This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json) Hash identifier: Bt+Tw55WUKZNAs/MO/2A923M7CWm+ZyzuHQ8BUwQExw= Subject key identifier: 2A:74:F1:33:84:EC:0F:41:8E:EE:68:AA:72:32:3E:C1:C9:C0:E0:CB Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Certificate serial: 019B3C10603C3920D40F6F99D1653E405AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft Manifest number: 01CA Signing time: Sat 20 Dec 2025 14:01:04 +0000 Manifest this update: Sat 20 Dec 2025 14:01:04 +0000 Manifest next update: Sun 21 Dec 2025 14:01:04 +0000 Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: MLKISqDlqPzE/G5L4OjPueiVnDU/Rq4B1X6KylLfC44=) 2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:60:3c:39:20:d4:0f:6f:99:d1:65:3e:40:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Validity Not Before: Dec 20 14:01:04 2025 GMT Not After : Dec 21 14:01:04 2025 GMT Subject: CN=2a74f13384ec0f418eee68aa72323ec1c9c0e0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:3e:84:e1:2d:10:88:ac:66:7c:2c:6b:67: 1a:98:a0:ae:83:3d:99:4a:a5:3b:0d:a7:98:8c:f6: 39:70:2d:83:b6:0d:da:a9:d7:42:c7:d5:1c:3e:21: 68:ea:39:41:1b:dd:9e:92:92:d2:92:85:ff:0e:76: 63:b1:f5:fa:68:4f:0c:e4:a9:10:3a:a4:b7:aa:70: 00:47:52:fb:9c:c3:ea:ec:a1:9b:8a:87:c4:df:54: 1c:52:7e:4b:36:40:5b:d7:48:74:f3:67:02:72:2d: fe:c0:2f:2a:c4:2c:da:96:b2:22:e9:c4:27:9a:fd: c7:97:cb:8c:ed:f9:0e:b9:80:5c:3e:34:22:14:5f: fa:d4:83:66:91:e6:cc:cf:25:e5:9f:07:c4:03:79: 2a:06:91:ae:24:e1:d0:aa:5c:03:33:dd:ca:15:11: f0:0c:e0:e7:68:72:81:7a:20:38:a8:57:97:42:f7: 12:bf:84:1a:fb:17:ff:06:81:d3:36:32:38:5b:19: 2c:14:61:7e:95:f9:9f:7e:0c:29:00:fe:4a:09:ee: 5b:a2:b6:92:a8:4a:c1:28:a8:89:d6:6c:f0:4b:be: 27:67:ee:4f:11:49:14:b5:2d:bd:42:e2:6b:ac:f4: a1:98:db:76:1a:d6:a1:a7:77:e5:8f:5f:dc:95:76: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:F1:33:84:EC:0F:41:8E:EE:68:AA:72:32:3E:C1:C9:C0:E0:CB X509v3 Authority Key Identifier: keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5d:3e:a9:a3:2a:7f:cf:b3:4c:9f:88:08:f2:3b:aa:01:c0: d7:43:2a:41:62:1a:0b:af:81:1b:13:36:7c:63:50:70:63:34: da:93:a8:6e:b4:74:68:24:0b:fc:f2:e6:12:09:35:cd:d7:48: eb:17:02:50:33:a0:61:37:6a:91:ee:9b:16:a7:64:cc:bf:4d: 1a:64:4b:57:1b:da:fe:23:71:ce:a6:8b:9f:97:e7:24:3b:6c: 04:35:73:d5:80:4a:98:22:e3:71:88:ad:51:fd:a2:38:e6:47: 57:4c:48:43:cd:8c:3e:54:d0:84:87:09:f6:a9:7a:70:74:05: 4a:54:5e:72:51:32:6d:60:0a:43:3b:58:fc:c1:6f:8b:92:50: 2f:ab:99:c5:af:08:cb:ba:64:f5:b6:28:77:36:48:8c:38:97: 1b:9d:01:a5:02:cf:88:0f:07:e8:1f:92:ac:5b:a0:dd:8f:0a: 58:c3:d5:4f:67:bb:e3:ee:66:5a:fe:a2:e4:2d:6d:16:49:92: 19:08:ad:58:d0:b6:d1:f5:c7:42:ac:43:d9:77:4d:9f:78:db: 25:f6:39:8b:5c:0a:fd:60:0c:87:21:d4:af:a7:85:26:27:b3: 8c:07:df:0a:b7:36:2a:d2:97:80:c8:5d:38:e2:a9:bf:02:1c: de:5b:1b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGA8OSDUD2+Z0WU+QFquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw YTc4ZWMwHhcNMjUxMjIwMTQwMTA0WhcNMjUxMjIxMTQwMTA0WjAzMTEwLwYDVQQD EygyYTc0ZjEzMzg0ZWMwZjQxOGVlZTY4YWE3MjMyM2VjMWM5YzBlMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoE+hOEtEIisZnwsa2camKCugz2Z SqU7DaeYjPY5cC2Dtg3aqddCx9UcPiFo6jlBG92ekpLSkoX/DnZjsfX6aE8M5KkQ OqS3qnAAR1L7nMPq7KGbiofE31QcUn5LNkBb10h082cCci3+wC8qxCzalrIi6cQn mv3Hl8uM7fkOuYBcPjQiFF/61INmkebMzyXlnwfEA3kqBpGuJOHQqlwDM93KFRHw DODnaHKBeiA4qFeXQvcSv4Qa+xf/BoHTNjI4WxksFGF+lfmffgwpAP5KCe5boraS qErBKKiJ1mzwS74nZ+5PEUkUtS29QuJrrPShmNt2Gtahp3flj1/clXaUNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp08TOE7A9Bju5oqnIyPsHJwODLMB8GA1UdIwQY MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV0+qaMq f8+zTJ+ICPI7qgHA10MqQWIaC6+BGxM2fGNQcGM02pOobrR0aCQL/PLmEgk1zddI 6xcCUDOgYTdqke6bFqdkzL9NGmRLVxva/iNxzqaLn5fnJDtsBDVz1YBKmCLjcYit Uf2iOOZHV0xIQ82MPlTQhIcJ9ql6cHQFSlReclEybWAKQztY/MFvi5JQL6uZxa8I y7pk9bYodzZIjDiXG50BpQLPiA8H6B+SrFug3Y8KWMPVT2e74+5mWv6i5C1tFkmS GQitWNC20fXHQqxD2XdNn3jbJfY5i1wK/WAMhyHUr6eFJiezjAffCrc2KtKXgMhd OOKpvwIc3lsbMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:07 2025 by rpki-client