This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: PM2SX0aqXxQvofHs4uSzMbAFWt1umGrYyAFT0FAQAr0= Subject key identifier: 9D:D1:69:3A:E8:8E:B3:14:66:DB:A9:63:0D:09:10:71:8A:30:17:8B Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019B34C54258CB76C8DD917B748F8849496B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 0359 Signing time: Fri 19 Dec 2025 04:01:41 +0000 Manifest this update: Fri 19 Dec 2025 04:01:41 +0000 Manifest next update: Sat 20 Dec 2025 04:01:41 +0000 Files and hashes: 1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=) 2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: tfAVybqnP8KSjCf75JJiYYZD1/10T8tyb80nGruNE2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:42:58:cb:76:c8:dd:91:7b:74:8f:88:49:49:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Dec 19 04:01:41 2025 GMT Not After : Dec 20 04:01:41 2025 GMT Subject: CN=9dd1693ae88eb31466dba9630d0910718a30178b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:4f:74:73:aa:19:62:8d:5f:0b:90:9c:35: 12:e0:d8:4c:b4:1f:61:c4:69:88:37:b8:c4:a0:2c: b4:e9:fb:b2:d6:cb:71:71:53:c7:bf:0c:44:6d:19: 33:8d:79:10:32:d3:bd:f9:68:14:b8:0c:c2:17:66: 40:34:b0:37:f8:37:97:b4:04:eb:da:39:d3:be:22: 25:55:e5:4d:7e:a2:35:10:13:20:80:61:35:02:00: cc:6d:d7:b6:d5:76:bc:4d:fb:d1:7a:b2:8f:54:4b: 0b:7b:46:0a:c5:0c:52:e4:ff:f8:d1:03:ec:e2:e8: 61:31:a7:1f:ff:56:50:29:9f:01:fb:37:84:1f:97: 0b:89:48:86:21:3f:b4:17:7a:6b:8e:35:b7:f1:dc: c4:28:7f:40:b0:31:97:b8:39:b5:ce:23:62:22:72: 45:7c:04:c9:11:e6:bc:1f:52:72:80:fc:9b:45:3f: 2c:bc:0f:2e:51:1b:43:b9:37:9e:19:bc:c5:ce:c6: 1b:05:de:d9:2e:4b:28:8e:ef:4e:42:1d:27:ba:c8: 12:ed:83:0f:b3:d7:2f:3c:ff:26:d1:71:f1:85:19: eb:e8:0f:ee:96:3a:8e:c9:7e:14:9a:35:43:72:bc: a7:6f:e7:17:42:9e:db:01:28:6f:2b:64:8a:0e:3b: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:69:3A:E8:8E:B3:14:66:DB:A9:63:0D:09:10:71:8A:30:17:8B X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:2c:6e:61:28:47:d2:71:38:02:c2:b9:95:e1:37:26:50: 82:d1:29:43:f8:45:b8:b5:77:d5:39:1c:94:12:12:6c:8d:f7: 02:3b:a4:82:86:ed:11:fb:16:70:85:21:e5:3d:79:b3:bc:1a: 5a:ad:60:d6:2e:ed:91:d1:b1:ba:d3:23:98:c0:74:6a:06:a3: a4:8a:0b:2c:b7:c6:7f:3b:15:d8:8c:00:54:28:76:8a:76:35: 96:0b:45:f0:ee:fe:3a:45:54:19:37:ff:a0:54:bf:e5:86:ad: c8:90:d9:86:91:c5:92:d2:4b:45:3b:dc:fc:5e:67:2b:05:18: 23:f2:aa:41:a0:c0:db:62:e8:15:06:29:62:c7:34:a9:53:ed: ce:52:59:bd:59:fc:0c:27:7a:6d:e8:67:4c:04:69:85:36:0c: 3d:37:2d:09:bb:44:c9:47:70:65:25:a7:bd:c4:4b:b2:5f:a4: d5:37:4c:d3:4c:05:e5:51:74:5c:ae:71:84:31:92:23:2d:89: 06:ee:03:00:9b:9a:79:e0:84:a1:14:24:00:c3:18:f2:2d:51: 2c:12:e6:24:2b:00:20:0e:8e:a0:42:be:9f:37:77:d5:81:5e: 99:73:80:c1:d1:b3:ae:6e:7d:7f:79:39:b8:db:f4:a6:f4:6f: 12:67:78:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUJYy3bI3ZF7dI+ISUlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjUxMjE5MDQwMTQxWhcNMjUxMjIwMDQwMTQxWjAzMTEwLwYDVQQD Eyg5ZGQxNjkzYWU4OGViMzE0NjZkYmE5NjMwZDA5MTA3MThhMzAxNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcRPdHOqGWKNXwuQnDUS4NhMtB9h xGmIN7jEoCy06fuy1stxcVPHvwxEbRkzjXkQMtO9+WgUuAzCF2ZANLA3+DeXtATr 2jnTviIlVeVNfqI1EBMggGE1AgDMbde21Xa8TfvRerKPVEsLe0YKxQxS5P/40QPs 4uhhMacf/1ZQKZ8B+zeEH5cLiUiGIT+0F3prjjW38dzEKH9AsDGXuDm1ziNiInJF fATJEea8H1JygPybRT8svA8uURtDuTeeGbzFzsYbBd7ZLksoju9OQh0nusgS7YMP s9cvPP8m0XHxhRnr6A/uljqOyX4UmjVDcrynb+cXQp7bAShvK2SKDjvrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3RaTrojrMUZtupYw0JEHGKMBeLMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTIsbmEo R9JxOALCuZXhNyZQgtEpQ/hFuLV31TkclBISbI33AjukgobtEfsWcIUh5T15s7wa Wq1g1i7tkdGxutMjmMB0agajpIoLLLfGfzsV2IwAVCh2inY1lgtF8O7+OkVUGTf/ oFS/5YatyJDZhpHFktJLRTvc/F5nKwUYI/KqQaDA22LoFQYpYsc0qVPtzlJZvVn8 DCd6behnTARphTYMPTctCbtEyUdwZSWnvcRLsl+k1TdM00wF5VF0XK5xhDGSIy2J Bu4DAJuaeeCEoRQkAMMY8i1RLBLmJCsAIA6OoEK+nzd31YFemXOAwdGzrm59f3k5 uNv0pvRvEmd4tA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:44:58 2025 by rpki-client