This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json) Hash identifier: gZbyCYJH5EIo5Iq+ERgAlXIK/yoaegYF9m1Uu0pKMtw= Subject key identifier: C8:50:2B:E4:C0:A2:D6:3A:89:4E:51:0D:30:F1:4F:5D:20:06:DB:A4 Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f Certificate serial: 019B43C9BD5CE5F50D6D6EA24A6F5562DE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft Manifest number: 06EC Signing time: Mon 22 Dec 2025 02:00:53 +0000 Manifest this update: Mon 22 Dec 2025 02:00:53 +0000 Manifest next update: Tue 23 Dec 2025 02:00:53 +0000 Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: GqyBRYFElxi1RsfLhijDE1dKrbCvoBmkAGoRx/dclUc=) 2: THpGYC3KAh4Nh2aSf_ElMpZJEww.roa (hash: 6eDhHzhaISARxdiDWICa8Q3A3/Q7+g+k7UoN1vc+WFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:bd:5c:e5:f5:0d:6d:6e:a2:4a:6f:55:62:de:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f Validity Not Before: Dec 22 02:00:53 2025 GMT Not After : Dec 23 02:00:53 2025 GMT Subject: CN=c8502be4c0a2d63a894e510d30f14f5d2006dba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:5b:9d:f6:d9:14:54:07:90:db:ea:73:23: 0f:66:cc:f8:71:bd:05:f7:30:b2:aa:5a:0e:8b:6f: d2:b2:d1:c4:aa:7f:fa:f7:a2:5a:80:4a:bc:6e:fd: c6:a1:df:8c:97:68:17:14:ea:92:d2:d7:91:19:1b: e5:7f:b2:64:93:79:82:b9:f0:cd:6a:c9:8c:b5:52: c0:7d:36:72:3d:e1:db:34:04:76:77:3f:45:8d:a3: a0:7b:01:84:89:6b:9d:37:5c:3b:13:3e:41:ab:ca: ab:5d:b6:34:62:b3:a9:fa:96:04:b7:38:88:c3:c8: 1d:25:ce:70:5d:75:cf:30:13:62:ed:21:50:8e:41: df:e6:b1:ed:37:20:ac:97:20:39:ce:e2:f6:ac:21: eb:4a:38:e8:79:44:14:74:29:73:f4:1b:1e:08:c8: fa:b0:ae:fb:50:21:27:ab:da:38:0a:69:25:bf:53: 3e:22:be:86:43:d6:21:b7:da:12:37:f4:36:8d:e1: 55:29:c5:ea:3f:0e:a3:1e:01:84:1a:af:3e:57:49: 88:19:ac:79:e8:29:e6:2d:e8:69:84:ab:bd:c0:71: a2:b5:fd:aa:c1:50:fb:2e:b2:f7:b0:d0:32:a7:5b: 87:6e:5d:72:88:81:af:10:7e:db:9a:11:e2:fe:4c: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:2B:E4:C0:A2:D6:3A:89:4E:51:0D:30:F1:4F:5D:20:06:DB:A4 X509v3 Authority Key Identifier: keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e8:d3:b3:36:bb:1c:3b:0d:3e:f2:3f:dd:87:11:da:07:20: e7:dd:74:ac:4c:33:00:9d:fa:ff:2d:d3:41:63:a9:4e:11:bd: 79:6e:e9:99:ea:97:e8:30:9e:ae:42:33:91:38:e3:34:69:9f: 85:ac:1f:f2:c3:ad:6d:8c:ec:0f:9a:0f:f1:99:c7:67:72:ca: ea:ad:a8:ed:25:d6:94:66:2f:14:6a:08:38:18:38:70:ac:ae: aa:03:a1:17:20:6f:d0:29:6b:d2:dc:a8:5e:cb:32:8b:9f:80: 11:1e:dc:46:3b:74:ab:d4:58:2d:53:8a:10:3a:0a:ed:34:9b: 64:73:6f:6f:89:29:e2:64:48:3f:cc:b5:c4:46:a4:41:b0:11: ae:f5:36:d6:8d:04:22:c0:b9:ab:38:b0:24:6c:1b:25:01:c3: 88:92:ed:1f:b9:76:75:a3:a6:cd:79:83:5f:08:a5:86:97:58: f6:9c:7e:d5:82:9b:74:3f:d0:08:d1:bd:3a:6f:e2:de:58:c0: 34:f7:49:7d:3b:f7:11:fb:98:b4:8e:2c:89:25:72:6c:d6:e3: 98:13:83:10:3c:7c:88:51:b1:89:de:61:38:7a:a3:ef:c7:5f: 79:e2:95:d5:93:7d:7d:2b:1c:d5:04:d1:12:bc:cb:e3:fa:5b: f9:53:e3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyb1c5fUNbW6iSm9VYt6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1 YzBjMGYwHhcNMjUxMjIyMDIwMDUzWhcNMjUxMjIzMDIwMDUzWjAzMTEwLwYDVQQD EyhjODUwMmJlNGMwYTJkNjNhODk0ZTUxMGQzMGYxNGY1ZDIwMDZkYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvidbnfbZFFQHkNvqcyMPZsz4cb0F 9zCyqloOi2/SstHEqn/696JagEq8bv3God+Ml2gXFOqS0teRGRvlf7Jkk3mCufDN asmMtVLAfTZyPeHbNAR2dz9FjaOgewGEiWudN1w7Ez5Bq8qrXbY0YrOp+pYEtziI w8gdJc5wXXXPMBNi7SFQjkHf5rHtNyCslyA5zuL2rCHrSjjoeUQUdClz9BseCMj6 sK77UCEnq9o4Cmklv1M+Ir6GQ9Yht9oSN/Q2jeFVKcXqPw6jHgGEGq8+V0mIGax5 6CnmLehphKu9wHGitf2qwVD7LrL3sNAyp1uHbl1yiIGvEH7bmhHi/kw3NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhQK+TAotY6iU5RDTDxT10gBtukMB8GA1UdIwQY MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt NmU2ZTc2ZjM3OTQ2LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2 LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjejTsza7 HDsNPvI/3YcR2gcg5910rEwzAJ36/y3TQWOpThG9eW7pmeqX6DCerkIzkTjjNGmf hawf8sOtbYzsD5oP8ZnHZ3LK6q2o7SXWlGYvFGoIOBg4cKyuqgOhFyBv0Clr0tyo Xssyi5+AER7cRjt0q9RYLVOKEDoK7TSbZHNvb4kp4mRIP8y1xEakQbARrvU21o0E IsC5qziwJGwbJQHDiJLtH7l2daOmzXmDXwilhpdY9px+1YKbdD/QCNG9Om/i3ljA NPdJfTv3EfuYtI4siSVybNbjmBODEDx8iFGxid5hOHqj78dfeeKV1ZN9fSsc1QTR ErzL4/pb+VPj3w== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:26 2025 by rpki-client