This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json) Hash identifier: VBCjtEf1Q5nrUsOrCqVojLYmgm2/nT2Yq1QjfVYq94U= Subject key identifier: 67:60:24:73:9D:0F:3F:6E:26:7C:62:92:9F:50:19:D9:FF:03:0E:7A Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Certificate serial: 019B72914067CBF76E8AF82416BAF446E20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft Manifest number: 0E73 Signing time: Wed 31 Dec 2025 04:01:20 +0000 Manifest this update: Wed 31 Dec 2025 04:01:20 +0000 Manifest next update: Thu 01 Jan 2026 04:01:20 +0000 Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=) 2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: wjvDxwFV0m1Up642Doiw5llSInNm+6/8a8EXJkMm4jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:40:67:cb:f7:6e:8a:f8:24:16:ba:f4:46:e2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Validity Not Before: Dec 31 04:01:20 2025 GMT Not After : Jan 1 04:01:20 2026 GMT Subject: CN=676024739d0f3f6e267c62929f5019d9ff030e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:e6:01:55:e8:d1:4c:9c:f7:33:15:f8:0c: f9:ff:b8:bb:f9:88:ca:64:01:01:ed:e0:26:2b:e9: dc:6b:52:3b:72:a7:2a:43:bd:18:34:f3:90:80:d4: fa:34:9e:61:65:70:3f:9d:6b:32:10:81:8f:92:f0: 7a:f3:28:d2:6e:81:35:35:28:7b:37:bc:2f:2c:5e: 98:c9:f5:b9:a3:1d:b6:e3:b2:0e:40:ce:ad:7a:56: dd:c3:d5:53:9a:cd:3a:23:a8:e7:06:10:6f:63:f5: 54:19:cc:ff:57:fe:66:a0:38:84:92:99:36:6d:f1: 07:f2:60:36:93:20:67:4c:db:45:10:79:04:c7:ef: 92:03:35:6c:ea:ee:90:0d:53:f6:29:37:2f:59:b6: d2:23:73:3d:34:b3:85:24:a6:14:66:9f:79:a4:b9: 42:33:59:23:28:21:f8:88:91:2a:2f:23:f3:ba:c4: 08:d4:8f:61:04:28:b7:dc:38:1f:1a:2d:91:45:7b: 2a:f6:4d:a9:2b:fa:1a:fb:26:95:a9:80:5c:f1:86: e3:94:5e:b8:ce:a7:7d:e2:ce:3e:ce:31:9f:6d:58: 01:23:6e:85:76:30:51:c6:53:cc:45:e3:08:ab:2f: 2f:d3:6c:53:3d:96:aa:0c:e2:cf:74:6c:8a:e1:cc: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:60:24:73:9D:0F:3F:6E:26:7C:62:92:9F:50:19:D9:FF:03:0E:7A X509v3 Authority Key Identifier: keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d7:2e:52:43:3b:7e:ba:f3:e1:cf:bf:64:8e:9b:01:ba:4c: 9d:aa:ff:6d:a1:50:d5:a7:65:b1:d5:16:7b:0e:18:c9:13:d7: e1:a0:c7:c4:64:8f:ee:3d:60:bc:4e:e1:ab:83:e4:91:93:60: 65:ad:9b:c8:3d:00:93:06:f7:fb:88:22:bf:fe:af:08:34:21: 93:72:96:82:5b:a2:b8:c8:e6:77:39:01:50:7a:ff:e6:e9:13: 93:7d:76:29:e7:41:f5:bc:36:00:bd:52:f5:a3:cb:1e:05:81: d7:0b:5c:6a:21:03:56:5b:6a:18:28:67:94:f2:77:a4:1e:a3: 19:07:3e:cb:20:b4:4c:26:97:d1:16:f7:f3:8b:e8:42:46:1f: f9:fa:68:08:08:86:8a:8a:7e:f1:b2:4b:49:c9:ce:b1:e7:6c: 14:df:7e:42:a7:8e:9f:3b:bc:1e:fa:d7:be:d9:cb:79:79:38: 0a:20:6b:bc:91:cd:0f:d1:b0:71:1e:63:21:41:0a:c9:36:12: 97:7b:e5:b3:65:2e:ae:7e:f1:8e:80:19:60:f7:c5:77:02:9d: 7f:b3:2e:e6:50:ae:2c:ea:05:85:97:c3:e3:0a:78:bc:92:c6: 78:73:2b:84:60:94:d8:bb:52:99:41:46:b1:e6:14:5f:2d:a2: 9c:e1:c1:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykUBny/duivgkFrr0RuINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh NGQ2MzUwHhcNMjUxMjMxMDQwMTIwWhcNMjYwMTAxMDQwMTIwWjAzMTEwLwYDVQQD Eyg2NzYwMjQ3MzlkMGYzZjZlMjY3YzYyOTI5ZjUwMTlkOWZmMDMwZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnrmAVXo0Uyc9zMV+Az5/7i7+YjK ZAEB7eAmK+nca1I7cqcqQ70YNPOQgNT6NJ5hZXA/nWsyEIGPkvB68yjSboE1NSh7 N7wvLF6YyfW5ox2247IOQM6telbdw9VTms06I6jnBhBvY/VUGcz/V/5moDiEkpk2 bfEH8mA2kyBnTNtFEHkEx++SAzVs6u6QDVP2KTcvWbbSI3M9NLOFJKYUZp95pLlC M1kjKCH4iJEqLyPzusQI1I9hBCi33DgfGi2RRXsq9k2pK/oa+yaVqYBc8YbjlF64 zqd94s4+zjGfbVgBI26FdjBRxlPMReMIqy8v02xTPZaqDOLPdGyK4cx9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdgJHOdDz9uJnxikp9QGdn/Aw56MB8GA1UdIwQY MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4 LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtcuUkM7 frrz4c+/ZI6bAbpMnar/baFQ1adlsdUWew4YyRPX4aDHxGSP7j1gvE7hq4PkkZNg Za2byD0Akwb3+4giv/6vCDQhk3KWgluiuMjmdzkBUHr/5ukTk312KedB9bw2AL1S 9aPLHgWB1wtcaiEDVltqGChnlPJ3pB6jGQc+yyC0TCaX0Rb384voQkYf+fpoCAiG iop+8bJLScnOsedsFN9+QqeOnzu8HvrXvtnLeXk4CiBrvJHND9GwcR5jIUEKyTYS l3vls2Uurn7xjoAZYPfFdwKdf7Mu5lCuLOoFhZfD4wp4vJLGeHMrhGCU2LtSmUFG seYUXy2inOHBaA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:25:40 2025 by rpki-client