This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json) Hash identifier: c6y3p2H2+Y79qH4ZDq6DYlwx5Ts3Zlu+WP/R8v75cxk= Subject key identifier: F7:4E:28:AB:82:D0:5B:B7:44:09:C0:3A:47:87:94:30:8B:89:B6:FB Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62 Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962 Certificate serial: 019B3C7EE9A4B10D8EA66D85A25D48A9DE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:01:48 +0000 Manifest this update: Sat 20 Dec 2025 16:01:48 +0000 Manifest next update: Sun 21 Dec 2025 16:01:48 +0000 Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: 9eIM40IBqbJXdOzPZ/5ceC77jkjjX57Lk/dAB+4lPeU=) 2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e9:a4:b1:0d:8e:a6:6d:85:a2:5d:48:a9:de:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962 Validity Not Before: Dec 20 16:01:48 2025 GMT Not After : Dec 21 16:01:48 2025 GMT Subject: CN=f74e28ab82d05bb74409c03a478794308b89b6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:ca:27:48:4e:46:f4:42:8f:ef:d5:3e:a2: 7e:67:bc:24:10:ea:50:01:e0:d8:d4:e6:f8:8f:18: a7:9e:32:b1:e0:2f:30:ba:f3:27:b6:95:47:80:9a: f0:02:4b:a0:0c:33:2c:f6:55:2b:c5:ad:54:25:f0: 17:39:74:92:a1:55:90:2c:7b:b7:58:92:c1:1b:b0: 04:26:35:73:51:63:d9:fa:da:b9:4e:2b:03:b7:79: fe:c1:19:46:30:26:c2:ea:85:38:c5:92:ca:91:68: 7f:cb:75:97:0b:a4:82:a8:a1:d2:ea:16:9c:79:14: e4:c6:ab:1e:b1:4b:71:ef:1a:8b:a0:fa:43:ab:72: 63:e6:33:04:f1:02:f1:a8:de:f3:a5:f8:bd:90:e2: 56:8e:a5:31:b6:e6:ba:53:f6:b8:ac:fa:6f:53:46: eb:bd:60:cf:d3:f3:fa:cf:1c:6e:61:48:be:53:e7: 14:9e:94:6c:77:8e:db:75:d4:76:41:fa:a8:d2:5a: 41:d1:9d:e4:69:cb:af:a4:96:f8:b0:14:11:43:f1: a4:46:f4:0c:8e:9c:06:6c:6f:9e:ac:85:cd:eb:5a: 9f:3a:44:05:7a:6a:0c:95:58:c0:5a:d9:65:ce:6b: 95:e3:5c:7e:bf:84:45:40:24:0c:d9:f8:1a:25:f2: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4E:28:AB:82:D0:5B:B7:44:09:C0:3A:47:87:94:30:8B:89:B6:FB X509v3 Authority Key Identifier: keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:33:94:b0:f8:ee:93:51:6e:34:4d:2a:12:17:5b:e1:93:a3: 15:66:44:41:dd:b4:c5:8a:9f:8f:70:75:26:28:5e:66:3b:f5: e9:83:92:86:b6:38:df:54:5d:37:a1:53:f5:f6:bb:39:43:2d: bc:3e:53:15:d3:38:3c:66:56:3c:63:44:76:6c:d2:f9:85:eb: 56:53:b0:38:3b:a3:5a:35:c4:91:d6:06:92:67:4f:00:e5:fa: c9:cf:76:ab:c4:89:5e:78:72:f5:62:e8:43:30:f3:88:b3:07: f8:8d:4e:c1:15:5f:da:35:08:fc:83:6f:9e:34:6c:8b:90:03: 31:47:94:c8:c1:42:1a:ba:44:4c:22:d3:94:1a:4e:ec:d2:d2: c8:76:24:5c:c6:59:9f:58:df:64:8f:65:e2:61:87:73:d0:67: 01:77:71:4b:90:44:62:3e:e9:38:dc:09:28:16:fa:f2:b7:35: f8:90:4a:8c:62:a8:20:55:0c:b8:38:fa:49:64:55:74:e8:ab: 48:02:c0:43:6d:ff:3e:4a:08:f0:67:d8:6d:01:69:79:05:0e: ac:de:b3:b8:a3:02:37:85:0b:af:89:af:3b:37:39:e7:ea:8f: e1:7e:61:b9:3f:e6:c1:1e:ed:d1:47:99:ba:d8:26:d6:35:76: fb:32:49:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fumksQ2Opm2Fol1Iqd4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMjM4ZTIyODc3ZjczMDM5NjQwMDdjZTNlMzQwNmY1ZmFk OTQ5NjIwHhcNMjUxMjIwMTYwMTQ4WhcNMjUxMjIxMTYwMTQ4WjAzMTEwLwYDVQQD EyhmNzRlMjhhYjgyZDA1YmI3NDQwOWMwM2E0Nzg3OTQzMDhiODliNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw57KJ0hORvRCj+/VPqJ+Z7wkEOpQ AeDY1Ob4jxinnjKx4C8wuvMntpVHgJrwAkugDDMs9lUrxa1UJfAXOXSSoVWQLHu3 WJLBG7AEJjVzUWPZ+tq5TisDt3n+wRlGMCbC6oU4xZLKkWh/y3WXC6SCqKHS6hac eRTkxqsesUtx7xqLoPpDq3Jj5jME8QLxqN7zpfi9kOJWjqUxtua6U/a4rPpvU0br vWDP0/P6zxxuYUi+U+cUnpRsd47bddR2Qfqo0lpB0Z3kacuvpJb4sBQRQ/GkRvQM jpwGbG+erIXN61qfOkQFemoMlVjAWtllzmuV41x+v4RFQCQM2fgaJfJoewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdOKKuC0Fu3RAnAOkeHlDCLibb7MB8GA1UdIwQY MBaAFOAjjiKHf3MDlkAHzj40BvX62UliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmIt NTYxMTc1ZjA0ZDhlLzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmItNTYxMTc1ZjA0ZDhl LzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzOUsPju k1FuNE0qEhdb4ZOjFWZEQd20xYqfj3B1JiheZjv16YOShrY431RdN6FT9fa7OUMt vD5TFdM4PGZWPGNEdmzS+YXrVlOwODujWjXEkdYGkmdPAOX6yc92q8SJXnhy9WLo QzDziLMH+I1OwRVf2jUI/INvnjRsi5ADMUeUyMFCGrpETCLTlBpO7NLSyHYkXMZZ n1jfZI9l4mGHc9BnAXdxS5BEYj7pONwJKBb68rc1+JBKjGKoIFUMuDj6SWRVdOir SALAQ23/PkoI8GfYbQFpeQUOrN6zuKMCN4ULr4mvOzc55+qP4X5huT/mwR7t0UeZ utgm1jV2+zJJcg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:43:34 2025 by rpki-client