This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json) Hash identifier: 5vqXW6u8I7mve8ZVBsf8xCUMDaTHl7das9c46NlliYI= Subject key identifier: DB:79:9E:7A:70:91:C4:27:AA:34:23:D3:7D:DD:DE:3F:5C:60:72:97 Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Certificate serial: 019B3F119E09CE78024FDF249A3AAA3E4872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft Manifest number: 0F22 Signing time: Sun 21 Dec 2025 04:01:17 +0000 Manifest this update: Sun 21 Dec 2025 04:01:17 +0000 Manifest next update: Mon 22 Dec 2025 04:01:17 +0000 Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: qclyVyw2I/9Ou7UoNmfcVdXgfXqFIaryem9FjK71tFY=) 2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:9e:09:ce:78:02:4f:df:24:9a:3a:aa:3e:48:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Validity Not Before: Dec 21 04:01:17 2025 GMT Not After : Dec 22 04:01:17 2025 GMT Subject: CN=db799e7a7091c427aa3423d37dddde3f5c607297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:b1:1b:1b:c6:f7:85:60:4e:2d:7a:7d:d7: a2:0a:5d:7d:d4:c5:5f:35:51:36:0c:e2:bd:e4:9b: 13:7a:16:f3:30:18:ed:da:b6:b5:74:26:d3:bb:40: ae:1e:b3:9b:c0:fc:ec:d2:c1:63:9b:d4:4d:39:c1: 48:07:47:dd:56:4f:65:25:41:1d:11:b0:92:2f:38: 1a:e3:b6:04:74:49:94:a6:e0:fd:cd:42:f5:10:b3: e0:3e:60:08:87:e3:15:8f:e8:52:c6:f7:4b:f3:c8: 17:ad:da:98:84:05:ad:48:06:cb:07:69:d8:53:95: 98:81:77:36:f9:09:2b:5e:95:2f:71:c9:1b:27:b4: 36:0e:2c:31:09:73:71:17:30:9b:89:ac:90:6c:cf: 11:be:de:df:4e:5e:7d:d0:8d:6e:3d:46:72:5a:24: 32:0b:49:22:9b:bf:92:b0:dc:a9:45:b9:57:19:c8: 80:84:eb:cf:dd:c6:f3:fd:d3:e1:4f:11:f3:3a:0f: 59:b9:9c:3a:7d:2b:b0:2a:7b:47:24:2a:2d:9c:39: b5:51:b8:ab:9b:b9:af:c1:35:a9:51:c6:e7:fc:2e: 24:c5:07:e6:69:9c:5c:fb:6b:c5:04:52:54:e8:bd: 71:2f:85:ca:50:9a:39:af:ac:26:c3:15:ca:85:55: ee:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:9E:7A:70:91:C4:27:AA:34:23:D3:7D:DD:DE:3F:5C:60:72:97 X509v3 Authority Key Identifier: keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ac:95:d1:f9:61:6a:d3:fb:60:5c:20:2b:c4:f5:2e:a2:df: 3d:fc:48:d8:b0:66:be:33:b4:6a:1a:91:53:79:0c:1f:ae:e3: e7:c0:9f:01:1f:80:a1:05:1c:5a:11:5c:00:f5:62:14:ae:ea: 00:e4:f5:7b:3b:6f:d0:3d:01:0e:37:8d:90:b6:d2:7f:f8:e9: 74:55:c8:82:77:ea:02:59:c2:60:2b:f8:99:ef:4b:05:a3:ca: a6:fc:dc:8b:46:9c:09:41:69:af:2f:3f:8e:b1:9f:e8:83:e6: 04:84:ce:14:52:a3:14:4a:71:bb:9d:f0:c3:fa:d5:86:fe:63: 22:a2:cf:34:79:2f:55:ab:1c:c9:c3:bd:a9:b2:20:ad:b1:df: 56:3f:ba:5b:f2:9d:75:a3:10:1a:37:af:ba:1e:0e:7c:a9:e6: e9:d6:9e:6c:b1:91:b1:a2:53:55:ed:03:99:92:9b:6b:67:dc: 50:93:48:b2:53:2d:eb:1c:73:ee:c8:ff:62:53:a5:58:79:93: 81:2e:df:3c:14:4c:b9:58:28:7d:f7:54:30:1c:2b:d1:39:b8: 64:11:07:1f:51:ab:e6:24:f1:77:03:5d:8b:2d:17:23:be:c3: 02:18:bc:68:53:9e:80:67:df:35:e9:6d:eb:68:fd:3f:4a:e1: 7b:f1:7f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZ4JzngCT98kmjqqPkhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGEzMjI3OGNlN2I0Y2IyMDVkZmNjYWQ3ODYwMTRhM2Iw YWUzMjMwHhcNMjUxMjIxMDQwMTE3WhcNMjUxMjIyMDQwMTE3WjAzMTEwLwYDVQQD EyhkYjc5OWU3YTcwOTFjNDI3YWEzNDIzZDM3ZGRkZGUzZjVjNjA3Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkqxGxvG94VgTi16fdeiCl191MVf NVE2DOK95JsTehbzMBjt2ra1dCbTu0CuHrObwPzs0sFjm9RNOcFIB0fdVk9lJUEd EbCSLzga47YEdEmUpuD9zUL1ELPgPmAIh+MVj+hSxvdL88gXrdqYhAWtSAbLB2nY U5WYgXc2+QkrXpUvcckbJ7Q2DiwxCXNxFzCbiayQbM8Rvt7fTl590I1uPUZyWiQy C0kim7+SsNypRblXGciAhOvP3cbz/dPhTxHzOg9ZuZw6fSuwKntHJCotnDm1Ubir m7mvwTWpUcbn/C4kxQfmaZxc+2vFBFJU6L1xL4XKUJo5r6wmwxXKhVXu3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt5nnpwkcQnqjQj033d3j9cYHKXMB8GA1UdIwQY MBaAFOJKMieM57TLIF38yteGAUo7CuMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjct NzdhYjA1ZTBjZjYyLzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjctNzdhYjA1ZTBjZjYy LzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqyV0flh atP7YFwgK8T1LqLfPfxI2LBmvjO0ahqRU3kMH67j58CfAR+AoQUcWhFcAPViFK7q AOT1eztv0D0BDjeNkLbSf/jpdFXIgnfqAlnCYCv4me9LBaPKpvzci0acCUFpry8/ jrGf6IPmBITOFFKjFEpxu53ww/rVhv5jIqLPNHkvVascycO9qbIgrbHfVj+6W/Kd daMQGjevuh4OfKnm6daebLGRsaJTVe0DmZKba2fcUJNIslMt6xxz7sj/YlOlWHmT gS7fPBRMuVgoffdUMBwr0Tm4ZBEHH1Gr5iTxdwNdiy0XI77DAhi8aFOegGffNelt 62j9P0rhe/F/Jg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:32 2025 by rpki-client