This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json) Hash identifier: IRj42NCiMqeplwVN2QUz/nBpXbpy6wYGXNAqmuZVo0M= Subject key identifier: 37:09:15:33:0F:35:80:E2:6D:E1:2A:8A:FC:88:77:4A:78:10:55:36 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019B390FF0B92D8990D420C7BEF60845C192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft Manifest number: 0E94 Signing time: Sat 20 Dec 2025 00:01:44 +0000 Manifest this update: Sat 20 Dec 2025 00:01:44 +0000 Manifest next update: Sun 21 Dec 2025 00:01:44 +0000 Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: Gf+SNdq1JBWpYOeGbof+72oGBXRCJKGR1WUhyAbTR8Q=) 2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=) 3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:f0:b9:2d:89:90:d4:20:c7:be:f6:08:45:c1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Dec 20 00:01:44 2025 GMT Not After : Dec 21 00:01:44 2025 GMT Subject: CN=370915330f3580e26de12a8afc88774a78105536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:83:10:45:a2:af:15:b9:eb:e3:85:f8:0f: 63:a5:24:3e:7a:88:1b:f3:cd:49:45:1d:a9:b6:06: 3a:41:d4:d6:2f:40:25:90:92:fc:35:5c:6c:3f:fb: 22:c7:e7:82:11:b4:68:17:72:62:b1:cf:22:8b:c9: 3e:f3:e5:68:ff:ad:6c:1f:d6:87:8c:2c:41:b0:c6: 01:c5:40:6a:39:94:70:fa:82:f3:ef:e7:86:5f:b1: 14:f7:20:f6:8d:e8:7f:e5:7b:ba:c6:80:e8:80:5c: e3:bb:1a:bf:67:ed:b6:c1:aa:08:9d:42:63:53:1f: 6d:48:af:5b:d7:7e:aa:b2:cb:0e:22:51:50:79:8a: 97:cd:6e:42:a8:12:e9:cc:88:48:c8:c7:98:c8:e3: 64:b6:35:44:46:18:25:0e:6a:74:38:fc:31:0a:25: 2d:b1:b4:bf:d2:d7:90:63:a0:c7:96:62:10:88:8e: 01:d3:be:5d:09:7d:53:11:c2:ca:4f:56:53:a8:4f: 72:7c:8b:f5:89:65:ee:75:63:11:8e:1a:2a:6d:81: da:b4:18:b9:b1:33:e5:7c:e8:d4:42:bb:4a:05:20: b7:65:d4:1e:6f:2a:b2:7e:4f:9e:dd:24:1c:7c:0b: 0d:08:d9:6d:ce:92:a2:07:92:7b:3a:31:d1:a0:24: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:15:33:0F:35:80:E2:6D:E1:2A:8A:FC:88:77:4A:78:10:55:36 X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d5:81:97:da:44:2e:ba:af:1c:6e:6c:59:23:43:85:43:13: 31:df:05:92:52:b6:1d:84:27:20:7f:d9:4d:b8:db:3a:90:1a: 9f:f1:03:03:b8:a7:ae:06:e1:7a:56:38:69:27:d4:78:a0:1a: a8:fb:e5:2b:96:5f:3a:b5:be:2d:1a:01:80:f7:56:8c:35:21: 96:56:a2:36:94:97:50:f3:af:df:4e:86:4a:80:cc:c2:65:09: 80:b0:b2:ca:e2:e6:19:25:9e:d3:ba:f1:5b:ad:a4:13:f4:40: 23:45:0a:59:c2:46:89:8c:3d:d5:f6:59:54:8b:cf:9f:d6:55: e1:10:b3:6a:e7:7e:4a:06:f2:d6:78:79:46:ec:e2:ee:34:a9: b6:ae:06:61:36:05:a7:1d:d4:9a:b9:23:1a:77:5a:8b:d2:cb: de:6a:97:21:66:cc:e2:d9:70:ee:7a:bb:65:b5:bb:e4:57:ff: 8b:1f:73:22:33:ae:23:00:72:9d:41:0e:07:f6:57:28:88:2f: 9f:45:d3:74:b7:fc:47:ea:81:25:81:ff:2c:8c:5d:4f:d6:4e: f5:f1:10:19:6d:b6:a6:30:3f:33:c2:0b:51:00:44:1a:7d:42: 4a:45:e7:db:39:c8:0d:f4:d4:11:1c:ae:c7:4c:c1:51:92:38: 95:7e:dc:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D/C5LYmQ1CDHvvYIRcGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjUxMjIwMDAwMTQ0WhcNMjUxMjIxMDAwMTQ0WjAzMTEwLwYDVQQD EygzNzA5MTUzMzBmMzU4MGUyNmRlMTJhOGFmYzg4Nzc0YTc4MTA1NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YiDEEWirxW56+OF+A9jpSQ+eogb 881JRR2ptgY6QdTWL0AlkJL8NVxsP/six+eCEbRoF3Jisc8ii8k+8+Vo/61sH9aH jCxBsMYBxUBqOZRw+oLz7+eGX7EU9yD2jeh/5Xu6xoDogFzjuxq/Z+22waoInUJj Ux9tSK9b136qsssOIlFQeYqXzW5CqBLpzIhIyMeYyONktjVERhglDmp0OPwxCiUt sbS/0teQY6DHlmIQiI4B075dCX1TEcLKT1ZTqE9yfIv1iWXudWMRjhoqbYHatBi5 sTPlfOjUQrtKBSC3ZdQebyqyfk+e3SQcfAsNCNltzpKiB5J7OjHRoCSqVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcJFTMPNYDibeEqivyId0p4EFU2MB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONWBl9pE LrqvHG5sWSNDhUMTMd8FklK2HYQnIH/ZTbjbOpAan/EDA7inrgbhelY4aSfUeKAa qPvlK5ZfOrW+LRoBgPdWjDUhllaiNpSXUPOv306GSoDMwmUJgLCyyuLmGSWe07rx W62kE/RAI0UKWcJGiYw91fZZVIvPn9ZV4RCzaud+Sgby1nh5Ruzi7jSptq4GYTYF px3UmrkjGndai9LL3mqXIWbM4tlw7nq7ZbW75Ff/ix9zIjOuIwBynUEOB/ZXKIgv n0XTdLf8R+qBJYH/LIxdT9ZO9fEQGW22pjA/M8ILUQBEGn1CSkXn2znIDfTUERyu x0zBUZI4lX7c7w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:03:48 2025 by rpki-client