This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json) Hash identifier: B7gMbRb9OK8RhLH1DbUdhGBCkO+OgHU67WC0TYigQ6I= Subject key identifier: 8C:8B:5A:7A:20:6F:7A:61:DE:F6:93:0C:94:07:71:61:31:DF:D4:43 Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c Certificate serial: 019B3DC7D625DE2E7BEACDF31774CDE250E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft Manifest number: 1220 Signing time: Sat 20 Dec 2025 22:01:05 +0000 Manifest this update: Sat 20 Dec 2025 22:01:05 +0000 Manifest next update: Sun 21 Dec 2025 22:01:05 +0000 Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: gNJ6kCXWYdhNnxdd7rW5cmjCN2B9nJgcEa6DcQvklho=) 2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:d6:25:de:2e:7b:ea:cd:f3:17:74:cd:e2:50:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c Validity Not Before: Dec 20 22:01:05 2025 GMT Not After : Dec 21 22:01:05 2025 GMT Subject: CN=8c8b5a7a206f7a61def6930c9407716131dfd443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:b2:34:79:4c:36:4d:bb:2f:5a:aa:f3:97: d7:59:fb:20:90:16:3b:cf:0d:8e:a7:16:84:95:36: 96:6e:0f:44:a9:91:40:e5:e3:d3:52:e6:34:cb:a3: d3:07:ab:a1:d1:cd:a4:f7:b1:3b:cb:2d:e7:10:95: 1d:9d:fa:97:92:4c:a0:f0:0e:e7:0c:be:7f:c9:5b: e2:95:75:74:fe:f5:cf:e7:ef:b4:60:d9:06:07:65: db:3b:75:1b:0f:02:ad:33:39:5f:1e:30:61:04:39: 46:ef:f1:3f:87:b1:58:48:19:07:e0:7f:1c:c6:bd: da:36:18:11:0c:2d:df:a6:24:00:af:14:d2:63:87: c2:f3:f5:ff:02:10:c5:49:66:e8:ed:27:b3:08:92: bb:dd:9a:79:a9:fd:a5:44:28:45:1b:24:d5:40:a8: ff:02:5f:b4:1a:a5:81:7e:ac:cd:ff:04:b4:dc:e3: 41:f0:f6:a4:d9:fb:4f:ce:e7:f0:1c:26:6f:c6:68: b8:f0:98:bd:55:02:c5:a2:85:43:f5:da:a7:05:d4: ff:60:d7:dc:e3:35:e1:23:75:8a:87:75:61:5e:d0: 53:1e:9c:2d:e7:0d:bc:ca:31:26:fe:5c:70:1b:3d: fd:ef:86:39:09:6d:f8:40:57:9e:be:9a:b3:2f:bc: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:5A:7A:20:6F:7A:61:DE:F6:93:0C:94:07:71:61:31:DF:D4:43 X509v3 Authority Key Identifier: keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e0:cd:51:ca:fb:2f:29:e8:f5:2b:57:0d:fc:46:b7:d8:66: 31:15:0f:71:eb:a9:65:f0:2f:79:ea:67:15:ec:05:ae:4e:88: b0:33:d0:68:ec:fe:e0:b9:f9:50:cd:48:eb:7d:3a:03:43:79: 88:a5:ae:12:c3:60:fb:30:13:e6:fe:05:98:de:bb:a9:20:14: 9c:06:43:ab:b9:75:a4:68:81:b6:78:62:54:13:70:b0:e6:d2: cf:23:cf:90:32:a1:a2:a7:8c:66:bd:5c:a5:7c:40:a4:78:cb: 17:bc:e1:67:d2:ff:81:c8:4e:88:3a:9b:3b:06:b9:06:5c:8f: 30:65:f1:d2:3e:af:12:b9:6b:78:fa:13:df:6b:e6:8d:79:49: a0:34:f8:de:39:42:dd:f6:b2:86:63:1f:34:78:36:62:24:e2: 39:3d:16:84:84:39:cc:b4:fd:a2:d4:54:ba:cb:6a:22:ba:29: c5:16:63:9b:db:b2:e9:5f:1f:48:6c:ad:99:4e:a0:ed:58:3e: 72:8b:fd:ee:b6:ac:7d:72:a6:7b:b4:30:32:25:fb:a7:92:30: ac:a9:2e:0e:3e:52:2c:4a:06:15:63:b7:8c:f9:b1:a4:d1:a0: e5:a7:ef:26:f0:22:8b:18:a8:1d:f6:98:1d:2f:01:4c:4d:a2: a5:b6:66:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9Yl3i576s3zF3TN4lDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3 ZDczMmMwHhcNMjUxMjIwMjIwMTA1WhcNMjUxMjIxMjIwMTA1WjAzMTEwLwYDVQQD Eyg4YzhiNWE3YTIwNmY3YTYxZGVmNjkzMGM5NDA3NzE2MTMxZGZkNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYayNHlMNk27L1qq85fXWfsgkBY7 zw2OpxaElTaWbg9EqZFA5ePTUuY0y6PTB6uh0c2k97E7yy3nEJUdnfqXkkyg8A7n DL5/yVvilXV0/vXP5++0YNkGB2XbO3UbDwKtMzlfHjBhBDlG7/E/h7FYSBkH4H8c xr3aNhgRDC3fpiQArxTSY4fC8/X/AhDFSWbo7SezCJK73Zp5qf2lRChFGyTVQKj/ Al+0GqWBfqzN/wS03ONB8Pak2ftPzufwHCZvxmi48Ji9VQLFooVD9dqnBdT/YNfc 4zXhI3WKh3VhXtBTHpwt5w28yjEm/lxwGz3974Y5CW34QFeevpqzL7wDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyLWnogb3ph3vaTDJQHcWEx39RDMB8GA1UdIwQY MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0 LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+DNUcr7 Lyno9StXDfxGt9hmMRUPceupZfAveepnFewFrk6IsDPQaOz+4Ln5UM1I6306A0N5 iKWuEsNg+zAT5v4FmN67qSAUnAZDq7l1pGiBtnhiVBNwsObSzyPPkDKhoqeMZr1c pXxApHjLF7zhZ9L/gchOiDqbOwa5BlyPMGXx0j6vErlrePoT32vmjXlJoDT43jlC 3fayhmMfNHg2YiTiOT0WhIQ5zLT9otRUustqIropxRZjm9uy6V8fSGytmU6g7Vg+ cov97rasfXKme7QwMiX7p5IwrKkuDj5SLEoGFWO3jPmxpNGg5afvJvAiixioHfaY HS8BTE2ipbZmOw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:06 2025 by rpki-client