This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json) Hash identifier: MNWtLDFDi406T4ue9rybR1pu1dP07WGqqGna1sd/W6Y= Subject key identifier: 60:E9:8C:66:4E:16:88:1F:41:50:61:93:98:5E:CA:0A:32:2A:5C:56 Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0 Certificate serial: 019B3D5A6249A202F222FFB1D35E29A656F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:01:31 +0000 Manifest this update: Sat 20 Dec 2025 20:01:31 +0000 Manifest next update: Sun 21 Dec 2025 20:01:31 +0000 Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: 7JUXA1vnpidBUbRYi8B31GsMCL5zZSUg9/GRHxe3EUg=) 2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:62:49:a2:02:f2:22:ff:b1:d3:5e:29:a6:56:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0 Validity Not Before: Dec 20 20:01:31 2025 GMT Not After : Dec 21 20:01:31 2025 GMT Subject: CN=60e98c664e16881f41506193985eca0a322a5c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:7a:89:0e:10:16:0a:55:a0:7e:69:e5:8a: 09:71:50:3e:00:d9:01:89:0d:0b:c0:dd:41:19:2b: 45:c9:ac:d0:4b:a0:46:2a:5b:8e:11:3d:58:8c:9c: cb:8f:5c:b5:f0:5d:26:ae:f8:37:d4:ea:0e:21:ae: a7:aa:6e:f9:4d:d4:92:37:98:49:e8:70:fe:c3:99: 3f:4a:5c:5e:17:83:bc:ac:25:2a:b3:2d:5b:4f:45: 52:d0:23:2b:4d:93:25:74:3c:88:24:86:7b:ae:fc: 83:27:c0:46:94:b5:5f:f6:c2:21:51:56:eb:4d:d0: 48:92:da:9e:32:97:3d:4d:23:0c:9e:34:56:58:ef: 3c:a4:cc:e9:64:72:b4:48:94:eb:00:0a:ca:40:33: c1:b1:19:b1:f5:9e:ea:5e:7c:98:65:66:49:68:78: 00:4f:84:6e:dc:c3:be:71:cc:8f:4c:d1:e2:e6:3b: fc:3b:79:94:e8:86:7c:66:eb:48:25:fa:2e:97:de: d6:0a:19:ff:5c:07:5b:df:96:59:69:b0:e0:f0:b7: 33:67:6b:07:af:b3:b1:8c:ab:40:27:b4:af:13:02: 9a:c6:a3:47:9f:d8:e2:9c:9d:2d:54:2e:84:8f:2c: d9:fa:a5:4a:a6:58:d9:c3:59:ae:dc:e2:61:7f:69: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E9:8C:66:4E:16:88:1F:41:50:61:93:98:5E:CA:0A:32:2A:5C:56 X509v3 Authority Key Identifier: keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:30:07:a0:98:90:03:a2:18:6d:a9:91:c6:9b:f8:e0:70:e9: 08:51:01:88:b0:8c:52:c6:69:5f:31:46:ab:a7:dd:21:59:6d: 27:31:dc:34:de:51:b2:9b:a8:0d:b8:a2:3c:fd:e4:d4:d0:a2: 4d:10:f9:e9:45:97:44:9e:f8:3d:1e:fe:67:90:32:30:2f:99: c7:16:ef:5a:b9:46:9e:bb:37:d4:9b:ee:46:81:02:56:ab:9b: a9:92:1d:60:0f:a6:68:4b:ad:6e:bf:eb:e0:e2:1c:5c:89:7e: 94:36:60:b0:13:dc:29:b8:69:c6:00:82:de:d2:3b:9a:0d:23: 45:40:aa:82:5c:21:2b:4f:26:18:1b:12:d3:85:33:4e:f0:b0: ea:42:95:ec:87:f4:f4:b8:b4:7c:c5:3f:cf:a1:1d:30:ca:be: cf:64:ba:a6:1c:26:30:a3:9d:48:a2:56:d2:01:c6:b9:b9:e0: 5b:1d:41:b8:c9:cc:84:ed:30:d3:95:29:17:83:71:74:c5:3a: 60:39:98:ca:2c:02:15:fd:fa:ca:0f:c6:5b:79:76:8a:7a:4b: 23:82:0c:5c:e8:1b:1c:0a:a5:44:5e:b6:00:79:57:33:d4:43: 2b:96:04:05:dc:82:9a:92:4a:f8:31:3b:a7:67:2a:28:ac:6e: bc:9c:85:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WmJJogLyIv+x014pplb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy OTk4ZjAwHhcNMjUxMjIwMjAwMTMxWhcNMjUxMjIxMjAwMTMxWjAzMTEwLwYDVQQD Eyg2MGU5OGM2NjRlMTY4ODFmNDE1MDYxOTM5ODVlY2EwYTMyMmE1YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00F6iQ4QFgpVoH5p5YoJcVA+ANkB iQ0LwN1BGStFyazQS6BGKluOET1YjJzLj1y18F0mrvg31OoOIa6nqm75TdSSN5hJ 6HD+w5k/SlxeF4O8rCUqsy1bT0VS0CMrTZMldDyIJIZ7rvyDJ8BGlLVf9sIhUVbr TdBIktqeMpc9TSMMnjRWWO88pMzpZHK0SJTrAArKQDPBsRmx9Z7qXnyYZWZJaHgA T4Ru3MO+ccyPTNHi5jv8O3mU6IZ8ZutIJfoul97WChn/XAdb35ZZabDg8LczZ2sH r7OxjKtAJ7SvEwKaxqNHn9jinJ0tVC6EjyzZ+qVKpljZw1mu3OJhf2mdiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDpjGZOFogfQVBhk5heygoyKlxWMB8GA1UdIwQY MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0 LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejAHoJiQ A6IYbamRxpv44HDpCFEBiLCMUsZpXzFGq6fdIVltJzHcNN5RspuoDbiiPP3k1NCi TRD56UWXRJ74PR7+Z5AyMC+ZxxbvWrlGnrs31JvuRoECVqubqZIdYA+maEutbr/r 4OIcXIl+lDZgsBPcKbhpxgCC3tI7mg0jRUCqglwhK08mGBsS04UzTvCw6kKV7If0 9Li0fMU/z6EdMMq+z2S6phwmMKOdSKJW0gHGubngWx1BuMnMhO0w05UpF4NxdMU6 YDmYyiwCFf36yg/GW3l2inpLI4IMXOgbHAqlRF62AHlXM9RDK5YEBdyCmpJK+DE7 p2cqKKxuvJyFtw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:31 2025 by rpki-client