This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json) Hash identifier: VKB8w8rSwTh4AAxjbWMPyt4lHB6hz9EdPpUJRAfO+Kw= Subject key identifier: 4C:54:F7:AC:8B:D2:7E:F4:4B:88:C1:53:0D:5E:22:90:85:EB:F7:A8 Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Certificate serial: 019B337B172A01CC2B848F1EF27FF7007A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft Manifest number: 0281 Signing time: Thu 18 Dec 2025 22:01:03 +0000 Manifest this update: Thu 18 Dec 2025 22:01:03 +0000 Manifest next update: Fri 19 Dec 2025 22:01:03 +0000 Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: wu4lWFfASSXdc3gPIySXEj+bqOytd+PQQMOJLM6v7IE=) 2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:17:2a:01:cc:2b:84:8f:1e:f2:7f:f7:00:7a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Validity Not Before: Dec 18 22:01:03 2025 GMT Not After : Dec 19 22:01:03 2025 GMT Subject: CN=4c54f7ac8bd27ef44b88c1530d5e229085ebf7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:c6:0b:b3:e5:34:57:aa:0c:8e:c6:99:bd: ee:71:26:40:51:cf:12:57:91:9e:77:da:b1:0b:98: bf:77:48:36:b5:ea:d3:21:0b:57:e5:f0:4b:20:bf: df:0a:15:e2:8e:3e:54:3f:9b:7b:c8:4a:e7:ad:dd: 0e:61:7a:e2:06:74:14:64:fa:e0:0c:d9:cb:2b:41: a0:c6:ff:6f:29:78:76:cf:4b:a6:f7:b7:48:7f:44: 63:06:30:e9:58:f6:4a:fd:27:30:a0:7c:5c:2f:a8: ca:cd:0e:31:cc:5a:03:f6:3a:87:49:f9:f1:4a:41: 04:f2:8b:14:7e:ee:25:0b:03:15:ef:d4:1f:d3:c9: a0:41:4c:eb:3d:55:aa:e5:b8:80:94:da:54:78:0d: 2e:40:58:8a:12:8a:d5:68:5f:d0:49:f2:a2:d1:7f: 89:c6:13:f5:c1:e6:89:c9:a8:79:ba:0b:a6:7e:e3: 46:ab:e0:bb:ac:62:19:53:4f:97:5f:fa:d6:26:15: f3:be:0e:23:1f:6b:69:e4:d1:56:2a:03:f9:a7:9c: 97:0f:11:b6:ef:3d:27:43:be:1c:bd:ba:47:f6:56: 72:44:13:3a:de:5f:0e:7f:ac:9c:dc:e8:b1:6f:da: aa:ae:bb:23:11:49:dc:8f:c2:59:37:f1:c7:3a:ad: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:F7:AC:8B:D2:7E:F4:4B:88:C1:53:0D:5E:22:90:85:EB:F7:A8 X509v3 Authority Key Identifier: keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:00:e3:aa:8f:7c:fe:8f:5a:86:ad:73:65:75:ec:f4:f6:97: e8:19:17:7c:41:e0:13:99:e2:e0:eb:3e:2a:e2:4f:3e:f0:9d: 56:26:90:35:cc:1c:05:47:3b:5b:06:93:bf:3e:6e:33:07:ed: e0:af:61:4c:93:90:b3:d8:39:cb:3c:99:f7:15:2c:19:bb:a4: 17:1b:6e:f0:fb:2a:ff:29:bd:23:d4:cf:35:6f:40:ef:dd:06: 27:ce:99:75:34:1a:fc:98:88:82:20:67:cc:b1:27:c4:01:2a: 23:2b:99:8b:1e:61:07:f1:17:34:d8:73:0a:75:2d:70:62:43: 53:a4:c7:e9:4c:44:29:3d:31:2f:c6:2f:1e:7b:0d:49:24:71: f0:3a:25:f7:43:21:57:84:fa:cb:47:48:3d:d2:d0:4b:7a:1d: f6:2a:c0:90:1f:84:05:2a:41:93:6e:d3:72:f8:f6:71:2e:8f: a3:93:75:c0:3d:c9:0e:9f:48:ad:f5:5c:85:3d:0b:b7:a2:13: 7e:0a:dc:7a:c1:79:ed:80:19:ac:ce:aa:72:7d:85:c7:43:90: 7a:d8:21:12:05:15:28:90:e7:00:37:31:27:68:e1:c9:a5:e9: 12:26:a5:0c:b8:8b:96:d6:f3:98:70:09:c7:d8:ce:1f:ec:7b: bb:db:30:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexcqAcwrhI8e8n/3AHqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODM3OGQ0NDQyZGY2OWY0N2RjMGVhNTgyYTEyYjJhYjUx NGJlMGYwHhcNMjUxMjE4MjIwMTAzWhcNMjUxMjE5MjIwMTAzWjAzMTEwLwYDVQQD Eyg0YzU0ZjdhYzhiZDI3ZWY0NGI4OGMxNTMwZDVlMjI5MDg1ZWJmN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1nGC7PlNFeqDI7Gmb3ucSZAUc8S V5Ged9qxC5i/d0g2terTIQtX5fBLIL/fChXijj5UP5t7yErnrd0OYXriBnQUZPrg DNnLK0Ggxv9vKXh2z0um97dIf0RjBjDpWPZK/ScwoHxcL6jKzQ4xzFoD9jqHSfnx SkEE8osUfu4lCwMV79Qf08mgQUzrPVWq5biAlNpUeA0uQFiKEorVaF/QSfKi0X+J xhP1weaJyah5ugumfuNGq+C7rGIZU0+XX/rWJhXzvg4jH2tp5NFWKgP5p5yXDxG2 7z0nQ74cvbpH9lZyRBM63l8Of6yc3Oixb9qqrrsjEUncj8JZN/HHOq1SIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExU96yL0n70S4jBUw1eIpCF6/eoMB8GA1UdIwQY MBaAFLuDeNRELfafR9wOpYKhKyq1FL4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODkt ZDhhNTU1YzY0MjE0LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODktZDhhNTU1YzY0MjE0 LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwDjqo98 /o9ahq1zZXXs9PaX6BkXfEHgE5ni4Os+KuJPPvCdViaQNcwcBUc7WwaTvz5uMwft 4K9hTJOQs9g5yzyZ9xUsGbukFxtu8Psq/ym9I9TPNW9A790GJ86ZdTQa/JiIgiBn zLEnxAEqIyuZix5hB/EXNNhzCnUtcGJDU6TH6UxEKT0xL8YvHnsNSSRx8Dol90Mh V4T6y0dIPdLQS3od9irAkB+EBSpBk27Tcvj2cS6Po5N1wD3JDp9IrfVchT0Lt6IT fgrcesF57YAZrM6qcn2Fx0OQetghEgUVKJDnADcxJ2jhyaXpEialDLiLltbzmHAJ x9jOH+x7u9swQg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:34:11 2025 by rpki-client