This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json) Hash identifier: AXC9kl7L7jXGx+ymwZB1VIxkPoVW2VCerYLxofN9NKQ= Subject key identifier: 0B:CE:11:13:8B:EB:7B:BA:68:46:67:C0:88:96:06:95:B6:A2:F8:E0 Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Certificate serial: 019B4280128AB03160B542138562C2D89987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:00:48 +0000 Manifest this update: Sun 21 Dec 2025 20:00:48 +0000 Manifest next update: Mon 22 Dec 2025 20:00:48 +0000 Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 91S5qqCeFAy7DXnd0dFdtizdnNmvhWBnEVgBBBg3JBM=) 2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=) 3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:12:8a:b0:31:60:b5:42:13:85:62:c2:d8:99:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Validity Not Before: Dec 21 20:00:48 2025 GMT Not After : Dec 22 20:00:48 2025 GMT Subject: CN=0bce11138beb7bba684667c088960695b6a2f8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:09:b2:e1:5d:f2:bd:db:c0:e8:2c:c4:a3: ab:00:10:d4:5a:94:4e:6b:58:77:23:af:c7:bb:58: b5:c7:ee:f6:73:07:d5:06:52:02:a9:13:04:96:fc: ab:93:f3:a6:37:83:0d:9d:40:ef:ae:6b:3d:be:92: a9:06:1f:85:22:07:6c:cf:99:4f:f4:de:bf:70:33: 01:4c:1e:6c:b4:46:e3:92:4a:2f:d1:32:f6:14:30: 09:88:60:f1:75:91:e6:77:b9:6e:1c:41:59:e8:a9: f6:16:8d:1c:0e:8a:c6:21:5b:e5:30:7d:2f:70:bf: 63:de:6e:cb:03:db:4b:de:f6:e5:70:69:77:e3:52: 76:dd:05:79:d1:4d:ef:74:f9:80:c3:88:75:61:9f: 5a:1a:77:79:6c:75:e9:5e:9a:b3:73:93:81:3b:bc: 77:b2:7a:29:22:ba:8a:e1:9e:f0:8d:61:27:2b:0b: 53:a3:26:9a:5c:ad:ad:a1:b6:26:cb:f7:07:ad:64: 77:e0:d6:df:b2:1d:2f:7d:b7:af:ae:0c:3a:20:b6: 29:2f:d5:82:d8:89:33:dd:7f:30:1f:b8:f7:a6:a6: 28:45:a0:6e:30:3c:7e:97:53:0f:65:3e:ad:f2:70: 56:cf:7a:ac:c9:f0:ef:11:69:d5:03:8d:9d:0f:6e: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:11:13:8B:EB:7B:BA:68:46:67:C0:88:96:06:95:B6:A2:F8:E0 X509v3 Authority Key Identifier: keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c5:cb:36:5e:de:3b:31:3f:4c:32:10:34:0b:cb:55:70:d3: 78:6f:f2:4f:41:6b:57:80:3c:3a:60:b7:8a:42:16:e6:31:1c: ca:08:6c:a2:da:c9:69:33:63:2b:bb:6e:b8:b2:17:f5:b6:ee: b5:3c:ef:3f:13:21:03:e0:5d:4c:43:48:dd:d9:4a:2a:19:b5: b9:47:74:b3:77:a5:9d:0e:b9:a0:51:a3:77:ef:83:eb:08:6f: a1:af:88:8a:0e:85:d0:2a:0a:da:87:65:3b:54:25:39:ef:01: 91:ec:83:9f:cd:fe:ae:89:23:06:be:45:e2:27:5e:e3:34:fd: 8c:3f:5a:18:89:7d:5e:00:44:fc:fe:21:b0:bd:45:16:e3:15: 7f:b6:34:e0:78:13:01:5e:0b:5b:38:0d:a4:cd:44:c9:2a:69: 23:79:8b:6b:4c:8d:4e:b6:dc:69:ec:25:04:fb:e7:6d:5d:28: b8:e2:10:29:33:aa:17:5d:f8:1c:b2:50:69:e1:5d:2d:3f:f9: 18:6b:91:08:0c:3e:d8:98:a2:7e:1c:a3:1a:7b:a6:b5:13:80: 15:cb:f6:03:2b:f8:b1:75:89:0e:14:7d:68:54:59:f0:d0:14: 7f:7b:d4:c4:66:9e:d6:8d:a1:e6:7f:b6:e4:15:cc:23:2b:3a: 29:14:56:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgBKKsDFgtUIThWLC2JmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU4NjEyMTBkYzM4YmRiYWViNDc3ZDZkYTcxOTY2NGE4 NGE2YmMwHhcNMjUxMjIxMjAwMDQ4WhcNMjUxMjIyMjAwMDQ4WjAzMTEwLwYDVQQD EygwYmNlMTExMzhiZWI3YmJhNjg0NjY3YzA4ODk2MDY5NWI2YTJmOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQQJsuFd8r3bwOgsxKOrABDUWpRO a1h3I6/Hu1i1x+72cwfVBlICqRMElvyrk/OmN4MNnUDvrms9vpKpBh+FIgdsz5lP 9N6/cDMBTB5stEbjkkov0TL2FDAJiGDxdZHmd7luHEFZ6Kn2Fo0cDorGIVvlMH0v cL9j3m7LA9tL3vblcGl341J23QV50U3vdPmAw4h1YZ9aGnd5bHXpXpqzc5OBO7x3 snopIrqK4Z7wjWEnKwtToyaaXK2tobYmy/cHrWR34Nbfsh0vfbevrgw6ILYpL9WC 2Ikz3X8wH7j3pqYoRaBuMDx+l1MPZT6t8nBWz3qsyfDvEWnVA42dD27q6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvOEROL63u6aEZnwIiWBpW2ovjgMB8GA1UdIwQY MBaAFOLFhhIQ3Di9uutHfW2nGWZKhKa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEt MzM3NTYxN2Q0ZWZkLzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEtMzM3NTYxN2Q0ZWZk LzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsXLNl7e OzE/TDIQNAvLVXDTeG/yT0FrV4A8OmC3ikIW5jEcyghsotrJaTNjK7tuuLIX9bbu tTzvPxMhA+BdTENI3dlKKhm1uUd0s3elnQ65oFGjd++D6whvoa+Iig6F0CoK2odl O1QlOe8BkeyDn83+rokjBr5F4ide4zT9jD9aGIl9XgBE/P4hsL1FFuMVf7Y04HgT AV4LWzgNpM1EySppI3mLa0yNTrbcaewlBPvnbV0ouOIQKTOqF134HLJQaeFdLT/5 GGuRCAw+2JiifhyjGnumtROAFcv2Ayv4sXWJDhR9aFRZ8NAUf3vUxGae1o2h5n+2 5BXMIys6KRRWag== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:57 2025 by rpki-client