This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json) Hash identifier: RarRbR5BwnXoAZ8iEs950ZG8h0XZ07eLaxQlBGrzUig= Subject key identifier: 69:05:25:1E:2C:71:45:79:C2:84:A3:68:76:1C:90:40:80:C7:15:8B Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019B3E6D089D4C167FED1FC3ED80B4565DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft Manifest number: 11EB Signing time: Sun 21 Dec 2025 01:01:31 +0000 Manifest this update: Sun 21 Dec 2025 01:01:31 +0000 Manifest next update: Mon 22 Dec 2025 01:01:31 +0000 Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: i34wRxwZ1TNqrY8cOQ+LzGGfJ08L86sYSFlCZU8tnsM=) 2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:08:9d:4c:16:7f:ed:1f:c3:ed:80:b4:56:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Dec 21 01:01:31 2025 GMT Not After : Dec 22 01:01:31 2025 GMT Subject: CN=6905251e2c714579c284a368761c904080c7158b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:ac:0b:c0:9f:42:5b:13:4f:ff:21:f3:96: ec:10:48:c5:88:8b:b8:1c:a9:f3:b0:60:43:c3:7c: f7:45:3d:bb:f9:89:7c:e9:92:8a:a4:1c:87:2e:50: 82:17:80:f5:64:f5:c7:be:46:8d:f6:ff:d7:8d:2a: 5e:82:23:fa:b3:19:60:46:c5:ff:31:11:c4:11:e3: 27:28:84:07:9f:d4:56:89:88:80:12:54:d8:de:c6: 1a:cf:bf:62:6d:0a:7f:f0:cb:37:ca:59:dd:19:80: f4:6b:ec:b8:c7:d1:40:67:17:da:db:ad:1d:c5:df: 62:36:8e:85:c8:9c:06:06:fe:7b:72:c8:51:d8:07: 51:15:13:67:46:d0:10:13:5a:38:0f:c6:f7:b1:fc: 25:52:73:24:9e:10:64:49:05:45:54:87:5a:52:b2: 1b:57:9c:29:8f:13:d6:1b:30:64:6f:c1:0c:36:e0: 44:94:7e:68:4a:eb:0d:a1:20:e7:fa:42:21:21:fb: 27:8f:fb:54:3a:72:7a:fd:8c:0f:82:25:81:c8:17: 1d:f7:12:56:ab:1b:ca:45:96:ed:b9:ea:ee:3e:e2: 4e:33:b3:81:b4:2d:a2:7e:94:5e:dd:15:bc:33:b4: 96:39:e5:dc:32:18:a1:34:5e:7e:eb:c3:0b:8b:9d: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:05:25:1E:2C:71:45:79:C2:84:A3:68:76:1C:90:40:80:C7:15:8B X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:73:8a:a4:af:ff:aa:2e:5c:e1:c0:4d:de:71:43:6f:88:36: af:a4:01:8b:9f:b5:9b:43:85:27:2f:e0:99:e6:dc:26:03:72: d1:a3:28:78:a0:df:d4:28:55:dd:82:8f:1b:46:b1:98:f9:5b: 51:85:60:ad:73:5d:0c:bd:02:bc:31:54:51:b2:8c:dd:7f:12: f1:ae:32:99:11:fd:2d:5a:2e:cd:20:5f:25:9f:96:70:38:2e: c3:ae:6e:1e:f3:d2:b4:0f:19:af:0a:0b:a2:bc:62:4a:75:5e: 2b:bf:ac:7e:c0:96:aa:1a:03:1e:8c:6a:08:a0:93:17:ed:92: 8f:67:f7:6a:2a:df:c1:7b:56:3b:41:af:ae:c2:aa:2f:04:0d: 4b:e9:61:e9:80:fc:c3:13:e8:dd:e6:b3:15:24:b4:dd:a7:68: 3a:e8:30:92:18:86:8d:f5:c0:83:90:43:70:d2:a8:8e:9e:d9: 8b:f2:9d:9f:56:16:86:a2:2f:c3:59:5f:3a:88:2a:eb:bc:e9: 3c:5b:1d:d3:cb:ef:be:a6:6c:e2:1f:19:4f:7f:53:30:1f:01: 18:e8:80:c0:47:00:7b:2a:05:f5:eb:b5:c0:fc:8a:e2:aa:c0: 71:30:23:2b:a8:45:93:87:de:06:af:7f:fc:43:dd:89:02:c4: 7a:63:96:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQidTBZ/7R/D7YC0Vl2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjUxMjIxMDEwMTMxWhcNMjUxMjIyMDEwMTMxWjAzMTEwLwYDVQQD Eyg2OTA1MjUxZTJjNzE0NTc5YzI4NGEzNjg3NjFjOTA0MDgwYzcxNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKsC8CfQlsTT/8h85bsEEjFiIu4 HKnzsGBDw3z3RT27+Yl86ZKKpByHLlCCF4D1ZPXHvkaN9v/XjSpegiP6sxlgRsX/ MRHEEeMnKIQHn9RWiYiAElTY3sYaz79ibQp/8Ms3ylndGYD0a+y4x9FAZxfa260d xd9iNo6FyJwGBv57cshR2AdRFRNnRtAQE1o4D8b3sfwlUnMknhBkSQVFVIdaUrIb V5wpjxPWGzBkb8EMNuBElH5oSusNoSDn+kIhIfsnj/tUOnJ6/YwPgiWByBcd9xJW qxvKRZbtueruPuJOM7OBtC2ifpRe3RW8M7SWOeXcMhihNF5+68MLi50SBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkFJR4scUV5woSjaHYckECAxxWLMB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHOKpK// qi5c4cBN3nFDb4g2r6QBi5+1m0OFJy/gmebcJgNy0aMoeKDf1ChV3YKPG0axmPlb UYVgrXNdDL0CvDFUUbKM3X8S8a4ymRH9LVouzSBfJZ+WcDguw65uHvPStA8ZrwoL orxiSnVeK7+sfsCWqhoDHoxqCKCTF+2Sj2f3airfwXtWO0GvrsKqLwQNS+lh6YD8 wxPo3eazFSS03adoOugwkhiGjfXAg5BDcNKojp7Zi/Kdn1YWhqIvw1lfOogq67zp PFsd08vvvqZs4h8ZT39TMB8BGOiAwEcAeyoF9eu1wPyK4qrAcTAjK6hFk4feBq9/ /EPdiQLEemOWLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:31:53 2025 by rpki-client