This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: W7odYOw20C+qBWPYGPRni37yKU/7P/3PjG03nvKlDAM= Subject key identifier: F0:0C:39:82:DF:F7:6D:3F:D0:2E:7D:46:FC:95:DA:57:9F:8A:9F:CC Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019B4627A2063D5DCDFE81E5D5D1908C69C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 0272 Signing time: Mon 22 Dec 2025 13:02:41 +0000 Manifest this update: Mon 22 Dec 2025 13:02:41 +0000 Manifest next update: Tue 23 Dec 2025 13:02:41 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: XORo3TNGv7kmS/bZwP+fKoX89qqAeYPxxot/Eb97pfo=) 2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:a2:06:3d:5d:cd:fe:81:e5:d5:d1:90:8c:69:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Dec 22 13:02:41 2025 GMT Not After : Dec 23 13:02:41 2025 GMT Subject: CN=f00c3982dff76d3fd02e7d46fc95da579f8a9fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:3c:41:b6:9e:37:69:5e:43:50:42:f8:d8: 5d:ca:c8:84:9d:74:98:d0:8a:9e:aa:a3:22:b6:42: fb:15:f4:f8:0f:d9:1b:66:40:5e:ff:d4:00:18:d8: cf:d9:54:5f:29:8f:85:4e:e3:4d:b9:89:6f:74:3b: 0c:69:54:62:fc:f9:13:7e:04:29:09:5e:4b:3a:59: 20:52:53:90:60:1d:2a:9e:85:bf:bf:bc:92:44:6d: 01:54:5d:83:58:07:c2:6d:4f:2d:16:67:db:90:77: 3c:b1:26:f0:65:f0:a9:28:84:5c:99:ec:fa:4c:56: ac:b4:b8:af:d1:03:44:8f:64:1e:d3:98:e3:ff:55: 63:86:92:4a:ec:b8:76:23:a9:91:33:5a:df:59:60: 6f:05:a4:61:eb:63:86:d0:f9:31:c8:bc:0d:40:ae: 22:f6:cf:ee:91:04:cd:c4:de:7a:d2:d3:e4:e5:d7: 28:51:74:27:f8:26:ca:a5:0b:31:9b:1d:d1:c8:72: c7:f2:b0:49:b3:80:07:05:f2:9b:09:39:4f:35:51: 4a:0c:7a:03:06:37:ad:82:9d:55:fa:07:71:8e:28: 4e:98:0e:c3:73:7f:a0:c8:a5:f7:93:65:e2:e7:67: 40:19:30:fa:49:3a:07:6b:f9:8e:f0:35:9e:fb:a0: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0C:39:82:DF:F7:6D:3F:D0:2E:7D:46:FC:95:DA:57:9F:8A:9F:CC X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:cb:6c:f5:f5:1c:4b:fb:c5:49:99:2c:07:f2:60:f0:ee:6b: f4:79:b4:39:21:0a:9f:b1:ae:25:4f:01:b3:2f:20:ac:7e:45: 5c:fd:7f:8f:cc:1d:aa:18:58:45:f9:14:54:28:c3:f9:f2:d1: cf:5d:bf:99:de:ae:8f:23:79:d0:a0:05:1a:61:d0:3e:99:c8: a0:63:4d:8e:b9:3b:6c:4c:4c:13:9e:a7:9f:66:09:2f:a9:0b: ae:a4:65:f4:44:91:e5:57:7c:84:86:b5:cd:03:dc:8d:86:bb: d2:e5:b2:03:90:4a:99:c9:c6:6e:32:5c:7f:8a:9e:b2:e0:4e: a8:ee:b3:eb:9c:99:ec:6a:c9:cc:27:f4:8d:40:ae:88:45:d0: 89:c9:59:33:9d:d6:57:db:8d:c5:b4:7f:a5:ad:0e:8f:cd:c8: e9:6a:11:e5:22:c6:09:e5:37:70:a4:7f:7e:0a:7b:53:93:99: 7f:cf:54:8c:9c:7a:b3:8a:90:b2:53:93:e9:d2:ad:09:2c:79: 6e:9d:2b:ea:4f:b4:e8:1b:c0:db:ce:0c:2c:0e:85:7f:10:d9: c1:b4:8c:39:08:d3:46:d3:9e:bf:14:b4:28:6f:75:bc:1c:66: 71:aa:5a:e2:ff:e2:49:25:bb:f1:0d:97:d1:33:72:62:9c:1e: 64:93:28:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ6IGPV3N/oHl1dGQjGnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjUxMjIyMTMwMjQxWhcNMjUxMjIzMTMwMjQxWjAzMTEwLwYDVQQD EyhmMDBjMzk4MmRmZjc2ZDNmZDAyZTdkNDZmYzk1ZGE1NzlmOGE5ZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGY8QbaeN2leQ1BC+NhdysiEnXSY 0IqeqqMitkL7FfT4D9kbZkBe/9QAGNjP2VRfKY+FTuNNuYlvdDsMaVRi/PkTfgQp CV5LOlkgUlOQYB0qnoW/v7ySRG0BVF2DWAfCbU8tFmfbkHc8sSbwZfCpKIRcmez6 TFastLiv0QNEj2Qe05jj/1VjhpJK7Lh2I6mRM1rfWWBvBaRh62OG0PkxyLwNQK4i 9s/ukQTNxN560tPk5dcoUXQn+CbKpQsxmx3RyHLH8rBJs4AHBfKbCTlPNVFKDHoD Bjetgp1V+gdxjihOmA7Dc3+gyKX3k2Xi52dAGTD6SToHa/mO8DWe+6Ah+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAMOYLf920/0C59RvyV2lefip/MMB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscts9fUc S/vFSZksB/Jg8O5r9Hm0OSEKn7GuJU8Bsy8grH5FXP1/j8wdqhhYRfkUVCjD+fLR z12/md6ujyN50KAFGmHQPpnIoGNNjrk7bExME56nn2YJL6kLrqRl9ESR5Vd8hIa1 zQPcjYa70uWyA5BKmcnGbjJcf4qesuBOqO6z65yZ7GrJzCf0jUCuiEXQiclZM53W V9uNxbR/pa0Oj83I6WoR5SLGCeU3cKR/fgp7U5OZf89UjJx6s4qQslOT6dKtCSx5 bp0r6k+06BvA284MLA6FfxDZwbSMOQjTRtOevxS0KG91vBxmcapa4v/iSSW78Q2X 0TNyYpweZJMoZg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:46:18 2025 by rpki-client