This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json) Hash identifier: bmBeOMHRgccD0q0dRIxu8g3aihdKm+5ScyjICHnyfqY= Subject key identifier: A0:E8:F3:C6:36:F9:34:D4:FD:A6:93:4C:7F:9A:D8:14:2B:D2:A1:E2 Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Certificate serial: 019B4211F9256E758737147B1CF241B478C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 18:00:32 +0000 Manifest this update: Sun 21 Dec 2025 18:00:32 +0000 Manifest next update: Mon 22 Dec 2025 18:00:32 +0000 Files and hashes: 1: 22wVvYqfysfBaYOhYbGdPQUpw1I.roa (hash: FtF0xfCRr+CFbBuExeP2kC84eEIje6JYGOJe1D6MqPk=) 2: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: LnOYzV/uWi8iuhmb1d5VwxQb7RGHzl8hxWkx9PqMkIo=) 3: 4riCGHi3vw5cyBXdYggmG3yakjU.roa (hash: A/skujedjujhYf3+uRyasfG7Uyl+RTN8KOVauD7RAjY=) 4: 6Ds5RVmgnVhibq3q_o76tyxqGF0.roa (hash: ZaNEOkNbzSY+y1rnsqLobnF8H5v0hgQ/dfmbwaaeZnc=) 5: Cv8Q_peVRf64Y1ffl4Mm-dEwtA4.roa (hash: JMed3eKfX/IuEsmyZ1/hdxmL+TW6bqbpaU7++Ek9hC8=) 6: ooXXO8OQWNg8QEaR5aKghUKIeYs.roa (hash: ILCE/LCGaI5afO3rmo9l7gFkr7RayhGTkBNHUuWC4aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:11:f9:25:6e:75:87:37:14:7b:1c:f2:41:b4:78:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Validity Not Before: Dec 21 18:00:32 2025 GMT Not After : Dec 22 18:00:32 2025 GMT Subject: CN=a0e8f3c636f934d4fda6934c7f9ad8142bd2a1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:9b:e8:67:e9:a9:0d:e0:04:e7:9b:8b:1a: ad:10:65:b3:72:f8:72:10:f6:9f:69:eb:fb:6d:dc: 71:52:90:f2:a1:1a:d9:9a:0a:b5:63:1f:96:13:fd: 6f:49:b6:09:a0:9a:40:7f:97:be:1b:4d:4e:53:db: 75:3c:c0:a3:a3:e6:e1:4e:5e:86:89:c1:16:ca:23: 1c:b2:40:f3:89:89:03:6f:1e:ae:e2:9c:9c:2f:7d: 39:ea:dc:2d:a7:33:49:17:46:69:0d:e4:f9:a1:e7: 5f:a8:c5:23:31:37:09:7a:e0:1e:ed:97:3d:ab:90: af:7d:0b:01:6f:7c:65:7a:17:88:54:17:a1:e8:96: ec:0f:8a:d5:41:d9:a5:34:fe:64:1e:35:f9:25:72: e3:7e:31:f9:14:a1:c4:c8:40:56:5b:05:89:6a:1b: ae:26:f2:e7:a0:32:b6:9e:b9:83:79:3f:bf:d7:12: 03:89:d1:bb:b2:1d:1e:9d:99:32:be:aa:2d:56:4b: a1:76:5b:b6:c9:37:93:4d:54:7d:03:73:96:bf:fb: 1c:09:6a:40:a8:25:bb:dd:06:a6:44:db:80:be:71: 75:3a:6d:b6:09:7f:76:13:60:33:40:7f:77:67:70: e7:d4:d0:0c:ee:f0:81:3f:e0:b2:b6:07:01:52:6d: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:F3:C6:36:F9:34:D4:FD:A6:93:4C:7F:9A:D8:14:2B:D2:A1:E2 X509v3 Authority Key Identifier: keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4d:44:dc:18:e5:95:a6:a2:7d:14:71:63:7d:a6:92:91:97: 44:57:2f:ee:16:f1:44:b2:fd:c3:03:f1:2b:f0:cc:f9:e7:ac: f3:fb:ac:6b:fd:55:53:78:df:d2:12:b0:02:82:6d:63:b3:05: c4:23:f1:f8:f6:d0:5b:ac:95:c9:b1:18:e0:c5:74:07:72:0f: 75:0d:bb:05:54:8d:3b:38:a9:e2:78:8f:d6:9b:01:6a:0c:2f: ad:d5:d1:46:8a:83:a7:14:b2:4b:c1:8d:30:92:5c:ff:6c:f0: 0a:56:26:2c:16:f1:ef:88:21:e4:63:4f:8f:fa:fa:53:62:5f: 4b:2c:d7:d7:ed:1f:c8:c7:89:c3:dd:ea:f8:1a:6c:64:a7:21: 5f:79:e6:1c:63:48:f6:cd:7c:3f:71:76:45:89:a1:0d:0e:12: 2a:02:a3:45:c2:56:1c:79:22:aa:a9:5e:53:c0:d5:9f:e9:25: 8b:a3:a8:9a:c0:85:b7:5c:7a:68:74:61:95:e5:d8:1a:22:fe: b4:25:08:fa:46:61:60:e5:2d:70:f3:95:20:96:be:53:e0:21: 52:f2:a7:83:14:54:5c:fe:b7:e7:0c:7d:95:f3:05:90:f5:34: ba:2a:90:81:2f:34:69:67:ab:f5:37:0d:e2:35:cf:69:04:77: f2:8e:69:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEfklbnWHNxR7HPJBtHjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi ZTFiMTEwHhcNMjUxMjIxMTgwMDMyWhcNMjUxMjIyMTgwMDMyWjAzMTEwLwYDVQQD EyhhMGU4ZjNjNjM2ZjkzNGQ0ZmRhNjkzNGM3ZjlhZDgxNDJiZDJhMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NWb6GfpqQ3gBOebixqtEGWzcvhy EPafaev7bdxxUpDyoRrZmgq1Yx+WE/1vSbYJoJpAf5e+G01OU9t1PMCjo+bhTl6G icEWyiMcskDziYkDbx6u4pycL3056twtpzNJF0ZpDeT5oedfqMUjMTcJeuAe7Zc9 q5CvfQsBb3xleheIVBeh6JbsD4rVQdmlNP5kHjX5JXLjfjH5FKHEyEBWWwWJahuu JvLnoDK2nrmDeT+/1xIDidG7sh0enZkyvqotVkuhdlu2yTeTTVR9A3OWv/scCWpA qCW73QamRNuAvnF1Om22CX92E2AzQH93Z3Dn1NAM7vCBP+CytgcBUm094wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDo88Y2+TTU/aaTTH+a2BQr0qHiMB8GA1UdIwQY MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk1E3Bjl laaifRRxY32mkpGXRFcv7hbxRLL9wwPxK/DM+ees8/usa/1VU3jf0hKwAoJtY7MF xCPx+PbQW6yVybEY4MV0B3IPdQ27BVSNOzip4niP1psBagwvrdXRRoqDpxSyS8GN MJJc/2zwClYmLBbx74gh5GNPj/r6U2JfSyzX1+0fyMeJw93q+BpsZKchX3nmHGNI 9s18P3F2RYmhDQ4SKgKjRcJWHHkiqqleU8DVn+kli6OomsCFt1x6aHRhleXYGiL+ tCUI+kZhYOUtcPOVIJa+U+AhUvKngxRUXP635wx9lfMFkPU0uiqQgS80aWer9TcN 4jXPaQR38o5p6w== -----END CERTIFICATE-----Generated at Sun Dec 21 19:24:50 2025 by rpki-client