This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json) Hash identifier: w/+wcjtCCTGnr9rHjBjPFbk12pvyxXGzyqmSRZQ0VME= Subject key identifier: 24:D7:A7:0B:2F:62:80:05:84:9D:95:A9:EA:71:AF:48:49:F3:F5:13 Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019B6CFC7FC5DF71808C4C232FEC39FE8565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft Manifest number: 06E0 Signing time: Tue 30 Dec 2025 02:00:45 +0000 Manifest this update: Tue 30 Dec 2025 02:00:45 +0000 Manifest next update: Wed 31 Dec 2025 02:00:45 +0000 Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: crEa84IxyMlndAwIgVU90Asq7762jbTNK8q5WJaHpsU=) 2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=) 3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=) 4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:7f:c5:df:71:80:8c:4c:23:2f:ec:39:fe:85:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Dec 30 02:00:45 2025 GMT Not After : Dec 31 02:00:45 2025 GMT Subject: CN=24d7a70b2f628005849d95a9ea71af4849f3f513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:68:67:fa:b2:bd:2f:d5:a2:2a:18:8b:46: 2d:46:e7:4a:5d:91:37:08:26:a3:fb:c3:38:fe:5c: 0b:6a:b9:f2:c5:45:94:8c:35:f9:dd:c5:af:b0:2d: 6f:82:bb:e3:0f:87:2a:3a:ef:14:c9:b7:cf:9e:dc: 64:ca:04:c9:32:43:08:39:f8:3f:e2:8c:33:5c:2b: 9d:e7:35:ac:b5:bf:94:8b:11:54:37:6a:a8:ef:2a: 9b:bc:6a:98:e5:62:e4:a0:a6:93:9a:a6:c7:fc:9f: 49:ae:d8:db:c3:f6:90:1c:24:41:8a:92:78:50:27: c5:64:7d:78:2f:47:54:e1:ac:5b:48:3f:f3:4a:bb: fd:5e:3c:09:a8:34:60:9b:a5:d0:80:a1:1a:aa:ef: 64:f1:9a:ca:9e:d8:4e:f4:2f:ee:7e:0c:16:88:3d: 82:44:89:9a:6d:4c:4e:57:a5:79:99:2e:1a:f6:8b: 22:d7:7d:d0:d1:a5:07:91:25:7a:95:7b:19:26:e7: f0:d3:3f:cf:84:86:a6:f6:cb:da:cc:47:58:37:a7: 7b:a0:cc:40:78:24:c8:41:b0:a7:8b:a6:ac:59:55: af:96:0c:6a:07:e6:f0:b8:94:7f:48:e5:1e:b0:37: e4:ea:55:6c:95:86:c9:3d:29:45:65:63:e7:9e:a1: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:A7:0B:2F:62:80:05:84:9D:95:A9:EA:71:AF:48:49:F3:F5:13 X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f9:61:81:b8:94:3d:3f:f9:4c:a6:d6:d6:95:bc:e8:79:b8: 67:38:86:09:73:d0:9b:5d:19:6b:10:60:3f:a7:2b:d3:45:21: 01:bd:78:24:85:4b:ee:61:be:0e:56:bd:ec:1d:ee:99:62:e8: 1b:a8:49:53:1e:97:83:e6:86:9e:00:96:23:38:32:30:d4:a9: 26:77:f2:2c:3f:5f:37:9f:cc:61:6b:58:c2:36:7f:3c:62:16: 7e:62:5a:76:e8:0e:35:48:e4:cc:0a:3c:df:e9:ac:ee:7a:28: 53:b5:1e:03:45:48:5b:a4:19:39:09:09:f3:bd:88:bd:6b:0b: e0:a8:32:d9:d1:e3:57:ec:4b:51:bc:7e:71:3e:ba:a8:40:13: 6a:9d:19:00:0b:9c:d7:73:6d:b9:16:48:4b:65:c9:ea:f4:e7: f9:f1:47:14:c1:5f:76:c5:cc:b6:d7:d5:60:de:1c:c2:4a:3f: 5d:a7:ed:1f:d8:f0:88:2d:11:72:43:ea:a7:e5:d1:ea:3c:81: cd:81:a6:53:86:69:80:5b:6b:d1:c2:bb:fe:51:54:ce:1d:31: 92:ad:05:e9:fc:19:ab:b9:94:49:91:d0:de:8e:af:d8:fa:a9: a3:11:51:cf:04:5c:3a:9b:b8:61:e3:e0:32:fe:9d:0c:57:5f: 72:fa:4a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/H/F33GAjEwjL+w5/oVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjUxMjMwMDIwMDQ1WhcNMjUxMjMxMDIwMDQ1WjAzMTEwLwYDVQQD EygyNGQ3YTcwYjJmNjI4MDA1ODQ5ZDk1YTllYTcxYWY0ODQ5ZjNmNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1NoZ/qyvS/VoioYi0YtRudKXZE3 CCaj+8M4/lwLarnyxUWUjDX53cWvsC1vgrvjD4cqOu8UybfPntxkygTJMkMIOfg/ 4owzXCud5zWstb+UixFUN2qo7yqbvGqY5WLkoKaTmqbH/J9Jrtjbw/aQHCRBipJ4 UCfFZH14L0dU4axbSD/zSrv9XjwJqDRgm6XQgKEaqu9k8ZrKnthO9C/ufgwWiD2C RImabUxOV6V5mS4a9osi133Q0aUHkSV6lXsZJufw0z/PhIam9svazEdYN6d7oMxA eCTIQbCni6asWVWvlgxqB+bwuJR/SOUesDfk6lVslYbJPSlFZWPnnqGj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTXpwsvYoAFhJ2Vqepxr0hJ8/UTMB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/lhgbiU PT/5TKbW1pW86Hm4ZziGCXPQm10ZaxBgP6cr00UhAb14JIVL7mG+Dla97B3umWLo G6hJUx6Xg+aGngCWIzgyMNSpJnfyLD9fN5/MYWtYwjZ/PGIWfmJadugONUjkzAo8 3+ms7nooU7UeA0VIW6QZOQkJ872IvWsL4Kgy2dHjV+xLUbx+cT66qEATap0ZAAuc 13NtuRZIS2XJ6vTn+fFHFMFfdsXMttfVYN4cwko/XaftH9jwiC0RckPqp+XR6jyB zYGmU4ZpgFtr0cK7/lFUzh0xkq0F6fwZq7mUSZHQ3o6v2PqpoxFRzwRcOpu4YePg Mv6dDFdfcvpKBQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:22:18 2025 by rpki-client