This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json) Hash identifier: eP2XM/m0WRBAYbEt8ZLyhVtw2ipLgiSLt70M2g4Mw18= Subject key identifier: 90:B7:46:B8:DA:80:01:11:8C:71:1F:D2:67:7C:CD:44:00:F2:E9:6E Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019B4FCE74011CC793816C06FEBA86D70ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft Manifest number: 11F4 Signing time: Wed 24 Dec 2025 10:01:28 +0000 Manifest this update: Wed 24 Dec 2025 10:01:28 +0000 Manifest next update: Thu 25 Dec 2025 10:01:28 +0000 Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: xr7d1W2C3bq+aAsX0590xaNvlDo5H83iWIiKl4O9hos=) 2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:74:01:1c:c7:93:81:6c:06:fe:ba:86:d7:0e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Dec 24 10:01:28 2025 GMT Not After : Dec 25 10:01:28 2025 GMT Subject: CN=90b746b8da8001118c711fd2677ccd4400f2e96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:da:58:ca:4b:bd:a2:c8:d4:94:a9:ef:f9: 94:4a:ea:c6:cc:ab:f4:e1:54:35:c8:a1:ec:b4:9c: 3f:a6:1c:f1:3d:79:76:14:c5:94:79:96:4f:37:75: b8:a1:e1:a6:ed:bd:d7:8a:13:ae:4d:99:83:cf:7f: 87:d2:41:a6:cc:a7:21:7e:65:74:b8:b2:21:b4:8e: 35:54:45:72:14:d4:48:52:0b:9f:a0:03:30:0a:38: 45:a7:a0:1d:31:e0:a9:be:4f:6b:c1:69:93:17:98: c5:37:45:8a:04:9b:9a:25:08:c8:d9:e0:6e:81:12: f0:4f:62:02:34:f8:4f:ee:d4:9e:e6:9a:6d:fd:34: e3:5d:f5:69:71:b8:bf:9d:07:b7:a0:6b:18:b1:f9: e4:fc:eb:49:ed:0e:82:95:db:93:05:08:5b:fd:44: 28:b4:cf:b7:d4:d8:fe:53:9e:7a:7d:1b:51:b6:26: 8f:6d:0a:65:16:61:7e:f3:f5:70:5a:ce:68:3d:c2: 0c:c1:5b:a0:1d:c8:37:f2:03:a3:7b:cb:a4:b5:56: ea:2e:fe:ef:91:c9:aa:10:60:e9:4a:b5:26:43:45: 7e:fe:61:37:cb:d0:ac:1c:51:9d:24:cd:98:8d:bc: 0c:48:91:0b:61:9a:c8:3f:be:54:1c:3f:02:71:3a: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B7:46:B8:DA:80:01:11:8C:71:1F:D2:67:7C:CD:44:00:F2:E9:6E X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:5e:20:34:cd:25:d3:12:10:45:76:93:27:49:db:b3:6d: c9:dc:2b:0c:dc:78:37:17:b1:fa:39:31:a0:18:8e:71:90:ad: e8:79:6f:e4:10:a8:bf:69:67:42:30:d1:35:8b:05:b0:9b:a2: 3d:97:79:4f:e9:2d:0c:1a:a7:49:7f:d7:67:bf:74:7d:81:e5: f6:8e:d0:d2:65:e8:50:91:00:6b:36:e5:ad:ac:23:30:88:35: ed:62:f5:ec:95:7a:f4:ef:de:a8:51:46:e2:79:af:7e:62:d2: 6c:32:d9:c7:23:71:9e:db:01:5b:1f:e1:01:6d:3e:2d:ee:7f: 39:44:1a:d6:02:d9:f0:e7:d4:05:46:28:37:82:67:31:9e:cb: 0c:ff:d1:1b:41:d3:3c:d8:b7:17:c5:73:77:9a:04:71:a1:da: dd:74:47:02:c3:3f:64:d2:6b:4c:0b:89:16:12:36:af:0f:e4: 42:f1:b8:a8:d3:53:d4:40:c1:d2:3a:ed:b8:8b:77:cd:96:c1: 0f:c4:47:90:2f:fb:10:df:c8:c6:d5:49:ed:1d:c6:77:c5:9f: 42:a7:c6:e3:3d:4a:96:28:e0:a4:d0:3d:e1:bf:fa:ff:38:b5: eb:d6:50:c3:44:d9:b6:64:cd:a5:07:83:ed:a6:07:3f:03:76: e3:07:a8:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPznQBHMeTgWwG/rqG1w7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjUxMjI0MTAwMTI4WhcNMjUxMjI1MTAwMTI4WjAzMTEwLwYDVQQD Eyg5MGI3NDZiOGRhODAwMTExOGM3MTFmZDI2NzdjY2Q0NDAwZjJlOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1zaWMpLvaLI1JSp7/mUSurGzKv0 4VQ1yKHstJw/phzxPXl2FMWUeZZPN3W4oeGm7b3XihOuTZmDz3+H0kGmzKchfmV0 uLIhtI41VEVyFNRIUgufoAMwCjhFp6AdMeCpvk9rwWmTF5jFN0WKBJuaJQjI2eBu gRLwT2ICNPhP7tSe5ppt/TTjXfVpcbi/nQe3oGsYsfnk/OtJ7Q6ClduTBQhb/UQo tM+31Nj+U556fRtRtiaPbQplFmF+8/VwWs5oPcIMwVugHcg38gOje8uktVbqLv7v kcmqEGDpSrUmQ0V+/mE3y9CsHFGdJM2YjbwMSJELYZrIP75UHD8CcToavQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJC3RrjagAERjHEf0md8zUQA8uluMB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqBeIDTN JdMSEEV2kydJ27NtydwrDNx4Nxex+jkxoBiOcZCt6Hlv5BCov2lnQjDRNYsFsJui PZd5T+ktDBqnSX/XZ790fYHl9o7Q0mXoUJEAazblrawjMIg17WL17JV69O/eqFFG 4nmvfmLSbDLZxyNxntsBWx/hAW0+Le5/OUQa1gLZ8OfUBUYoN4JnMZ7LDP/RG0HT PNi3F8Vzd5oEcaHa3XRHAsM/ZNJrTAuJFhI2rw/kQvG4qNNT1EDB0jrtuIt3zZbB D8RHkC/7EN/IxtVJ7R3Gd8WfQqfG4z1KlijgpNA94b/6/zi169ZQw0TZtmTNpQeD 7aYHPwN24weolA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:27:21 2025 by rpki-client