This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json) Hash identifier: 9Rd5dr/LIolgL7+cN1ESht90qJ2NspX4LjAad7E4w/c= Subject key identifier: 8B:25:B3:8F:6B:AD:85:E1:54:E7:B1:33:53:45:75:04:39:6D:45:64 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019B405AD206F6108DCAF51E50EC15153B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 10:00:52 +0000 Manifest this update: Sun 21 Dec 2025 10:00:52 +0000 Manifest next update: Mon 22 Dec 2025 10:00:52 +0000 Files and hashes: 1: 2l-u740cwo47no9UP24NaXclLws.roa (hash: lM2rzN2C7SnAMTBRoCC3QdlWciIf9zSS8vEa3CZyUHk=) 2: 7OMM7nKZt_he9r9qnYLaR7A9yvE.roa (hash: s/s5R2RRwPyGIflp9u/tBPAIhDVamsTdpkVlXald7JE=) 3: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: dS07qguB79w5FIgNFJhV6l8HPgm8FVPLz9mc1Kwgp4Y=) 4: Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa (hash: XFUC5N/kHKMoQLlS0Teo7ZsoW42gAN7BH2Jkjl6Ik+E=) 5: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:d2:06:f6:10:8d:ca:f5:1e:50:ec:15:15:3b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Dec 21 10:00:52 2025 GMT Not After : Dec 22 10:00:52 2025 GMT Subject: CN=8b25b38f6bad85e154e7b13353457504396d4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:ea:36:8f:f8:44:d4:4d:2e:ae:6b:6c:55: 40:11:6f:ff:78:ea:ce:7e:15:9e:9d:31:29:1f:d5: d6:40:30:f7:05:aa:e3:e6:16:4b:a2:49:00:0e:f8: 52:b5:72:a6:c4:f8:bf:ce:10:f2:04:ec:64:cb:31: d2:c9:24:03:5b:e9:24:93:7f:72:73:a8:4e:65:88: fb:29:b1:16:ec:86:68:a5:f8:9b:db:19:62:80:64: 46:61:9e:f6:e5:83:ba:48:f4:24:fc:b4:89:33:57: ee:6a:2b:f3:3b:ef:94:93:98:96:85:31:9e:c2:f7: d7:b2:65:4d:97:de:d8:46:2f:ec:63:63:40:4c:b9: 86:ad:2d:6c:29:d3:bc:d8:54:31:76:7a:e0:8f:a7: 96:0d:f0:de:d5:f6:2c:cf:3e:d2:c7:9e:7a:a8:54: 05:55:3c:f9:87:24:1e:c6:0f:fc:26:e9:c2:69:5e: 78:a8:26:41:63:50:42:7c:1c:a9:79:fb:95:28:76: ba:88:fa:5c:9a:b5:0e:c8:de:9c:c9:0b:ea:99:47: 39:8b:91:c9:7d:6c:ab:21:3b:1f:5c:95:c6:c4:f8: 30:7e:53:1a:c4:f4:73:f5:73:b4:4a:c2:b1:1f:24: 76:e5:0f:25:ac:e7:c2:28:41:cf:5a:4a:2f:08:76: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:25:B3:8F:6B:AD:85:E1:54:E7:B1:33:53:45:75:04:39:6D:45:64 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:de:5d:8d:c3:9d:a4:28:7d:b1:39:fe:91:42:5d:42:c4:d2: 66:85:20:6b:a2:8e:50:5b:ca:a0:93:ef:a1:f4:30:61:2e:9d: 11:6f:a2:0e:e7:b4:8d:53:4b:20:08:2c:62:0e:41:11:a2:7b: 5f:30:26:0b:fe:cc:af:11:5b:73:17:c0:36:09:86:d4:bd:46: a8:bb:7b:03:6c:ff:58:e9:d3:95:8e:96:90:08:51:97:74:ac: cc:fe:df:87:b3:d9:04:97:96:72:9f:f4:28:0a:80:1f:d5:8a: 4e:2c:38:e2:5a:11:ee:dc:cd:19:f7:7a:0a:67:c2:05:f1:bd: 9c:68:ac:e2:eb:a3:f8:05:ee:40:91:a2:dc:8b:de:2a:7c:ce: ac:3e:9a:5e:a9:64:5f:71:53:90:5f:52:ba:63:60:89:6f:cb: 9e:53:5a:c1:35:09:dc:8b:d7:5a:1b:60:6c:80:c2:7d:d2:48: ed:08:f3:01:8c:8c:5c:2c:1d:46:d8:0c:62:d1:cb:7f:7d:da: ba:a6:5a:e7:cd:f5:96:f8:01:62:52:10:b8:b1:92:d2:b8:91: 34:9a:6c:79:53:ca:93:09:d5:47:9a:96:61:2b:6b:4f:27:48: 09:01:83:a2:95:fc:1c:0d:6c:dd:66:0e:7c:4c:45:a2:fb:e4: 40:3b:26:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWtIG9hCNyvUeUOwVFTthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMjIxMTAwMDUyWhcNMjUxMjIyMTAwMDUyWjAzMTEwLwYDVQQD Eyg4YjI1YjM4ZjZiYWQ4NWUxNTRlN2IxMzM1MzQ1NzUwNDM5NmQ0NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4fqNo/4RNRNLq5rbFVAEW//eOrO fhWenTEpH9XWQDD3Barj5hZLokkADvhStXKmxPi/zhDyBOxkyzHSySQDW+kkk39y c6hOZYj7KbEW7IZopfib2xligGRGYZ725YO6SPQk/LSJM1fuaivzO++Uk5iWhTGe wvfXsmVNl97YRi/sY2NATLmGrS1sKdO82FQxdnrgj6eWDfDe1fYszz7Sx556qFQF VTz5hyQexg/8JunCaV54qCZBY1BCfBypefuVKHa6iPpcmrUOyN6cyQvqmUc5i5HJ fWyrITsfXJXGxPgwflMaxPRz9XO0SsKxHyR25Q8lrOfCKEHPWkovCHbs0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsls49rrYXhVOexM1NFdQQ5bUVkMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN5djcOd pCh9sTn+kUJdQsTSZoUga6KOUFvKoJPvofQwYS6dEW+iDue0jVNLIAgsYg5BEaJ7 XzAmC/7MrxFbcxfANgmG1L1GqLt7A2z/WOnTlY6WkAhRl3SszP7fh7PZBJeWcp/0 KAqAH9WKTiw44loR7tzNGfd6CmfCBfG9nGis4uuj+AXuQJGi3IveKnzOrD6aXqlk X3FTkF9SumNgiW/LnlNawTUJ3IvXWhtgbIDCfdJI7QjzAYyMXCwdRtgMYtHLf33a uqZa5831lvgBYlIQuLGS0riRNJpseVPKkwnVR5qWYStrTydICQGDopX8HA1s3WYO fExFovvkQDsmCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:22 2025 by rpki-client