This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json) Hash identifier: eUf+dax0VWJLN7iVsgcoYFINv6Or96kYAo9PSoD1fXk= Subject key identifier: C9:E9:9B:8C:2F:A4:5D:C4:6F:0F:FF:89:4E:5A:65:98:B3:E2:41:37 Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B5B65E7CD93E958CA7430E4A8A3A6D898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 16:02:43 +0000 Manifest this update: Fri 26 Dec 2025 16:02:43 +0000 Manifest next update: Sat 27 Dec 2025 16:02:43 +0000 Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: hH+Pb+VIWOAmRe9CmpKHGDH++LUpNHMo0YqjhK43N5w=) 2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=) 3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:e7:cd:93:e9:58:ca:74:30:e4:a8:a3:a6:d8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Dec 26 16:02:43 2025 GMT Not After : Dec 27 16:02:43 2025 GMT Subject: CN=c9e99b8c2fa45dc46f0fff894e5a6598b3e24137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:be:90:e8:6f:ac:31:1c:ab:02:bc:66:86: db:d2:07:74:30:db:2d:f1:d1:f2:df:c4:d7:69:96: 83:58:fe:b5:9e:b9:92:ec:88:03:c4:f7:ea:ed:96: 39:36:4c:d4:c7:af:6a:10:f5:0f:ff:c7:03:61:b4: 4e:7d:4c:77:1f:35:4a:ea:34:b9:f1:3a:78:5d:6f: cc:db:18:98:19:e7:ad:0d:b2:8c:36:56:c6:45:b8: fc:d2:0e:5f:cc:1f:98:28:fe:79:f7:de:44:c9:5f: 57:02:a6:22:87:0c:55:f3:07:e5:45:f4:fb:0d:72: 21:15:69:06:0f:f4:63:d3:da:2f:77:fc:50:b2:8e: 84:6a:68:9b:2b:7e:0c:08:3d:c5:88:82:53:73:22: 11:dd:3f:c3:0e:db:91:c4:6c:7a:1a:2e:93:cd:f3: 01:0d:ac:d3:03:3f:7c:9c:61:54:46:b6:33:d0:1a: e7:a4:69:7d:d4:a5:2e:a9:e1:ce:36:00:25:61:71: ea:a9:19:34:a0:8a:b3:45:45:0b:d5:7a:55:a7:20: 1c:fa:3d:17:ac:59:ea:64:90:0f:f9:0e:17:a9:8e: a3:29:7a:59:dd:51:5c:78:e3:c7:31:cb:68:16:fa: 51:78:1e:f2:fa:a3:2a:f1:70:13:34:16:1f:2c:47: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:9B:8C:2F:A4:5D:C4:6F:0F:FF:89:4E:5A:65:98:B3:E2:41:37 X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:a7:ce:c3:71:a7:86:23:a1:0e:24:09:42:cf:7e:56:63: 89:04:20:1b:3e:be:16:77:7d:ab:d0:8e:d4:f8:ba:6f:e3:a5: 5f:77:8c:c0:e2:8d:de:a9:11:45:67:2d:d1:80:ff:6f:02:3d: 72:73:43:e9:4e:fc:a2:09:3a:8e:6f:e1:3a:5a:01:0e:de:a6: df:49:c9:37:13:88:48:14:de:d4:de:10:65:c2:11:7d:11:b7: e1:d8:ba:ba:d5:e8:49:55:87:d0:e5:0c:f7:49:f9:7b:e4:e6: 88:1a:2b:75:4e:57:04:7d:57:4f:1a:0f:9a:bd:02:48:c6:b1: 79:1c:7b:bc:1a:f6:99:62:d7:d6:88:98:95:c9:26:23:3e:29: 75:b7:ad:66:d9:2f:2c:15:97:83:ef:89:79:41:6c:09:92:47: 8d:51:f7:63:61:3e:36:bc:2d:6b:3f:43:08:d4:05:86:28:bd: b3:62:9b:71:25:db:ad:f1:6f:9e:64:7f:cf:38:68:d6:fa:cb: 3f:1e:fd:50:2c:d4:c6:59:cd:a2:64:88:98:9e:8f:80:e2:6a: a7:79:d7:37:b6:6b:07:c7:3e:9a:c8:be:d0:8e:a2:f5:14:87: 72:65:b6:6d:36:1b:e5:02:35:c1:2e:9a:3c:96:82:4f:42:7b: 20:45:f7:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZefNk+lYynQw5KijptiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjUxMjI2MTYwMjQzWhcNMjUxMjI3MTYwMjQzWjAzMTEwLwYDVQQD EyhjOWU5OWI4YzJmYTQ1ZGM0NmYwZmZmODk0ZTVhNjU5OGIzZTI0MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMq+kOhvrDEcqwK8Zobb0gd0MNst 8dHy38TXaZaDWP61nrmS7IgDxPfq7ZY5NkzUx69qEPUP/8cDYbROfUx3HzVK6jS5 8Tp4XW/M2xiYGeetDbKMNlbGRbj80g5fzB+YKP55995EyV9XAqYihwxV8wflRfT7 DXIhFWkGD/Rj09ovd/xQso6EamibK34MCD3FiIJTcyIR3T/DDtuRxGx6Gi6TzfMB DazTAz98nGFURrYz0BrnpGl91KUuqeHONgAlYXHqqRk0oIqzRUUL1XpVpyAc+j0X rFnqZJAP+Q4XqY6jKXpZ3VFceOPHMctoFvpReB7y+qMq8XATNBYfLEedtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnpm4wvpF3Ebw//iU5aZZiz4kE3MB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvunzsNx p4YjoQ4kCULPflZjiQQgGz6+Fnd9q9CO1Pi6b+OlX3eMwOKN3qkRRWct0YD/bwI9 cnND6U78ogk6jm/hOloBDt6m30nJNxOISBTe1N4QZcIRfRG34di6utXoSVWH0OUM 90n5e+TmiBordU5XBH1XTxoPmr0CSMaxeRx7vBr2mWLX1oiYlckmIz4pdbetZtkv LBWXg++JeUFsCZJHjVH3Y2E+Nrwtaz9DCNQFhii9s2KbcSXbrfFvnmR/zzho1vrL Px79UCzUxlnNomSImJ6PgOJqp3nXN7ZrB8c+msi+0I6i9RSHcmW2bTYb5QI1wS6a PJaCT0J7IEX39w== -----END CERTIFICATE-----Generated at Sat Dec 27 00:43:00 2025 by rpki-client