This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json) Hash identifier: VSt6QVfFkPnwenfpFrBCCGcpuJTLrY8XrINgwyMJ1WU= Subject key identifier: 8B:C0:F0:67:0C:CA:BF:48:1F:17:E6:B4:B2:AB:ED:7C:A8:23:D5:24 Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Certificate serial: 019B563DE364AFB7A1F8CBBD5A3D53D5E651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft Manifest number: 0E65 Signing time: Thu 25 Dec 2025 16:00:54 +0000 Manifest this update: Thu 25 Dec 2025 16:00:54 +0000 Manifest next update: Fri 26 Dec 2025 16:00:54 +0000 Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: AFYaNqybM5Zlg4LmaOCGBEdOT3JOSUXWTYg6WXqhbVE=) 2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:e3:64:af:b7:a1:f8:cb:bd:5a:3d:53:d5:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Validity Not Before: Dec 25 16:00:54 2025 GMT Not After : Dec 26 16:00:54 2025 GMT Subject: CN=8bc0f0670ccabf481f17e6b4b2abed7ca823d524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:20:f4:c6:fe:fd:50:73:59:3d:2c:43:43: 21:bc:df:27:a0:38:f1:46:bc:ef:7a:da:5c:6c:c0: 60:e3:da:75:89:7d:66:da:3b:d8:c6:54:a7:f4:77: c3:59:b8:82:6b:8f:4b:4c:74:8e:c8:5f:dc:00:74: db:e7:3f:84:95:96:43:9a:5d:f3:5c:51:35:ad:3a: 39:01:88:41:95:ab:29:d9:7a:cd:a0:f3:91:82:2a: dd:42:9b:29:53:7e:7d:0a:e3:fa:12:64:97:d1:8e: db:6c:ea:8f:a7:1d:a3:94:2e:e2:41:db:28:51:36: 50:07:5a:ac:36:96:73:90:6f:47:7e:9c:e5:33:88: 9c:1b:b2:fd:78:91:92:9b:ec:2e:33:fe:f8:f1:e6: 87:26:b7:1c:8b:b5:f7:33:ba:d7:62:ee:6f:f2:b5: d4:e5:80:65:53:5d:d8:ae:9c:e7:df:66:13:a0:4b: 5e:d1:60:88:44:a4:59:43:e2:46:9d:d0:3a:08:24: 05:35:73:6c:e8:b0:7f:9e:5b:95:a0:c9:33:ac:d9: 1f:ed:3f:24:d4:9a:d1:d8:c4:58:bd:6b:01:3a:26: 17:9f:7e:c8:0e:e3:b5:62:07:37:80:03:50:eb:bf: 0f:65:d7:ec:38:58:fa:ad:98:88:bf:5c:99:e9:d7: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:F0:67:0C:CA:BF:48:1F:17:E6:B4:B2:AB:ED:7C:A8:23:D5:24 X509v3 Authority Key Identifier: keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7f:33:0b:29:5c:d9:2a:d1:74:9f:b9:2d:10:3b:74:36:90: 9e:6b:11:6c:34:ce:d0:9b:90:f2:b1:e9:22:f9:93:b9:41:dc: 7c:66:b3:a1:ef:1a:4c:44:98:b4:05:92:d8:b7:9f:0c:a4:e9: d5:07:94:bf:2e:70:ac:34:45:0d:7a:4b:33:a9:fd:22:5d:36: f8:fe:24:9d:05:8d:9f:69:00:bc:0c:b2:06:ff:01:c9:4e:47: 79:88:90:d6:af:d9:c8:cc:cd:1b:cb:6c:e4:8c:4c:bf:25:ca: 06:37:0e:1a:56:ef:91:4d:5d:6d:51:2b:69:79:d7:7d:42:93: 4b:0d:21:7f:70:26:30:66:d0:34:f8:b3:56:dc:76:57:d3:4d: 07:8d:22:1f:c1:f7:d6:a0:64:46:91:0e:e6:ea:56:ba:2e:a6: 91:23:53:68:12:7a:5a:e0:c5:fb:3b:4a:63:bf:10:b7:df:a8: 36:64:8b:26:6c:fa:52:68:3b:bc:da:51:fd:e2:27:84:90:68: 4c:9e:fc:32:ec:2d:34:e7:a7:d8:85:f5:38:15:90:90:77:4a: ba:a0:3d:16:c0:13:90:20:d0:b8:67:a5:a1:11:2b:ae:a1:8e: 86:33:25:65:e2:31:db:5f:c7:c3:ee:2f:f4:68:9f:ee:7a:52: 0e:7a:37:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPeNkr7eh+Mu9Wj1T1eZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji MmQzZmUwHhcNMjUxMjI1MTYwMDU0WhcNMjUxMjI2MTYwMDU0WjAzMTEwLwYDVQQD Eyg4YmMwZjA2NzBjY2FiZjQ4MWYxN2U2YjRiMmFiZWQ3Y2E4MjNkNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM8g9Mb+/VBzWT0sQ0MhvN8noDjx RrzvetpcbMBg49p1iX1m2jvYxlSn9HfDWbiCa49LTHSOyF/cAHTb5z+ElZZDml3z XFE1rTo5AYhBlasp2XrNoPORgirdQpspU359CuP6EmSX0Y7bbOqPpx2jlC7iQdso UTZQB1qsNpZzkG9HfpzlM4icG7L9eJGSm+wuM/748eaHJrcci7X3M7rXYu5v8rXU 5YBlU13Yrpzn32YToEte0WCIRKRZQ+JGndA6CCQFNXNs6LB/nluVoMkzrNkf7T8k 1JrR2MRYvWsBOiYXn37IDuO1Ygc3gANQ678PZdfsOFj6rZiIv1yZ6derMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvA8GcMyr9IHxfmtLKr7XyoI9UkMB8GA1UdIwQY MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX8zCylc 2SrRdJ+5LRA7dDaQnmsRbDTO0JuQ8rHpIvmTuUHcfGazoe8aTESYtAWS2LefDKTp 1QeUvy5wrDRFDXpLM6n9Il02+P4knQWNn2kAvAyyBv8ByU5HeYiQ1q/ZyMzNG8ts 5IxMvyXKBjcOGlbvkU1dbVEraXnXfUKTSw0hf3AmMGbQNPizVtx2V9NNB40iH8H3 1qBkRpEO5upWui6mkSNTaBJ6WuDF+ztKY78Qt9+oNmSLJmz6Umg7vNpR/eInhJBo TJ78MuwtNOen2IX1OBWQkHdKuqA9FsATkCDQuGeloRErrqGOhjMlZeIx21/Hw+4v 9Gif7npSDno3wQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:05:12 2025 by rpki-client