This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json) Hash identifier: Uz67NbmHJyoZFg6rkC/2sCO1QpToZilGb4hsQM8/h3Y= Subject key identifier: EB:20:99:D6:F0:05:51:1A:5E:8C:61:E1:DC:FF:AC:4F:EB:90:90:3B Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Certificate serial: 019B3C7DC390640C4FAAAAC17662B0F3AF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:00:33 +0000 Manifest this update: Sat 20 Dec 2025 16:00:33 +0000 Manifest next update: Sun 21 Dec 2025 16:00:33 +0000 Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: yze5tr11Fsys9w/ChIOCVmIbZfkoVbaYkwBw3XdiEeQ=) 2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c3:90:64:0c:4f:aa:aa:c1:76:62:b0:f3:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Validity Not Before: Dec 20 16:00:33 2025 GMT Not After : Dec 21 16:00:33 2025 GMT Subject: CN=eb2099d6f005511a5e8c61e1dcffac4feb90903b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:67:3e:67:2f:b9:8b:97:e3:a0:3d:ac:cc: 78:d0:40:25:cc:39:92:b2:1d:e0:5f:ec:12:b0:ee: cc:d8:d9:55:ed:2b:db:73:bd:b3:d3:f9:d9:dc:53: 39:46:48:3d:c8:3a:5c:b3:fe:8f:e1:7a:48:00:ee: 29:d8:2c:83:17:b1:10:73:22:b6:04:a4:52:10:b3: 87:25:25:16:6d:1c:30:78:be:b4:6d:32:71:5d:39: 14:7b:42:45:24:e9:30:76:5f:90:b2:d4:06:b7:0a: fb:aa:37:f9:31:4d:cb:ee:f3:ce:ff:2e:62:db:f3: cf:d1:cb:cc:dc:ee:3e:b6:0a:e9:21:5f:d6:08:f3: e0:15:6f:65:9e:cc:bb:b8:40:15:a3:f5:f1:18:98: 4e:df:d8:2f:05:e8:6e:3c:cc:7f:8a:c5:89:01:cb: 08:8f:b7:fc:e5:74:c5:a7:74:73:3e:a5:fe:59:b6: db:dd:25:ba:8a:9e:c2:c3:66:c5:23:2f:9a:a6:d8: ee:32:ed:75:8c:24:05:ad:7c:2d:1e:05:ef:04:1e: 19:ce:5d:7d:e5:06:52:d4:eb:60:32:1a:7e:6c:13: cf:e8:00:a6:59:e3:ed:28:f6:05:95:d2:df:75:39: 1f:47:44:08:2e:83:fd:75:55:a6:57:74:7a:44:76: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:20:99:D6:F0:05:51:1A:5E:8C:61:E1:DC:FF:AC:4F:EB:90:90:3B X509v3 Authority Key Identifier: keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:26:03:43:17:de:13:b6:dc:87:af:ed:e1:fd:16:94:79:7d: 2d:84:50:75:d5:07:ba:70:59:3d:97:dc:08:36:08:8e:3d:fd: 9b:40:b7:65:9c:7f:0a:9b:d8:cd:d2:46:48:81:2e:5c:93:2d: 51:d2:0d:32:be:fc:2a:ad:4b:64:02:84:11:50:08:f1:da:02: 74:dc:98:94:b7:34:6e:46:33:08:2e:30:e5:25:00:f5:16:78: 86:13:f3:f0:8e:8b:1f:4b:ab:15:cc:89:17:ca:79:9d:64:bd: 8b:17:bd:2b:2a:74:b8:e0:11:b8:38:3b:b0:59:8a:52:3e:e2: 6f:36:cc:96:b3:91:f2:a5:9c:1d:ef:a8:56:af:51:47:86:8c: 0a:ca:44:15:38:0f:16:10:28:96:1a:23:d4:d0:18:c8:dc:b2: b6:dd:c3:9c:3e:1e:09:ba:48:77:86:25:49:6e:22:2e:4c:62: 2d:ef:d3:62:4d:68:b4:03:f6:df:7d:d2:53:9d:45:7d:79:cf: ae:6d:7c:b7:cf:50:e2:e3:09:0a:06:ec:79:39:ff:6f:44:01: 4c:c6:4a:33:8c:61:c1:eb:36:05:b2:c6:7c:01:2c:0d:5e:be: cf:06:20:84:0f:2d:1c:a6:24:3b:ec:3e:0d:54:7d:3b:27:72: 3d:8d:9e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcOQZAxPqqrBdmKw86+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0 ZDM5MTcwHhcNMjUxMjIwMTYwMDMzWhcNMjUxMjIxMTYwMDMzWjAzMTEwLwYDVQQD EyhlYjIwOTlkNmYwMDU1MTFhNWU4YzYxZTFkY2ZmYWM0ZmViOTA5MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVnPmcvuYuX46A9rMx40EAlzDmS sh3gX+wSsO7M2NlV7Svbc72z0/nZ3FM5Rkg9yDpcs/6P4XpIAO4p2CyDF7EQcyK2 BKRSELOHJSUWbRwweL60bTJxXTkUe0JFJOkwdl+QstQGtwr7qjf5MU3L7vPO/y5i 2/PP0cvM3O4+tgrpIV/WCPPgFW9lnsy7uEAVo/XxGJhO39gvBehuPMx/isWJAcsI j7f85XTFp3RzPqX+Wbbb3SW6ip7Cw2bFIy+aptjuMu11jCQFrXwtHgXvBB4Zzl19 5QZS1OtgMhp+bBPP6ACmWePtKPYFldLfdTkfR0QILoP9dVWmV3R6RHZsLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsgmdbwBVEaXoxh4dz/rE/rkJA7MB8GA1UdIwQY MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiYDQxfe E7bch6/t4f0WlHl9LYRQddUHunBZPZfcCDYIjj39m0C3ZZx/CpvYzdJGSIEuXJMt UdINMr78Kq1LZAKEEVAI8doCdNyYlLc0bkYzCC4w5SUA9RZ4hhPz8I6LH0urFcyJ F8p5nWS9ixe9Kyp0uOARuDg7sFmKUj7ibzbMlrOR8qWcHe+oVq9RR4aMCspEFTgP FhAolhoj1NAYyNyytt3DnD4eCbpId4YlSW4iLkxiLe/TYk1otAP2333SU51FfXnP rm18t89Q4uMJCgbseTn/b0QBTMZKM4xhwes2BbLGfAEsDV6+zwYghA8tHKYkO+w+ DVR9OydyPY2eeg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:03:09 2025 by rpki-client