This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json) Hash identifier: bqajyAXWfAHJGv15eW/TADB2bK9BQUEiAvgXuafT4uc= Subject key identifier: 11:C9:9D:11:08:F3:51:ED:A6:6C:2D:3F:A5:80:16:DE:07:CA:B2:10 Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd Certificate serial: 019B416D8F8219FFEA34720C27280D0FC8EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 15:00:57 +0000 Manifest this update: Sun 21 Dec 2025 15:00:57 +0000 Manifest next update: Mon 22 Dec 2025 15:00:57 +0000 Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: HeOcp0pwYcInrXeEt+uRrJGZT7Dq2wLO7YIg3BuA6NM=) 2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:8f:82:19:ff:ea:34:72:0c:27:28:0d:0f:c8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd Validity Not Before: Dec 21 15:00:57 2025 GMT Not After : Dec 22 15:00:57 2025 GMT Subject: CN=11c99d1108f351eda66c2d3fa58016de07cab210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:e3:f6:87:e1:94:67:c3:bf:56:ee:cc:c5: 37:33:00:73:19:de:95:bb:a6:0a:ee:17:4d:94:76: f7:9f:90:88:92:6a:b0:26:9d:59:7e:10:a3:55:24: a7:dd:e7:ff:36:36:48:7e:ec:26:2f:44:8a:27:49: c2:db:de:07:42:bf:c9:60:1d:2f:21:f1:89:d8:aa: 6c:4f:b7:92:75:c6:55:df:03:f7:a6:55:5b:e0:00: c1:3b:e5:3b:85:47:4a:c3:c2:31:00:05:82:0f:5c: 3f:fe:1d:8c:65:a8:dc:43:35:9b:cf:b9:41:3a:38: 9f:1f:f6:f9:43:64:f2:d8:53:36:7d:cc:54:eb:a4: ee:07:d4:de:62:26:bf:ce:76:8d:59:88:de:c6:20: cd:da:57:a5:d7:69:e4:a5:2b:5f:24:e0:fb:f1:bf: f5:ab:61:d2:57:e9:2d:6f:02:a4:2d:2e:6e:9f:3e: 8b:09:d8:99:ce:41:39:d3:16:3e:54:02:c9:f8:dc: 3f:44:40:bf:b6:07:b6:f8:36:10:60:da:e6:a7:26: 39:77:95:92:b7:90:1e:d7:de:ff:e0:56:8b:f5:e0: a9:36:40:5b:28:0c:7c:2f:3e:b9:c5:db:f2:95:9d: e4:77:f0:47:d8:50:5a:17:b1:59:45:72:7d:97:5e: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C9:9D:11:08:F3:51:ED:A6:6C:2D:3F:A5:80:16:DE:07:CA:B2:10 X509v3 Authority Key Identifier: keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:76:a4:22:89:4f:df:b7:09:50:a3:de:4e:ac:96:c6:0f: 93:ed:18:c0:41:20:be:04:d6:0b:68:62:a0:ca:34:53:7d:e8: e0:55:7d:27:56:40:df:15:8a:60:04:3a:14:a1:3c:97:7e:e4: d1:b6:88:bb:38:09:b8:0b:62:11:14:03:00:80:61:c7:b4:d7: 57:83:4a:3c:fd:fa:30:51:19:60:16:2b:e0:54:35:c5:ec:3a: 7f:04:ae:4c:53:78:ff:ac:02:27:95:ea:df:c2:3f:ac:f9:ff: 33:92:dd:8d:3c:26:7f:8c:9d:10:ea:99:a7:e1:7b:fa:bb:90: 42:e6:af:58:7d:84:21:de:2d:a2:3b:7a:21:0c:75:26:ff:e2: bc:04:ae:30:af:70:c7:5f:ff:66:d8:ac:bf:fe:1c:8e:2b:52: 56:39:98:6b:d7:d7:56:ca:13:ba:58:06:9e:f2:d0:d3:c9:04: a6:3a:a3:1f:c2:71:00:03:92:b0:65:b9:d2:65:6a:74:4e:3e: d1:e3:5e:18:58:1a:51:af:d9:45:10:9b:60:42:60:b3:56:97: 7c:28:8a:d4:2a:40:cf:d5:b9:d6:1b:af:db:28:7c:4e:df:e9: a3:83:c9:4e:e5:92:aa:d8:55:ce:f3:3f:44:32:1c:50:0e:87: ec:6a:88:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbY+CGf/qNHIMJygND8jsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh ODRiZGQwHhcNMjUxMjIxMTUwMDU3WhcNMjUxMjIyMTUwMDU3WjAzMTEwLwYDVQQD EygxMWM5OWQxMTA4ZjM1MWVkYTY2YzJkM2ZhNTgwMTZkZTA3Y2FiMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHj9ofhlGfDv1buzMU3MwBzGd6V u6YK7hdNlHb3n5CIkmqwJp1ZfhCjVSSn3ef/NjZIfuwmL0SKJ0nC294HQr/JYB0v IfGJ2KpsT7eSdcZV3wP3plVb4ADBO+U7hUdKw8IxAAWCD1w//h2MZajcQzWbz7lB OjifH/b5Q2Ty2FM2fcxU66TuB9TeYia/znaNWYjexiDN2lel12nkpStfJOD78b/1 q2HSV+ktbwKkLS5unz6LCdiZzkE50xY+VALJ+Nw/REC/tge2+DYQYNrmpyY5d5WS t5Ae197/4FaL9eCpNkBbKAx8Lz65xdvylZ3kd/BH2FBaF7FZRXJ9l15owwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHJnREI81HtpmwtP6WAFt4HyrIQMB8GA1UdIwQY MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt MzI5YTk5ZjBmMWI1LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1 LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHB2pCKJ T9+3CVCj3k6slsYPk+0YwEEgvgTWC2hioMo0U33o4FV9J1ZA3xWKYAQ6FKE8l37k 0baIuzgJuAtiERQDAIBhx7TXV4NKPP36MFEZYBYr4FQ1xew6fwSuTFN4/6wCJ5Xq 38I/rPn/M5LdjTwmf4ydEOqZp+F7+ruQQuavWH2EId4tojt6IQx1Jv/ivASuMK9w x1//Ztisv/4cjitSVjmYa9fXVsoTulgGnvLQ08kEpjqjH8JxAAOSsGW50mVqdE4+ 0eNeGFgaUa/ZRRCbYEJgs1aXfCiK1CpAz9W51huv2yh8Tt/po4PJTuWSqthVzvM/ RDIcUA6H7GqI1g== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:33 2025 by rpki-client