This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json) Hash identifier: VViGyRPNo65PkmrelM3SK67mH0Ep0NT+IXyqq1L5hRA= Subject key identifier: 85:CD:3A:0C:E6:71:DD:3A:72:B9:E8:12:26:91:8B:AA:06:E8:87:08 Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Certificate serial: 019B5C3FFCC279A2B73489246CB27912DA4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft Manifest number: 0C9C Signing time: Fri 26 Dec 2025 20:00:55 +0000 Manifest this update: Fri 26 Dec 2025 20:00:55 +0000 Manifest next update: Sat 27 Dec 2025 20:00:55 +0000 Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: NSDd79GdT0AfX8uRcEq8DDyVFVh6lIIey2T/k4V745w=) 2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:fc:c2:79:a2:b7:34:89:24:6c:b2:79:12:da:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Validity Not Before: Dec 26 20:00:55 2025 GMT Not After : Dec 27 20:00:55 2025 GMT Subject: CN=85cd3a0ce671dd3a72b9e81226918baa06e88708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:a0:aa:66:e0:21:86:bb:ff:38:92:6a:05: 33:b6:c8:2b:cf:25:99:f6:9b:c1:db:af:28:61:9c: 1f:b2:87:17:37:9c:04:bd:44:3e:23:a5:4a:0e:e1: 6b:8e:5e:5b:f3:bb:5e:c4:9b:e5:1b:30:b0:42:f6: f9:80:2f:af:77:18:22:06:6b:06:9f:98:30:e5:50: aa:8e:fa:89:ad:7b:7b:b2:61:e7:6f:28:c3:b1:27: 65:19:b4:c7:e6:34:2d:ca:54:9c:b7:5b:53:4a:a9: 16:fe:91:79:6e:58:58:65:26:c9:6d:69:bd:0c:1b: 73:0e:7f:35:c2:a9:f4:a9:ac:3b:df:7b:d8:46:e4: 45:9d:c9:5f:ea:c1:9c:f4:74:d5:2c:c6:e1:1f:79: 30:10:01:b9:4e:0c:1e:b2:fa:3f:90:f4:6e:c7:81: 40:36:4a:d3:11:ba:56:2e:2b:ce:d1:c9:72:ba:85: 3a:36:95:3b:1e:b5:85:68:8d:67:09:46:ae:a9:69: ee:32:8f:74:52:cf:95:b2:0b:c8:a4:33:19:94:3b: 0c:9d:a0:06:26:a0:35:39:31:2e:3b:44:3b:17:05: 6d:95:70:2f:6a:83:eb:d2:9e:33:d0:6d:c9:b6:99: 13:43:95:24:20:56:56:95:6c:1a:ca:e4:90:b1:b8: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CD:3A:0C:E6:71:DD:3A:72:B9:E8:12:26:91:8B:AA:06:E8:87:08 X509v3 Authority Key Identifier: keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e2:40:6b:b9:e7:fc:cb:2b:ed:98:ea:8c:cf:20:bf:60:d4: f3:c0:0b:04:46:96:cc:27:ce:bf:c5:a8:cd:8e:02:d6:66:c0: 88:df:48:21:9c:7c:ec:64:cb:8c:8e:9b:ba:44:82:fc:25:58: 4d:23:d9:f0:88:8d:a8:8d:e2:82:e1:ef:fd:0e:d6:71:d9:71: c3:ea:e5:93:1b:c3:96:94:08:51:6f:18:15:5f:ac:05:71:0b: 7f:07:57:9c:f9:52:ec:b4:50:2a:38:31:a8:20:af:8d:8b:f0: d1:34:20:55:52:30:36:30:e2:40:da:8a:88:84:51:c4:cb:6d: 02:e1:bc:ae:f3:a3:05:7f:86:81:f1:d1:73:46:4b:15:81:98: 21:a9:a4:18:b4:5d:fd:6c:ae:80:f2:30:ac:28:dd:c9:07:44: af:e1:95:49:5a:03:a4:19:cb:ee:10:e6:07:85:0f:37:43:ee: c6:31:5f:87:17:64:47:02:f0:57:c3:78:ec:3e:73:cb:46:f0: 40:ee:98:30:15:15:68:6c:45:34:f8:1e:7b:82:01:fa:eb:01: 8a:55:4d:5b:0c:65:0d:35:5c:fb:c4:73:e9:de:9e:b7:35:12: 7f:aa:b2:f7:6e:4a:e1:b8:27:a5:8f:09:f2:24:b2:1b:37:e4: fb:f9:4e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP/zCeaK3NIkkbLJ5EtpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk YTViYmMwHhcNMjUxMjI2MjAwMDU1WhcNMjUxMjI3MjAwMDU1WjAzMTEwLwYDVQQD Eyg4NWNkM2EwY2U2NzFkZDNhNzJiOWU4MTIyNjkxOGJhYTA2ZTg4NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OygqmbgIYa7/ziSagUztsgrzyWZ 9pvB268oYZwfsocXN5wEvUQ+I6VKDuFrjl5b87texJvlGzCwQvb5gC+vdxgiBmsG n5gw5VCqjvqJrXt7smHnbyjDsSdlGbTH5jQtylSct1tTSqkW/pF5blhYZSbJbWm9 DBtzDn81wqn0qaw733vYRuRFnclf6sGc9HTVLMbhH3kwEAG5Tgwesvo/kPRux4FA NkrTEbpWLivO0clyuoU6NpU7HrWFaI1nCUauqWnuMo90Us+VsgvIpDMZlDsMnaAG JqA1OTEuO0Q7FwVtlXAvaoPr0p4z0G3JtpkTQ5UkIFZWlWwayuSQsbjcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXNOgzmcd06crnoEiaRi6oG6IcIMB8GA1UdIwQY MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt NWI5MTAxNTcyNzFiLzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+JAa7nn /Msr7ZjqjM8gv2DU88ALBEaWzCfOv8WozY4C1mbAiN9IIZx87GTLjI6bukSC/CVY TSPZ8IiNqI3iguHv/Q7Wcdlxw+rlkxvDlpQIUW8YFV+sBXELfwdXnPlS7LRQKjgx qCCvjYvw0TQgVVIwNjDiQNqKiIRRxMttAuG8rvOjBX+GgfHRc0ZLFYGYIamkGLRd /WyugPIwrCjdyQdEr+GVSVoDpBnL7hDmB4UPN0PuxjFfhxdkRwLwV8N47D5zy0bw QO6YMBUVaGxFNPgee4IB+usBilVNWwxlDTVc+8Rz6d6etzUSf6qy925K4bgnpY8J 8iSyGzfk+/lO+A== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:31 2025 by rpki-client