This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft File: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json) Hash identifier: OrabrhhORcckiQa6QUVSr42ohn5ces7YlAaDn2vrBrA= Subject key identifier: B8:ED:91:B8:09:0A:5B:34:73:AF:7C:80:96:33:32:75:FF:6E:1A:A7 Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Certificate serial: 019B3DC76E6DD7EF245A2ACE631BD7C5970D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft Manifest number: 0120 Signing time: Sat 20 Dec 2025 22:00:38 +0000 Manifest this update: Sat 20 Dec 2025 22:00:38 +0000 Manifest next update: Sun 21 Dec 2025 22:00:38 +0000 Files and hashes: 1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: VXOs+vSrLMKLZX0p+9btZkjtSkLuurnu8k8fPXhvWNc=) 2: 73mAifFbbkq89y_6L8I3tNV-FFU.roa (hash: NX+SZCE/iRZZ/qn+fphnC6ahtdeAZSBcTHMFH46HmuE=) 3: x-ZoxCE3dUHDoEInx3KHfEs04No.roa (hash: PP3ssbmv8MfAGIHN4N1jOdg4vgiSdSRg+O85vMICYao=) 4: xjXrY-VAjEXl4AAAJVLLeMGfATA.roa (hash: 4ceK2GE5dyzV4qQFHetdVESaIRknf36gz2mazUprQdk=) 5: ylzVDNqLg-U7e19yN1XUnVv4-mM.roa (hash: xAtySOG4/LBLHBr0GZndFnBbQp0zDTEtHkUbGSqzQLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:6e:6d:d7:ef:24:5a:2a:ce:63:1b:d7:c5:97:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Validity Not Before: Dec 20 22:00:38 2025 GMT Not After : Dec 21 22:00:38 2025 GMT Subject: CN=b8ed91b8090a5b3473af7c8096333275ff6e1aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:60:47:81:7c:bf:f5:15:07:b6:91:be:cd: ac:d2:12:26:3b:07:64:c3:9c:66:93:8c:2e:fa:b7: 96:00:75:e2:9c:f7:8c:cb:36:9f:eb:57:35:48:7d: 2c:73:ab:ab:a6:5a:53:f2:5b:dd:83:3b:4b:80:66: 36:43:53:56:1a:5e:81:db:4a:97:f9:82:e9:1c:ec: 75:56:22:8c:e3:69:39:24:5c:ac:20:fe:2a:77:a4: 81:53:21:4b:be:a9:30:ea:dc:da:6c:0c:c4:72:46: 29:01:51:26:ad:95:23:50:bd:6c:96:a8:de:1d:25: cf:9f:38:84:36:19:dd:be:e0:f0:07:3d:a8:4c:33: 10:39:49:79:22:6a:66:d7:34:2a:98:15:32:22:41: b6:26:7a:3a:df:35:63:b2:f6:1f:f7:7f:01:70:b0: 0e:e3:c0:65:f4:3b:b0:ec:81:9c:62:7d:0c:d6:8d: d9:cf:2b:e9:c1:e1:37:ad:b6:fd:74:7e:d2:0c:2b: b0:1e:e4:3f:af:48:59:87:57:fe:56:0b:d2:c9:36: 3b:e3:5e:3c:7c:85:6b:ec:bc:42:6c:48:50:8a:3d: 28:f4:b4:c8:68:e3:67:95:60:fe:d1:48:26:7f:19: af:fb:58:06:cb:73:15:cd:bc:a9:46:82:9d:94:9f: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:91:B8:09:0A:5B:34:73:AF:7C:80:96:33:32:75:FF:6E:1A:A7 X509v3 Authority Key Identifier: keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:51:ad:e9:9b:bb:6d:0a:e3:3c:33:28:22:b7:6b:fd:a4:e3: ff:ac:96:d1:10:88:5f:b7:dc:47:a1:af:20:ff:1c:63:6e:35: d1:d0:e9:50:30:7e:59:ab:13:fc:bf:ae:61:71:6f:28:3d:9a: 48:d7:83:7a:e7:be:5b:28:3a:50:d8:0d:39:0a:7a:be:e4:ad: 04:64:89:ea:99:58:ca:c7:57:7b:73:39:25:4d:91:d6:5a:de: 4d:70:5c:98:6d:77:9a:d1:4e:7f:cb:06:b8:45:4c:a6:58:69: fb:10:14:0d:42:98:a4:00:85:aa:12:7f:07:95:e8:77:d5:30: 4d:35:4d:21:2a:01:cd:0c:69:fc:8f:32:b5:57:de:ec:c5:23: 61:c8:38:70:94:76:68:23:b2:af:f7:c6:4b:69:df:08:9a:02: 20:71:52:56:1a:79:93:78:84:db:f0:68:a1:a1:d6:bc:35:f5: 1c:09:78:66:c6:46:55:f4:61:f3:b9:2b:a2:b4:3b:b8:21:3f: ab:8c:72:e5:f9:ed:90:eb:9f:29:c7:ef:41:1c:c5:1b:8f:a3: 2f:04:3d:19:d5:73:c1:57:14:79:3c:fa:7c:9d:f0:e0:c3:70: d1:d3:97:9e:20:4d:df:da:67:6e:ab:f2:d1:5d:57:04:30:6b: 4e:5b:38:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x25t1+8kWirOYxvXxZcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ4M2I3ODMwOGQwOWU2NWQyMTUwZWFjMTYyM2RlZTk2 ZDRjNGIwHhcNMjUxMjIwMjIwMDM4WhcNMjUxMjIxMjIwMDM4WjAzMTEwLwYDVQQD EyhiOGVkOTFiODA5MGE1YjM0NzNhZjdjODA5NjMzMzI3NWZmNmUxYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1BgR4F8v/UVB7aRvs2s0hImOwdk w5xmk4wu+reWAHXinPeMyzaf61c1SH0sc6urplpT8lvdgztLgGY2Q1NWGl6B20qX +YLpHOx1ViKM42k5JFysIP4qd6SBUyFLvqkw6tzabAzEckYpAVEmrZUjUL1slqje HSXPnziENhndvuDwBz2oTDMQOUl5Impm1zQqmBUyIkG2Jno63zVjsvYf938BcLAO 48Bl9Duw7IGcYn0M1o3ZzyvpweE3rbb9dH7SDCuwHuQ/r0hZh1f+VgvSyTY74148 fIVr7LxCbEhQij0o9LTIaONnlWD+0Ugmfxmv+1gGy3MVzbypRoKdlJ+HOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjtkbgJCls0c698gJYzMnX/bhqnMB8GA1UdIwQY MBaAFOItg7eDCNCeZdIVDqwWI97pbUxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQt NjAzYjI5ZmQxYTA4LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQtNjAzYjI5ZmQxYTA4 LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVGt6Zu7 bQrjPDMoIrdr/aTj/6yW0RCIX7fcR6GvIP8cY2410dDpUDB+WasT/L+uYXFvKD2a SNeDeue+Wyg6UNgNOQp6vuStBGSJ6plYysdXe3M5JU2R1lreTXBcmG13mtFOf8sG uEVMplhp+xAUDUKYpACFqhJ/B5Xod9UwTTVNISoBzQxp/I8ytVfe7MUjYcg4cJR2 aCOyr/fGS2nfCJoCIHFSVhp5k3iE2/BooaHWvDX1HAl4ZsZGVfRh87krorQ7uCE/ q4xy5fntkOufKcfvQRzFG4+jLwQ9GdVzwVcUeTz6fJ3w4MNw0dOXniBN39pnbqvy 0V1XBDBrTls49g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:45 2025 by rpki-client