This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json) Hash identifier: 6fPsXLs67VSYNbPso18++OM5FSIQuEvecimhfC77z5g= Subject key identifier: 1A:A4:BD:1D:A6:FA:F2:D0:FD:2F:92:50:21:DD:E3:67:39:53:5B:A0 Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265 Certificate serial: 019B6CFC48E01EEDEA9837849553C82C446B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft Manifest number: 17AA Signing time: Tue 30 Dec 2025 02:00:31 +0000 Manifest this update: Tue 30 Dec 2025 02:00:31 +0000 Manifest next update: Wed 31 Dec 2025 02:00:31 +0000 Files and hashes: 1: 43fPb6IlMxCWip-u3TuxStj82E4.roa (hash: Mqbur7niNqgFl4nQcWhW3qg9fhBOp7Iht1K5RU8cFVQ=) 2: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: AbqUsq/aiFONT1y9UmIwq4Cax2G1/nU9DJ+EgNGmXIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:48:e0:1e:ed:ea:98:37:84:95:53:c8:2c:44:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265 Validity Not Before: Dec 30 02:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1aa4bd1da6faf2d0fd2f925021dde36739535ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:77:e7:2c:98:66:0e:41:3a:83:26:43:a4: e5:e3:4b:74:3c:25:b0:a2:56:39:06:f9:61:0f:b9: ff:cb:3d:6e:b3:8d:04:14:93:d7:fc:2d:57:99:bd: de:26:d4:81:58:49:a4:27:41:fc:d1:af:20:3a:a8: 61:c5:b0:e4:c6:a3:7e:49:1d:ed:d7:8a:9f:2b:d1: 7d:7d:fe:8e:34:2e:04:42:8c:f4:ad:aa:61:d1:0d: fb:e8:24:d5:75:f0:ea:c6:e5:b9:ad:02:74:c7:3c: 66:b0:6a:92:49:32:14:c6:30:78:f3:ee:68:1f:d6: 96:12:76:1b:96:cb:7b:2c:b0:a6:4f:1f:e5:fc:80: 24:d9:c0:86:d7:04:1d:80:bc:91:76:35:97:ce:36: 07:cc:e4:3c:be:e1:42:1a:e6:3c:f4:1d:10:01:3f: 07:66:9c:bd:79:58:15:cf:8d:c8:83:5b:02:fb:aa: 2b:2c:0a:82:4b:da:46:f5:ba:b0:4d:cd:65:59:2b: df:ff:2c:fb:36:31:ff:c7:80:a6:42:0a:6b:36:be: 28:1b:84:20:97:53:60:1f:6b:f7:7d:97:5e:92:81: d9:f1:cd:e2:95:78:c8:37:99:5b:c1:a9:f8:28:6b: cb:2a:c0:6c:98:71:d7:ed:7f:e9:36:74:85:03:ef: bf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:BD:1D:A6:FA:F2:D0:FD:2F:92:50:21:DD:E3:67:39:53:5B:A0 X509v3 Authority Key Identifier: keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:81:7c:c8:ba:c0:ca:c6:08:16:02:73:71:77:d4:21:e9: 02:78:56:23:57:28:cc:e6:55:41:79:3e:ca:9b:ad:f0:89:3f: 6b:38:8f:c6:57:d9:ca:f8:3a:5f:e9:18:a1:c3:31:b0:5b:65: 7c:07:35:7c:84:84:b5:ef:9f:b5:7c:7b:3e:0b:a0:c5:84:05: 1c:a2:fc:e7:c8:18:35:1f:e7:ff:67:62:05:fd:f7:2c:cb:77: 82:54:46:8d:29:3c:ab:ac:a4:b2:5b:d0:00:e0:2c:91:e7:31: b7:72:8f:6e:8f:cc:bc:ee:ff:11:91:af:ad:1e:f0:e1:95:68: 99:21:c0:e9:87:7d:04:de:d0:6f:e1:c7:57:b6:84:42:8a:5b: de:a8:2b:a1:16:4d:4c:4a:55:c0:13:39:c1:44:52:a8:c2:e6: 99:73:fa:51:42:0f:b4:e9:47:a1:08:96:cf:3c:d4:70:00:7f: 65:5e:12:b6:3e:bb:c3:65:28:af:c3:9a:fc:ba:dd:db:fb:82: 8a:ec:82:47:ba:d4:62:6a:8c:60:9f:3a:18:d5:95:4c:87:2b: 66:f4:97:9f:a6:06:15:b1:03:cc:fa:e7:bd:d6:27:e3:24:00: 8e:e9:97:72:31:1c:35:ba:c7:85:c3:61:fe:45:09:74:18:d6: 34:f6:de:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/EjgHu3qmDeElVPILERrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzkwYzFjMzYxZGYwNTIyNDM3NjEwOGVmZjliMjBkYzJl ZTAyNjUwHhcNMjUxMjMwMDIwMDMxWhcNMjUxMjMxMDIwMDMxWjAzMTEwLwYDVQQD EygxYWE0YmQxZGE2ZmFmMmQwZmQyZjkyNTAyMWRkZTM2NzM5NTM1YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSl35yyYZg5BOoMmQ6Tl40t0PCWw olY5BvlhD7n/yz1us40EFJPX/C1Xmb3eJtSBWEmkJ0H80a8gOqhhxbDkxqN+SR3t 14qfK9F9ff6ONC4EQoz0raph0Q376CTVdfDqxuW5rQJ0xzxmsGqSSTIUxjB48+5o H9aWEnYblst7LLCmTx/l/IAk2cCG1wQdgLyRdjWXzjYHzOQ8vuFCGuY89B0QAT8H Zpy9eVgVz43Ig1sC+6orLAqCS9pG9bqwTc1lWSvf/yz7NjH/x4CmQgprNr4oG4Qg l1NgH2v3fZdekoHZ8c3ilXjIN5lbwan4KGvLKsBsmHHX7X/pNnSFA++/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqkvR2m+vLQ/S+SUCHd42c5U1ugMB8GA1UdIwQY MBaAFOA5DBw2HfBSJDdhCO/5sg3C7gJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjct NTllNjExZDc2NTc0LzEvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjctNTllNjExZDc2NTc0 LzEvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYeBfMi6 wMrGCBYCc3F31CHpAnhWI1cozOZVQXk+yput8Ik/aziPxlfZyvg6X+kYocMxsFtl fAc1fISEte+ftXx7PgugxYQFHKL858gYNR/n/2diBf33LMt3glRGjSk8q6ykslvQ AOAskecxt3KPbo/MvO7/EZGvrR7w4ZVomSHA6Yd9BN7Qb+HHV7aEQopb3qgroRZN TEpVwBM5wURSqMLmmXP6UUIPtOlHoQiWzzzUcAB/ZV4Stj67w2Uor8Oa/Lrd2/uC iuyCR7rUYmqMYJ86GNWVTIcrZvSXn6YGFbEDzPrnvdYn4yQAjumXcjEcNbrHhcNh /kUJdBjWNPbeNQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:54:47 2025 by rpki-client