This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json) Hash identifier: XDWekUzaNmpaThyleVACtE0bpA837wI2D89ase9oa6E= Subject key identifier: BA:37:9C:E4:E7:E6:09:87:FB:78:08:0B:82:25:AC:B9:5F:89:B4:16 Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Certificate serial: 019B62B03808647D34A3CA5C23ECBFCAA253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft Manifest number: 0D8F Signing time: Sun 28 Dec 2025 02:01:14 +0000 Manifest this update: Sun 28 Dec 2025 02:01:14 +0000 Manifest next update: Mon 29 Dec 2025 02:01:14 +0000 Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: 9pQbJpKlkwOT/BVqhU/HGSnPFL8e6FQOr9/O+0LHLFQ=) 2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:38:08:64:7d:34:a3:ca:5c:23:ec:bf:ca:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02 Validity Not Before: Dec 28 02:01:14 2025 GMT Not After : Dec 29 02:01:14 2025 GMT Subject: CN=ba379ce4e7e60987fb78080b8225acb95f89b416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:ed:a9:c4:b8:de:b5:91:ff:3d:d4:e9:09: 1e:f8:f5:d3:5d:8c:d1:9a:e5:23:86:f6:61:07:ee: 7e:d0:64:53:c4:4a:ab:00:37:da:a4:d5:07:90:43: 78:63:25:cc:cb:c7:68:00:6b:dd:70:aa:5f:2b:fd: f9:e0:a4:c9:8e:07:7d:63:8c:c4:0f:25:65:5a:30: 59:69:bd:7e:96:f3:7c:8c:82:ff:0a:ad:db:e5:8f: c4:11:c3:65:1f:21:94:4e:f8:0a:80:4c:8f:5f:6e: e0:43:6f:74:5a:d7:c3:4b:b9:94:f4:22:b3:e7:52: 85:c7:25:7b:42:18:7d:bc:9b:5d:d1:8c:11:fa:89: b2:38:a6:39:11:5f:1e:29:9c:35:82:81:d7:5f:9d: 85:9d:b8:c2:cb:92:78:a9:e2:5c:74:80:21:28:64: 7d:71:f0:fa:f6:0b:ec:e2:6e:54:73:c0:a3:5b:dc: c6:d9:ed:93:2c:36:fc:95:1c:da:c4:6b:49:f5:3d: 57:90:a9:9d:e2:a1:98:da:01:f9:08:6f:01:ed:16: c5:98:18:81:be:4e:d9:96:78:4d:4b:86:7a:8c:7e: 2e:61:3a:b9:f1:86:17:cc:54:4c:21:24:4d:1e:5d: 95:b6:fa:0c:04:0c:5e:1f:48:68:5b:80:74:6c:00: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:9C:E4:E7:E6:09:87:FB:78:08:0B:82:25:AC:B9:5F:89:B4:16 X509v3 Authority Key Identifier: keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:25:e0:b7:b7:dc:db:87:6d:4f:d6:5e:83:45:dd:81:a2: af:c3:f0:10:2d:3c:17:ab:0c:42:40:19:3d:8e:10:f8:89:de: 92:22:e5:0b:18:7b:f3:2b:40:0f:3a:be:96:19:4d:fa:12:ad: e8:95:78:81:eb:a8:40:09:d5:be:de:90:6b:e5:58:a3:96:dd: 74:8b:4c:09:e4:7b:6d:be:4b:e4:1b:9e:5e:48:41:d3:37:ac: 91:50:2a:c1:0e:d5:26:d2:b5:75:63:b2:32:28:a8:d5:77:7d: 02:d6:21:16:cb:d1:67:7a:90:28:44:28:e1:c0:32:e6:bd:0c: bf:cd:a5:61:70:da:a0:17:7e:f1:5e:fd:05:18:69:8d:f6:16: d6:f2:7b:bf:7a:14:ec:57:80:0b:2c:dd:63:cc:1e:e4:6c:68: 7c:01:cb:86:b6:f7:1b:b4:34:e1:f4:18:e8:d5:fb:07:2c:b9: 99:c8:4f:1b:e6:c6:70:cc:3d:0a:f8:6f:8b:cc:53:e1:44:24: 56:97:bc:74:f8:98:01:f5:4b:e1:8e:e6:8e:95:af:f6:29:34: 0b:1a:84:6f:60:4a:93:6c:15:23:65:3a:19:8d:b9:39:a7:e5: d1:6c:62:0d:71:4b:07:ba:c9:8c:e3:e1:2e:f1:e5:3e:77:df: d6:1b:6c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisDgIZH00o8pcI+y/yqJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3 NTBkMDIwHhcNMjUxMjI4MDIwMTE0WhcNMjUxMjI5MDIwMTE0WjAzMTEwLwYDVQQD EyhiYTM3OWNlNGU3ZTYwOTg3ZmI3ODA4MGI4MjI1YWNiOTVmODliNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPtqcS43rWR/z3U6Qke+PXTXYzR muUjhvZhB+5+0GRTxEqrADfapNUHkEN4YyXMy8doAGvdcKpfK/354KTJjgd9Y4zE DyVlWjBZab1+lvN8jIL/Cq3b5Y/EEcNlHyGUTvgKgEyPX27gQ290WtfDS7mU9CKz 51KFxyV7Qhh9vJtd0YwR+omyOKY5EV8eKZw1goHXX52FnbjCy5J4qeJcdIAhKGR9 cfD69gvs4m5Uc8CjW9zG2e2TLDb8lRzaxGtJ9T1XkKmd4qGY2gH5CG8B7RbFmBiB vk7ZlnhNS4Z6jH4uYTq58YYXzFRMISRNHl2VtvoMBAxeH0hoW4B0bAATTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo3nOTn5gmH+3gIC4IlrLlfibQWMB8GA1UdIwQY MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLwl4Le3 3NuHbU/WXoNF3YGir8PwEC08F6sMQkAZPY4Q+InekiLlCxh78ytADzq+lhlN+hKt 6JV4geuoQAnVvt6Qa+VYo5bddItMCeR7bb5L5BueXkhB0zeskVAqwQ7VJtK1dWOy Miio1Xd9AtYhFsvRZ3qQKEQo4cAy5r0Mv82lYXDaoBd+8V79BRhpjfYW1vJ7v3oU 7FeACyzdY8we5GxofAHLhrb3G7Q04fQY6NX7Byy5mchPG+bGcMw9Cvhvi8xT4UQk Vpe8dPiYAfVL4Y7mjpWv9ik0CxqEb2BKk2wVI2U6GY25Oafl0WxiDXFLB7rJjOPh LvHlPnff1htsYw== -----END CERTIFICATE-----Generated at Sun Dec 28 11:24:45 2025 by rpki-client