This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json) Hash identifier: P4c9N6wQA+GLWoiIZrcMwUCyvMMIBG78WcfNxXS8aJI= Subject key identifier: A6:71:07:01:D3:C8:B4:DF:AC:01:04:6D:B7:D6:8E:1C:70:C7:7D:AD Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Certificate serial: 019B3EDABC10C1BB15A9A01BCBD004AC804E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft Manifest number: 084F Signing time: Sun 21 Dec 2025 03:01:20 +0000 Manifest this update: Sun 21 Dec 2025 03:01:20 +0000 Manifest next update: Mon 22 Dec 2025 03:01:20 +0000 Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: P9DP3FyUepZ93R39Kp3W3nNXHuxaZ8+vTpBeOdN+s7E=) 2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:bc:10:c1:bb:15:a9:a0:1b:cb:d0:04:ac:80:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Validity Not Before: Dec 21 03:01:20 2025 GMT Not After : Dec 22 03:01:20 2025 GMT Subject: CN=a6710701d3c8b4dfac01046db7d68e1c70c77dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:6d:c4:d5:84:8e:a8:a4:0b:9e:32:19:b9: a1:43:86:7b:0b:16:3e:eb:a1:af:1b:0b:2c:2a:cf: e4:cd:6f:21:9a:18:42:cf:fd:62:ce:63:49:c6:06: c1:1d:a9:00:e0:00:ff:30:a8:87:33:7d:69:cc:cd: 84:57:70:f4:c8:62:00:3e:b3:79:e9:ce:ce:23:e3: 2e:0a:a5:90:b3:5b:2c:6c:c9:a1:37:69:a1:9e:1b: 69:90:8b:68:83:8c:2d:42:fc:59:aa:c0:78:ca:3c: d9:8c:54:47:de:5a:93:17:fe:1e:0b:9c:4c:c0:c1: b5:30:58:ad:7d:31:77:66:a7:75:5c:ac:40:ad:41: 84:c9:43:06:ba:e0:28:31:9d:d4:ec:33:76:15:d2: 82:bd:b2:de:f7:97:c2:a0:a8:de:64:65:0f:97:0f: 6f:18:70:b0:b2:72:1c:ac:76:93:99:b6:87:bc:6e: 43:b5:4a:4f:cb:88:0f:ec:ba:00:6e:14:95:55:ba: 13:42:36:0f:8e:02:da:2a:c8:f2:e8:83:72:ce:c6: cf:67:60:a3:52:a3:02:36:92:aa:27:2e:7a:81:8d: 54:ea:c3:31:0d:6f:c1:4f:43:09:c1:db:34:2f:92: 2e:57:54:20:cb:c5:44:1e:e3:ae:72:d1:a3:be:68: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:07:01:D3:C8:B4:DF:AC:01:04:6D:B7:D6:8E:1C:70:C7:7D:AD X509v3 Authority Key Identifier: keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bb:c2:c9:11:a9:3f:91:fa:5b:e6:83:c2:37:15:98:84:32: d2:78:5a:f0:1f:12:0c:85:e8:8a:45:34:58:42:97:ac:8a:9b: f5:c5:90:34:63:cd:fc:68:43:cd:72:9f:19:31:58:2b:87:ca: 93:44:c1:fa:1e:11:96:0e:13:5d:ac:61:92:2d:f0:36:c8:2d: 08:4f:f6:bc:d6:27:fa:f2:5a:d2:da:45:64:75:dd:d1:ee:63: 9f:54:b0:7b:02:3b:47:22:03:4c:0e:e1:ec:96:89:65:bd:53: 91:70:a3:5e:df:5d:8f:50:bf:cc:72:0e:ae:61:93:aa:3c:49: 98:ab:a7:55:56:c0:3c:17:5b:f9:e8:c5:de:d3:6f:24:72:6c: a7:c5:10:90:79:d1:72:05:65:a2:3a:e5:72:7a:c9:58:b4:ab: 36:ba:19:ce:82:ad:37:c2:5d:e0:f4:0c:29:16:5a:4a:a5:8a: 5a:78:b6:5b:af:df:9f:ee:81:04:96:fe:a7:a6:78:05:20:4c: d5:a8:93:97:41:fe:7a:5d:2e:46:1c:90:69:2f:61:08:fb:b6: 0a:e5:5a:bd:7e:d9:7b:32:ff:1a:98:bb:80:3c:f6:8a:83:b3: 24:44:0e:1b:42:21:97:55:59:4f:34:18:94:f7:4f:24:48:c0: 9c:9e:19:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rwQwbsVqaAby9AErIBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl ZjM1N2MwHhcNMjUxMjIxMDMwMTIwWhcNMjUxMjIyMDMwMTIwWjAzMTEwLwYDVQQD EyhhNjcxMDcwMWQzYzhiNGRmYWMwMTA0NmRiN2Q2OGUxYzcwYzc3ZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDltxNWEjqikC54yGbmhQ4Z7CxY+ 66GvGwssKs/kzW8hmhhCz/1izmNJxgbBHakA4AD/MKiHM31pzM2EV3D0yGIAPrN5 6c7OI+MuCqWQs1ssbMmhN2mhnhtpkItog4wtQvxZqsB4yjzZjFRH3lqTF/4eC5xM wMG1MFitfTF3Zqd1XKxArUGEyUMGuuAoMZ3U7DN2FdKCvbLe95fCoKjeZGUPlw9v GHCwsnIcrHaTmbaHvG5DtUpPy4gP7LoAbhSVVboTQjYPjgLaKsjy6INyzsbPZ2Cj UqMCNpKqJy56gY1U6sMxDW/BT0MJwds0L5IuV1Qgy8VEHuOuctGjvmh2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZxBwHTyLTfrAEEbbfWjhxwx32tMB8GA1UdIwQY MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7vCyRGp P5H6W+aDwjcVmIQy0nha8B8SDIXoikU0WEKXrIqb9cWQNGPN/GhDzXKfGTFYK4fK k0TB+h4Rlg4TXaxhki3wNsgtCE/2vNYn+vJa0tpFZHXd0e5jn1SwewI7RyIDTA7h 7JaJZb1TkXCjXt9dj1C/zHIOrmGTqjxJmKunVVbAPBdb+ejF3tNvJHJsp8UQkHnR cgVlojrlcnrJWLSrNroZzoKtN8Jd4PQMKRZaSqWKWni2W6/fn+6BBJb+p6Z4BSBM 1aiTl0H+el0uRhyQaS9hCPu2CuVavX7ZezL/Gpi7gDz2ioOzJEQOG0Ihl1VZTzQY lPdPJEjAnJ4Zlg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:18 2025 by rpki-client