This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json) Hash identifier: WlY+U0Ov0segLptw1P4YaV3nciEtsJUKoJ0ZM0p1ntk= Subject key identifier: 65:F7:53:F2:69:78:A6:EA:B5:5B:C7:44:00:74:FB:64:2D:A6:E3:ED Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B6CC6D8867F51D5EB1709299505091381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 01:02:09 +0000 Manifest this update: Tue 30 Dec 2025 01:02:09 +0000 Manifest next update: Wed 31 Dec 2025 01:02:09 +0000 Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: YkY+uZAzvrVghpZEdEl9HQUnqrAoSKEMKJhPeFctyP4=) 2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=) 3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:d8:86:7f:51:d5:eb:17:09:29:95:05:09:13:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Dec 30 01:02:09 2025 GMT Not After : Dec 31 01:02:09 2025 GMT Subject: CN=65f753f26978a6eab55bc7440074fb642da6e3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:c9:d3:a9:93:ce:a4:c8:9b:70:8f:2c:b4: e0:16:55:a3:19:72:23:15:e7:ed:c5:97:b6:ad:36: 71:72:a2:4e:4d:9c:42:84:33:fe:44:b7:db:e4:f6: 96:fb:e9:61:29:dd:4d:fb:ed:8c:c2:1d:0d:0d:cf: d9:23:17:ca:ae:b2:20:e8:2d:2d:a7:85:5b:a2:3d: 48:bc:ce:65:58:ac:7c:55:6b:63:bf:aa:bd:56:a8: 7a:f8:0c:b7:38:a6:f9:75:1b:d1:a2:87:e2:68:00: 4a:58:9d:ec:ab:c9:95:a9:36:e0:6b:da:6b:26:e1: 4a:12:b6:fc:44:eb:a4:d2:6e:d5:50:eb:f8:8d:a1: d3:77:05:a5:28:9e:b0:01:fe:82:da:be:6b:f8:f8: fc:5f:c4:0d:d0:78:0b:6c:c3:ac:c3:0b:09:bd:c7: f1:7a:96:8a:e2:64:a1:e1:76:aa:2d:01:31:24:59: 67:5a:fd:5d:ca:c6:76:e1:7a:e9:ee:9d:71:dd:8b: ce:a7:19:18:0b:66:68:f7:34:39:8f:11:7c:be:29: f9:f0:e9:53:e1:9b:36:12:6d:fb:41:7f:bd:32:19: 1b:ee:7c:5d:72:67:77:1a:83:33:97:da:5e:7f:af: 0a:40:19:9c:08:de:00:3f:9d:10:6b:0d:1d:d7:cc: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:53:F2:69:78:A6:EA:B5:5B:C7:44:00:74:FB:64:2D:A6:E3:ED X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:a2:af:bd:45:02:79:05:10:90:c6:5b:62:2d:22:a1:51: 3b:0b:80:0f:13:df:5e:6d:51:48:fe:15:4a:d9:58:fb:1d:29: 39:2e:3e:aa:77:88:5b:9f:9a:90:5d:c0:ee:48:f9:7d:47:e2: 55:95:12:3d:a4:54:7e:49:45:6b:46:4c:9d:cd:72:a2:9e:19: cb:c7:83:1d:45:a2:2c:88:26:67:58:1f:7c:e6:80:73:6e:27: 3b:bc:d4:ae:ad:59:9e:a9:b7:88:36:db:40:49:6b:f4:fa:af: ea:2c:a3:c4:d9:1f:60:7d:aa:28:03:98:c3:0c:11:bd:4d:81: 5d:b4:cc:98:67:a0:c4:db:27:fb:5a:e6:d0:40:5a:41:29:eb: a3:0f:96:89:4b:f6:5c:5e:fd:c5:88:5f:28:72:78:ad:82:fd: d3:02:fb:9e:fd:bc:a4:7f:03:d0:3a:5f:fe:0f:f1:af:7d:19: 11:ab:b2:24:19:62:1c:8d:8d:79:98:d4:af:96:ac:2e:ae:f9: 88:21:e2:fb:41:21:13:41:b7:0b:9a:c7:00:1a:d3:a2:7e:f2: a4:fc:b9:b7:ed:29:8c:1b:fe:16:a4:dd:19:5e:16:82:16:22: c8:f9:b7:e7:cf:f8:9f:3c:5e:1b:40:0d:04:2c:6b:e4:b4:39: 12:44:67:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxtiGf1HV6xcJKZUFCROBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjUxMjMwMDEwMjA5WhcNMjUxMjMxMDEwMjA5WjAzMTEwLwYDVQQD Eyg2NWY3NTNmMjY5NzhhNmVhYjU1YmM3NDQwMDc0ZmI2NDJkYTZlM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DbJ06mTzqTIm3CPLLTgFlWjGXIj FeftxZe2rTZxcqJOTZxChDP+RLfb5PaW++lhKd1N++2Mwh0NDc/ZIxfKrrIg6C0t p4Vboj1IvM5lWKx8VWtjv6q9Vqh6+Ay3OKb5dRvRoofiaABKWJ3sq8mVqTbga9pr JuFKErb8ROuk0m7VUOv4jaHTdwWlKJ6wAf6C2r5r+Pj8X8QN0HgLbMOswwsJvcfx epaK4mSh4XaqLQExJFlnWv1dysZ24Xrp7p1x3YvOpxkYC2Zo9zQ5jxF8vin58OlT 4Zs2Em37QX+9Mhkb7nxdcmd3GoMzl9pef68KQBmcCN4AP50Qaw0d18z+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX3U/JpeKbqtVvHRAB0+2QtpuPtMB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPreir71F AnkFEJDGW2ItIqFROwuADxPfXm1RSP4VStlY+x0pOS4+qneIW5+akF3A7kj5fUfi VZUSPaRUfklFa0ZMnc1yop4Zy8eDHUWiLIgmZ1gffOaAc24nO7zUrq1Znqm3iDbb QElr9Pqv6iyjxNkfYH2qKAOYwwwRvU2BXbTMmGegxNsn+1rm0EBaQSnrow+WiUv2 XF79xYhfKHJ4rYL90wL7nv28pH8D0Dpf/g/xr30ZEauyJBliHI2NeZjUr5asLq75 iCHi+0EhE0G3C5rHABrTon7ypPy5t+0pjBv+FqTdGV4WghYiyPm358/4nzxeG0AN BCxr5LQ5EkRn1w== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:14 2025 by rpki-client