This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json) Hash identifier: Z9quQBnPFNgBiWX+1RtqkG9zrIkN9ckMB90mcDv0f/4= Subject key identifier: 01:48:33:3A:74:95:DB:F7:14:6D:67:1C:09:F8:E9:67:2B:0D:68:9E Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019B3C7F1AF85CC444CFCCEFD91FB6A86ECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft Manifest number: 131F Signing time: Sat 20 Dec 2025 16:02:01 +0000 Manifest this update: Sat 20 Dec 2025 16:02:01 +0000 Manifest next update: Sun 21 Dec 2025 16:02:01 +0000 Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: JyThok2CGpUpzoTlFFD41Hb4cwQnHQIHJT6z6nj2Qbs=) 2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:1a:f8:5c:c4:44:cf:cc:ef:d9:1f:b6:a8:6e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Dec 20 16:02:01 2025 GMT Not After : Dec 21 16:02:01 2025 GMT Subject: CN=0148333a7495dbf7146d671c09f8e9672b0d689e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:45:ed:1d:4a:79:4c:21:37:1a:76:21:30:f2: 29:2e:e6:f1:09:0d:49:b7:75:4f:82:7a:73:5e:57: 9d:b5:2f:23:b6:1f:ae:68:d2:e5:11:7c:50:c1:91: 4b:b1:98:be:97:78:a7:f8:f2:21:1f:d5:d2:95:c6: 66:39:94:23:02:cb:72:72:a6:fb:19:e9:8a:86:f6: e4:0b:ec:b8:68:75:4a:69:8d:de:96:ef:0a:4c:54: 3e:7c:0b:91:83:04:b5:02:f3:47:a4:df:ab:4c:a3: ca:d5:5a:7a:77:2e:39:6a:4a:3a:1b:7d:f4:d7:61: 52:38:68:76:90:28:67:b8:55:d8:39:af:af:c6:42: d6:47:06:5a:80:bd:c2:c8:c3:9e:04:7d:aa:a5:89: c3:7b:d4:8e:7a:b6:a0:74:17:75:e2:e7:fa:da:9a: 68:c8:29:7a:bd:59:fd:4f:45:d0:be:57:60:52:f3: 61:6c:10:24:58:20:c5:45:50:3f:50:56:e9:a6:dd: 56:7f:50:0b:d4:bb:dc:02:19:2a:06:95:63:ae:45: e6:8a:fb:58:9d:e0:8a:e1:e0:27:10:0b:83:9b:89: aa:3f:61:96:c7:64:4f:83:b8:95:73:84:28:7c:d9: 6a:39:4a:5a:16:4c:7a:bc:e7:88:28:62:03:5f:c0: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:33:3A:74:95:DB:F7:14:6D:67:1C:09:F8:E9:67:2B:0D:68:9E X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:db:24:79:9b:1f:93:d0:8a:13:57:d3:18:15:00:de:cb:ce: 76:73:17:ba:8e:56:c3:25:a8:a0:59:70:bc:c1:c0:b1:e3:cf: 54:99:70:c3:ca:48:1c:bb:84:e9:86:dd:73:11:69:41:ab:63: d8:57:8a:97:d6:c8:04:7b:ea:b8:20:fb:48:e0:3f:24:48:13: 57:95:f6:f8:e1:6d:22:c7:d3:f5:22:f0:56:5f:f9:fc:b6:33: 41:25:a8:2f:25:65:1b:33:96:d6:2f:41:11:63:29:9b:4a:63: 20:4b:57:b1:57:bf:05:72:cf:25:d8:23:1d:53:66:1b:77:0d: 7f:eb:7f:14:f4:d3:3d:5c:a2:5a:c4:be:53:75:35:c8:55:a5: 80:1f:d0:29:36:f0:9c:db:02:4c:46:08:3f:9a:d2:83:5f:e3: 06:b6:88:a1:f6:fb:bc:e8:2a:6a:5c:cb:8f:2b:9b:0d:3a:6a: 8d:e9:e3:af:41:28:57:35:44:ef:bc:1a:87:47:07:45:74:3f: 44:53:49:b6:d0:3e:19:ca:15:e1:fe:fd:46:76:b6:ff:c1:35: 1f:f5:df:57:3a:f2:d6:85:35:07:c5:0b:f5:d7:c9:ef:e6:d4: 28:a6:46:71:a3:fd:0c:4d:01:90:a4:b8:19:53:19:7c:7a:88: ef:f8:e1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxr4XMREz8zv2R+2qG7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjUxMjIwMTYwMjAxWhcNMjUxMjIxMTYwMjAxWjAzMTEwLwYDVQQD EygwMTQ4MzMzYTc0OTVkYmY3MTQ2ZDY3MWMwOWY4ZTk2NzJiMGQ2ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EXtHUp5TCE3GnYhMPIpLubxCQ1J t3VPgnpzXledtS8jth+uaNLlEXxQwZFLsZi+l3in+PIhH9XSlcZmOZQjAstycqb7 GemKhvbkC+y4aHVKaY3elu8KTFQ+fAuRgwS1AvNHpN+rTKPK1Vp6dy45ako6G330 12FSOGh2kChnuFXYOa+vxkLWRwZagL3CyMOeBH2qpYnDe9SOeragdBd14uf62ppo yCl6vVn9T0XQvldgUvNhbBAkWCDFRVA/UFbppt1Wf1AL1LvcAhkqBpVjrkXmivtY neCK4eAnEAuDm4mqP2GWx2RPg7iVc4QofNlqOUpaFkx6vOeIKGIDX8AK2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFIMzp0ldv3FG1nHAn46WcrDWieMB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadskeZsf k9CKE1fTGBUA3svOdnMXuo5WwyWooFlwvMHAsePPVJlww8pIHLuE6YbdcxFpQatj 2FeKl9bIBHvquCD7SOA/JEgTV5X2+OFtIsfT9SLwVl/5/LYzQSWoLyVlGzOW1i9B EWMpm0pjIEtXsVe/BXLPJdgjHVNmG3cNf+t/FPTTPVyiWsS+U3U1yFWlgB/QKTbw nNsCTEYIP5rSg1/jBraIofb7vOgqalzLjyubDTpqjenjr0EoVzVE77wah0cHRXQ/ RFNJttA+GcoV4f79Rna2/8E1H/XfVzry1oU1B8UL9dfJ7+bUKKZGcaP9DE0BkKS4 GVMZfHqI7/jh4g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:46 2025 by rpki-client