This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json) Hash identifier: k7dNLBjx/Iz+DfKTwL5JPbLZ3klw5lMaxgZH43qPUtg= Subject key identifier: C1:51:A1:36:89:22:87:78:19:E2:C9:B1:04:5D:0B:BC:36:E1:AB:54 Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Certificate serial: 019B3D5A14660362018D301CDB809E36E121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft Manifest number: 0556 Signing time: Sat 20 Dec 2025 20:01:12 +0000 Manifest this update: Sat 20 Dec 2025 20:01:12 +0000 Manifest next update: Sun 21 Dec 2025 20:01:12 +0000 Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: T4IhRwgIG/RflGgvG6VflwlyGAzyO7y1++0KQGmF8dI=) 2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=) 3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:14:66:03:62:01:8d:30:1c:db:80:9e:36:e1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Validity Not Before: Dec 20 20:01:12 2025 GMT Not After : Dec 21 20:01:12 2025 GMT Subject: CN=c151a1368922877819e2c9b1045d0bbc36e1ab54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:2e:d2:f9:fb:88:73:f6:6d:3a:ae:61:ac: a1:90:52:7c:5c:23:cd:d7:40:c9:c8:6b:1b:1d:e6: 27:b4:4f:66:e6:0d:21:00:20:6e:5f:4f:5b:ce:3f: 22:c8:93:7a:44:5f:e2:5f:ae:1a:f6:80:34:87:1c: 88:01:95:ee:42:b1:85:ad:5c:e1:34:57:5b:55:7e: 27:21:f9:50:d7:a0:62:86:d5:e8:0c:f7:cb:51:0e: 16:c0:d9:99:99:33:52:d5:42:c7:da:f4:48:d2:b5: 00:0e:ad:e8:3f:3e:38:c2:cd:c8:d9:4f:ae:65:21: 5b:e7:9a:1d:22:de:78:9e:78:57:ac:4c:57:8f:e7: c0:f7:8f:0f:08:5c:38:7e:35:bf:60:7e:f2:82:86: 59:63:ba:84:af:41:94:98:86:fe:28:5c:b6:f6:1c: 63:4a:15:ad:08:a5:da:14:16:d2:a3:57:6b:f2:b6: c4:c3:80:a0:f2:8d:ce:90:b5:07:35:d8:da:49:f6: 7e:5e:87:43:77:77:e6:e3:45:45:7c:e2:72:9a:c2: 9f:6c:cb:7c:67:33:42:dc:1a:9a:22:65:a4:ce:fb: 97:47:ce:a3:f3:ca:12:81:cc:6a:a8:b9:ba:df:74: 29:e1:f6:c4:91:ad:21:b4:1f:ec:77:55:9d:68:3c: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:A1:36:89:22:87:78:19:E2:C9:B1:04:5D:0B:BC:36:E1:AB:54 X509v3 Authority Key Identifier: keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:99:31:3a:0c:87:b4:47:a5:9b:7c:b5:a4:72:2f:af:51:ae: fe:39:c8:90:03:1f:a9:3e:5a:22:e9:43:85:c5:49:6b:52:f4: 81:df:e6:73:7c:74:b8:6b:ed:fc:fc:b1:98:23:0c:95:33:20: e7:95:54:9b:68:56:1b:91:33:cd:94:ec:ef:e1:40:f0:97:e5: 05:f6:9b:72:96:a9:a4:b3:60:e2:18:7b:e4:7b:36:79:e7:8c: 86:9c:43:e5:f8:d3:dd:f1:7d:ea:27:e4:e9:b3:fc:95:cf:9e: e2:1e:7d:ea:0a:31:ee:b5:68:17:ae:51:28:39:0c:bb:a1:09: 04:b9:df:39:47:8a:cf:26:8a:08:0d:59:1b:77:4f:0f:4f:64: 12:ac:36:95:df:55:05:20:5e:45:2a:29:15:38:e3:61:36:db: 41:2c:e3:27:e5:16:6a:50:1a:af:fc:f5:a6:05:85:42:e7:30: 3e:85:33:a7:11:d4:61:81:fc:e6:cc:f2:7c:9c:95:62:3f:5b: 2a:60:c2:14:37:a5:f3:33:07:6a:6c:97:ea:10:d9:58:69:ef: 0a:01:9f:75:51:70:65:6c:0c:68:c6:da:7b:0e:15:79:c9:f6: 8d:f3:4c:4d:87:6c:59:10:ae:04:73:fd:7e:9e:88:f3:22:7d: 8f:44:b8:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhRmA2IBjTAc24CeNuEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj OTZmMjAwHhcNMjUxMjIwMjAwMTEyWhcNMjUxMjIxMjAwMTEyWjAzMTEwLwYDVQQD EyhjMTUxYTEzNjg5MjI4Nzc4MTllMmM5YjEwNDVkMGJiYzM2ZTFhYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxYu0vn7iHP2bTquYayhkFJ8XCPN 10DJyGsbHeYntE9m5g0hACBuX09bzj8iyJN6RF/iX64a9oA0hxyIAZXuQrGFrVzh NFdbVX4nIflQ16BihtXoDPfLUQ4WwNmZmTNS1ULH2vRI0rUADq3oPz44ws3I2U+u ZSFb55odIt54nnhXrExXj+fA948PCFw4fjW/YH7ygoZZY7qEr0GUmIb+KFy29hxj ShWtCKXaFBbSo1dr8rbEw4Cg8o3OkLUHNdjaSfZ+XodDd3fm40VFfOJymsKfbMt8 ZzNC3BqaImWkzvuXR86j88oSgcxqqLm633Qp4fbEka0htB/sd1WdaDzIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFRoTaJIod4GeLJsQRdC7w24atUMB8GA1UdIwQY MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpkxOgyH tEelm3y1pHIvr1Gu/jnIkAMfqT5aIulDhcVJa1L0gd/mc3x0uGvt/PyxmCMMlTMg 55VUm2hWG5EzzZTs7+FA8JflBfabcpappLNg4hh75Hs2eeeMhpxD5fjT3fF96ifk 6bP8lc+e4h596gox7rVoF65RKDkMu6EJBLnfOUeKzyaKCA1ZG3dPD09kEqw2ld9V BSBeRSopFTjjYTbbQSzjJ+UWalAar/z1pgWFQucwPoUzpxHUYYH85szyfJyVYj9b KmDCFDel8zMHamyX6hDZWGnvCgGfdVFwZWwMaMbaew4Vecn2jfNMTYdsWRCuBHP9 fp6I8yJ9j0S4vA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:52:56 2025 by rpki-client