This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json) Hash identifier: H0uYg6u2LYGLpcFStfdjVvBR//Ju/asDFDPThVsYqsw= Subject key identifier: 3A:44:B5:62:66:39:13:0F:67:AD:FD:7D:65:F0:3D:E5:5F:73:3A:ED Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a Certificate serial: 019B3C7ED869B6E87C66F68B68B0421EFEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:44 +0000 Manifest this update: Sat 20 Dec 2025 16:01:44 +0000 Manifest next update: Sun 21 Dec 2025 16:01:44 +0000 Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=) 2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: zMQtBn5wKjcVFo1VP+JUhFn07PNTcl/ds44F0Pr4kxA=) 3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d8:69:b6:e8:7c:66:f6:8b:68:b0:42:1e:fe:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a Validity Not Before: Dec 20 16:01:44 2025 GMT Not After : Dec 21 16:01:44 2025 GMT Subject: CN=3a44b5626639130f67adfd7d65f03de55f733aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:1a:b0:64:2d:e3:42:68:ef:eb:9f:94:d8: ff:7d:47:cd:a8:9c:be:c1:cd:83:ce:c5:6f:32:40: a6:da:a6:c0:4a:22:e2:11:04:ed:d9:a4:3a:ce:8b: 7d:19:a9:62:06:1d:19:15:21:98:78:38:d8:54:43: 69:27:fa:86:d0:d0:0f:e3:c5:8e:0d:93:67:a6:5d: 2f:24:ac:ee:12:b4:0a:2d:e7:a6:ec:c9:2d:36:f5: b3:2b:b9:ec:f4:9c:a2:ef:48:72:ef:a8:7b:cb:05: c4:14:1f:db:b4:a1:48:1c:6e:13:7d:21:d9:7a:ff: a3:e0:04:32:48:96:cb:b3:6c:9e:fe:dd:6a:76:14: fe:53:91:54:07:c8:1e:77:4c:b8:23:98:b0:2b:9e: 29:d2:c7:26:5c:26:8b:80:4c:52:59:a5:8e:f0:d7: 67:4c:a5:b0:25:ab:1c:82:1b:e4:86:04:0b:b3:6c: 8e:6e:93:68:54:38:60:37:4c:6c:4b:9d:b7:de:27: e2:cf:5e:9e:5a:be:d4:1a:59:04:98:39:74:1c:61: 64:19:f7:2a:3c:2b:c1:e8:67:cd:d7:4d:79:cc:13: 04:c9:35:8c:cd:2d:f9:cb:d2:f7:de:5a:c2:75:42: d5:92:3a:78:f4:d7:28:e2:02:f9:63:c1:96:38:00: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:44:B5:62:66:39:13:0F:67:AD:FD:7D:65:F0:3D:E5:5F:73:3A:ED X509v3 Authority Key Identifier: keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c5:6f:34:c8:d0:0a:39:a0:71:8a:12:99:3b:79:d4:49:e0: b7:9f:06:d4:40:1c:08:19:03:7d:1d:7f:b0:20:4f:64:dd:56: 45:e8:a8:0a:1c:6d:56:20:84:de:64:80:ed:e6:cf:7f:0f:cb: e2:16:40:5d:6c:7f:ed:40:18:d9:9d:2b:15:6d:fe:ab:32:2c: a9:4e:f5:ab:af:ab:6a:65:e9:47:0c:2a:9f:38:d8:e1:00:8a: 3b:e1:86:6e:d2:0c:26:01:d2:bd:b4:2a:65:eb:b4:71:19:24: e9:69:97:4d:bc:1d:15:c7:d7:35:36:53:bb:2e:8d:3c:cd:1b: fd:60:d8:44:e1:e3:f4:5e:03:be:81:7b:77:67:cd:57:c4:b8: d9:ce:e1:e0:d4:09:28:9d:27:6b:02:85:2a:21:c6:ee:1c:c5: 43:d8:1a:32:01:52:d4:a3:e2:e4:b6:5c:b7:2f:40:d4:1d:11: 07:e5:cf:09:c1:52:e2:a5:48:f8:7b:4e:d4:fd:cd:65:72:51: f9:77:59:0a:42:f9:0b:5a:71:1a:e8:37:48:b7:54:85:75:b2: 15:28:e3:7a:73:e9:83:61:24:25:37:8e:a0:7d:23:88:a1:e9: ea:b2:e9:b3:ae:06:4f:8d:34:dc:33:d1:5b:36:c5:41:41:ee: ec:b5:46:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fthptuh8ZvaLaLBCHv7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl Zjk5M2EwHhcNMjUxMjIwMTYwMTQ0WhcNMjUxMjIxMTYwMTQ0WjAzMTEwLwYDVQQD EygzYTQ0YjU2MjY2MzkxMzBmNjdhZGZkN2Q2NWYwM2RlNTVmNzMzYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk8asGQt40Jo7+uflNj/fUfNqJy+ wc2DzsVvMkCm2qbASiLiEQTt2aQ6zot9GaliBh0ZFSGYeDjYVENpJ/qG0NAP48WO DZNnpl0vJKzuErQKLeem7MktNvWzK7ns9Jyi70hy76h7ywXEFB/btKFIHG4TfSHZ ev+j4AQySJbLs2ye/t1qdhT+U5FUB8ged0y4I5iwK54p0scmXCaLgExSWaWO8Ndn TKWwJascghvkhgQLs2yObpNoVDhgN0xsS5233ifiz16eWr7UGlkEmDl0HGFkGfcq PCvB6GfN1015zBMEyTWMzS35y9L33lrCdULVkjp49Nco4gL5Y8GWOADayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpEtWJmORMPZ639fWXwPeVfczrtMB8GA1UdIwQY MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8VvNMjQ CjmgcYoSmTt51Engt58G1EAcCBkDfR1/sCBPZN1WReioChxtViCE3mSA7ebPfw/L 4hZAXWx/7UAY2Z0rFW3+qzIsqU71q6+ramXpRwwqnzjY4QCKO+GGbtIMJgHSvbQq Zeu0cRkk6WmXTbwdFcfXNTZTuy6NPM0b/WDYROHj9F4DvoF7d2fNV8S42c7h4NQJ KJ0nawKFKiHG7hzFQ9gaMgFS1KPi5LZcty9A1B0RB+XPCcFS4qVI+HtO1P3NZXJR +XdZCkL5C1pxGug3SLdUhXWyFSjjenPpg2EkJTeOoH0jiKHp6rLps64GT4003DPR WzbFQUHu7LVGGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:11:35 2025 by rpki-client