This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json) Hash identifier: rb5wfaPpPQazstI4Qj4sS5Ycmtr4AimeZ3fNdVT0M+4= Subject key identifier: 54:98:AA:ED:01:4C:BC:2E:DD:6E:50:F8:67:69:F4:1E:9A:C1:F6:ED Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Certificate serial: 019B7290B663191B23A67D441E14B27B9AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft Manifest number: 1265 Signing time: Wed 31 Dec 2025 04:00:45 +0000 Manifest this update: Wed 31 Dec 2025 04:00:45 +0000 Manifest next update: Thu 01 Jan 2026 04:00:45 +0000 Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=) 2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=) 3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: 3NUdAn+fM1a4iSUZJKTOhAlkyEBEV/xE+JrEpOphW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:b6:63:19:1b:23:a6:7d:44:1e:14:b2:7b:9a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Validity Not Before: Dec 31 04:00:45 2025 GMT Not After : Jan 1 04:00:45 2026 GMT Subject: CN=5498aaed014cbc2edd6e50f86769f41e9ac1f6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:e1:ed:57:b8:94:f3:b7:87:53:5e:ec:30: 49:bb:8b:fe:53:d5:65:98:ae:a1:2c:aa:0b:b0:07: ae:04:bd:3b:0e:21:94:3c:17:f3:68:cc:68:c8:0f: 74:e9:32:53:14:88:01:54:3f:db:a9:c0:77:1c:4a: f4:97:ee:32:3e:06:d7:7f:9a:e6:f1:eb:0b:36:f8: 92:0a:bd:4e:a5:c7:45:98:6b:a7:c2:b5:73:fe:ff: 9d:46:1c:12:82:53:68:9e:b8:69:9e:01:04:8f:3b: 4b:a6:b7:80:c1:21:6f:ec:b2:c8:b6:c0:81:ef:0f: 02:80:cb:66:b0:95:fc:cd:d9:50:76:f9:9e:a0:9b: 96:61:a4:7e:95:49:81:c6:53:d0:26:55:e6:e6:4d: bc:06:8c:63:e6:75:48:00:d2:5e:eb:48:31:e8:03: c4:6e:5d:53:de:6d:79:7e:da:d3:01:a6:10:73:61: f3:54:86:90:fd:46:4f:82:36:b9:bb:ed:c6:7e:ed: 4f:91:66:a0:cd:3d:c3:d7:83:8b:ac:3d:b5:bb:a5: 5b:ba:90:ef:2c:e2:06:09:40:2e:6e:a9:63:f9:7a: ef:11:c9:e8:44:4b:12:51:29:d2:20:ec:a3:5a:06: 90:66:46:1b:39:57:5b:36:4f:a6:f7:9e:06:52:fe: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:AA:ED:01:4C:BC:2E:DD:6E:50:F8:67:69:F4:1E:9A:C1:F6:ED X509v3 Authority Key Identifier: keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9b:b7:2c:67:66:ce:40:84:11:60:71:dc:40:2d:f3:b3:64: a2:a0:4f:20:3f:58:a5:a1:fb:4d:8e:8e:40:c2:f9:0d:9b:91: e7:63:22:78:53:77:b2:a4:61:d1:ca:9b:40:1b:63:40:f6:12: 3c:ce:82:64:5e:da:45:5d:fa:e9:91:50:a1:0b:b3:4d:b4:35: 2c:55:b2:26:0b:16:08:eb:58:5e:ef:4c:5a:f8:06:25:9c:df: 49:bf:8f:3a:9b:05:dd:93:19:ad:0f:fc:16:54:69:32:0b:7c: 36:24:91:07:e4:76:1f:3e:6d:66:85:bb:e6:30:70:20:55:aa: 24:dd:9b:f9:25:3e:30:de:a9:1a:77:3e:d8:f8:51:9c:1e:58: 9d:e7:8c:ca:33:4c:45:b8:f3:5b:74:1a:9e:fd:53:bc:05:1b: d7:44:e1:53:8a:c9:a8:ec:af:2b:ab:ac:af:e6:6b:6d:bc:1d: 6c:62:4b:a1:5e:ea:a5:a0:c3:bd:db:9c:12:1d:ae:57:aa:fd: 3e:0c:d2:ce:56:c7:2e:0f:e5:08:26:05:38:e3:99:7f:c0:c4: 90:15:22:42:24:87:e0:ba:8c:88:a2:1a:28:b4:e8:ee:41:3f: d9:8a:89:64:2b:fc:7c:7d:19:da:3f:e6:d2:a5:3e:8f:a5:f0: ec:a8:87:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykLZjGRsjpn1EHhSye5r1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk NDViYzcwHhcNMjUxMjMxMDQwMDQ1WhcNMjYwMTAxMDQwMDQ1WjAzMTEwLwYDVQQD Eyg1NDk4YWFlZDAxNGNiYzJlZGQ2ZTUwZjg2NzY5ZjQxZTlhYzFmNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//h7Ve4lPO3h1Ne7DBJu4v+U9Vl mK6hLKoLsAeuBL07DiGUPBfzaMxoyA906TJTFIgBVD/bqcB3HEr0l+4yPgbXf5rm 8esLNviSCr1OpcdFmGunwrVz/v+dRhwSglNonrhpngEEjztLpreAwSFv7LLItsCB 7w8CgMtmsJX8zdlQdvmeoJuWYaR+lUmBxlPQJlXm5k28Boxj5nVIANJe60gx6APE bl1T3m15ftrTAaYQc2HzVIaQ/UZPgja5u+3Gfu1PkWagzT3D14OLrD21u6VbupDv LOIGCUAubqlj+XrvEcnoREsSUSnSIOyjWgaQZkYbOVdbNk+m954GUv5QqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSYqu0BTLwu3W5Q+Gdp9B6awfbtMB8GA1UdIwQY MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt NjU0OWNkNTlhYTRmLzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpu3LGdm zkCEEWBx3EAt87NkoqBPID9YpaH7TY6OQML5DZuR52MieFN3sqRh0cqbQBtjQPYS PM6CZF7aRV366ZFQoQuzTbQ1LFWyJgsWCOtYXu9MWvgGJZzfSb+POpsF3ZMZrQ/8 FlRpMgt8NiSRB+R2Hz5tZoW75jBwIFWqJN2b+SU+MN6pGnc+2PhRnB5YneeMyjNM RbjzW3Qanv1TvAUb10ThU4rJqOyvK6usr+ZrbbwdbGJLoV7qpaDDvducEh2uV6r9 PgzSzlbHLg/lCCYFOOOZf8DEkBUiQiSH4LqMiKIaKLTo7kE/2YqJZCv8fH0Z2j/m 0qU+j6Xw7KiHmQ== -----END CERTIFICATE-----Generated at Wed Dec 31 07:57:36 2025 by rpki-client