This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft File: 4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json) Hash identifier: 9TZIPRFnODE7l+0Kr7A0ZgXBZnQU+eXHnAkRI1bXQ9s= Subject key identifier: 49:3D:9E:7B:84:5B:41:61:F9:51:1A:BE:0A:6F:7A:93:EF:43:6A:A7 Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Certificate serial: 019B3CB4D40A7AF3BF7442DE31B4EF89048C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft Manifest number: FA Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: 8w5ynI7bDRyxQdstCb5aNSfu31lYPCi20TZKL5dLMq4=) 2: HI7B1jr-szIvsbzfV6wrZqk3kpw.roa (hash: nW/JeadW697758rAda0qBRczYN3xljyyCO9Qys1RCMU=) 3: uF6s_hWqOyMm0beoSVdz1ofj_2U.roa (hash: sqABMRSLhInMQI+0EZuydVNxHulBTRCcnZGrhwhVSWA=) 4: yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa (hash: s9ixFSMI7GWSkeLxQmBgssbeEOKAKZsZGKgkyxXA67A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d4:0a:7a:f3:bf:74:42:de:31:b4:ef:89:04:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=493d9e7b845b4161f9511abe0a6f7a93ef436aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:99:21:69:8b:17:c2:aa:52:6d:18:58:76: 89:e9:23:c6:b6:b9:fd:20:34:50:29:d1:d7:b5:2e: fb:36:a0:d3:c1:7a:91:15:05:ca:c0:c1:3b:d4:75: 66:70:50:c9:1e:31:ef:e5:0e:ae:ed:72:19:e4:70: 2a:7e:d5:02:e7:f2:96:30:89:9a:90:2f:bf:8f:6e: d7:28:6c:1b:38:8d:7f:1a:0f:60:91:d2:28:3e:be: 23:fe:34:9c:c3:74:0b:55:1f:f4:f0:6b:51:dd:3f: 4d:94:e3:a2:37:03:73:8f:65:b9:83:0a:98:86:3e: 17:ca:d6:82:24:7d:a8:ea:69:31:62:ac:72:e6:40: 2a:d2:36:e4:e6:7d:f7:2b:19:37:9e:f4:7c:35:14: 67:19:bd:52:4f:03:10:5e:c5:1b:41:49:7a:9f:ab: da:64:4b:db:8c:bc:ff:3e:5c:c9:de:20:a7:c8:6b: b0:46:7d:70:23:ce:72:4d:c8:7e:a9:43:be:8e:c1: fd:1b:11:23:78:07:1a:9c:bc:e1:e1:ec:1e:5c:7d: 82:c4:c1:a0:89:49:ed:ed:ee:cc:31:2e:04:ff:40: da:a5:ee:4a:a1:35:2e:dc:95:a5:ec:21:60:1b:fd: 8e:39:3b:fa:f5:c9:dc:45:d0:c6:49:28:e0:93:31: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3D:9E:7B:84:5B:41:61:F9:51:1A:BE:0A:6F:7A:93:EF:43:6A:A7 X509v3 Authority Key Identifier: keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fc:d9:05:14:67:7b:76:7b:33:b2:b4:ca:91:11:a1:26:df: 11:c1:8d:96:dc:31:04:5b:44:bb:4d:a3:c9:3b:ee:70:dc:bc: 0a:5d:6c:4f:65:85:46:21:8d:ce:f4:f3:3e:b7:19:63:ae:3c: 03:d3:24:8c:8c:d1:32:75:bd:67:24:25:7c:fc:70:9a:8b:99: 89:96:00:95:dc:12:a9:0f:5b:a6:84:21:6a:25:67:33:97:86: a0:af:f3:5b:fe:19:21:08:ba:9d:27:65:92:5e:80:a2:be:37: 75:7b:db:e8:d3:0d:61:24:0f:62:a8:fa:3b:0c:79:5f:02:fc: 32:58:3e:bd:d3:92:f4:31:37:c2:30:27:19:5a:fa:44:37:a6: 59:5c:12:d4:c7:5e:47:82:08:b1:c2:1f:de:cb:98:ff:0c:9f: f8:4c:45:51:e0:83:8e:fd:83:66:55:b0:cf:02:c5:34:88:c7: 2d:5c:6c:88:18:07:63:1d:52:4b:89:95:ef:a2:20:9b:d8:64: 23:96:b9:39:7e:65:cd:a7:c4:01:dd:6c:5f:b3:0f:3e:0a:c8: e0:a0:3e:99:0c:37:52:f1:0d:3f:17:93:eb:7a:78:23:f6:d7: 89:45:8c:a2:6e:ca:dd:f0:63:0a:14:7b:a5:07:eb:35:e3:4a: 44:2e:6c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNQKevO/dELeMbTviQSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy ZGZlNjkwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD Eyg0OTNkOWU3Yjg0NWI0MTYxZjk1MTFhYmUwYTZmN2E5M2VmNDM2YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJiZIWmLF8KqUm0YWHaJ6SPGtrn9 IDRQKdHXtS77NqDTwXqRFQXKwME71HVmcFDJHjHv5Q6u7XIZ5HAqftUC5/KWMIma kC+/j27XKGwbOI1/Gg9gkdIoPr4j/jScw3QLVR/08GtR3T9NlOOiNwNzj2W5gwqY hj4XytaCJH2o6mkxYqxy5kAq0jbk5n33Kxk3nvR8NRRnGb1STwMQXsUbQUl6n6va ZEvbjLz/PlzJ3iCnyGuwRn1wI85yTch+qUO+jsH9GxEjeAcanLzh4eweXH2CxMGg iUnt7e7MMS4E/0Dape5KoTUu3JWl7CFgG/2OOTv69cncRdDGSSjgkzGjOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk9nnuEW0Fh+VEavgpvepPvQ2qnMB8GA1UdIwQY MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It M2JkYTM1MzljNmJjLzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvzZBRRn e3Z7M7K0ypERoSbfEcGNltwxBFtEu02jyTvucNy8Cl1sT2WFRiGNzvTzPrcZY648 A9MkjIzRMnW9ZyQlfPxwmouZiZYAldwSqQ9bpoQhaiVnM5eGoK/zW/4ZIQi6nSdl kl6Aor43dXvb6NMNYSQPYqj6Owx5XwL8Mlg+vdOS9DE3wjAnGVr6RDemWVwS1Mde R4IIscIf3suY/wyf+ExFUeCDjv2DZlWwzwLFNIjHLVxsiBgHYx1SS4mV76Igm9hk I5a5OX5lzafEAd1sX7MPPgrI4KA+mQw3UvENPxeT63p4I/bXiUWMom7K3fBjChR7 pQfrNeNKRC5sSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:33 2025 by rpki-client