This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json) Hash identifier: zJNaOsnAhS+sLdAjwhRUzxZbIGf0Wpayz6ZRB29xp8U= Subject key identifier: 21:01:EB:F0:91:FB:59:5E:A9:4D:1A:D3:93:8F:20:BF:CF:EA:30:3B Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Certificate serial: 019B54BDC6BD80F2216929F77665CAB4F506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft Manifest number: 1184 Signing time: Thu 25 Dec 2025 09:01:21 +0000 Manifest this update: Thu 25 Dec 2025 09:01:21 +0000 Manifest next update: Fri 26 Dec 2025 09:01:21 +0000 Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=) 2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=) 3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: dR3iS7OaCJi78fLOaDrSCl1M097IbxUWQrlnELvwsNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:c6:bd:80:f2:21:69:29:f7:76:65:ca:b4:f5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Validity Not Before: Dec 25 09:01:21 2025 GMT Not After : Dec 26 09:01:21 2025 GMT Subject: CN=2101ebf091fb595ea94d1ad3938f20bfcfea303b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:b5:b0:e8:81:15:49:19:fb:78:db:c6:b8: cd:e9:36:08:2e:20:b0:a2:74:af:a5:8f:3a:8d:e5: 52:e8:28:a9:dc:74:7e:a7:34:bd:2b:d7:0a:0c:04: c7:71:fa:74:06:09:48:43:87:d7:02:45:e1:61:f9: 00:e2:96:8c:e3:9a:fd:53:46:ce:e9:0b:45:54:70: 79:da:72:79:ec:59:70:27:72:e0:4a:7b:69:3b:0d: e1:c9:e9:31:3d:99:34:26:2b:4c:6f:dd:cf:db:83: 03:9d:d5:37:e7:d8:58:d8:a0:0d:e3:7f:bb:76:5d: 7f:7d:4f:dc:15:e0:8f:bf:76:69:ca:ed:70:c0:95: 02:b8:b0:0a:36:94:6b:09:a3:b7:9a:ae:91:33:76: fa:5e:64:d5:63:76:be:74:27:29:25:96:70:33:a6: cd:52:67:05:b1:ca:fc:12:64:3e:74:46:bd:63:df: fc:ec:6c:e1:8c:33:fd:57:42:39:e6:fb:cc:63:7e: e7:0f:75:02:28:14:bf:ca:9c:23:ab:12:0a:a5:d2: 5b:9f:7c:01:51:53:63:57:5a:14:12:41:ba:b7:a7: ef:ec:70:62:0d:bc:e0:b4:f8:b1:fa:0a:7d:16:cf: 10:2a:39:6b:07:0c:ad:c1:c9:b5:7d:f5:a0:c5:69: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:EB:F0:91:FB:59:5E:A9:4D:1A:D3:93:8F:20:BF:CF:EA:30:3B X509v3 Authority Key Identifier: keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:08:6f:c0:fd:3d:f5:f4:a0:60:97:7f:08:a8:c8:57:5e:18: d9:d1:c1:17:20:f7:9e:68:40:40:62:17:74:24:e1:6b:9c:a0: ba:48:4b:d4:e9:c2:d9:01:8b:a9:2d:24:f8:bd:04:d1:8e:d5: aa:a0:7a:00:1d:89:34:63:d7:01:fe:fa:63:10:75:3a:47:fd: bb:71:05:24:6a:3b:52:c2:f8:a3:95:41:df:f1:f4:86:ad:20: 45:ab:40:a1:72:78:c2:21:87:01:8b:ad:3e:00:07:95:6b:fe: 21:e8:c4:bf:3b:f4:26:da:cc:d9:53:eb:c8:68:9b:e9:a6:48: 47:8e:d5:ca:1f:54:84:22:12:a4:06:d2:e8:d7:b0:7b:d5:5a: 30:46:49:ea:43:75:e6:c2:e3:e3:ba:d3:f9:00:92:fb:ca:e3: 59:4f:3d:63:fa:c4:64:a3:79:fe:6e:0c:6f:71:2d:52:f8:40: 86:6d:f9:4e:e5:2f:ae:71:78:b7:5a:8f:aa:3c:8a:37:d6:cb: af:64:38:02:d0:a1:13:52:e6:7a:74:40:e3:24:3d:7a:c4:1a: a4:16:43:0b:e5:82:79:06:62:04:a0:da:45:12:40:c2:03:e4: 8f:9b:f0:30:6c:14:d5:2f:c0:3e:47:6e:9b:1c:46:d7:ea:b6: 72:37:59:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvca9gPIhaSn3dmXKtPUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl OTVjYWYwHhcNMjUxMjI1MDkwMTIxWhcNMjUxMjI2MDkwMTIxWjAzMTEwLwYDVQQD EygyMTAxZWJmMDkxZmI1OTVlYTk0ZDFhZDM5MzhmMjBiZmNmZWEzMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ii1sOiBFUkZ+3jbxrjN6TYILiCw onSvpY86jeVS6Cip3HR+pzS9K9cKDATHcfp0BglIQ4fXAkXhYfkA4paM45r9U0bO 6QtFVHB52nJ57FlwJ3LgSntpOw3hyekxPZk0JitMb93P24MDndU359hY2KAN43+7 dl1/fU/cFeCPv3Zpyu1wwJUCuLAKNpRrCaO3mq6RM3b6XmTVY3a+dCcpJZZwM6bN UmcFscr8EmQ+dEa9Y9/87GzhjDP9V0I55vvMY37nD3UCKBS/ypwjqxIKpdJbn3wB UVNjV1oUEkG6t6fv7HBiDbzgtPix+gp9Fs8QKjlrBwytwcm1ffWgxWk3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEB6/CR+1leqU0a05OPIL/P6jA7MB8GA1UdIwQY MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3 LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwhvwP09 9fSgYJd/CKjIV14Y2dHBFyD3nmhAQGIXdCTha5ygukhL1OnC2QGLqS0k+L0E0Y7V qqB6AB2JNGPXAf76YxB1Okf9u3EFJGo7UsL4o5VB3/H0hq0gRatAoXJ4wiGHAYut PgAHlWv+IejEvzv0JtrM2VPryGib6aZIR47Vyh9UhCISpAbS6Newe9VaMEZJ6kN1 5sLj47rT+QCS+8rjWU89Y/rEZKN5/m4Mb3EtUvhAhm35TuUvrnF4t1qPqjyKN9bL r2Q4AtChE1LmenRA4yQ9esQapBZDC+WCeQZiBKDaRRJAwgPkj5vwMGwU1S/APkdu mxxG1+q2cjdZIQ== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:24 2025 by rpki-client