This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json) Hash identifier: TiRoLVeHbV++3vfa2097PxOyUoOCgVLYlWR4hGTtLcQ= Subject key identifier: 3B:EE:CB:2B:28:B4:F7:51:D4:F1:4E:39:AB:76:DF:3B:F5:A1:FA:1C Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c Certificate serial: 019B3E6CA2AF83070602F3727CD44BBF8851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft Manifest number: 0EBA Signing time: Sun 21 Dec 2025 01:01:05 +0000 Manifest this update: Sun 21 Dec 2025 01:01:05 +0000 Manifest next update: Mon 22 Dec 2025 01:01:05 +0000 Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=) 2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: odtJeiBVu3eKO0SDaKEGUfnt3cN+pBA/qcoqi64lAeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a2:af:83:07:06:02:f3:72:7c:d4:4b:bf:88:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c Validity Not Before: Dec 21 01:01:05 2025 GMT Not After : Dec 22 01:01:05 2025 GMT Subject: CN=3beecb2b28b4f751d4f14e39ab76df3bf5a1fa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:92:05:26:68:14:2b:59:4c:26:34:de:1f: 07:cf:25:c3:bf:38:97:d1:66:da:99:96:9a:86:7e: ee:07:5d:d6:db:7b:0f:03:57:15:c6:60:5c:69:f2: b3:cc:cd:20:6b:59:8d:7c:52:3c:f5:d4:bb:c1:9f: 01:f8:e1:80:09:9e:07:92:d6:41:49:cd:d5:0b:7b: 99:04:8d:22:90:64:5d:dc:ca:01:46:59:65:40:f4: 52:60:7c:cc:af:43:5f:bc:32:86:60:c0:0a:80:b9: 8d:7d:87:93:34:27:63:a2:fe:f5:ae:6b:2e:c2:76: a4:40:c2:b2:99:b2:ea:5f:e4:bf:55:be:e7:74:a9: 64:6e:10:37:48:35:b7:c6:4e:c3:a3:dd:af:0e:71: d4:a5:99:35:c2:a6:fc:12:54:ad:1b:89:8e:ca:1b: 0c:94:c3:be:15:34:ae:26:1e:8a:4e:36:b4:65:42: ed:c0:29:ac:5b:0f:01:3a:d6:22:76:20:b8:22:ef: 14:09:56:44:ed:31:53:13:4c:b9:2c:8b:af:97:08: 3f:c4:35:eb:0c:4b:eb:d4:83:2f:54:3a:5d:16:de: b3:1e:b8:bf:58:8a:44:48:f4:17:f9:c6:93:b0:b7: 9a:74:c0:bc:17:b4:0b:ea:4a:c3:a5:69:3e:a5:57: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EE:CB:2B:28:B4:F7:51:D4:F1:4E:39:AB:76:DF:3B:F5:A1:FA:1C X509v3 Authority Key Identifier: keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8e:dc:e1:8d:39:ee:de:41:26:ff:e8:66:51:cc:85:6e:4d: 2a:4c:83:15:aa:f5:39:bc:58:60:54:8e:6e:4d:8c:af:1e:0c: f1:18:d5:30:f4:24:e9:21:1d:5f:d6:c4:1d:e8:24:fc:4b:e8: c6:8e:64:c4:c3:35:f2:f1:f6:0b:a9:2c:6d:9c:4d:a5:c6:f5: e1:49:18:5d:2f:e5:51:f5:30:49:44:1b:39:e2:7e:30:25:d4: d0:7b:e4:f7:b3:b7:d6:c5:82:c5:e8:e4:9c:34:c3:9c:c3:4c: 17:6f:0e:c4:5d:dd:58:d5:73:7f:5e:50:90:5f:bd:17:db:63: da:79:9f:53:6c:03:ab:19:25:51:f1:9e:44:e9:28:9c:a5:00: 0a:1c:25:08:0b:a5:52:84:2b:5d:e7:16:33:ac:bb:94:16:2e: e6:85:d8:1e:a5:3e:6a:f4:1e:cd:87:cd:27:86:74:a2:10:43: ad:18:6b:a9:ef:e2:b5:f2:5f:6b:4e:25:47:51:e7:f4:79:14: 06:6f:9f:09:5c:89:a2:ad:5d:42:7e:5d:c6:19:e3:b5:f5:7e: a7:3e:1b:e0:06:26:04:b0:db:21:11:32:4a:a6:9a:7a:c1:cb: 9a:37:d4:1a:3c:15:92:c2:46:fc:d8:10:55:58:78:3b:f9:72: 21:5c:f9:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKKvgwcGAvNyfNRLv4hRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODBjNzU5ZjU1OGY5YzZiZTg4ZGQyMjZhNDM5ZDk5Yzll YWNmMGMwHhcNMjUxMjIxMDEwMTA1WhcNMjUxMjIyMDEwMTA1WjAzMTEwLwYDVQQD EygzYmVlY2IyYjI4YjRmNzUxZDRmMTRlMzlhYjc2ZGYzYmY1YTFmYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9WSBSZoFCtZTCY03h8HzyXDvziX 0WbamZaahn7uB13W23sPA1cVxmBcafKzzM0ga1mNfFI89dS7wZ8B+OGACZ4HktZB Sc3VC3uZBI0ikGRd3MoBRlllQPRSYHzMr0NfvDKGYMAKgLmNfYeTNCdjov71rmsu wnakQMKymbLqX+S/Vb7ndKlkbhA3SDW3xk7Do92vDnHUpZk1wqb8ElStG4mOyhsM lMO+FTSuJh6KTja0ZULtwCmsWw8BOtYidiC4Iu8UCVZE7TFTE0y5LIuvlwg/xDXr DEvr1IMvVDpdFt6zHri/WIpESPQX+caTsLeadMC8F7QL6krDpWk+pVcOAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvuyysotPdR1PFOOat23zv1ofocMB8GA1UdIwQY MBaAFHOAx1n1WPnGvojdImpDnZnJ6s8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iODAwMDAtMDYwOS00ODhmLWEzNGEt MmNhNjI2Y2ZlZDQ1LzEvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iODAwMDAtMDYwOS00ODhmLWEzNGEtMmNhNjI2Y2ZlZDQ1 LzEvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo7c4Y05 7t5BJv/oZlHMhW5NKkyDFar1ObxYYFSObk2Mrx4M8RjVMPQk6SEdX9bEHegk/Evo xo5kxMM18vH2C6ksbZxNpcb14UkYXS/lUfUwSUQbOeJ+MCXU0Hvk97O31sWCxejk nDTDnMNMF28OxF3dWNVzf15QkF+9F9tj2nmfU2wDqxklUfGeROkonKUAChwlCAul UoQrXecWM6y7lBYu5oXYHqU+avQezYfNJ4Z0ohBDrRhrqe/itfJfa04lR1Hn9HkU Bm+fCVyJoq1dQn5dxhnjtfV+pz4b4AYmBLDbIREySqaaesHLmjfUGjwVksJG/NgQ VVh4O/lyIVz5dA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:38 2025 by rpki-client