This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json) Hash identifier: +jCeekwXEsw+F28xCT+XkFakbkZ4IjYc/s8DEKPEEcI= Subject key identifier: DF:C1:B2:B0:C6:6E:45:B4:DF:17:AD:0A:4C:B6:BC:3B:00:93:26:2D Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71 Certificate serial: 019B3CB530BAB0291343B0D1DC9CD1D17BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:01:05 +0000 Manifest this update: Sat 20 Dec 2025 17:01:05 +0000 Manifest next update: Sun 21 Dec 2025 17:01:05 +0000 Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: taFPBIxXZ3+gswHEQa5fsnmlza8tMthqFAtwhTuL9hw=) 2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:30:ba:b0:29:13:43:b0:d1:dc:9c:d1:d1:7b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71 Validity Not Before: Dec 20 17:01:05 2025 GMT Not After : Dec 21 17:01:05 2025 GMT Subject: CN=dfc1b2b0c66e45b4df17ad0a4cb6bc3b0093262d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:7b:3c:1a:c4:68:bc:c5:db:da:d3:fb:c6: 38:6b:6d:66:2d:0d:1e:bf:6c:6f:7b:33:95:d8:a6: d6:55:77:45:97:7c:8b:a9:ab:dc:7b:58:f8:68:cb: af:e6:45:8b:ac:22:8f:4e:78:6d:0f:60:e3:51:34: 96:42:bd:54:89:05:b2:08:4b:1c:ef:c8:8b:c3:2b: c8:28:41:d9:d9:76:98:8f:7d:e6:24:bb:43:1c:a0: dd:d5:fb:e3:ab:1b:c8:33:4c:29:ce:43:ae:c0:47: 6e:29:d5:52:4c:72:6d:85:99:c2:4a:23:c4:fe:43: 51:e6:49:9a:f3:f9:1a:cc:64:ce:c6:a4:b8:6c:7f: cd:d5:4d:8f:88:a4:15:16:bb:db:9a:b4:44:18:02: 1a:9c:bf:01:54:b7:60:12:74:b6:47:d8:cf:1e:10: 5f:a8:72:4a:23:24:11:6e:a7:87:cb:58:b3:92:c5: cc:52:06:6f:53:f6:29:aa:1a:1f:62:ce:db:57:37: 1b:f9:b8:16:d7:8f:b5:7e:b7:83:75:39:03:18:ad: 2c:a8:6d:c3:64:c7:06:df:e3:5b:d6:28:b4:dd:88: ee:cf:f8:b2:7b:8a:74:9a:e7:3e:6c:b7:02:63:dd: 04:bd:fa:f5:69:39:c8:10:68:02:69:09:1a:13:a1: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:B2:B0:C6:6E:45:B4:DF:17:AD:0A:4C:B6:BC:3B:00:93:26:2D X509v3 Authority Key Identifier: keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5e:ee:ef:9e:26:37:83:21:b1:0f:eb:b7:42:85:5a:85:ef: c2:19:29:55:fc:c8:0f:a2:af:4c:dd:6c:f4:fd:d5:3b:0a:2e: 0f:16:3c:7d:95:65:76:3d:23:d1:9a:87:2b:37:1a:86:d8:b3: 3a:0f:64:79:5a:95:94:2d:f2:a4:fe:76:16:00:53:a4:af:0c: 54:49:30:13:47:0e:27:18:73:68:65:f9:33:7d:18:86:fd:2d: c6:b2:40:16:80:67:cc:03:1e:47:f1:13:c5:09:69:e0:be:69: 49:ad:03:df:a0:c2:54:db:da:be:d3:c3:b1:c3:3b:24:9e:ca: b8:ef:92:a1:b9:28:5a:35:f9:1f:61:85:66:19:3c:98:a8:38: 24:37:15:27:fd:87:a3:83:ab:b5:28:2d:b3:49:c7:94:ab:d1: ab:f3:21:8f:22:e0:15:80:ee:3d:ee:db:70:8d:13:0a:8d:d4: 3c:c1:45:3c:6f:c0:df:4c:17:6e:08:63:37:6a:2d:e5:48:19: f7:cf:76:b2:d3:82:2c:8b:d5:08:10:b8:91:5b:9b:6d:11:a8: 60:4a:31:63:d5:4d:2b:44:29:b5:f1:b6:68:a6:d8:dc:ae:8b: c9:86:98:b9:d4:4b:64:3a:9f:41:c5:47:e6:0c:c2:2a:81:b8: 7b:3e:4f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTC6sCkTQ7DR3JzR0Xu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1 NGRlNzEwHhcNMjUxMjIwMTcwMTA1WhcNMjUxMjIxMTcwMTA1WjAzMTEwLwYDVQQD EyhkZmMxYjJiMGM2NmU0NWI0ZGYxN2FkMGE0Y2I2YmMzYjAwOTMyNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTN7PBrEaLzF29rT+8Y4a21mLQ0e v2xvezOV2KbWVXdFl3yLqavce1j4aMuv5kWLrCKPTnhtD2DjUTSWQr1UiQWyCEsc 78iLwyvIKEHZ2XaYj33mJLtDHKDd1fvjqxvIM0wpzkOuwEduKdVSTHJthZnCSiPE /kNR5kma8/kazGTOxqS4bH/N1U2PiKQVFrvbmrREGAIanL8BVLdgEnS2R9jPHhBf qHJKIyQRbqeHy1izksXMUgZvU/YpqhofYs7bVzcb+bgW14+1freDdTkDGK0sqG3D ZMcG3+Nb1ii03Yjuz/iye4p0muc+bLcCY90Evfr1aTnIEGgCaQkaE6HuYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/BsrDGbkW03xetCky2vDsAkyYtMB8GA1UdIwQY MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEF7u754m N4MhsQ/rt0KFWoXvwhkpVfzID6KvTN1s9P3VOwouDxY8fZVldj0j0ZqHKzcahtiz Og9keVqVlC3ypP52FgBTpK8MVEkwE0cOJxhzaGX5M30Yhv0txrJAFoBnzAMeR/ET xQlp4L5pSa0D36DCVNvavtPDscM7JJ7KuO+SobkoWjX5H2GFZhk8mKg4JDcVJ/2H o4OrtSgts0nHlKvRq/MhjyLgFYDuPe7bcI0TCo3UPMFFPG/A30wXbghjN2ot5UgZ 9892stOCLIvVCBC4kVubbRGoYEoxY9VNK0QptfG2aKbY3K6LyYaYudRLZDqfQcVH 5gzCKoG4ez5PuA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:12 2025 by rpki-client