This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json) Hash identifier: HlGJyU5VklCDZGPZ38uxCYrUh0c3xTaGKsB6P3DnXtE= Subject key identifier: 7E:4D:2F:A2:DC:5F:67:A3:C8:41:05:F0:2E:A3:A4:95:E4:DF:DB:EB Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Certificate serial: 019B631F5A4C92C100010B4CFB0FCDE8893C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:02:37 +0000 Manifest this update: Sun 28 Dec 2025 04:02:37 +0000 Manifest next update: Mon 29 Dec 2025 04:02:37 +0000 Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: DCvENFEozzSBed8p9iZxjmKFoRIT/0e/epHBhoBcuFI=) 2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:5a:4c:92:c1:00:01:0b:4c:fb:0f:cd:e8:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Validity Not Before: Dec 28 04:02:37 2025 GMT Not After : Dec 29 04:02:37 2025 GMT Subject: CN=7e4d2fa2dc5f67a3c84105f02ea3a495e4dfdbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:21:78:8e:9e:35:9c:5f:fc:26:68:65:95:8e: d6:89:03:5f:a6:c5:31:a5:77:a9:c2:cd:90:33:3e: 20:7d:c2:56:ff:30:30:29:e3:b6:ab:86:40:fd:d3: 0d:92:22:d2:36:ed:00:b3:90:e4:9b:d0:90:cb:09: 5c:e6:c6:25:51:08:8e:85:d7:5b:59:dd:38:27:0c: 21:d5:7b:d3:99:aa:bb:71:0b:3b:f9:2f:2b:d3:a4: 34:c2:50:3e:40:6d:9c:92:24:b3:ca:6e:4c:46:a0: 5a:24:f2:a8:e3:5f:99:eb:a6:5e:94:fa:72:5f:e0: f7:a7:c4:31:bd:8c:60:09:46:1e:77:9a:78:5e:a6: dd:7b:e2:2c:5a:62:4e:b4:a4:a0:97:99:2e:3d:6f: 6f:45:19:53:97:2f:0a:b2:35:12:33:71:23:ba:dd: b5:f6:a1:d8:b0:be:08:55:ba:64:a9:a9:5a:5c:43: 8b:a2:96:05:08:fd:1e:bc:1a:83:b3:2f:76:1b:db: 8f:3b:61:e7:96:4b:8e:80:10:35:fa:0c:d7:57:82: 7d:f7:3c:c9:13:72:66:f7:ae:cc:29:9d:73:f7:58: d4:1b:c9:20:a0:7a:8b:1c:21:20:0d:b7:f0:d4:2a: aa:14:5c:ca:07:a9:51:54:2e:4c:38:f2:cc:4c:67: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:2F:A2:DC:5F:67:A3:C8:41:05:F0:2E:A3:A4:95:E4:DF:DB:EB X509v3 Authority Key Identifier: keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:f1:21:14:12:bc:cc:c7:c6:95:95:5d:fe:c2:b9:38:60: 0b:6a:ef:4d:4a:91:8b:94:de:a8:10:56:59:c6:1a:bc:56:2c: 98:9f:5f:37:8b:be:42:6a:42:a2:5c:61:a2:57:fa:c5:74:d3: b0:48:76:1c:0c:07:49:61:ff:f9:1c:db:85:ca:24:e3:74:13: d3:68:c8:da:f7:2e:e8:6e:93:49:d1:4c:28:0b:2f:35:61:e1: 03:1d:a3:e6:04:b1:36:3d:b4:d1:58:41:cd:cd:d3:03:fd:fc: 6c:fc:07:20:e7:28:3b:19:ab:a9:da:4d:da:11:ff:9b:64:b1: 23:36:89:45:4b:a7:48:9b:5e:9a:20:a9:eb:87:32:6d:56:1e: ce:e3:78:85:e0:3a:6c:24:03:7c:17:ad:c5:15:76:eb:24:90: c1:cc:22:d1:ac:3d:cf:32:54:4a:45:3e:09:1d:64:db:93:b8: a8:b8:30:e4:61:0e:9f:7a:f8:57:9a:8b:85:55:d5:7c:01:06: b9:22:71:12:f9:02:17:0c:a7:d2:1c:54:67:c4:67:a2:81:77: 05:01:30:b0:99:a8:1f:87:68:cf:ab:9a:ad:1d:2a:19:60:1d: e6:e0:0a:53:7a:15:3b:ee:41:60:d8:78:af:9f:00:66:e7:fa: 2f:90:a7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjH1pMksEAAQtM+w/N6Ik8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2 MTNiYzUwHhcNMjUxMjI4MDQwMjM3WhcNMjUxMjI5MDQwMjM3WjAzMTEwLwYDVQQD Eyg3ZTRkMmZhMmRjNWY2N2EzYzg0MTA1ZjAyZWEzYTQ5NWU0ZGZkYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iF4jp41nF/8JmhllY7WiQNfpsUx pXepws2QMz4gfcJW/zAwKeO2q4ZA/dMNkiLSNu0As5Dkm9CQywlc5sYlUQiOhddb Wd04Jwwh1XvTmaq7cQs7+S8r06Q0wlA+QG2ckiSzym5MRqBaJPKo41+Z66ZelPpy X+D3p8QxvYxgCUYed5p4Xqbde+IsWmJOtKSgl5kuPW9vRRlTly8KsjUSM3Ejut21 9qHYsL4IVbpkqalaXEOLopYFCP0evBqDsy92G9uPO2HnlkuOgBA1+gzXV4J99zzJ E3Jm967MKZ1z91jUG8kgoHqLHCEgDbfw1CqqFFzKB6lRVC5MOPLMTGe9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5NL6LcX2ejyEEF8C6jpJXk39vrMB8GA1UdIwQY MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4 LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWbxIRQS vMzHxpWVXf7CuThgC2rvTUqRi5TeqBBWWcYavFYsmJ9fN4u+QmpColxholf6xXTT sEh2HAwHSWH/+Rzbhcok43QT02jI2vcu6G6TSdFMKAsvNWHhAx2j5gSxNj200VhB zc3TA/38bPwHIOcoOxmrqdpN2hH/m2SxIzaJRUunSJtemiCp64cybVYezuN4heA6 bCQDfBetxRV26ySQwcwi0aw9zzJUSkU+CR1k25O4qLgw5GEOn3r4V5qLhVXVfAEG uSJxEvkCFwyn0hxUZ8RnooF3BQEwsJmoH4doz6uarR0qGWAd5uAKU3oVO+5BYNh4 r58AZuf6L5CnrA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:50:36 2025 by rpki-client