f7:b1:11:18:82:4d:2e:dc:4b:d2:9c:2c:d5:ce:28:bb: ed:e2:e3:f7:d4:00:24:2b:a8:1b:d7:d9:a3:d8:4c:0e:9e:a6: 6f:fe:c1:dc:37:6f:73:3f:b0:0f:ea:b9:27:4c:63:0b:3f:ff: e7:63:84:7b:40:6a:c8:6b:7a:93:a9:13:5b:27:51:dc:63:78: 26:87:6c:34:71:84:d8:f6:5c:fc:9a:ba:4a:c7:fb:40:e3:3e: f7:77:f4:a0:67:e0:6c:59:fd:4e:34:92:aa:1c:ba:b9:1c:8c: cb:ba:a1:a2:cf:fa:ee:83:23:2c:e4:68:f5:cf:97:56:ab:30: 1e:40:64:fc:97:79:21:f8:16:70:fc:80:1d:fa:9b:f6:28:0d: a6:45:48:90:c2:a1:c5:4c:9b:8c:c0:8a:fc:8d:a8:da:bd:ee: 31:2e:1b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKnYGD/jUuJsZ+z6QCRlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5 YzUzZDkwHhcNMjUxMjI0MjEwMTEzWhcNMjUxMjI1MjEwMTEzWjAzMTEwLwYDVQQD EyhkODZmYjAyMWE5ZmY1Y2U3OGUwOGU5NTAyNGNkZDMyZTg0MzE3ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WvTnMj5M7hGbcADXKEdOm0l1Cyi UJhWIebX78FgSKkcIkgiTRhUkQaHjFkEhnE7qmdmXrkGZB+8hEygaed7HhuGcjMU MlyE0rb5YnQOdBKB6GCvXD17/PVbhoOaHhFR8Z8bOJU3Ti18W4B8rcwvT5T1oQ1I 9jF+6T0lWiXbcF8a+bBD7NQ/oSrm6xezClYrc9SEPCdMAiIBE3ydNHiYnKJN2cGN 9CdxT9LDfKyAmLPsSawNswRHB1hYalVt8Eg/rA0g7S2tD1C3OE6pTNliDPsvQxh2 EoGjcQTcBFIwyn4GJYs28IAlMdEaP/dgW286cli2qVMtJxKHlF68gpsDZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhvsCGp/1znjgjpUCTN0y6EMX0dMB8GA1UdIwQY MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONuJIwq7 dVa9TKIUF8p2enE4ww+QO1n9XU572wREn+LKmVlzfILsjTfQ5EOY7KSEhugMcoqO aLywxnSaWWkhTtJGNjWsYTf8DvOcQ2c8dM36wQeqIo13MEagULb3sREYgk0u3EvS nCzVzii77eLj99QAJCuoG9fZo9hMDp6mb/7B3Ddvcz+wD+q5J0xjCz//52OEe0Bq yGt6k6kTWydR3GN4JodsNHGE2PZc/Jq6Ssf7QOM+93f0oGfgbFn9TjSSqhy6uRyM y7qhos/67oMjLORo9c+XVqswHkBk/Jd5IfgWcPyAHfqb9igNpkVIkMKhxUybjMCK /I2o2r3uMS4bkA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:52 2025 by rpki-client