This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json) Hash identifier: FFjVDnOVECjthhxojTQEd18iBvt5/JDMWBYb6nFkXlY= Subject key identifier: EA:8A:29:20:86:B5:BA:53:A1:E5:3D:95:E0:97:F3:1A:45:7F:38:0E Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Certificate serial: 019B31FA7226CCAEF12EB6F681C142C5AC58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft Manifest number: 0D81 Signing time: Thu 18 Dec 2025 15:00:55 +0000 Manifest this update: Thu 18 Dec 2025 15:00:55 +0000 Manifest next update: Fri 19 Dec 2025 15:00:55 +0000 Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: slHFUCu1zZTG30W3ixsKnZX4Xt+eVXXH6y8oxHw+hwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:72:26:cc:ae:f1:2e:b6:f6:81:c1:42:c5:ac:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Validity Not Before: Dec 18 15:00:55 2025 GMT Not After : Dec 19 15:00:55 2025 GMT Subject: CN=ea8a292086b5ba53a1e53d95e097f31a457f380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:ae:7a:b9:60:27:ac:40:c5:78:71:9a:76: 1f:c9:cf:33:50:69:83:06:d8:31:86:cb:af:c6:ec: 95:0b:a4:4d:c5:0f:9c:f9:39:96:d1:d9:7b:0b:84: c9:70:55:a8:7e:54:64:b4:f8:9e:98:26:30:35:57: 75:b9:60:aa:42:3a:f4:6c:23:69:96:d5:85:60:73: 8b:b2:dc:f5:32:a4:1c:c7:30:04:96:e6:4a:d3:6a: 86:d7:01:42:43:bf:32:c1:45:d6:fd:dc:0d:ff:d1: e3:5b:6d:0f:d1:bd:21:e9:95:f6:f2:26:ab:72:33: 24:d1:08:42:a1:8a:51:95:ed:89:dd:03:c6:88:9a: 5e:2a:6a:38:3a:b0:32:b9:55:57:9a:09:8e:ef:69: ac:0b:57:c7:14:de:e8:98:1a:4b:76:6a:de:e5:ea: b3:92:0f:05:5c:52:65:a1:13:2b:48:0b:f1:1f:78: cf:eb:c1:01:49:db:8b:e3:5f:73:66:d5:3d:bb:ed: be:d0:f3:3a:1c:0f:cd:7a:55:65:dd:b2:38:31:0d: ff:67:e5:5a:bc:a2:66:43:30:16:ba:c5:c4:6b:79: 30:43:30:a3:d4:f4:fa:26:68:fb:79:98:7e:cd:25: a0:1b:db:da:07:f0:a7:84:4c:bd:08:da:5f:25:23: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:29:20:86:B5:BA:53:A1:E5:3D:95:E0:97:F3:1A:45:7F:38:0E X509v3 Authority Key Identifier: keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:ee:53:0f:bb:8a:9d:c7:f4:7b:0a:0f:d4:9e:61:8e:1c: d8:76:ca:bd:06:7f:8a:26:fc:24:1a:aa:71:4c:9b:59:6a:38: e7:6c:0b:11:15:22:72:20:dd:9b:8e:fb:ad:6c:e1:88:4b:62: 2a:6f:f7:7b:ac:8b:54:d2:23:49:de:2a:05:54:87:0a:58:15: 12:01:2e:ac:6d:46:b2:1b:55:da:51:eb:d3:58:de:fa:a2:5a: 6b:38:96:20:04:8d:d0:41:49:a2:6c:9d:60:83:3e:37:62:d8: eb:e1:3f:f9:e3:89:f7:d9:0d:37:17:56:87:e2:59:e2:d4:a0: d3:af:5f:f2:35:e1:c3:dd:0f:6d:56:34:b0:8a:f8:7f:4a:58: 73:a1:96:3c:a8:f8:0d:27:9b:e0:7d:94:fd:26:b9:43:7e:65: 3c:ae:d5:28:75:2e:e0:d6:9e:aa:72:ba:f5:91:e0:fe:c7:99: b6:f9:97:0d:7b:40:9a:17:8b:be:59:9f:5f:0c:20:0a:f8:f6: 68:c6:c4:b6:24:20:8d:98:17:32:b5:1f:5e:75:9c:c5:f6:ce: 92:fc:49:43:2d:09:f9:ad:72:38:54:f0:3a:49:dc:f3:22:5e: 67:7e:99:45:3b:d0:e0:ae:20:c5:3b:9b:8b:7b:3b:25:1f:76: ba:90:ab:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+nImzK7xLrb2gcFCxaxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh M2Q0NjUwHhcNMjUxMjE4MTUwMDU1WhcNMjUxMjE5MTUwMDU1WjAzMTEwLwYDVQQD EyhlYThhMjkyMDg2YjViYTUzYTFlNTNkOTVlMDk3ZjMxYTQ1N2YzODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBauerlgJ6xAxXhxmnYfyc8zUGmD BtgxhsuvxuyVC6RNxQ+c+TmW0dl7C4TJcFWoflRktPiemCYwNVd1uWCqQjr0bCNp ltWFYHOLstz1MqQcxzAEluZK02qG1wFCQ78ywUXW/dwN/9HjW20P0b0h6ZX28iar cjMk0QhCoYpRle2J3QPGiJpeKmo4OrAyuVVXmgmO72msC1fHFN7omBpLdmre5eqz kg8FXFJloRMrSAvxH3jP68EBSduL419zZtU9u+2+0PM6HA/NelVl3bI4MQ3/Z+Va vKJmQzAWusXEa3kwQzCj1PT6Jmj7eZh+zSWgG9vaB/CnhEy9CNpfJSPNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqKKSCGtbpToeU9leCX8xpFfzgOMB8GA1UdIwQY MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDPuUw+7 ip3H9HsKD9SeYY4c2HbKvQZ/iib8JBqqcUybWWo452wLERUiciDdm477rWzhiEti Km/3e6yLVNIjSd4qBVSHClgVEgEurG1GshtV2lHr01je+qJaaziWIASN0EFJomyd YIM+N2LY6+E/+eOJ99kNNxdWh+JZ4tSg069f8jXhw90PbVY0sIr4f0pYc6GWPKj4 DSeb4H2U/Sa5Q35lPK7VKHUu4NaeqnK69ZHg/seZtvmXDXtAmheLvlmfXwwgCvj2 aMbEtiQgjZgXMrUfXnWcxfbOkvxJQy0J+a1yOFTwOknc8yJeZ36ZRTvQ4K4gxTub i3s7JR92upCrMA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:56 2025 by rpki-client