This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json) Hash identifier: Bw21hh/ctG78Hk6PVSLRqWc+H7eeha02SV+BFd0yzGk= Subject key identifier: 33:BA:08:CC:AF:76:7E:A3:4A:F1:80:36:94:56:09:68:41:54:32:8B Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Certificate serial: 019B37FC7CD867253BB7B38C94D96D76E244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft Manifest number: 05CA Signing time: Fri 19 Dec 2025 19:00:52 +0000 Manifest this update: Fri 19 Dec 2025 19:00:52 +0000 Manifest next update: Sat 20 Dec 2025 19:00:52 +0000 Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: AP88voolPdATaGvv8YuPdEaQXg2nuOOEWIT3hl2EkP0=) 2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:7c:d8:67:25:3b:b7:b3:8c:94:d9:6d:76:e2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e Validity Not Before: Dec 19 19:00:52 2025 GMT Not After : Dec 20 19:00:52 2025 GMT Subject: CN=33ba08ccaf767ea34af18036945609684154328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:44:54:44:3c:f0:cf:85:91:87:7d:b0:da: e8:3d:67:a1:d5:05:ed:04:96:2b:d0:c9:09:21:1a: 76:82:d5:6f:35:63:ac:bd:c3:0b:7c:bd:2d:b4:f9: 55:11:0e:5a:85:88:74:e7:91:f1:b6:7e:54:97:0e: 93:31:0e:42:97:7a:1c:f4:d3:ce:47:5e:a3:66:73: ed:02:2a:30:4d:c4:61:52:98:07:b2:43:6e:58:0e: 93:55:47:6c:b1:c7:e5:05:81:18:b8:25:70:35:b8: aa:a1:29:38:96:59:77:72:1e:37:1b:fb:29:b9:c8: 69:f1:e3:92:ba:bc:b1:45:24:a6:9f:46:72:d2:0a: 27:8b:ec:29:77:90:92:5b:ed:1b:c9:fe:ed:43:66: 97:8c:5a:7c:6d:5e:a6:77:58:29:d6:46:a7:95:50: 44:b2:62:6f:b2:eb:83:94:86:f6:db:c4:bf:00:fc: b0:75:62:72:41:c2:2c:50:18:c2:a5:e1:e7:12:be: 04:00:92:be:66:30:e7:31:6e:4a:38:7e:36:b0:63: 3e:9d:eb:4d:1e:b2:7f:b9:89:83:59:c8:93:66:ee: d5:c9:48:d2:f4:63:96:a6:73:27:ff:cf:07:8c:93: 19:e1:33:ff:fe:02:e6:5a:1a:0d:29:20:82:39:9d: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:08:CC:AF:76:7E:A3:4A:F1:80:36:94:56:09:68:41:54:32:8B X509v3 Authority Key Identifier: keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:68:3e:49:d9:7a:d0:ac:80:37:3b:d3:85:d5:93:f4:f0:aa: 46:29:98:11:d1:af:da:4c:e4:73:fd:8c:fe:1f:21:44:e2:ac: 24:6f:35:bf:b1:13:73:0a:c9:be:b6:eb:46:e6:90:67:d0:7a: ae:34:67:5b:30:5b:d0:f5:9f:b9:03:12:da:ab:68:85:78:59: aa:2d:1d:0d:4c:54:c1:4f:a5:d9:8f:cc:5d:b6:83:23:f2:ee: c4:3e:de:94:6c:ed:24:96:8a:71:ec:a6:85:16:35:d1:c1:c3: 7d:90:79:c7:bc:5f:ff:3b:de:93:6f:8e:2b:d1:ba:b2:92:dd: 35:5c:54:d8:ab:10:db:2f:ea:7a:b6:16:4e:bd:f0:82:43:c3: 61:e4:8b:52:ff:58:0f:b2:d3:e0:85:e3:6a:d1:15:b4:90:1d: cf:86:b9:91:42:be:fc:93:2d:4c:64:dc:40:32:9b:9b:9d:c0: 04:9c:43:4a:40:80:94:42:df:0e:48:7b:98:65:d5:b2:8f:02: 1c:2b:a0:66:a1:df:f9:35:ee:b9:af:32:71:d5:29:80:c0:21: 11:70:11:6b:b9:31:8a:f2:ac:a9:cb:de:fb:75:e9:d8:a0:e5: 61:56:6d:a5:b7:64:7c:22:86:3a:73:e0:36:9e:32:7b:79:46: cb:cb:67:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/HzYZyU7t7OMlNltduJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx NTEyN2UwHhcNMjUxMjE5MTkwMDUyWhcNMjUxMjIwMTkwMDUyWjAzMTEwLwYDVQQD EygzM2JhMDhjY2FmNzY3ZWEzNGFmMTgwMzY5NDU2MDk2ODQxNTQzMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe5EVEQ88M+FkYd9sNroPWeh1QXt BJYr0MkJIRp2gtVvNWOsvcMLfL0ttPlVEQ5ahYh055Hxtn5Ulw6TMQ5Cl3oc9NPO R16jZnPtAiowTcRhUpgHskNuWA6TVUdsscflBYEYuCVwNbiqoSk4lll3ch43G/sp uchp8eOSuryxRSSmn0Zy0goni+wpd5CSW+0byf7tQ2aXjFp8bV6md1gp1kanlVBE smJvsuuDlIb228S/APywdWJyQcIsUBjCpeHnEr4EAJK+ZjDnMW5KOH42sGM+netN HrJ/uYmDWciTZu7VyUjS9GOWpnMn/88HjJMZ4TP//gLmWhoNKSCCOZ0lIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO6CMyvdn6jSvGANpRWCWhBVDKLMB8GA1UdIwQY MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGg+Sdl6 0KyANzvThdWT9PCqRimYEdGv2kzkc/2M/h8hROKsJG81v7ETcwrJvrbrRuaQZ9B6 rjRnWzBb0PWfuQMS2qtohXhZqi0dDUxUwU+l2Y/MXbaDI/LuxD7elGztJJaKceym hRY10cHDfZB5x7xf/zvek2+OK9G6spLdNVxU2KsQ2y/qerYWTr3wgkPDYeSLUv9Y D7LT4IXjatEVtJAdz4a5kUK+/JMtTGTcQDKbm53ABJxDSkCAlELfDkh7mGXVso8C HCugZqHf+TXuua8ycdUpgMAhEXARa7kxivKsqcve+3Xp2KDlYVZtpbdkfCKGOnPg Np4ye3lGy8tnxA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:43 2025 by rpki-client