This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json) Hash identifier: g9/upUtKJRb5zQgshSrwSELLwIMH+hzfLmUbkdIYZQ8= Subject key identifier: 10:42:31:C3:FD:70:C0:6F:D6:1D:E1:CE:03:A0:21:5B:02:16:17:36 Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Certificate serial: 019B680D0D7F016C24786F2B268465D527A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft Manifest number: 0D9D Signing time: Mon 29 Dec 2025 03:00:44 +0000 Manifest this update: Mon 29 Dec 2025 03:00:44 +0000 Manifest next update: Tue 30 Dec 2025 03:00:44 +0000 Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: nJl/Cbc+3oCHu363XvvpGU/XvsB1A/f8m+QhxuVGJXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:0d:7f:01:6c:24:78:6f:2b:26:84:65:d5:27:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465 Validity Not Before: Dec 29 03:00:44 2025 GMT Not After : Dec 30 03:00:44 2025 GMT Subject: CN=104231c3fd70c06fd61de1ce03a0215b02161736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:31:29:25:ff:1e:3b:c1:74:f3:c6:69:37: 32:a3:23:4e:2a:3e:9a:a0:0f:49:6b:95:1f:32:0c: a7:14:c9:6b:c7:3a:0b:a2:93:2a:fe:ce:10:46:93: 2b:02:3d:01:95:46:ee:86:37:ff:63:2d:67:a0:aa: 72:db:3a:70:9f:14:4c:c9:f0:44:a6:4f:83:be:35: f6:c8:11:53:27:da:3c:cd:69:b6:15:8d:58:41:e7: a6:ee:eb:cd:af:64:0a:4f:88:1f:37:53:21:89:66: 8a:7f:3f:97:ff:2c:ee:5a:16:ae:50:e7:e7:0b:c2: 1d:cb:fc:4d:9b:f5:3d:86:60:41:b2:2e:09:c0:de: 28:0c:6f:37:84:e5:31:b2:8b:ea:23:1b:0f:69:3f: 64:f0:5f:db:9a:b3:1b:c1:fa:68:5b:e8:f1:11:32: ed:d9:05:59:4d:1a:32:f6:21:07:c0:17:47:fe:9e: c4:61:bd:a5:79:c5:41:54:b8:3b:95:62:3d:ec:c6: 5c:6d:d4:d0:92:3d:23:91:8a:6b:80:5e:b3:17:67: 75:49:d1:7f:be:51:fc:9d:84:c8:b9:95:2d:19:d0: b3:38:96:97:1e:93:58:a0:4d:59:64:51:a1:88:34: f0:7c:fa:20:74:af:bc:e3:25:3e:ca:61:35:81:0e: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:42:31:C3:FD:70:C0:6F:D6:1D:E1:CE:03:A0:21:5B:02:16:17:36 X509v3 Authority Key Identifier: keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:c5:5b:7b:75:f1:50:3c:3b:a2:57:05:3f:d1:26:2d:27: c2:fc:2a:c8:bc:56:1a:6b:0a:b4:b3:42:2f:47:d1:f1:2d:6f: 91:cb:37:66:e1:f1:a9:1c:fe:94:4b:47:a8:ec:43:d1:16:6e: 29:96:cb:b9:d4:b2:f6:91:a6:54:e6:da:e3:5b:70:f9:3b:85: c0:c3:4c:90:ad:77:55:66:60:34:b1:82:57:e8:50:ac:ac:09: 94:42:0b:f7:b2:25:bd:d9:d2:c5:cb:ef:0a:31:ca:4d:01:3a: 97:f0:50:ed:c7:c7:80:c8:61:7b:67:37:a9:61:cb:4e:f2:79: bb:e8:ff:65:b1:27:ad:04:2f:96:63:97:cd:4b:76:4e:f7:2f: bd:05:fc:fb:23:9f:21:db:a8:93:f4:6f:8d:04:fa:3c:dd:03: c7:b3:3a:c1:ec:30:54:aa:24:29:ca:11:12:16:ed:13:6f:0f: d3:bd:a9:c0:98:72:07:e1:7b:e8:59:9f:33:e8:4c:84:7a:1d: ba:d7:b6:f8:53:e0:1c:bc:75:a5:2b:54:d9:6e:59:e2:15:f3: 94:82:b8:b7:f8:5d:72:68:24:d3:52:cd:ca:8b:41:c4:d8:19: f1:79:42:38:7b:a4:78:80:4f:9c:cd:83:01:26:50:18:f2:7b: 54:7a:26:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDQ1/AWwkeG8rJoRl1SeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh M2Q0NjUwHhcNMjUxMjI5MDMwMDQ0WhcNMjUxMjMwMDMwMDQ0WjAzMTEwLwYDVQQD EygxMDQyMzFjM2ZkNzBjMDZmZDYxZGUxY2UwM2EwMjE1YjAyMTYxNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj8xKSX/HjvBdPPGaTcyoyNOKj6a oA9Ja5UfMgynFMlrxzoLopMq/s4QRpMrAj0BlUbuhjf/Yy1noKpy2zpwnxRMyfBE pk+DvjX2yBFTJ9o8zWm2FY1YQeem7uvNr2QKT4gfN1MhiWaKfz+X/yzuWhauUOfn C8Idy/xNm/U9hmBBsi4JwN4oDG83hOUxsovqIxsPaT9k8F/bmrMbwfpoW+jxETLt 2QVZTRoy9iEHwBdH/p7EYb2lecVBVLg7lWI97MZcbdTQkj0jkYprgF6zF2d1SdF/ vlH8nYTIuZUtGdCzOJaXHpNYoE1ZZFGhiDTwfPogdK+84yU+ymE1gQ6p6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBCMcP9cMBv1h3hzgOgIVsCFhc2MB8GA1UdIwQY MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg7FW3t1 8VA8O6JXBT/RJi0nwvwqyLxWGmsKtLNCL0fR8S1vkcs3ZuHxqRz+lEtHqOxD0RZu KZbLudSy9pGmVOba41tw+TuFwMNMkK13VWZgNLGCV+hQrKwJlEIL97IlvdnSxcvv CjHKTQE6l/BQ7cfHgMhhe2c3qWHLTvJ5u+j/ZbEnrQQvlmOXzUt2TvcvvQX8+yOf Iduok/RvjQT6PN0Dx7M6wewwVKokKcoREhbtE28P072pwJhyB+F76FmfM+hMhHod ute2+FPgHLx1pStU2W5Z4hXzlIK4t/hdcmgk01LNyotBxNgZ8XlCOHukeIBPnM2D ASZQGPJ7VHom9g== -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:58 2025 by rpki-client