This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json) Hash identifier: vkqNefeG2jpQYpAjaRhIgdpiQitXOskdrwKx/Jl8gWc= Subject key identifier: 5C:B5:85:79:51:52:A5:BD:66:05:BF:7D:39:EE:24:48:F9:62:51:8F Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Certificate serial: 019B3C7EE9B6705232118A78177200114FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft Manifest number: 013B Signing time: Sat 20 Dec 2025 16:01:48 +0000 Manifest this update: Sat 20 Dec 2025 16:01:48 +0000 Manifest next update: Sun 21 Dec 2025 16:01:48 +0000 Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=) 2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: k23nNUSTLt72OJuURs41eQg3uswCQJrdZDPseeGJ1+c=) 3: JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa (hash: WtaTh/P/aPKzmJKsdEQ9npXPcszgPjwctR1jbOex9BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e9:b6:70:52:32:11:8a:78:17:72:00:11:4f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Validity Not Before: Dec 20 16:01:48 2025 GMT Not After : Dec 21 16:01:48 2025 GMT Subject: CN=5cb585795152a5bd6605bf7d39ee2448f962518f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:77:6f:d4:81:b8:3c:12:86:42:bc:f3:5b: 97:5b:15:6b:25:bc:32:16:ce:78:5d:c0:0d:b6:c5: 15:21:b4:49:a7:4f:b3:8c:0a:3a:c7:0d:41:f2:c5: ea:6c:8f:f5:bd:c4:c9:01:59:6b:6c:b7:3a:46:14: 57:e2:c8:fe:c2:78:de:27:6d:41:e1:78:21:d6:2a: 17:a4:14:bd:6f:7f:6e:a7:4a:f3:bb:2e:01:85:13: a3:43:67:e1:34:da:ca:50:29:ef:1b:d5:ae:ab:a4: b0:15:38:30:0d:f5:7e:bb:60:56:e1:73:f4:42:44: fa:2e:53:3a:d1:b4:ab:f0:5e:09:0b:4c:b4:9d:b0: 65:3a:9e:0e:2a:b4:15:e1:29:f7:aa:8c:b4:d6:03: c1:92:52:68:a5:2b:39:85:99:6f:e6:63:6a:fa:c5: 8e:42:6f:db:72:6c:f8:b4:89:86:df:f2:60:7a:11: 4b:f0:b6:cc:81:70:94:b9:50:ac:1a:bc:f0:95:90: 26:f5:66:0e:10:7a:f6:26:f0:9f:b1:6f:bc:34:58: 1c:21:8e:6e:cf:38:01:a5:ef:00:49:42:cc:0b:24: de:d6:f5:b8:c5:eb:d9:c4:e2:33:1c:84:b6:6f:c6: 43:dd:1b:6c:76:fe:c4:16:3f:b1:ad:b9:72:0e:bd: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:85:79:51:52:A5:BD:66:05:BF:7D:39:EE:24:48:F9:62:51:8F X509v3 Authority Key Identifier: keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:64:0a:84:ea:08:d9:2e:0b:cd:76:18:a0:e7:32:7d:3e:bf: 1c:c1:39:55:ba:03:52:07:de:f0:1f:d2:f3:8f:7c:35:e4:01: 37:88:96:6e:b6:8f:07:39:e3:34:d7:5a:60:36:4b:63:32:d8: 32:71:18:d7:fb:97:de:76:9e:91:93:9d:c9:ed:a0:5f:7a:16: a4:e9:ab:b7:d8:d4:84:d5:26:9b:cf:6b:f0:c8:8f:e2:f9:03: d3:77:7a:0b:a4:ff:fd:5c:84:24:90:07:71:7f:83:94:01:ee: 22:17:5d:f2:39:27:51:95:7e:06:79:19:11:c7:04:36:33:45: cb:5e:22:2d:02:d0:aa:53:f0:24:f6:68:9d:1a:c0:ae:21:18: 8b:33:6e:96:1b:e5:08:96:be:27:f9:30:b8:07:10:fc:5d:ed: 43:68:93:08:98:11:ac:a7:fb:cd:a6:7e:0b:69:4e:8b:e9:99: 01:f6:4d:a6:c6:c6:4b:37:f5:9b:6c:c2:0a:97:4c:b6:20:44: 6f:78:a3:8f:39:fb:e1:fd:64:c9:e7:5e:d4:fe:d0:61:38:9c: 34:c2:31:33:00:a1:63:54:63:2e:3e:66:f2:5e:62:9f:b5:bd: 6f:99:6b:65:76:3d:81:bb:93:42:e1:ad:66:67:ec:3a:a5:03: cd:24:98:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fum2cFIyEYp4F3IAEU/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz MzFlODAwHhcNMjUxMjIwMTYwMTQ4WhcNMjUxMjIxMTYwMTQ4WjAzMTEwLwYDVQQD Eyg1Y2I1ODU3OTUxNTJhNWJkNjYwNWJmN2QzOWVlMjQ0OGY5NjI1MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg53b9SBuDwShkK881uXWxVrJbwy Fs54XcANtsUVIbRJp0+zjAo6xw1B8sXqbI/1vcTJAVlrbLc6RhRX4sj+wnjeJ21B 4Xgh1ioXpBS9b39up0rzuy4BhROjQ2fhNNrKUCnvG9Wuq6SwFTgwDfV+u2BW4XP0 QkT6LlM60bSr8F4JC0y0nbBlOp4OKrQV4Sn3qoy01gPBklJopSs5hZlv5mNq+sWO Qm/bcmz4tImG3/JgehFL8LbMgXCUuVCsGrzwlZAm9WYOEHr2JvCfsW+8NFgcIY5u zzgBpe8ASULMCyTe1vW4xevZxOIzHIS2b8ZD3Rtsdv7EFj+xrblyDr2SPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFy1hXlRUqW9ZgW/fTnuJEj5YlGPMB8GA1UdIwQY MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmQKhOoI 2S4LzXYYoOcyfT6/HME5VboDUgfe8B/S8498NeQBN4iWbraPBznjNNdaYDZLYzLY MnEY1/uX3naekZOdye2gX3oWpOmrt9jUhNUmm89r8MiP4vkD03d6C6T//VyEJJAH cX+DlAHuIhdd8jknUZV+BnkZEccENjNFy14iLQLQqlPwJPZonRrAriEYizNulhvl CJa+J/kwuAcQ/F3tQ2iTCJgRrKf7zaZ+C2lOi+mZAfZNpsbGSzf1m2zCCpdMtiBE b3ijjzn74f1kyede1P7QYTicNMIxMwChY1RjLj5m8l5in7W9b5lrZXY9gbuTQuGt ZmfsOqUDzSSYsw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:59:32 2025 by rpki-client