This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json) Hash identifier: nVKqaKHZnTdilCnu1dy/2Hn3PTK3646Yz/S9gAOKn5Y= Subject key identifier: DD:A4:44:61:6B:3C:8A:C2:E0:56:5E:69:11:27:CC:7E:D2:06:9C:91 Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019B3720864087F1DDE36EAB5A28EE237FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 15:00:36 +0000 Manifest this update: Fri 19 Dec 2025 15:00:36 +0000 Manifest next update: Sat 20 Dec 2025 15:00:36 +0000 Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: pYT3sBNAVCFH0hBUAYjQkgQT2E+g4Oeo2mkNd8fTkL4=) 2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=) 3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:86:40:87:f1:dd:e3:6e:ab:5a:28:ee:23:7f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Dec 19 15:00:36 2025 GMT Not After : Dec 20 15:00:36 2025 GMT Subject: CN=dda444616b3c8ac2e0565e691127cc7ed2069c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:49:8d:56:bb:fe:58:4a:c1:d3:f4:cf:f8: e5:d3:94:cc:af:ce:aa:73:76:d3:e4:d4:45:78:93: ac:05:bd:6b:e6:4c:10:74:0c:d6:5e:cb:e4:79:8b: 3d:b3:af:aa:bd:25:ca:38:f7:52:2a:b1:6e:2e:2b: 2b:14:37:4a:45:15:fc:9e:1c:fe:19:7c:f0:3d:19: 3f:8c:db:0c:df:bd:08:3c:2b:eb:6f:1c:c4:bd:94: 55:bb:01:31:a3:b3:4f:63:32:52:b7:ae:84:ac:4b: af:4e:45:b8:be:d5:da:e7:94:5c:8f:bc:1d:e4:ce: 11:bf:3c:0d:76:44:f6:23:dc:d2:4a:e2:e6:f1:3b: 3b:cb:3e:fe:97:6f:6f:a1:aa:00:1b:cf:50:bb:f5: ba:7b:2d:11:a2:a9:d4:cb:9d:86:42:42:33:f7:8c: 58:16:57:7e:12:27:ed:3e:2d:13:b1:92:ba:6f:c9: 66:cb:4e:13:5c:41:3c:56:0c:57:3d:43:50:05:b1: 91:33:d6:73:b0:96:41:49:92:01:59:4d:29:38:1b: 76:38:df:c4:d7:1b:26:70:6b:35:d2:c4:36:a6:3a: ec:46:32:1d:3a:1e:79:57:d2:e2:c5:1c:00:62:4a: 46:5f:4b:25:07:ce:30:b4:ac:76:46:8d:73:85:0d: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:44:61:6B:3C:8A:C2:E0:56:5E:69:11:27:CC:7E:D2:06:9C:91 X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:71:94:75:9c:2d:fa:01:c1:dc:4e:b7:43:cb:5b:5d:49:f3: 47:85:42:76:e7:24:8d:c4:90:b7:a0:5b:d6:54:02:76:84:28: f7:c6:1b:e3:03:37:6e:30:73:c1:a6:59:08:3e:8c:0a:7c:5d: a6:16:05:1d:b1:ef:ba:35:24:aa:43:39:4e:bf:3e:1a:d9:62: ee:1b:9d:dd:ef:68:67:d4:86:f8:41:86:60:ae:8e:33:ad:6c: 8d:28:a2:d3:96:52:a8:de:a6:90:c3:46:ce:b0:43:27:53:64: d6:48:62:e9:7b:70:d5:37:75:7b:b9:21:cc:1f:15:21:08:e4: d4:e6:f6:c1:91:2d:a6:2a:fe:37:98:54:b9:71:2f:b4:78:3b: 83:c3:2e:59:43:5a:21:6a:c5:73:5f:71:d9:cc:19:8b:ce:5e: 91:0b:27:41:0e:31:e3:a9:1c:85:9e:f8:98:f2:5a:9f:f0:ad: 33:b8:bc:b8:23:2c:a6:12:dd:28:3b:72:93:42:4d:72:a1:6f: 33:c8:ec:01:99:79:90:b8:29:7c:1c:50:bf:12:88:bd:f1:00: 67:87:01:1f:68:d9:bc:a0:b3:60:ff:e2:1d:27:e5:95:57:aa: 3f:ec:9f:8a:96:dd:ed:48:b4:d5:17:79:e8:3f:b1:0c:12:bb: 39:7b:60:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IIZAh/Hd426rWijuI3+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjUxMjE5MTUwMDM2WhcNMjUxMjIwMTUwMDM2WjAzMTEwLwYDVQQD EyhkZGE0NDQ2MTZiM2M4YWMyZTA1NjVlNjkxMTI3Y2M3ZWQyMDY5YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pdJjVa7/lhKwdP0z/jl05TMr86q c3bT5NRFeJOsBb1r5kwQdAzWXsvkeYs9s6+qvSXKOPdSKrFuLisrFDdKRRX8nhz+ GXzwPRk/jNsM370IPCvrbxzEvZRVuwExo7NPYzJSt66ErEuvTkW4vtXa55Rcj7wd 5M4RvzwNdkT2I9zSSuLm8Ts7yz7+l29voaoAG89Qu/W6ey0RoqnUy52GQkIz94xY Fld+EiftPi0TsZK6b8lmy04TXEE8VgxXPUNQBbGRM9ZzsJZBSZIBWU0pOBt2ON/E 1xsmcGs10sQ2pjrsRjIdOh55V9LixRwAYkpGX0slB84wtKx2Ro1zhQ1LWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2kRGFrPIrC4FZeaREnzH7SBpyRMB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnGUdZwt +gHB3E63Q8tbXUnzR4VCduckjcSQt6Bb1lQCdoQo98Yb4wM3bjBzwaZZCD6MCnxd phYFHbHvujUkqkM5Tr8+Gtli7hud3e9oZ9SG+EGGYK6OM61sjSii05ZSqN6mkMNG zrBDJ1Nk1khi6Xtw1Td1e7khzB8VIQjk1Ob2wZEtpir+N5hUuXEvtHg7g8MuWUNa IWrFc19x2cwZi85ekQsnQQ4x46kchZ74mPJan/CtM7i8uCMsphLdKDtyk0JNcqFv M8jsAZl5kLgpfBxQvxKIvfEAZ4cBH2jZvKCzYP/iHSfllVeqP+yfipbd7Ui01Rd5 6D+xDBK7OXtgug== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:33 2025 by rpki-client