This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json) Hash identifier: vC6imoziLZ/AStrjIEcVyxEGmmaqoXgZZnsvKvSWHiI= Subject key identifier: C8:62:38:E9:55:E6:2D:6E:89:73:C0:9F:FB:BA:A0:86:D6:C6:79:25 Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da Certificate serial: 019B3A90F95C335CB5D49812EE424D7D17BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft Manifest number: 0E1D Signing time: Sat 20 Dec 2025 07:02:18 +0000 Manifest this update: Sat 20 Dec 2025 07:02:18 +0000 Manifest next update: Sun 21 Dec 2025 07:02:18 +0000 Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: qld+eeFG0QL+VV4hFR+ch+oehOWJefCBzStKank99KY=) 2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=) 3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=) 4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:f9:5c:33:5c:b5:d4:98:12:ee:42:4d:7d:17:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da Validity Not Before: Dec 20 07:02:18 2025 GMT Not After : Dec 21 07:02:18 2025 GMT Subject: CN=c86238e955e62d6e8973c09ffbbaa086d6c67925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f6:fd:56:ce:d0:d6:05:5e:e4:1e:96:19:38: 2b:7b:5e:e8:29:6a:15:ac:71:01:7f:43:e7:f3:a6: 09:4c:23:35:ad:ad:b5:bb:41:76:d7:6d:86:94:6f: 2b:03:94:a1:b6:d5:b8:d8:ab:ff:4a:cb:80:7c:b8: e2:17:e2:04:95:d9:47:34:4d:8c:a2:44:15:31:05: 8c:f6:9d:3d:f0:8e:eb:be:c1:5d:53:d2:3d:d0:d7: b3:a6:4c:5b:2b:b0:f0:8d:3c:73:d3:b8:e1:fc:16: fc:63:8f:58:ee:b8:c0:fa:d0:69:09:1a:51:31:3a: 8f:9f:91:9f:1c:a3:af:27:ff:b9:d3:01:8a:e8:b5: 59:0b:0c:b2:77:a0:cc:a4:ee:1c:b4:63:3e:6e:96: ee:98:d6:26:68:07:08:7e:54:59:ed:1e:59:af:81: 22:31:56:13:8f:e3:fb:2a:ac:61:02:3e:c2:53:40: d4:b4:94:7d:a1:bf:75:34:5e:e0:d7:9a:e8:c6:c6: bd:41:8d:21:3f:39:4d:a0:41:88:18:28:d9:fa:b0: c9:a5:c7:37:87:40:87:0d:8d:37:d7:38:5c:d0:54: 23:89:fc:f1:75:d5:58:a2:05:28:7e:e0:d1:93:58: 00:89:79:da:59:ab:bf:46:bc:52:52:c3:63:59:89: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:38:E9:55:E6:2D:6E:89:73:C0:9F:FB:BA:A0:86:D6:C6:79:25 X509v3 Authority Key Identifier: keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:0c:f2:64:b8:86:25:46:42:35:d6:1b:e9:16:b8:9e:06:96: 8d:41:13:6b:8a:4d:e8:b6:57:13:a1:d2:f0:70:95:6a:b3:6f: 85:f0:ec:93:d8:35:bc:81:df:c9:ff:3f:b1:67:82:10:6d:64: 9a:32:d7:26:73:a5:b2:bb:30:91:19:aa:1b:57:68:8c:b2:84: 8d:40:44:3a:d0:43:3c:4b:36:cc:6c:6e:64:5a:3c:94:14:2c: 4f:67:c3:46:f7:e2:da:20:9a:04:c4:6b:96:c8:d7:57:12:a6: 85:b3:e9:f0:13:17:77:11:43:06:a3:cc:25:c7:89:f9:81:72: e2:b7:95:52:54:6d:f4:8f:f1:96:e1:e6:be:56:c0:f9:dd:9a: b6:85:8f:d8:62:88:0c:17:31:24:a1:53:f8:94:08:de:41:7d: 27:70:fb:4b:2a:7e:e5:57:19:24:95:36:12:b9:80:03:bb:7d: c9:51:b4:c2:98:d8:9d:f6:44:13:f7:61:5a:d9:58:b2:7a:d1: 6b:c9:6f:5d:90:20:d7:cd:dd:81:22:b5:5b:f9:7f:8c:8e:ef: 0a:17:f3:2e:1f:70:4d:9d:15:0d:56:a2:21:bf:a9:ad:c9:e6: 3b:13:09:83:66:4d:28:24:82:62:1f:ba:e5:d4:68:e6:0c:6f: 26:14:89:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPlcM1y11JgS7kJNfRe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjhlMzZiYTU3N2VkNDdlNjkyODcyOTY5MTk5MWU0ZTdm MjM1ZGEwHhcNMjUxMjIwMDcwMjE4WhcNMjUxMjIxMDcwMjE4WjAzMTEwLwYDVQQD EyhjODYyMzhlOTU1ZTYyZDZlODk3M2MwOWZmYmJhYTA4NmQ2YzY3OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fb9Vs7Q1gVe5B6WGTgre17oKWoV rHEBf0Pn86YJTCM1ra21u0F2122GlG8rA5ShttW42Kv/SsuAfLjiF+IEldlHNE2M okQVMQWM9p098I7rvsFdU9I90NezpkxbK7DwjTxz07jh/Bb8Y49Y7rjA+tBpCRpR MTqPn5GfHKOvJ/+50wGK6LVZCwyyd6DMpO4ctGM+bpbumNYmaAcIflRZ7R5Zr4Ei MVYTj+P7KqxhAj7CU0DUtJR9ob91NF7g15roxsa9QY0hPzlNoEGIGCjZ+rDJpcc3 h0CHDY031zhc0FQjifzxddVYogUofuDRk1gAiXnaWau/RrxSUsNjWYnI8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhiOOlV5i1uiXPAn/u6oIbWxnklMB8GA1UdIwQY MBaAFOFo42uld+1H5pKHKWkZkeTn8jXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgt Y2I0YmFiZTlkYzhmLzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgtY2I0YmFiZTlkYzhm LzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0AzyZLiG JUZCNdYb6Ra4ngaWjUETa4pN6LZXE6HS8HCVarNvhfDsk9g1vIHfyf8/sWeCEG1k mjLXJnOlsrswkRmqG1dojLKEjUBEOtBDPEs2zGxuZFo8lBQsT2fDRvfi2iCaBMRr lsjXVxKmhbPp8BMXdxFDBqPMJceJ+YFy4reVUlRt9I/xluHmvlbA+d2atoWP2GKI DBcxJKFT+JQI3kF9J3D7Syp+5VcZJJU2ErmAA7t9yVG0wpjYnfZEE/dhWtlYsnrR a8lvXZAg183dgSK1W/l/jI7vChfzLh9wTZ0VDVaiIb+prcnmOxMJg2ZNKCSCYh+6 5dRo5gxvJhSJDw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:22:20 2025 by rpki-client