This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json) Hash identifier: xHSrJGnBWnw3fCRIfVH91aW5LmrsFjojaILIOQUSirg= Subject key identifier: 32:6B:38:AE:22:2F:87:BF:C2:BE:9E:76:73:39:0C:49:40:8C:35:EF Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019B73DA1ECD8F84CC6F4AF5DAAD4A2F6CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft Manifest number: 073F Signing time: Wed 31 Dec 2025 10:00:33 +0000 Manifest this update: Wed 31 Dec 2025 10:00:33 +0000 Manifest next update: Thu 01 Jan 2026 10:00:33 +0000 Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: KsZ0VSni7KINbxwUMeb8LyM7c9dPQMSTu5Z7dPKYoLA=) 2: Z5XRZtUC9s3CbIed4tLwk0brsf0.roa (hash: r/qCqYJ4chyv7nOwsypdjNGGILNa7ltYYU9q4PuuHw4=) 3: _Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa (hash: 3ALoIGbxmP+kByubWHulq2NFwTA/LOztSuk+rMQPM34=) 4: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:da:1e:cd:8f:84:cc:6f:4a:f5:da:ad:4a:2f:6c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Dec 31 10:00:33 2025 GMT Not After : Jan 1 10:00:33 2026 GMT Subject: CN=326b38ae222f87bfc2be9e7673390c49408c35ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:30:f9:c7:dc:3c:0e:04:a6:25:bf:64:79: e1:ca:bc:0e:74:db:00:9b:c6:1a:a7:c1:75:24:42: b2:c1:d1:d3:f8:fd:2a:24:6c:19:e0:fe:af:69:b9: 16:22:26:1d:23:3d:e2:d4:35:34:33:e1:8d:26:e0: 41:3f:8b:45:ca:8f:d8:57:2e:bf:06:5f:ae:0c:cf: 64:7f:20:0b:fa:b9:33:cf:7a:09:35:ac:b1:bf:20: 4f:de:38:82:a6:5b:49:84:e2:ca:f6:1f:1a:46:60: 94:f5:be:29:f6:f1:3f:63:70:3b:1b:d0:73:c2:76: 67:25:eb:cd:93:27:64:73:d2:dd:54:89:97:46:b7: 96:8c:6b:aa:a0:9d:3c:f7:88:b2:72:ba:ac:fb:23: b8:c5:1b:53:ff:1e:03:ed:04:fe:93:64:53:ca:69: f3:ee:67:56:f8:ab:f8:c4:48:0a:1b:bd:1f:9d:5a: d0:76:3f:4b:8e:68:97:40:b9:d3:30:63:7a:19:bd: 5c:05:4e:00:df:f1:e6:e1:90:25:82:db:32:1d:83: 4c:47:b5:14:9b:a2:4e:13:e5:65:e7:6b:43:01:a3: 22:a4:35:66:2c:bb:32:d9:40:0f:d6:8a:ed:ad:2a: 42:ce:b1:dc:16:84:4d:26:8a:69:39:8b:63:a9:c0: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6B:38:AE:22:2F:87:BF:C2:BE:9E:76:73:39:0C:49:40:8C:35:EF X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c8:a0:46:a3:87:65:35:52:d4:37:b6:e4:d2:6c:9c:d3:cf: 18:20:9d:1b:dd:e4:62:b7:d1:99:8a:16:9e:1a:1f:0b:19:1b: 44:0d:1c:65:a0:64:9b:14:3f:0d:9a:69:9c:75:33:e0:91:31: 44:62:fa:75:06:86:38:f9:30:71:65:d8:a0:79:5e:9e:dc:db: 4b:78:99:3e:0b:06:f8:6c:07:46:04:30:5d:d5:28:9e:17:68: c8:1e:6d:88:7f:eb:f0:70:e6:e1:45:48:d1:6b:ff:63:e4:84: ed:d2:8a:20:78:80:09:ba:59:0e:7c:12:e8:ae:fc:61:ec:30: d9:e2:95:41:76:0c:a1:2b:04:3c:db:9c:57:66:03:97:7f:a5: 69:08:0f:39:92:1d:82:22:0d:84:04:e5:1f:66:a1:5a:ae:41: f2:16:3b:af:e4:1c:0b:13:8d:de:c0:78:f1:98:2a:cd:ca:92: 84:f4:fc:20:69:67:1d:e1:a0:04:93:1d:16:17:bf:5e:6d:9e: cf:a5:6f:b8:dd:21:b6:5b:46:9d:c8:96:d1:f8:d4:3e:f9:6e: 7d:74:62:b1:23:fc:bc:88:e6:34:df:c4:10:c7:7a:31:f0:aa: 9e:45:d9:88:a3:a4:c7:cd:71:9c:a2:b5:20:db:da:19:1a:b5: 67:15:90:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtz2h7Nj4TMb0r12q1KL2z6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjUxMjMxMTAwMDMzWhcNMjYwMTAxMTAwMDMzWjAzMTEwLwYDVQQD EygzMjZiMzhhZTIyMmY4N2JmYzJiZTllNzY3MzM5MGM0OTQwOGMzNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Aw+cfcPA4EpiW/ZHnhyrwOdNsA m8Yap8F1JEKywdHT+P0qJGwZ4P6vabkWIiYdIz3i1DU0M+GNJuBBP4tFyo/YVy6/ Bl+uDM9kfyAL+rkzz3oJNayxvyBP3jiCpltJhOLK9h8aRmCU9b4p9vE/Y3A7G9Bz wnZnJevNkydkc9LdVImXRreWjGuqoJ0894iycrqs+yO4xRtT/x4D7QT+k2RTymnz 7mdW+Kv4xEgKG70fnVrQdj9LjmiXQLnTMGN6Gb1cBU4A3/Hm4ZAlgtsyHYNMR7UU m6JOE+Vl52tDAaMipDVmLLsy2UAP1ortrSpCzrHcFoRNJoppOYtjqcB3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJrOK4iL4e/wr6ednM5DElAjDXvMB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsigRqOH ZTVS1De25NJsnNPPGCCdG93kYrfRmYoWnhofCxkbRA0cZaBkmxQ/DZppnHUz4JEx RGL6dQaGOPkwcWXYoHlentzbS3iZPgsG+GwHRgQwXdUonhdoyB5tiH/r8HDm4UVI 0Wv/Y+SE7dKKIHiACbpZDnwS6K78Yeww2eKVQXYMoSsEPNucV2YDl3+laQgPOZId giINhATlH2ahWq5B8hY7r+QcCxON3sB48ZgqzcqShPT8IGlnHeGgBJMdFhe/Xm2e z6VvuN0htltGnciW0fjUPvlufXRisSP8vIjmNN/EEMd6MfCqnkXZiKOkx81xnKK1 INvaGRq1ZxWQrw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:35:07 2025 by rpki-client