This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft File: 4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json) Hash identifier: kRgeG03azF3EoPKXoUBElYGoCLd/l0w0qvO96tzsZ3w= Subject key identifier: 4F:C2:F8:23:6F:95:34:57:44:77:15:C6:8F:BC:84:85:70:CD:D7:A4 Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Certificate serial: 019B2F30A8CE8ECBD7C242D23FF75C384293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft Manifest number: 0E72 Signing time: Thu 18 Dec 2025 02:01:16 +0000 Manifest this update: Thu 18 Dec 2025 02:01:16 +0000 Manifest next update: Fri 19 Dec 2025 02:01:16 +0000 Files and hashes: 1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: Ij6kRKYJI8q8ReE30bOYEoyzf/OccbJf9/Y3aix3pI4=) 2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=) 3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=) 4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=) 5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=) 6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:a8:ce:8e:cb:d7:c2:42:d2:3f:f7:5c:38:42:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Validity Not Before: Dec 18 02:01:16 2025 GMT Not After : Dec 19 02:01:16 2025 GMT Subject: CN=4fc2f8236f953457447715c68fbc848570cdd7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:95:22:40:49:75:ca:90:a6:78:a0:7f:88: ea:68:c0:62:d5:d7:ca:b2:e0:a9:28:dc:a8:e6:7b: c7:2a:6a:78:54:51:ac:af:b4:5a:84:7a:81:9c:ae: 48:10:cd:20:23:da:3a:9d:d0:b1:3c:52:f3:a2:cd: 77:6b:5e:8a:b9:a6:83:38:5d:4f:9a:93:07:13:39: d9:78:78:80:52:0f:06:26:2b:48:b6:f0:e8:fa:91: 16:ed:59:38:0d:8f:33:4c:69:9e:60:ce:9f:68:09: 93:c8:3f:9d:95:67:5c:4e:2d:60:10:b7:69:86:5c: 85:4a:6e:48:b7:6b:f4:a9:77:b5:89:7d:28:69:04: 59:74:21:1a:84:fe:2d:f8:61:1e:87:08:e5:23:dc: d3:35:2a:1b:27:44:eb:be:4b:a0:c4:7f:08:27:6b: b8:36:30:8d:02:a2:3c:24:cd:0a:8b:c8:15:5b:90: de:56:08:08:c7:81:52:a3:73:ce:cd:a1:6d:00:4a: fa:1d:89:9c:5c:ff:f3:2b:bf:54:f7:e3:00:fe:62: 5e:ec:c5:f8:bf:b4:e5:9f:4e:43:99:b0:b8:ce:04: 28:bd:b4:80:98:cb:31:a2:32:c5:df:a0:48:7a:85: 73:20:01:42:8d:c8:f6:0c:b4:d8:60:a9:01:f6:65: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C2:F8:23:6F:95:34:57:44:77:15:C6:8F:BC:84:85:70:CD:D7:A4 X509v3 Authority Key Identifier: keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:1b:1a:00:d8:ed:de:da:e4:f9:58:94:34:f6:d2:76:d4: 13:05:fe:5b:fc:47:79:7e:0f:d7:93:ed:b8:54:4b:60:b2:6a: 56:3b:40:79:94:a4:7d:6f:da:14:76:fb:bc:b1:3c:c9:13:42: 62:8a:15:f3:d0:60:30:1c:d5:a9:e7:5d:7c:db:df:82:56:37: be:19:53:cb:25:57:8c:dc:aa:dd:a4:f4:bd:95:29:ef:ad:cc: 6e:d3:ff:f2:be:21:2f:bb:c6:6b:91:0e:d2:d2:3d:a4:6f:a9: f0:bc:3e:df:6a:ff:04:cf:cc:10:4b:45:a4:1e:db:ac:2a:a2: 51:b7:5c:ef:29:8f:8a:1a:39:9f:a8:06:ab:89:33:be:69:e5: a2:93:66:27:93:80:94:88:f4:65:f9:b0:dc:db:0e:7d:fa:45: a4:ab:b9:55:ca:52:97:af:ee:82:5c:81:39:62:1b:72:68:c7: ba:fb:6c:fc:c5:bd:16:38:35:70:1b:6c:de:fb:2a:d9:e4:96: ba:cc:2b:87:bd:62:f5:c6:09:ba:7e:ee:11:79:f0:d8:93:84: ca:b1:18:f2:38:82:48:22:f9:eb:dd:ce:4f:5a:e0:08:70:0b: 53:5c:96:44:3f:f8:fa:40:61:6a:03:72:01:21:42:6b:f5:3b: 58:bb:f5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMKjOjsvXwkLSP/dcOEKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2 ZWM2ZTYwHhcNMjUxMjE4MDIwMTE2WhcNMjUxMjE5MDIwMTE2WjAzMTEwLwYDVQQD Eyg0ZmMyZjgyMzZmOTUzNDU3NDQ3NzE1YzY4ZmJjODQ4NTcwY2RkN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy82VIkBJdcqQpnigf4jqaMBi1dfK suCpKNyo5nvHKmp4VFGsr7RahHqBnK5IEM0gI9o6ndCxPFLzos13a16KuaaDOF1P mpMHEznZeHiAUg8GJitItvDo+pEW7Vk4DY8zTGmeYM6faAmTyD+dlWdcTi1gELdp hlyFSm5It2v0qXe1iX0oaQRZdCEahP4t+GEehwjlI9zTNSobJ0TrvkugxH8IJ2u4 NjCNAqI8JM0Ki8gVW5DeVggIx4FSo3POzaFtAEr6HYmcXP/zK79U9+MA/mJe7MX4 v7Tln05DmbC4zgQovbSAmMsxojLF36BIeoVzIAFCjcj2DLTYYKkB9mVfswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/C+CNvlTRXRHcVxo+8hIVwzdekMB8GA1UdIwQY MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt OTE2NGUzNTJhODNjLzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7MbGgDY 7d7a5PlYlDT20nbUEwX+W/xHeX4P15PtuFRLYLJqVjtAeZSkfW/aFHb7vLE8yRNC YooV89BgMBzVqeddfNvfglY3vhlTyyVXjNyq3aT0vZUp763MbtP/8r4hL7vGa5EO 0tI9pG+p8Lw+32r/BM/MEEtFpB7brCqiUbdc7ymPiho5n6gGq4kzvmnlopNmJ5OA lIj0Zfmw3NsOffpFpKu5VcpSl6/uglyBOWIbcmjHuvts/MW9Fjg1cBts3vsq2eSW uswrh71i9cYJun7uEXnw2JOEyrEY8jiCSCL5693OT1rgCHALU1yWRD/4+kBhagNy ASFCa/U7WLv1zA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:29 2025 by rpki-client