This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json) Hash identifier: EYLnULIVt1uswF+3Du9z6iLKBfBRYNUrDAtXExULV48= Subject key identifier: D0:A2:6B:F8:78:1A:80:2E:E0:C8:F2:AB:3B:57:E4:37:EE:42:E4:B1 Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Certificate serial: 019B3FECBF37C26C16D93EF17FFBD2D3FFA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft Manifest number: 1027 Signing time: Sun 21 Dec 2025 08:00:38 +0000 Manifest this update: Sun 21 Dec 2025 08:00:38 +0000 Manifest next update: Mon 22 Dec 2025 08:00:38 +0000 Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=) 2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: euAOyx3hK5FYwE8hnDMyj+MGRGK3znq3EDaq0a630TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:bf:37:c2:6c:16:d9:3e:f1:7f:fb:d2:d3:ff:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Validity Not Before: Dec 21 08:00:38 2025 GMT Not After : Dec 22 08:00:38 2025 GMT Subject: CN=d0a26bf8781a802ee0c8f2ab3b57e437ee42e4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:fa:53:8a:ca:33:e4:11:d7:09:00:e0:bd: a2:9e:99:5a:65:cd:e1:f2:4a:b5:bb:36:7e:b5:f3: 74:62:de:38:7a:7e:a1:44:d2:e7:ec:16:43:1c:c8: 83:32:24:8c:4b:de:21:bd:4b:f8:b2:6c:ba:27:6b: cb:1f:d2:c8:29:d1:af:83:e8:27:b6:dc:6e:40:44: c2:5e:bd:ac:fa:0b:da:da:53:79:06:25:89:8b:98: b7:32:0b:a8:bd:f3:ae:e6:a4:ee:5c:01:a9:ed:d7: 9a:0d:95:fa:7e:1c:17:5d:64:3b:b0:a5:2d:dc:33: c2:14:09:19:47:a0:01:cd:4c:11:8f:1b:b4:64:ab: de:33:be:f6:72:66:86:63:9c:17:7d:e7:ea:6b:dd: b5:34:c8:d8:8f:20:fd:f2:61:c0:ee:fe:da:83:2f: dd:c0:b4:22:78:2c:dd:cb:6a:a4:af:8b:4c:07:22: 90:24:20:4a:7c:fc:f9:41:03:d4:bb:8a:e0:89:7a: e1:b4:06:70:2a:e9:8c:9b:a6:90:11:a7:44:c0:c6: a8:85:c5:4a:85:1e:2d:43:af:77:bd:f6:9d:d5:89: 8a:c5:d0:76:bc:18:f0:0a:52:22:d4:3f:ed:dc:cb: 91:60:96:eb:44:c6:2c:1c:b6:ae:44:7e:06:74:38: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:6B:F8:78:1A:80:2E:E0:C8:F2:AB:3B:57:E4:37:EE:42:E4:B1 X509v3 Authority Key Identifier: keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c6:55:22:29:30:22:c6:82:a1:9b:0a:73:ab:5f:21:52:d5: 95:80:b9:43:31:1e:1d:1a:38:0b:42:3c:fb:00:94:36:06:ed: 21:dc:68:0a:9b:71:36:d6:d4:ec:65:c3:5f:2e:08:92:ab:ac: 97:b7:b5:6e:1d:38:d9:f2:ac:ff:02:80:eb:f2:cf:61:db:02: 22:a3:99:ea:63:b4:07:22:c7:56:84:4a:4c:ea:17:28:a2:46: 6a:12:34:5a:ba:77:a6:42:99:66:6f:3d:ae:59:bf:1e:91:c1: ff:d9:b9:e9:90:33:56:fb:a8:38:81:4e:8c:49:02:a1:87:e0: 8b:b9:97:4b:54:79:a9:35:da:5e:d4:7d:b2:55:45:8e:b5:67: 24:13:8b:82:7d:da:25:a7:26:6a:d3:70:72:ea:f2:03:17:aa: a8:85:11:1f:3f:33:bd:4f:4c:a0:57:ea:11:d2:99:fb:5d:fb: 34:03:37:8d:0b:07:2b:82:0b:2e:28:5b:a1:58:1d:49:e2:1c: 25:03:5f:0e:d0:63:88:1f:c9:9c:69:68:e6:be:ff:20:a0:9e: 47:06:3e:33:d0:1a:69:5c:08:e9:9f:d7:e8:43:a6:15:a9:2c: c6:41:17:84:e0:95:d9:c9:98:67:e9:9b:23:bd:63:68:0d:b7: 26:33:d0:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7L83wmwW2T7xf/vS0/+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw OGUzM2MwHhcNMjUxMjIxMDgwMDM4WhcNMjUxMjIyMDgwMDM4WjAzMTEwLwYDVQQD EyhkMGEyNmJmODc4MWE4MDJlZTBjOGYyYWIzYjU3ZTQzN2VlNDJlNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdH6U4rKM+QR1wkA4L2inplaZc3h 8kq1uzZ+tfN0Yt44en6hRNLn7BZDHMiDMiSMS94hvUv4smy6J2vLH9LIKdGvg+gn ttxuQETCXr2s+gva2lN5BiWJi5i3MguovfOu5qTuXAGp7deaDZX6fhwXXWQ7sKUt 3DPCFAkZR6ABzUwRjxu0ZKveM772cmaGY5wXfefqa921NMjYjyD98mHA7v7agy/d wLQieCzdy2qkr4tMByKQJCBKfPz5QQPUu4rgiXrhtAZwKumMm6aQEadEwMaohcVK hR4tQ693vfad1YmKxdB2vBjwClIi1D/t3MuRYJbrRMYsHLauRH4GdDiQIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCia/h4GoAu4MjyqztX5DfuQuSxMB8GA1UdIwQY MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3 LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8ZVIikw IsaCoZsKc6tfIVLVlYC5QzEeHRo4C0I8+wCUNgbtIdxoCptxNtbU7GXDXy4Ikqus l7e1bh042fKs/wKA6/LPYdsCIqOZ6mO0ByLHVoRKTOoXKKJGahI0Wrp3pkKZZm89 rlm/HpHB/9m56ZAzVvuoOIFOjEkCoYfgi7mXS1R5qTXaXtR9slVFjrVnJBOLgn3a JacmatNwcuryAxeqqIURHz8zvU9MoFfqEdKZ+137NAM3jQsHK4ILLihboVgdSeIc JQNfDtBjiB/JnGlo5r7/IKCeRwY+M9AaaVwI6Z/X6EOmFaksxkEXhOCV2cmYZ+mb I71jaA23JjPQaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:55:39 2025 by rpki-client