This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json) Hash identifier: W+UCvXOZ5BgefubL56tikJ1X2bjdEnCL0tX0TlTQD5M= Subject key identifier: 21:DB:78:62:C9:A7:62:5C:A1:7A:B6:10:D1:86:E6:81:04:0D:83:64 Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019B4581FF614FB97403D577E840880613D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft Manifest number: 01F9 Signing time: Mon 22 Dec 2025 10:01:45 +0000 Manifest this update: Mon 22 Dec 2025 10:01:45 +0000 Manifest next update: Tue 23 Dec 2025 10:01:45 +0000 Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: 8w7iZhuS17Bi0TzjIVDeae6J6aWzxeFEr52lIiFF7Ss=) 2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=) 3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:ff:61:4f:b9:74:03:d5:77:e8:40:88:06:13:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Dec 22 10:01:45 2025 GMT Not After : Dec 23 10:01:45 2025 GMT Subject: CN=21db7862c9a7625ca17ab610d186e681040d8364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:00:3a:b0:60:53:6c:d2:5a:a1:36:5b:2e: 24:cd:85:ea:72:8e:98:51:d4:b7:0d:d5:1b:8e:77: 40:95:5d:d6:cb:06:56:c3:94:22:7c:f1:ff:87:48: 3e:5b:da:53:ec:f6:35:dc:de:3d:52:95:c2:9d:86: 46:c6:8f:23:91:89:58:25:ca:ca:6d:ff:5a:6c:ac: 87:b4:e9:cf:e8:67:66:e9:38:6e:34:52:0b:92:cb: d9:39:3b:e2:c0:e1:31:34:40:60:11:30:de:59:6f: c1:7a:11:aa:f0:13:cf:25:a0:59:76:a1:1f:18:05: 2f:e7:94:20:a6:46:ea:6a:ac:da:72:df:dd:79:49: ff:99:b1:c6:e1:43:9b:14:a4:ed:5c:43:45:cb:12: ce:42:89:a8:66:b8:cb:a9:e2:26:8c:84:a6:6e:e9: ca:3c:75:aa:c0:ca:67:fc:f0:56:55:9e:54:de:25: ea:c8:76:2f:f1:56:85:5b:27:9c:04:ff:3d:37:f5: b5:2e:02:98:0e:b7:26:76:e1:fa:17:34:bb:50:c5: 86:cd:06:75:92:d8:71:77:3d:6a:b7:8d:ba:79:85: 73:08:b0:b6:51:4e:a5:1c:7a:25:a2:14:3b:6b:b1: 94:98:75:cb:3c:69:47:04:64:29:7d:05:59:cc:53: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DB:78:62:C9:A7:62:5C:A1:7A:B6:10:D1:86:E6:81:04:0D:83:64 X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:72:85:a6:18:bd:ff:1a:d8:73:6c:23:46:09:52:4b:b6:3d: 4b:f7:33:5c:0f:f3:2d:19:cf:08:75:75:b9:2f:f3:c1:f6:f3: f2:6e:71:e9:04:24:17:77:ba:5e:01:40:a0:7f:6d:fe:c1:a2: 0f:25:45:c4:26:04:99:a1:ec:af:e6:a9:d7:30:68:aa:f9:f0: 4e:cd:10:d4:81:a4:15:ac:4d:02:ce:11:d8:91:0c:77:cf:10: 84:c9:bc:72:b9:3c:69:0c:97:b4:a9:47:d2:ee:ee:1e:f4:36: 6b:3a:c3:85:cf:15:bb:48:8a:7b:81:af:c9:54:41:64:14:4c: ed:b1:56:13:52:b9:bf:1f:0c:5e:d0:8a:94:18:f5:8d:1d:87: bd:e1:78:a4:e0:5d:4a:e3:85:33:cb:51:ca:08:7b:ee:38:de: 78:a7:a8:ca:e7:0e:98:02:55:a9:b9:39:99:ac:23:10:97:fd: d8:7d:b7:92:7f:5e:56:de:40:43:23:97:f4:0b:ca:b9:d5:d9: 0b:b3:d2:e3:43:83:f1:d2:61:87:20:8e:51:d1:f3:5f:2c:be: 1f:0d:2d:cf:25:bc:17:3e:c0:84:50:f8:3a:8c:b2:b7:90:63: e6:12:cc:37:ef:c5:ae:41:9b:0f:2a:8a:43:3f:14:1f:4c:e1: 6a:73:d9:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgf9hT7l0A9V36ECIBhPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjUxMjIyMTAwMTQ1WhcNMjUxMjIzMTAwMTQ1WjAzMTEwLwYDVQQD EygyMWRiNzg2MmM5YTc2MjVjYTE3YWI2MTBkMTg2ZTY4MTA0MGQ4MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGsAOrBgU2zSWqE2Wy4kzYXqco6Y UdS3DdUbjndAlV3WywZWw5QifPH/h0g+W9pT7PY13N49UpXCnYZGxo8jkYlYJcrK bf9abKyHtOnP6Gdm6ThuNFILksvZOTviwOExNEBgETDeWW/BehGq8BPPJaBZdqEf GAUv55Qgpkbqaqzact/deUn/mbHG4UObFKTtXENFyxLOQomoZrjLqeImjISmbunK PHWqwMpn/PBWVZ5U3iXqyHYv8VaFWyecBP89N/W1LgKYDrcmduH6FzS7UMWGzQZ1 kthxdz1qt426eYVzCLC2UU6lHHolohQ7a7GUmHXLPGlHBGQpfQVZzFOPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHbeGLJp2JcoXq2ENGG5oEEDYNkMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3KFphi9 /xrYc2wjRglSS7Y9S/czXA/zLRnPCHV1uS/zwfbz8m5x6QQkF3e6XgFAoH9t/sGi DyVFxCYEmaHsr+ap1zBoqvnwTs0Q1IGkFaxNAs4R2JEMd88QhMm8crk8aQyXtKlH 0u7uHvQ2azrDhc8Vu0iKe4GvyVRBZBRM7bFWE1K5vx8MXtCKlBj1jR2HveF4pOBd SuOFM8tRygh77jjeeKeoyucOmAJVqbk5mawjEJf92H23kn9eVt5AQyOX9AvKudXZ C7PS40OD8dJhhyCOUdHzXyy+Hw0tzyW8Fz7AhFD4Ooyyt5Bj5hLMN+/FrkGbDyqK Qz8UH0zhanPZgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 19:27:50 2025 by rpki-client