This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json) Hash identifier: DJW/duHQ4HiCgUt2EvNurw4XdY0VVn4E93xR5j2U5EE= Subject key identifier: 77:E4:13:07:7B:63:88:D1:BB:D1:D5:18:DE:11:61:1F:0E:C0:A9:1D Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Certificate serial: 019B6D339800F5BE206A88C14ACD7DFCFE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 03:00:56 +0000 Manifest this update: Tue 30 Dec 2025 03:00:56 +0000 Manifest next update: Wed 31 Dec 2025 03:00:56 +0000 Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=) 2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: NyomPuMYZheEyeEhQy7OiQqhBlkXNM9ZpOwuQGn1Sho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:98:00:f5:be:20:6a:88:c1:4a:cd:7d:fc:fe:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Validity Not Before: Dec 30 03:00:56 2025 GMT Not After : Dec 31 03:00:56 2025 GMT Subject: CN=77e413077b6388d1bbd1d518de11611f0ec0a91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:ab:a5:a3:94:10:36:16:e2:b4:22:05:81: a7:48:df:0c:70:43:d6:cd:e6:99:04:d5:6e:e0:80: 0d:e0:20:0b:53:58:bc:04:79:e7:75:4e:34:48:2a: aa:fd:74:71:d0:7d:a5:fd:97:e1:3a:43:ad:13:7b: ff:57:1a:31:64:c1:01:2b:74:d1:66:bc:8b:75:30: 72:76:eb:b7:7c:61:be:53:89:59:40:e8:75:1a:e4: 6e:b1:10:7d:af:4a:83:e0:65:5b:ad:17:0d:f6:c9: 10:db:a2:ef:55:45:3c:54:51:9a:03:0f:66:90:1c: b4:d3:a0:06:54:76:c0:23:d3:51:56:9b:32:8d:d0: cb:cf:c6:a3:cc:b8:92:00:f2:25:4f:77:4f:b1:db: df:e1:37:a4:b5:4c:e4:cf:97:4d:ef:ef:4e:67:d4: 5f:a7:ef:64:0e:b7:a3:25:88:4b:d2:48:28:7f:80: 88:eb:17:4d:e2:69:35:f0:0f:43:16:80:81:1f:ce: c3:06:ce:42:55:ac:e8:f5:6a:ab:d3:4c:b7:41:4b: dc:fa:23:39:0c:d1:25:ac:9e:c7:5e:0b:ea:e3:1a: 8f:bd:3a:2b:34:40:e4:a6:a2:65:42:e9:01:20:52: 71:ce:08:11:60:07:5e:38:fb:52:fb:61:32:59:13: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E4:13:07:7B:63:88:D1:BB:D1:D5:18:DE:11:61:1F:0E:C0:A9:1D X509v3 Authority Key Identifier: keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ce:3b:0b:09:8d:e3:b3:76:61:41:76:5b:31:80:fc:55:96: e4:44:0c:45:e9:80:05:00:38:56:b2:50:5b:db:fb:bb:80:19: 98:45:24:b1:7b:94:74:16:fb:9f:7d:f8:f7:aa:9f:12:fd:ca: ff:e2:2d:b1:f6:ed:05:0b:24:01:01:87:a9:14:f5:65:6d:63: 41:ea:46:44:ca:94:d6:fa:f9:c1:dd:29:fb:9a:d3:1e:71:7a: 2d:bc:9b:d4:5d:e1:44:2a:2b:35:be:78:15:86:e5:90:94:39: 4a:04:bb:bd:97:74:97:49:4d:af:b0:76:70:f7:25:96:2a:b0: df:78:6a:35:39:48:0e:32:74:a2:bc:1b:ae:b5:da:1d:89:0d: 7c:12:86:88:af:88:b7:bc:e4:cb:72:c5:c1:fc:d9:3c:1e:bd: 1a:51:51:84:de:d6:92:4c:eb:3b:f1:b9:39:77:93:4d:c7:e1: 52:37:97:a0:51:a1:8d:0e:7a:88:2a:b6:e0:e7:0f:11:5a:2b: 1e:e6:ef:40:60:fc:23:18:5e:f7:3e:e3:0e:38:7c:a1:ba:b7: d1:8b:87:2e:77:c9:be:eb:cc:3b:48:0d:65:02:d0:88:be:f7: 88:40:79:8a:55:32:13:14:33:db:1d:21:03:46:5e:34:62:30: 48:03:ca:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM5gA9b4gaojBSs19/P5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTZjNDMzNjQwMDNlYzNmN2Y3YzZlYTgxNTdiOGE1MGY0 NDBlY2MwHhcNMjUxMjMwMDMwMDU2WhcNMjUxMjMxMDMwMDU2WjAzMTEwLwYDVQQD Eyg3N2U0MTMwNzdiNjM4OGQxYmJkMWQ1MThkZTExNjExZjBlYzBhOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4WrpaOUEDYW4rQiBYGnSN8McEPW zeaZBNVu4IAN4CALU1i8BHnndU40SCqq/XRx0H2l/ZfhOkOtE3v/VxoxZMEBK3TR ZryLdTByduu3fGG+U4lZQOh1GuRusRB9r0qD4GVbrRcN9skQ26LvVUU8VFGaAw9m kBy006AGVHbAI9NRVpsyjdDLz8ajzLiSAPIlT3dPsdvf4TektUzkz5dN7+9OZ9Rf p+9kDrejJYhL0kgof4CI6xdN4mk18A9DFoCBH87DBs5CVazo9Wqr00y3QUvc+iM5 DNElrJ7HXgvq4xqPvTorNEDkpqJlQukBIFJxzggRYAdeOPtS+2EyWRNvDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfkEwd7Y4jRu9HVGN4RYR8OwKkdMB8GA1UdIwQY MBaAFOCWxDNkAD7D9/fG6oFXuKUPRA7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2Ut M2E4NWVlNGM4OWJjLzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2UtM2E4NWVlNGM4OWJj LzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlc47CwmN 47N2YUF2WzGA/FWW5EQMRemABQA4VrJQW9v7u4AZmEUksXuUdBb7n33496qfEv3K /+ItsfbtBQskAQGHqRT1ZW1jQepGRMqU1vr5wd0p+5rTHnF6Lbyb1F3hRCorNb54 FYblkJQ5SgS7vZd0l0lNr7B2cPclliqw33hqNTlIDjJ0orwbrrXaHYkNfBKGiK+I t7zky3LFwfzZPB69GlFRhN7WkkzrO/G5OXeTTcfhUjeXoFGhjQ56iCq24OcPEVor HubvQGD8Ixhe9z7jDjh8obq30YuHLnfJvuvMO0gNZQLQiL73iEB5ilUyExQz2x0h A0ZeNGIwSAPK7Q== -----END CERTIFICATE-----Generated at Tue Dec 30 09:04:37 2025 by rpki-client