This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json) Hash identifier: RuZ2zucb571kVZ5GzM42bQiNLv+iwhvieVQXxVqhtuE= Subject key identifier: 93:04:EA:55:FC:5B:A4:82:68:03:C0:E7:80:EA:7B:96:B2:3B:84:44 Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002 Certificate serial: 019B3DC79EE4C562E978D576E7743A06F867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft Manifest number: 0B48 Signing time: Sat 20 Dec 2025 22:00:51 +0000 Manifest this update: Sat 20 Dec 2025 22:00:51 +0000 Manifest next update: Sun 21 Dec 2025 22:00:51 +0000 Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: E/p9b39Sc0ENBzU8XKmgIKRPMXQna9zshAmyxP6KAz0=) 2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:9e:e4:c5:62:e9:78:d5:76:e7:74:3a:06:f8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002 Validity Not Before: Dec 20 22:00:51 2025 GMT Not After : Dec 21 22:00:51 2025 GMT Subject: CN=9304ea55fc5ba4826803c0e780ea7b96b23b8444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:d3:52:1b:b3:ff:a3:c1:c5:57:f3:97:d6: b1:3a:45:71:9c:7d:cb:a3:84:fe:c3:08:4e:40:d3: 7a:10:e1:3f:51:6d:66:dd:00:cc:0f:19:c7:53:6f: df:3e:b9:db:bc:73:c5:62:54:dd:4f:8b:92:85:e2: 64:a2:fb:32:73:52:5a:93:8a:5c:8a:93:13:ec:0c: cd:f0:be:8a:fd:59:89:47:fe:bb:bc:38:36:3d:be: 20:0d:63:56:00:6d:38:fd:af:08:8e:ab:eb:3d:fc: 45:99:a7:ed:a6:27:e3:ce:4d:3a:84:8c:d4:41:aa: 18:e6:92:74:4f:6d:b3:eb:c0:bd:5b:47:0b:35:03: 6d:00:5f:0c:26:b4:d3:ba:78:6a:42:78:60:07:51: 50:fd:c8:42:76:1c:47:f2:50:4d:ed:c0:ef:50:a0: 41:ea:d4:50:00:c4:8b:ff:ef:70:08:f7:f7:24:92: 8f:7f:2f:5f:f4:fd:65:28:81:c8:63:0c:99:de:5e: 89:f4:91:ce:e6:b4:6a:2e:b9:30:3b:a5:8e:45:05: ff:a2:5c:44:4b:b9:be:d7:2f:15:a4:ac:43:af:64: 5a:4d:93:40:db:1b:0e:ef:92:52:16:07:a4:07:8e: 0c:6a:50:4c:88:18:c2:87:16:e3:af:56:ee:9c:94: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:04:EA:55:FC:5B:A4:82:68:03:C0:E7:80:EA:7B:96:B2:3B:84:44 X509v3 Authority Key Identifier: keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e3:89:0c:75:27:72:c3:16:47:23:96:bf:9d:21:c1:5d:f0: cd:1e:04:e7:6f:1f:d0:0a:2e:a7:6a:05:9e:01:98:e5:aa:cd: b3:9b:46:28:98:9e:1b:cb:07:ac:60:88:44:b3:b4:21:31:86: e0:55:02:12:2a:db:e2:5e:b2:bd:54:53:b7:29:a4:ef:d7:cb: b5:d4:9e:9d:78:dd:90:97:01:33:8f:c3:1d:56:bf:cb:d5:85: 4b:bb:ff:df:9f:76:06:43:ab:44:54:68:03:01:b9:45:d9:59: 14:e2:8b:73:21:be:0a:89:b6:15:d3:10:03:98:5d:aa:6e:9a: 39:fd:1a:b6:92:81:ba:69:de:3e:d3:71:b6:18:b5:19:c1:d7: e7:51:e9:14:3e:e7:f6:9d:84:f8:87:36:8d:66:01:ca:27:4e: d0:19:d7:f1:9e:b9:f9:84:e7:9a:d1:08:6f:58:c9:c7:a4:e7: 58:af:05:f7:4c:e0:01:df:6b:a6:d1:75:85:b0:79:1a:e4:21: 6a:42:8d:0d:3c:6c:cb:04:e6:ed:26:04:83:b5:13:b3:19:bd: ac:a0:0d:04:ec:e6:21:4a:f9:bc:d2:0a:a7:68:1c:74:64:01: 27:6d:fd:da:55:42:9b:2d:ee:8c:c3:32:ca:fe:14:10:30:8e: 93:0a:61:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x57kxWLpeNV253Q6BvhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh NDEwMDIwHhcNMjUxMjIwMjIwMDUxWhcNMjUxMjIxMjIwMDUxWjAzMTEwLwYDVQQD Eyg5MzA0ZWE1NWZjNWJhNDgyNjgwM2MwZTc4MGVhN2I5NmIyM2I4NDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jTUhuz/6PBxVfzl9axOkVxnH3L o4T+wwhOQNN6EOE/UW1m3QDMDxnHU2/fPrnbvHPFYlTdT4uSheJkovsyc1Jak4pc ipMT7AzN8L6K/VmJR/67vDg2Pb4gDWNWAG04/a8IjqvrPfxFmaftpifjzk06hIzU QaoY5pJ0T22z68C9W0cLNQNtAF8MJrTTunhqQnhgB1FQ/chCdhxH8lBN7cDvUKBB 6tRQAMSL/+9wCPf3JJKPfy9f9P1lKIHIYwyZ3l6J9JHO5rRqLrkwO6WORQX/olxE S7m+1y8VpKxDr2RaTZNA2xsO75JSFgekB44MalBMiBjChxbjr1bunJTj0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJME6lX8W6SCaAPA54Dqe5ayO4REMB8GA1UdIwQY MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt M2I2NGNjMzM2Yzc5LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5 LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeOJDHUn csMWRyOWv50hwV3wzR4E528f0Aoup2oFngGY5arNs5tGKJieG8sHrGCIRLO0ITGG 4FUCEirb4l6yvVRTtymk79fLtdSenXjdkJcBM4/DHVa/y9WFS7v/3592BkOrRFRo AwG5RdlZFOKLcyG+Com2FdMQA5hdqm6aOf0atpKBumnePtNxthi1GcHX51HpFD7n 9p2E+Ic2jWYByidO0BnX8Z65+YTnmtEIb1jJx6TnWK8F90zgAd9rptF1hbB5GuQh akKNDTxsywTm7SYEg7UTsxm9rKANBOzmIUr5vNIKp2gcdGQBJ2392lVCmy3ujMMy yv4UEDCOkwph+w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:09 2025 by rpki-client