This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json) Hash identifier: D9iqu3G7fJ+sfS035YnJzcwHhOrShAABxHo9teNdzV4= Subject key identifier: 6A:98:4D:21:B4:CF:06:67:57:C5:BD:C7:7C:71:E1:4F:85:FB:0F:E4 Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Certificate serial: 019B39B3BE47E14C58D938B84B84B341E519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft Manifest number: 0A0C Signing time: Sat 20 Dec 2025 03:00:39 +0000 Manifest this update: Sat 20 Dec 2025 03:00:39 +0000 Manifest next update: Sun 21 Dec 2025 03:00:39 +0000 Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=) 2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: nUeLIrL3a7QGrTufG89lzX36EUWEu+ScdRn4dhS1Fm8=) 3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:be:47:e1:4c:58:d9:38:b8:4b:84:b3:41:e5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Validity Not Before: Dec 20 03:00:39 2025 GMT Not After : Dec 21 03:00:39 2025 GMT Subject: CN=6a984d21b4cf066757c5bdc77c71e14f85fb0fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:bd:21:d2:1f:2a:b9:51:e0:11:1a:be:e2: 95:7d:4d:62:62:f5:5e:83:7d:4f:fd:f2:b0:4a:9a: bd:11:01:95:11:23:13:a7:93:12:26:79:82:3a:88: cc:68:e7:6f:df:2e:76:c6:0d:fd:01:d0:0e:91:98: 54:b6:5c:82:7e:44:20:3f:76:93:bf:5f:40:63:e4: 67:21:e7:c4:55:6b:df:34:6e:cc:4d:48:07:be:a9: 42:dc:de:bc:d9:87:f8:a8:03:0b:5e:1d:dd:41:01: 91:8b:48:02:e7:e0:b4:28:a7:08:84:f5:5a:0a:c1: ce:35:29:52:f0:ae:98:d9:16:d3:d5:9d:18:77:56: cf:3d:ae:5a:e1:6e:c0:46:62:01:20:00:e4:fb:9a: 6f:55:b2:5d:55:72:99:e8:6f:ac:cb:8e:28:be:27: 07:f8:e4:4b:4e:6f:7f:4d:01:79:1f:cb:9e:90:73: 23:cf:a8:e9:ea:07:e4:9f:ed:83:7c:6e:33:64:ff: 60:e5:a5:15:02:4d:b0:ac:96:62:0b:7c:a6:94:69: b8:a0:5e:fa:ff:c7:82:5a:e9:0b:4b:4d:c9:35:61: 0b:6b:ab:0c:cf:64:19:c3:0c:3c:f4:6e:fc:bb:64: 49:23:22:08:6e:34:af:ab:7f:fb:20:e4:d2:b7:ce: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:98:4D:21:B4:CF:06:67:57:C5:BD:C7:7C:71:E1:4F:85:FB:0F:E4 X509v3 Authority Key Identifier: keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:3d:1d:02:a4:9e:49:4a:51:3a:33:df:6b:e8:46:51:43: 97:ee:64:a8:d6:d2:1f:a5:68:2e:ce:4f:c3:e6:15:aa:7a:67: 9a:53:85:07:96:a7:a7:47:3a:11:bf:f5:42:3a:7b:c9:29:25: 21:f4:d6:9c:ab:10:6b:1e:86:79:c5:78:9d:bb:c8:61:76:5a: 80:35:47:1b:5d:4b:a6:21:6f:ab:4d:01:ce:42:e8:7d:09:bf: 5a:07:db:fe:34:29:e0:08:73:88:cb:52:00:69:89:ac:95:89: c3:2c:9d:ba:0d:f5:3c:5d:2e:ec:11:8a:b5:3e:e0:bb:2d:dc: b2:05:b4:22:56:ee:69:27:40:67:1b:68:6e:75:5c:3c:1b:12: dc:ec:e4:e0:41:36:ba:e5:7e:85:05:71:27:50:a4:69:9d:87: 5c:bc:31:76:d8:24:07:f1:cf:7b:4d:5c:d1:cb:df:41:f6:99: 9a:7c:07:41:76:31:7d:6f:52:c3:0a:84:f9:25:4a:62:94:60: 1d:78:6e:1c:c9:1b:26:31:ae:d5:6e:de:cf:c2:f1:0f:99:1c: ae:97:ba:dc:f9:0d:a5:71:1e:9f:7a:2f:a1:91:56:e3:3f:cd: 95:28:fb:f2:dc:56:b0:99:21:26:80:3f:16:5b:23:fe:e1:fc: f3:cb:0b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s75H4UxY2Ti4S4SzQeUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0 YTdiYTgwHhcNMjUxMjIwMDMwMDM5WhcNMjUxMjIxMDMwMDM5WjAzMTEwLwYDVQQD Eyg2YTk4NGQyMWI0Y2YwNjY3NTdjNWJkYzc3YzcxZTE0Zjg1ZmIwZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPa9IdIfKrlR4BEavuKVfU1iYvVe g31P/fKwSpq9EQGVESMTp5MSJnmCOojMaOdv3y52xg39AdAOkZhUtlyCfkQgP3aT v19AY+RnIefEVWvfNG7MTUgHvqlC3N682Yf4qAMLXh3dQQGRi0gC5+C0KKcIhPVa CsHONSlS8K6Y2RbT1Z0Yd1bPPa5a4W7ARmIBIADk+5pvVbJdVXKZ6G+sy44ovicH +ORLTm9/TQF5H8uekHMjz6jp6gfkn+2DfG4zZP9g5aUVAk2wrJZiC3ymlGm4oF76 /8eCWukLS03JNWELa6sMz2QZwww89G78u2RJIyIIbjSvq3/7IOTSt8701wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqYTSG0zwZnV8W9x3xx4U+F+w/kMB8GA1UdIwQY MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlA9HQKk nklKUToz32voRlFDl+5kqNbSH6VoLs5Pw+YVqnpnmlOFB5anp0c6Eb/1Qjp7ySkl IfTWnKsQax6GecV4nbvIYXZagDVHG11LpiFvq00BzkLofQm/Wgfb/jQp4AhziMtS AGmJrJWJwyydug31PF0u7BGKtT7guy3csgW0IlbuaSdAZxtobnVcPBsS3Ozk4EE2 uuV+hQVxJ1CkaZ2HXLwxdtgkB/HPe01c0cvfQfaZmnwHQXYxfW9SwwqE+SVKYpRg HXhuHMkbJjGu1W7ez8LxD5kcrpe63PkNpXEen3ovoZFW4z/NlSj78txWsJkhJoA/ Flsj/uH888sLfg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:39 2025 by rpki-client