This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json) Hash identifier: qMTbyvxiNSmsS2iRYmzkjdAyEA6DTrsTKNtnzxHPxns= Subject key identifier: 95:D9:35:8B:1A:94:93:49:27:0D:EA:C6:31:83:EB:2A:79:6E:BC:A7 Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Certificate serial: 019B31FA6C9484E69369B80837BDAAEF8E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft Manifest number: 0C4C Signing time: Thu 18 Dec 2025 15:00:53 +0000 Manifest this update: Thu 18 Dec 2025 15:00:53 +0000 Manifest next update: Fri 19 Dec 2025 15:00:53 +0000 Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: qMLqaK/lPMWB1nCPHovuB+Low6pCyXGW4zOxwrRuttk=) 2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:6c:94:84:e6:93:69:b8:08:37:bd:aa:ef:8e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Validity Not Before: Dec 18 15:00:53 2025 GMT Not After : Dec 19 15:00:53 2025 GMT Subject: CN=95d9358b1a949349270deac63183eb2a796ebca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:09:d2:24:98:d5:53:a9:cf:52:91:d5:4f: 3a:73:7f:25:48:62:f7:ca:3e:48:1b:f1:45:fa:46: 79:5e:4e:36:00:71:f3:44:be:65:a5:68:a1:a6:52: d4:d5:3f:11:86:0a:b8:4c:9f:4e:f9:36:5a:e0:85: a4:f9:34:45:be:e3:01:36:6a:52:79:3a:9b:4e:ce: ca:74:74:58:88:46:80:b1:9f:ec:47:ef:be:24:ad: 96:53:3f:7f:a7:a2:9e:62:b0:ff:77:95:d5:50:8e: c5:46:6c:3b:94:e8:ef:b2:d5:04:65:1d:75:ad:17: 55:3a:4a:a8:45:c2:d5:4d:de:cd:63:42:46:54:df: 89:c1:a5:ee:e4:10:5f:1a:47:65:13:b4:4e:80:74: f2:49:ff:5f:0d:72:d1:c1:8d:0b:4d:5c:69:b1:95: bb:22:18:cc:aa:db:ec:2e:80:9e:13:5f:61:68:f8: db:51:5e:9a:b7:73:cf:5b:23:50:8c:84:96:01:0f: e4:a2:d0:e5:eb:25:52:92:29:ea:05:bc:0f:fa:7f: 3d:ee:82:9f:4e:6a:b1:88:8e:49:b8:f5:e5:0f:07: 8d:7a:16:93:e7:47:73:c3:e4:92:ba:6c:22:6c:2f: 2b:3f:16:ce:ba:fe:f6:2a:09:47:20:96:7b:d2:52: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:35:8B:1A:94:93:49:27:0D:EA:C6:31:83:EB:2A:79:6E:BC:A7 X509v3 Authority Key Identifier: keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ad:10:ca:5b:d3:4d:86:23:29:1b:98:71:b7:65:a1:9d:be: b5:13:0b:4e:e7:e2:8f:00:90:ee:e2:d8:bc:3d:6c:1c:bc:92: f3:29:ef:13:ac:d4:1d:a3:c7:a2:13:ef:81:a8:23:68:95:ba: 2a:c7:9f:04:6f:1e:93:68:9f:d7:df:3c:bd:5b:49:3a:55:fc: 85:77:73:32:d3:8f:93:93:d6:3e:73:70:a4:50:f7:81:f1:68: a8:bc:bf:00:bf:87:e0:38:1d:68:80:e0:85:09:46:6b:db:6c: 62:ff:9a:25:88:e3:3b:84:54:c7:dc:a2:2d:62:f3:f3:5f:dc: 8a:52:18:3d:a7:83:b0:7d:2d:7c:17:07:5e:81:c6:64:01:bf: 59:e8:bb:6e:f3:e5:6c:ad:1b:60:01:34:c3:96:1f:1a:cb:ca: 56:f9:3a:27:45:56:6a:ff:ce:fa:9d:d2:93:49:8a:02:66:d4: 55:65:b3:2a:89:26:8d:4f:82:da:8b:10:89:a3:e8:b7:ec:44: db:ad:fd:0d:05:5a:fa:3c:9d:4a:9b:72:17:50:8e:59:3e:f8: 7d:c1:7c:4e:ea:36:dd:d4:cf:67:eb:b0:15:e4:d2:82:97:64: fe:8e:d9:81:ba:0d:96:15:81:d9:19:d7:98:4a:24:39:47:a2: 18:99:f4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+myUhOaTabgIN72q7442MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz NmVjZDQwHhcNMjUxMjE4MTUwMDUzWhcNMjUxMjE5MTUwMDUzWjAzMTEwLwYDVQQD Eyg5NWQ5MzU4YjFhOTQ5MzQ5MjcwZGVhYzYzMTgzZWIyYTc5NmViY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmEJ0iSY1VOpz1KR1U86c38lSGL3 yj5IG/FF+kZ5Xk42AHHzRL5lpWihplLU1T8Rhgq4TJ9O+TZa4IWk+TRFvuMBNmpS eTqbTs7KdHRYiEaAsZ/sR+++JK2WUz9/p6KeYrD/d5XVUI7FRmw7lOjvstUEZR11 rRdVOkqoRcLVTd7NY0JGVN+JwaXu5BBfGkdlE7ROgHTySf9fDXLRwY0LTVxpsZW7 IhjMqtvsLoCeE19haPjbUV6at3PPWyNQjISWAQ/kotDl6yVSkinqBbwP+n897oKf TmqxiI5JuPXlDweNehaT50dzw+SSumwibC8rPxbOuv72KglHIJZ70lK45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXZNYsalJNJJw3qxjGD6yp5brynMB8GA1UdIwQY MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3 LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd60QylvT TYYjKRuYcbdloZ2+tRMLTufijwCQ7uLYvD1sHLyS8ynvE6zUHaPHohPvgagjaJW6 KsefBG8ek2if1988vVtJOlX8hXdzMtOPk5PWPnNwpFD3gfFoqLy/AL+H4DgdaIDg hQlGa9tsYv+aJYjjO4RUx9yiLWLz81/cilIYPaeDsH0tfBcHXoHGZAG/Wei7bvPl bK0bYAE0w5YfGsvKVvk6J0VWav/O+p3Sk0mKAmbUVWWzKokmjU+C2osQiaPot+xE 2639DQVa+jydSptyF1COWT74fcF8Tuo23dTPZ+uwFeTSgpdk/o7ZgboNlhWB2RnX mEokOUeiGJn0tw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:42 2025 by rpki-client