This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json) Hash identifier: IZJR4IdOUZBh/y3JAM55GBawviQXTGZx9yjqKpN1ICA= Subject key identifier: 12:AF:37:62:E2:57:62:61:9A:03:F7:3F:BE:5B:0C:55:04:F8:13:AB Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a Certificate serial: 019B3721354676CB5FFA9C1AC6AC0078A0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft Manifest number: 144A Signing time: Fri 19 Dec 2025 15:01:21 +0000 Manifest this update: Fri 19 Dec 2025 15:01:21 +0000 Manifest next update: Sat 20 Dec 2025 15:01:21 +0000 Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: gbxYcuS9fVYNUZWRiJ8nRMYimYd0MGg/yZBqr89rTVw=) 2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:35:46:76:cb:5f:fa:9c:1a:c6:ac:00:78:a0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e017872403452f3e008ab798047342db24edb35a Validity Not Before: Dec 19 15:01:21 2025 GMT Not After : Dec 20 15:01:21 2025 GMT Subject: CN=12af3762e25762619a03f73fbe5b0c5504f813ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:46:a0:0d:c5:0b:0d:d8:06:3b:14:4a:73:83: 1d:0b:f6:3c:41:c3:10:28:7c:78:6f:fb:5b:e9:8e: 19:74:6c:1e:9d:c9:9c:23:40:79:d9:46:4d:d2:3d: b7:00:a0:b7:6b:f0:8d:7f:36:35:f7:ec:0c:9b:9b: 8f:0c:0b:ed:35:83:ca:89:39:19:79:4b:66:90:0d: 8a:80:5e:d1:29:bd:96:c5:46:3c:cb:5a:06:df:5e: 1e:e7:13:9e:51:e5:4d:0b:78:30:59:e1:a1:20:78: d0:cc:ee:88:63:9d:7f:df:f7:82:59:7d:0b:07:a6: dc:be:11:da:c0:80:33:d1:fe:af:3d:c9:03:88:b8: 79:a4:cd:a4:7f:24:14:53:64:f2:77:b5:7d:f8:cf: c9:21:13:83:b6:18:fd:98:ad:96:bc:6b:32:d4:97: 8d:d3:58:0c:d1:3a:0c:75:5d:39:1c:b9:b5:74:35: b6:fe:27:bd:ab:f4:17:fd:62:d2:2d:12:58:b1:06: ce:24:a3:56:ba:d6:56:32:f3:bf:4e:f2:be:2c:15: 72:a3:85:ef:d0:54:a3:aa:81:49:98:a5:3a:a1:76: 6b:a0:cd:cc:4c:05:50:ad:1b:b7:89:37:79:bc:48: ab:59:0e:20:4e:0f:18:54:db:cf:ec:49:58:28:fd: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AF:37:62:E2:57:62:61:9A:03:F7:3F:BE:5B:0C:55:04:F8:13:AB X509v3 Authority Key Identifier: keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3e:c2:b6:a6:e4:90:06:10:11:22:6f:71:27:b4:32:ad:96: f8:c7:65:4a:0d:d5:39:23:48:8d:e7:78:6a:56:ed:d5:d3:f4: 0b:15:01:8d:7c:50:99:8d:87:c9:7d:e0:3a:72:85:cd:81:00: e9:06:8a:fc:d3:5e:1e:b5:1c:23:5d:f6:82:2a:46:b7:21:b8: dc:43:9d:02:ed:cd:5f:97:24:82:9c:d2:22:2d:d3:c8:cf:85: 01:cc:f2:ce:e0:0e:47:aa:3c:2f:f6:39:57:ac:45:36:cf:4c: 90:4f:46:08:e4:41:43:e7:b5:07:b0:45:5c:04:f3:59:48:bb: 3d:be:1f:49:a8:82:59:61:47:16:0c:d2:10:36:bc:e1:36:be: 58:b8:cc:4f:b7:ef:66:93:b6:05:2a:23:b1:0b:31:52:01:ea: c1:35:fa:ba:93:8a:cc:f1:1b:86:60:08:35:ef:53:a1:27:a2: 11:e5:9f:90:37:9e:48:14:47:a8:94:6c:16:ba:a9:2b:cb:8c: fb:1c:ba:20:d9:c5:ae:79:7b:06:2d:c2:6c:c6:7f:72:a2:35: 90:20:4c:ec:72:41:d8:5d:60:eb:cf:0e:05:90:9c:28:51:7d: 8d:ab:ea:90:ef:f0:5f:e0:e1:b5:a4:91:ab:d1:6d:41:93:e5: 81:ed:e5:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITVGdstf+pwaxqwAeKD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl ZGIzNWEwHhcNMjUxMjE5MTUwMTIxWhcNMjUxMjIwMTUwMTIxWjAzMTEwLwYDVQQD EygxMmFmMzc2MmUyNTc2MjYxOWEwM2Y3M2ZiZTViMGM1NTA0ZjgxM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/EagDcULDdgGOxRKc4MdC/Y8QcMQ KHx4b/tb6Y4ZdGwencmcI0B52UZN0j23AKC3a/CNfzY19+wMm5uPDAvtNYPKiTkZ eUtmkA2KgF7RKb2WxUY8y1oG314e5xOeUeVNC3gwWeGhIHjQzO6IY51/3/eCWX0L B6bcvhHawIAz0f6vPckDiLh5pM2kfyQUU2Tyd7V9+M/JIRODthj9mK2WvGsy1JeN 01gM0ToMdV05HLm1dDW2/ie9q/QX/WLSLRJYsQbOJKNWutZWMvO/TvK+LBVyo4Xv 0FSjqoFJmKU6oXZroM3MTAVQrRu3iTd5vEirWQ4gTg8YVNvP7ElYKP0M0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKvN2LiV2JhmgP3P75bDFUE+BOrMB8GA1UdIwQY MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0 LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiT7Ctqbk kAYQESJvcSe0Mq2W+MdlSg3VOSNIjed4albt1dP0CxUBjXxQmY2HyX3gOnKFzYEA 6QaK/NNeHrUcI132gipGtyG43EOdAu3NX5ckgpzSIi3TyM+FAczyzuAOR6o8L/Y5 V6xFNs9MkE9GCORBQ+e1B7BFXATzWUi7Pb4fSaiCWWFHFgzSEDa84Ta+WLjMT7fv ZpO2BSojsQsxUgHqwTX6upOKzPEbhmAINe9ToSeiEeWfkDeeSBRHqJRsFrqpK8uM +xy6INnFrnl7Bi3CbMZ/cqI1kCBM7HJB2F1g688OBZCcKFF9javqkO/wX+DhtaSR q9FtQZPlge3lDg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:40:33 2025 by rpki-client