This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json) Hash identifier: ooPzNU2gxmBlZT4EQPi/wLKSft7ruQceBUhuUSW2i0s= Subject key identifier: 64:7F:52:AB:0F:65:0F:FE:D1:0F:E5:5A:EE:27:2C:4B:11:CF:B3:CC Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17 Certificate serial: 019B3DC7CA82F51B7473B390501D02DA5C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=) 2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: roV+zKqfP3YFXGVVffRzfQGzD9LwIVOXU0xF4ZIJYdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ca:82:f5:1b:74:73:b3:90:50:1d:02:da:5c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17 Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=647f52ab0f650ffed10fe55aee272c4b11cfb3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:ef:43:27:70:7b:f4:0c:6a:20:fc:7e:f3: 7b:2c:55:e1:14:5d:18:1b:19:c2:15:c6:5f:a7:b8: 22:c7:09:fb:cd:4c:2b:1c:28:c8:45:c4:98:c8:ef: 66:a8:03:89:7a:e3:d2:5d:27:33:f6:b6:32:b1:f9: 97:d2:7a:1e:92:e3:fa:f5:d5:86:85:6b:b0:a8:41: b8:3c:78:5d:ee:ec:36:26:70:82:03:82:f3:55:b9: 2a:81:f5:fb:3c:17:dd:e6:82:04:32:5b:9f:8d:f2: c8:4f:2b:0a:89:7f:24:4a:cc:08:8f:a5:9c:7e:7f: 9a:ab:78:b4:a3:9a:21:5f:e6:e1:81:02:79:23:71: ad:1c:13:bb:00:45:9f:61:8a:1c:2d:f6:97:a1:f9: d5:1c:df:98:5e:83:71:31:a6:0f:bd:f4:ed:01:ba: 30:6a:c9:ec:9b:ec:6e:eb:1b:ee:08:c8:f9:da:79: e0:f3:16:8b:07:fb:f0:c8:3e:36:08:0b:95:01:5f: a8:e7:b8:63:0f:60:8f:b4:a4:1c:78:7a:53:47:b5: 4e:c7:e5:f3:02:1f:93:ff:86:64:2c:0b:0c:46:40: 58:77:ed:8a:77:cd:95:61:35:03:f7:c3:b6:e3:37: be:2a:e6:e9:6b:7a:15:8d:49:8e:ef:0d:3c:41:40: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7F:52:AB:0F:65:0F:FE:D1:0F:E5:5A:EE:27:2C:4B:11:CF:B3:CC X509v3 Authority Key Identifier: keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:76:3d:2f:c6:8e:9f:83:5d:2e:de:4d:fe:ec:3e:f1:bc:6d: e4:1e:d0:2a:12:e8:77:7b:67:67:80:15:77:eb:92:47:a0:da: 23:2f:b4:1b:8f:8b:6c:f0:57:be:53:79:6d:28:f2:fe:bc:e9: a8:51:df:f1:32:2c:f0:23:a0:b9:56:4f:2c:db:5a:16:d4:11: 66:91:71:09:49:b3:9d:76:33:ea:c9:a6:4b:a6:6c:dc:6f:72: b6:43:a4:29:90:ee:52:a0:47:22:4f:a4:32:d7:e9:73:15:e6: 53:28:d4:11:da:a1:85:64:82:a4:9c:23:7c:27:13:f4:c5:b5: bf:6b:7f:93:e0:e2:87:e3:34:59:36:52:04:24:23:84:e0:58: 87:1b:7e:cd:92:21:44:ba:46:74:89:89:43:13:75:f2:89:46: 09:49:0a:96:62:ba:6a:40:47:4d:60:03:08:46:82:41:48:ea: be:e7:44:28:8b:51:e7:bd:62:ce:d5:6a:d9:0a:f9:a7:b8:6f: 83:8e:83:42:b0:4b:25:78:20:3f:48:78:f0:38:25:8f:ce:a9: ea:08:83:a3:21:b3:a5:43:85:ce:56:dd:99:49:2d:59:ba:dd: c8:f1:72:b2:84:4b:8a:9f:29:97:02:32:eb:2a:38:f9:d3:fe: cb:96:14:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8qC9Rt0c7OQUB0C2lyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2 OGVmMTcwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD Eyg2NDdmNTJhYjBmNjUwZmZlZDEwZmU1NWFlZTI3MmM0YjExY2ZiM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXvQydwe/QMaiD8fvN7LFXhFF0Y GxnCFcZfp7gixwn7zUwrHCjIRcSYyO9mqAOJeuPSXScz9rYysfmX0noekuP69dWG hWuwqEG4PHhd7uw2JnCCA4LzVbkqgfX7PBfd5oIEMlufjfLITysKiX8kSswIj6Wc fn+aq3i0o5ohX+bhgQJ5I3GtHBO7AEWfYYocLfaXofnVHN+YXoNxMaYPvfTtAbow asnsm+xu6xvuCMj52nng8xaLB/vwyD42CAuVAV+o57hjD2CPtKQceHpTR7VOx+Xz Ah+T/4ZkLAsMRkBYd+2Kd82VYTUD98O24ze+Kubpa3oVjUmO7w08QUAbBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR/UqsPZQ/+0Q/lWu4nLEsRz7PMMB8GA1UdIwQY MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3 LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHY9L8aO n4NdLt5N/uw+8bxt5B7QKhLod3tnZ4AVd+uSR6DaIy+0G4+LbPBXvlN5bSjy/rzp qFHf8TIs8COguVZPLNtaFtQRZpFxCUmznXYz6smmS6Zs3G9ytkOkKZDuUqBHIk+k MtfpcxXmUyjUEdqhhWSCpJwjfCcT9MW1v2t/k+Dih+M0WTZSBCQjhOBYhxt+zZIh RLpGdImJQxN18olGCUkKlmK6akBHTWADCEaCQUjqvudEKItR571iztVq2Qr5p7hv g46DQrBLJXggP0h48Dglj86p6giDoyGzpUOFzlbdmUktWbrdyPFysoRLip8plwIy 6yo4+dP+y5YUQw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:29 2025 by rpki-client