This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json) Hash identifier: BuvzGEzRIc2Zf+qUBdJnCZqvKYvb2yPh13UU06fyfAI= Subject key identifier: 2E:48:31:4E:B4:5C:AC:4C:D5:A8:F4:56:27:C8:A3:31:4E:A8:66:AE Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd Certificate serial: 019B3EDA16358DE252CF5474F53737E2AB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft Manifest number: 03B7 Signing time: Sun 21 Dec 2025 03:00:38 +0000 Manifest this update: Sun 21 Dec 2025 03:00:38 +0000 Manifest next update: Mon 22 Dec 2025 03:00:38 +0000 Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=) 2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: BOtDLb5uFc9JF0zRQFGBxmAkfPkgV8fq2mkDfaHmaDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:16:35:8d:e2:52:cf:54:74:f5:37:37:e2:ab:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd Validity Not Before: Dec 21 03:00:38 2025 GMT Not After : Dec 22 03:00:38 2025 GMT Subject: CN=2e48314eb45cac4cd5a8f45627c8a3314ea866ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:a4:8f:01:d5:83:c8:99:0e:d7:76:6c:2d: bc:1b:4f:c1:d4:26:83:61:c4:bf:cb:7a:9c:09:74: eb:74:1a:d6:aa:59:c4:9c:f5:48:ea:25:05:1b:af: d6:c9:47:44:61:72:a5:ed:eb:48:be:e8:c5:36:d7: 81:93:ac:5c:39:a0:bd:2c:52:d5:71:4f:c6:76:3e: 4b:c3:a3:77:7f:b0:84:8e:a2:14:26:1c:25:a9:b3: 04:73:88:a6:a0:ce:5c:6b:91:b2:d4:61:f5:c0:e2: 5c:53:6b:61:72:29:a9:61:4a:a1:3d:0e:b4:83:99: 46:d2:aa:02:6c:ab:e7:1f:17:53:6c:4f:c0:cc:b6: 35:5f:94:ba:12:4f:11:e5:30:9f:a8:f5:68:52:52: df:c7:d4:9e:8e:4c:aa:0e:8b:27:c7:53:26:f8:71: 86:33:1e:d7:a5:81:1d:d0:21:09:6e:10:a7:bf:16: fc:8d:59:4a:2e:07:ae:95:fc:85:43:03:18:a0:4f: 6e:ad:06:84:d4:f4:c9:bd:ea:fb:06:3e:1f:0d:87: 2b:e3:49:a0:82:eb:82:d9:e5:2e:25:23:64:b8:f5: e8:23:ce:d2:4e:58:d6:a7:7f:af:df:b3:54:0e:ed: 92:6f:95:80:54:c7:2d:cc:37:5e:d9:f7:6a:21:c8: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:31:4E:B4:5C:AC:4C:D5:A8:F4:56:27:C8:A3:31:4E:A8:66:AE X509v3 Authority Key Identifier: keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:49:07:04:90:ac:44:81:96:0c:d0:9c:28:8d:c8:3d:a6:08: 00:91:53:4d:9f:1d:ad:1c:9f:20:dd:10:f6:50:a7:b6:9f:83: b9:3a:39:44:35:67:81:dc:4e:82:dd:8f:bf:55:3e:bd:8d:d6: 2e:34:44:b1:2f:31:ed:19:cf:c2:a9:01:3a:05:35:3f:4b:e8: b9:6e:21:73:11:80:2a:73:29:e0:f5:a1:3f:58:7c:3f:cd:9b: 12:f3:b2:51:64:74:ba:82:5e:bc:11:e2:f7:a1:10:bd:7f:75: 45:96:ed:96:74:50:b0:b6:a5:12:85:f1:dd:b8:be:69:22:15: 22:fb:72:43:e1:7f:22:99:a3:d1:9e:82:46:8f:c7:4c:0d:7e: e2:5d:ad:8c:a8:38:4c:45:98:31:97:51:10:43:95:92:58:c3: a0:03:22:80:98:ab:ec:5e:9d:78:e6:53:dc:bf:b8:f3:64:e0: 11:04:62:c5:58:e9:5e:f0:07:c5:47:0f:ee:38:c1:7b:69:9e: b4:33:4e:d4:b0:d8:7e:11:e4:5f:cd:76:a5:1b:4e:bd:8e:66: 67:f0:4d:16:d6:ae:ca:31:a5:35:fa:7e:a3:f6:e0:3b:ce:09: f3:87:14:29:d1:91:e6:53:be:92:08:0f:59:ad:f3:d8:cc:af: 3e:2e:8b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hY1jeJSz1R09Tc34qtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5 ZWZkY2QwHhcNMjUxMjIxMDMwMDM4WhcNMjUxMjIyMDMwMDM4WjAzMTEwLwYDVQQD EygyZTQ4MzE0ZWI0NWNhYzRjZDVhOGY0NTYyN2M4YTMzMTRlYTg2NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufqkjwHVg8iZDtd2bC28G0/B1CaD YcS/y3qcCXTrdBrWqlnEnPVI6iUFG6/WyUdEYXKl7etIvujFNteBk6xcOaC9LFLV cU/Gdj5Lw6N3f7CEjqIUJhwlqbMEc4imoM5ca5Gy1GH1wOJcU2thcimpYUqhPQ60 g5lG0qoCbKvnHxdTbE/AzLY1X5S6Ek8R5TCfqPVoUlLfx9SejkyqDosnx1Mm+HGG Mx7XpYEd0CEJbhCnvxb8jVlKLgeulfyFQwMYoE9urQaE1PTJver7Bj4fDYcr40mg guuC2eUuJSNkuPXoI87STljWp3+v37NUDu2Sb5WAVMctzDde2fdqIchZBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5IMU60XKxM1aj0VifIozFOqGauMB8GA1UdIwQY MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5 LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0kHBJCs RIGWDNCcKI3IPaYIAJFTTZ8drRyfIN0Q9lCntp+DuTo5RDVngdxOgt2Pv1U+vY3W LjREsS8x7RnPwqkBOgU1P0vouW4hcxGAKnMp4PWhP1h8P82bEvOyUWR0uoJevBHi 96EQvX91RZbtlnRQsLalEoXx3bi+aSIVIvtyQ+F/Ipmj0Z6CRo/HTA1+4l2tjKg4 TEWYMZdREEOVkljDoAMigJir7F6deOZT3L+482TgEQRixVjpXvAHxUcP7jjBe2me tDNO1LDYfhHkX812pRtOvY5mZ/BNFtauyjGlNfp+o/bgO84J84cUKdGR5lO+kggP Wa3z2MyvPi6Lxg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:44 2025 by rpki-client