This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json) Hash identifier: f58SsVHxkvJGiO79WyE935cII7Wei63gzHvWhJR/g0k= Subject key identifier: 57:1F:A7:BE:51:99:E5:D6:00:A7:F1:8E:E5:8D:37:10:2C:76:B4:1F Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Certificate serial: 019B6DA1492C254FA00BB13C446ABF57A2E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft Manifest number: 0D53 Signing time: Tue 30 Dec 2025 05:00:45 +0000 Manifest this update: Tue 30 Dec 2025 05:00:45 +0000 Manifest next update: Wed 31 Dec 2025 05:00:45 +0000 Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: o9eN8ZvKjEE0PjR/lzak/Hco+zMJdhYuYzX9qb49eMw=) 2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=) 3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:49:2c:25:4f:a0:0b:b1:3c:44:6a:bf:57:a2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Validity Not Before: Dec 30 05:00:45 2025 GMT Not After : Dec 31 05:00:45 2025 GMT Subject: CN=571fa7be5199e5d600a7f18ee58d37102c76b41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:cf:f0:50:7a:35:45:31:d7:98:ec:b3:05: 61:0a:fa:bb:0f:b6:ac:3e:b0:dd:a6:48:e1:48:56: ea:dd:45:07:e5:99:35:d4:a8:9c:e2:17:22:e8:c2: 1d:33:bd:fa:02:a4:5e:46:2e:49:cc:2c:96:63:0f: 58:04:21:bc:1f:bf:66:69:6c:aa:bf:8b:c6:92:3d: a5:ed:06:39:c2:da:26:93:31:97:8d:e4:fa:d5:27: aa:94:87:b2:08:91:9b:14:b2:b5:64:49:c0:ba:f3: 57:31:6a:bc:89:3a:d0:b9:38:65:23:ab:0a:f2:f4: 91:9e:84:f2:e7:d8:dc:ba:36:4e:4c:e8:29:33:cb: 27:9e:6d:17:f7:9b:fc:bb:55:74:70:66:27:9e:ce: 06:28:5d:0a:15:87:14:b6:1b:63:ce:5d:46:19:fc: 71:e3:c7:ba:d8:54:5b:29:a6:7e:44:11:13:cb:ed: 47:68:a7:0a:99:20:04:f3:8a:7d:df:a7:a2:6b:d5: ff:e9:6e:53:25:b9:79:ac:c9:b5:a4:e7:77:69:2c: 58:02:3b:37:f2:a0:9f:be:28:00:22:23:6f:b0:71: ff:22:3a:e6:26:35:7e:39:9a:7b:dd:f5:3d:65:8b: 34:9b:7e:49:7f:cb:5d:44:85:a4:d9:ad:7f:e4:0e: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:A7:BE:51:99:E5:D6:00:A7:F1:8E:E5:8D:37:10:2C:76:B4:1F X509v3 Authority Key Identifier: keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:f0:56:4a:3c:8f:61:23:b3:5a:c4:88:f6:0a:2a:6d:fe: 29:75:16:58:2e:b1:97:fa:a3:8b:87:71:82:06:ea:79:dd:7f: f3:4a:bf:21:50:22:ba:64:62:93:ec:ec:87:ef:ac:6f:39:40: 40:2c:ce:4a:ac:cf:f3:83:bb:e6:60:c4:65:e7:10:fe:b0:71: ba:39:24:ee:9e:d6:94:15:80:f8:12:53:6e:b5:03:db:00:d0: 31:20:bc:c7:c6:53:0d:49:fb:5c:db:6b:4e:7a:02:2d:16:6d: 13:4d:8f:70:2f:83:b8:b6:dc:fe:ae:03:d7:10:98:49:f6:28: 4e:ec:d5:6e:50:d4:7f:e2:0a:08:f3:22:3e:a6:15:99:0c:dd: 06:46:5a:dd:39:ce:08:25:6c:42:50:2b:6a:5f:ee:1b:9e:7d: f6:c3:11:3c:1b:f3:c0:fc:a1:93:3c:93:a3:23:8b:4b:d0:ef: 35:2e:e1:03:09:2d:7a:e3:9f:b9:8a:df:f8:34:a7:08:3d:c5: df:79:65:61:78:b6:b0:89:62:3a:5e:ad:4f:16:58:f1:4a:af: 64:48:47:40:81:58:af:89:ab:89:1f:23:77:22:98:be:15:2f: 98:19:43:b8:81:29:2e:db:67:f3:7e:30:d2:f2:22:75:5f:5b: ef:db:24:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoUksJU+gC7E8RGq/V6LmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2 NmIyMWUwHhcNMjUxMjMwMDUwMDQ1WhcNMjUxMjMxMDUwMDQ1WjAzMTEwLwYDVQQD Eyg1NzFmYTdiZTUxOTllNWQ2MDBhN2YxOGVlNThkMzcxMDJjNzZiNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9nP8FB6NUUx15jsswVhCvq7D7as PrDdpkjhSFbq3UUH5Zk11Kic4hci6MIdM736AqReRi5JzCyWYw9YBCG8H79maWyq v4vGkj2l7QY5wtomkzGXjeT61SeqlIeyCJGbFLK1ZEnAuvNXMWq8iTrQuThlI6sK 8vSRnoTy59jcujZOTOgpM8snnm0X95v8u1V0cGYnns4GKF0KFYcUthtjzl1GGfxx 48e62FRbKaZ+RBETy+1HaKcKmSAE84p936eia9X/6W5TJbl5rMm1pOd3aSxYAjs3 8qCfvigAIiNvsHH/IjrmJjV+OZp73fU9ZYs0m35Jf8tdRIWk2a1/5A4mmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcfp75RmeXWAKfxjuWNNxAsdrQfMB8GA1UdIwQY MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ3wVko8 j2Ejs1rEiPYKKm3+KXUWWC6xl/qji4dxggbqed1/80q/IVAiumRik+zsh++sbzlA QCzOSqzP84O75mDEZecQ/rBxujkk7p7WlBWA+BJTbrUD2wDQMSC8x8ZTDUn7XNtr TnoCLRZtE02PcC+DuLbc/q4D1xCYSfYoTuzVblDUf+IKCPMiPqYVmQzdBkZa3TnO CCVsQlAral/uG5599sMRPBvzwPyhkzyToyOLS9DvNS7hAwkteuOfuYrf+DSnCD3F 33llYXi2sIliOl6tTxZY8UqvZEhHQIFYr4mriR8jdyKYvhUvmBlDuIEpLttn834w 0vIidV9b79skiA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:31 2025 by rpki-client