This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json) Hash identifier: Yb9uI4WmfcO8KkRuHHdk+u/HztSBXzPHA4/0RqJrrsg= Subject key identifier: E9:4F:26:90:5F:71:5D:4F:BA:7F:4F:6F:33:C6:B0:83:0F:D3:91:9F Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Certificate serial: 019B28C000EDD39954191EE02A88DB4EB2CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft Manifest number: 034E Signing time: Tue 16 Dec 2025 20:00:30 +0000 Manifest this update: Tue 16 Dec 2025 20:00:30 +0000 Manifest next update: Wed 17 Dec 2025 20:00:30 +0000 Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=) 2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: Dp1Xi7gp8WkfdYszrQtpjoaq5T9PAb2dtU48IVD5jUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:00:ed:d3:99:54:19:1e:e0:2a:88:db:4e:b2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Validity Not Before: Dec 16 20:00:30 2025 GMT Not After : Dec 17 20:00:30 2025 GMT Subject: CN=e94f26905f715d4fba7f4f6f33c6b0830fd3919f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:c3:90:14:52:4d:86:28:1a:e2:75:5f:7f: c6:35:c2:a1:a6:77:8b:0b:af:39:4d:ac:e4:c2:9c: b1:e9:f4:53:61:f0:22:79:10:fa:92:df:8a:08:9a: a6:4d:f8:90:f5:12:3c:3a:da:5d:2c:d6:62:ab:7b: 2c:be:71:23:64:68:db:2f:3e:13:27:11:e1:42:fd: 63:cd:94:57:3c:f6:d3:d5:d2:08:a9:bb:30:f6:e9: 6a:ee:c1:48:e8:e2:73:55:92:dc:14:e4:2b:f8:e9: 4f:25:e5:7f:c2:62:65:66:bd:d5:1a:d7:3c:c8:3a: 9f:ee:95:2e:56:a3:08:f8:d8:3e:9a:17:de:37:7a: 7b:99:db:1c:e9:9c:1b:55:2d:2a:de:83:b0:95:b6: 4a:d6:8a:5c:fc:f8:ef:80:3c:d3:d2:44:7e:1e:4a: 4e:1a:6a:20:0d:10:ea:a0:05:93:f5:4c:4c:7f:17: 5f:0e:d6:5d:c3:73:ec:3d:c1:26:dd:01:4f:4e:71: cd:ef:68:d0:b6:df:b3:ed:be:e1:44:03:a8:46:62: e4:e0:34:2d:dd:ea:6d:eb:c7:e4:91:cd:22:8d:b4: 92:fc:63:32:1c:25:e3:6c:00:db:c6:27:6a:e1:fa: 38:17:0f:eb:2a:6e:ef:4f:38:89:9d:15:53:83:7d: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:26:90:5F:71:5D:4F:BA:7F:4F:6F:33:C6:B0:83:0F:D3:91:9F X509v3 Authority Key Identifier: keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c4:89:1a:7c:48:c3:99:ef:74:ad:aa:f1:88:1a:46:ff:1d: 6f:74:dc:b4:7c:db:11:39:04:ea:50:d8:66:b4:07:37:56:ca: dc:a9:d3:98:72:0a:a4:a4:85:15:8f:e4:be:cf:90:5d:7e:bd: df:7e:79:6b:03:b2:4d:af:f7:46:98:85:b5:18:53:05:48:69: e6:8c:5c:9d:7b:6f:4e:01:e5:bb:62:71:4d:e9:e6:af:83:09: 05:c6:37:16:87:62:d6:0e:c7:6f:94:c6:4f:78:50:0b:fe:71: 2b:38:33:f7:5f:7c:20:0f:72:b1:f8:0d:ee:6d:7b:a7:8e:af: c9:a3:c9:a9:87:bf:ab:e5:f1:68:23:29:c4:07:dd:a1:e1:52: 3a:42:6a:58:ba:f9:b7:ce:fe:e6:c0:f0:5b:21:92:a7:c5:6c: ae:9e:1e:4b:59:d5:86:dc:b4:a3:23:de:9e:d4:35:d3:c9:fd: 19:5b:67:6d:d2:d9:22:4a:f0:c4:1d:7f:52:02:c1:79:00:5c: 84:2e:3f:a8:9f:8d:28:06:0e:7f:e8:a7:a6:26:bf:4e:95:d0: 27:d1:67:52:08:f9:a2:58:59:d7:59:c5:56:59:73:90:2a:03: 1e:cc:41:e7:86:82:22:5a:2b:28:e6:3a:9b:f4:59:e8:6f:2d: 32:23:a7:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowADt05lUGR7gKojbTrLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4 MjZjMjYwHhcNMjUxMjE2MjAwMDMwWhcNMjUxMjE3MjAwMDMwWjAzMTEwLwYDVQQD EyhlOTRmMjY5MDVmNzE1ZDRmYmE3ZjRmNmYzM2M2YjA4MzBmZDM5MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnDkBRSTYYoGuJ1X3/GNcKhpneL C685Tazkwpyx6fRTYfAieRD6kt+KCJqmTfiQ9RI8OtpdLNZiq3ssvnEjZGjbLz4T JxHhQv1jzZRXPPbT1dIIqbsw9ulq7sFI6OJzVZLcFOQr+OlPJeV/wmJlZr3VGtc8 yDqf7pUuVqMI+Ng+mhfeN3p7mdsc6ZwbVS0q3oOwlbZK1opc/PjvgDzT0kR+HkpO GmogDRDqoAWT9UxMfxdfDtZdw3PsPcEm3QFPTnHN72jQtt+z7b7hRAOoRmLk4DQt 3ept68fkkc0ijbSS/GMyHCXjbADbxidq4fo4Fw/rKm7vTziJnRVTg32eLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlPJpBfcV1Pun9PbzPGsIMP05GfMB8GA1UdIwQY MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3 LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesSJGnxI w5nvdK2q8YgaRv8db3TctHzbETkE6lDYZrQHN1bK3KnTmHIKpKSFFY/kvs+QXX69 3355awOyTa/3RpiFtRhTBUhp5oxcnXtvTgHlu2JxTenmr4MJBcY3Fodi1g7Hb5TG T3hQC/5xKzgz9198IA9ysfgN7m17p46vyaPJqYe/q+XxaCMpxAfdoeFSOkJqWLr5 t87+5sDwWyGSp8Vsrp4eS1nVhty0oyPentQ108n9GVtnbdLZIkrwxB1/UgLBeQBc hC4/qJ+NKAYOf+inpia/TpXQJ9FnUgj5olhZ11nFVllzkCoDHsxB54aCIlorKOY6 m/RZ6G8tMiOnjA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:36:13 2025 by rpki-client