This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json) Hash identifier: LhWgUnZj+QApibXma6qImglDIOMT+nBfVpTbOxqm6uY= Subject key identifier: 66:1A:E9:6F:C5:17:BE:AB:45:F9:28:5D:07:01:16:0C:E4:60:79:F7 Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9 Certificate serial: 019B42499EE40B07618D8DAC6D70FFC1E94C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 19:01:19 +0000 Manifest this update: Sun 21 Dec 2025 19:01:19 +0000 Manifest next update: Mon 22 Dec 2025 19:01:19 +0000 Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: SRDTDWdVjh4caMOGopYORlHgx131yimcOtnpiVpZ/qI=) 2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:9e:e4:0b:07:61:8d:8d:ac:6d:70:ff:c1:e9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9 Validity Not Before: Dec 21 19:01:19 2025 GMT Not After : Dec 22 19:01:19 2025 GMT Subject: CN=661ae96fc517beab45f9285d0701160ce46079f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:e3:e8:e8:3b:ce:e9:4a:25:65:7b:eb:f6: a5:8d:09:40:c8:2c:99:89:0c:94:09:7e:22:c6:6f: 24:36:3f:21:af:8a:5e:b1:da:8a:f1:a3:30:ef:4e: 15:12:12:39:8b:40:51:49:d5:d2:2d:ee:c6:3d:8d: 20:a7:dd:52:ba:3f:0e:95:95:f0:4d:fe:46:4c:53: 96:95:0e:9c:fd:37:b1:bd:fd:75:0e:ce:b1:1f:38: 11:f8:b2:6b:25:2f:a2:93:70:f5:ad:29:ed:48:f5: d0:13:31:3b:15:29:8b:39:d2:34:aa:6f:9c:2c:68: cc:5b:f0:01:70:6f:10:0a:45:dd:15:e1:29:ab:c9: 40:d3:df:d1:7d:df:92:1d:f0:36:34:23:72:9c:d8: 9e:f5:a1:68:74:8a:7d:de:94:9e:47:f8:7d:6e:ae: b0:30:64:34:b4:c6:ff:e1:56:6f:19:89:b4:70:5f: 30:8c:38:34:d2:a3:d8:78:5b:48:3d:2d:88:6e:8e: b4:d7:cc:06:64:95:44:eb:43:d0:da:2e:79:4d:a3: 08:50:e5:a6:90:57:8d:5c:54:f6:cd:7a:5f:6a:93: d3:7c:6a:12:7d:a1:f4:f4:09:f7:aa:16:9d:20:89: d0:f1:b0:48:23:a1:4d:38:c5:ce:d6:c9:97:28:52: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1A:E9:6F:C5:17:BE:AB:45:F9:28:5D:07:01:16:0C:E4:60:79:F7 X509v3 Authority Key Identifier: keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:49:0e:b1:23:b0:15:7e:47:21:00:bb:2c:c6:6e:38:75: d9:2b:23:1b:0d:57:04:3d:b0:3e:d4:78:4c:2f:57:b5:b8:31: d3:fa:ba:fc:78:ff:d0:ef:7e:64:0a:86:ff:7e:54:70:be:29: 6e:50:07:84:cc:09:76:e6:68:3a:73:da:b1:06:0b:34:17:20: 4d:d6:d1:d9:2e:b7:92:58:db:42:17:65:36:c3:4a:7e:73:01: 0f:b9:1d:e7:b8:8b:54:3b:3d:7a:9d:d3:5c:3b:b6:98:1d:88: 6d:ef:9b:86:66:5e:20:dc:32:66:7b:ef:ef:d9:de:6d:39:68: 31:76:4b:5b:1b:3b:dc:ff:f3:73:d5:5a:fc:99:95:6a:3e:4c: a3:84:be:78:a3:ac:e6:ee:07:1c:d8:18:4b:98:1c:c2:fe:46: 17:fb:e2:97:26:38:9d:b1:ed:1b:fd:3b:30:38:6c:d8:91:79: 5b:9e:1f:d9:c1:9b:9e:1a:dd:44:65:50:db:fa:66:00:50:e5: 4e:9d:03:39:7a:06:63:76:c6:5e:63:a6:c1:a0:9b:92:b2:4b: ec:9b:aa:ef:5e:c9:c9:67:51:07:e5:aa:0b:c0:cc:60:80:69: 02:f9:5d:2e:59:9e:fe:e7:13:13:89:c0:c0:bd:f8:c7:b4:77: d3:84:cb:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSZ7kCwdhjY2sbXD/welMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw NjMxYjkwHhcNMjUxMjIxMTkwMTE5WhcNMjUxMjIyMTkwMTE5WjAzMTEwLwYDVQQD Eyg2NjFhZTk2ZmM1MTdiZWFiNDVmOTI4NWQwNzAxMTYwY2U0NjA3OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDj6Og7zulKJWV76/aljQlAyCyZ iQyUCX4ixm8kNj8hr4pesdqK8aMw704VEhI5i0BRSdXSLe7GPY0gp91Suj8OlZXw Tf5GTFOWlQ6c/Texvf11Ds6xHzgR+LJrJS+ik3D1rSntSPXQEzE7FSmLOdI0qm+c LGjMW/ABcG8QCkXdFeEpq8lA09/Rfd+SHfA2NCNynNie9aFodIp93pSeR/h9bq6w MGQ0tMb/4VZvGYm0cF8wjDg00qPYeFtIPS2Ibo6018wGZJVE60PQ2i55TaMIUOWm kFeNXFT2zXpfapPTfGoSfaH09An3qhadIInQ8bBII6FNOMXO1smXKFIxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYa6W/FF76rRfkoXQcBFgzkYHn3MB8GA1UdIwQY MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzZJDrEj sBV+RyEAuyzGbjh12SsjGw1XBD2wPtR4TC9Xtbgx0/q6/Hj/0O9+ZAqG/35UcL4p blAHhMwJduZoOnPasQYLNBcgTdbR2S63kljbQhdlNsNKfnMBD7kd57iLVDs9ep3T XDu2mB2Ibe+bhmZeINwyZnvv79nebTloMXZLWxs73P/zc9Va/JmVaj5Mo4S+eKOs 5u4HHNgYS5gcwv5GF/vilyY4nbHtG/07MDhs2JF5W54f2cGbnhrdRGVQ2/pmAFDl Tp0DOXoGY3bGXmOmwaCbkrJL7Juq717JyWdRB+WqC8DMYIBpAvldLlme/ucTE4nA wL34x7R304TLxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:20 2025 by rpki-client