This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json) Hash identifier: wzu7G8gl6XUYQicDi0f08CO6Cu7xwaN/zlfjR5itzl4= Subject key identifier: 20:2C:78:27:36:89:F9:90:73:82:A9:33:AE:5F:84:76:EF:60:F7:6E Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Certificate serial: 019B2BC2401903F153AEC99B1E7AA34AAB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft Manifest number: 14D6 Signing time: Wed 17 Dec 2025 10:01:49 +0000 Manifest this update: Wed 17 Dec 2025 10:01:49 +0000 Manifest next update: Thu 18 Dec 2025 10:01:49 +0000 Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: 6icSAfX+2BdzRWDtPm2zxyXsyvAqY00ML+pDavtjc14=) 2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:40:19:03:f1:53:ae:c9:9b:1e:7a:a3:4a:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8 Validity Not Before: Dec 17 10:01:49 2025 GMT Not After : Dec 18 10:01:49 2025 GMT Subject: CN=202c78273689f9907382a933ae5f8476ef60f76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:da:33:c7:49:40:22:9b:af:90:10:61:23: 41:1a:d0:16:1f:82:95:ed:a4:3e:6e:33:f4:21:28: bc:ce:e2:ef:57:ab:f0:58:2d:7b:3a:67:80:cf:6f: 10:61:3e:25:a5:8c:ff:5c:a0:a1:63:48:41:cb:35: 02:e6:fc:3e:6f:f7:d2:6e:89:ce:f1:47:d6:b7:82: a4:cf:43:e7:7a:b4:44:60:d7:86:a5:71:b9:82:2f: 78:6a:b0:ba:ef:b7:08:8c:b0:70:ab:c8:66:2d:03: c8:77:4b:e4:ba:3e:bd:37:58:f4:b8:e6:68:78:98: 6b:d9:a1:2f:b6:55:17:f0:8e:09:04:00:ae:1a:b0: 2f:98:e3:76:ad:7b:a2:e0:9f:4d:5e:71:54:0b:87: 1e:d9:b3:ef:81:19:4b:84:af:54:db:24:07:79:58: 17:5a:c6:19:00:45:97:a1:55:77:b4:d9:0f:f2:79: 40:da:98:87:19:4f:b7:d3:e3:3f:69:69:15:7b:98: e2:ed:96:94:ac:dd:35:b9:df:24:ba:31:89:3b:b4: 25:9f:6b:5e:c6:8b:3f:a2:52:a0:a3:f8:0b:0d:2a: e7:e9:a9:6b:84:ef:7f:fb:51:e0:18:47:61:1e:6b: 87:1b:10:65:6d:4e:60:56:8b:af:74:d2:80:3a:18: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:78:27:36:89:F9:90:73:82:A9:33:AE:5F:84:76:EF:60:F7:6E X509v3 Authority Key Identifier: keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:1c:d1:61:ff:16:32:d9:09:f5:d8:d3:9f:50:58:da:f8:4a: 9a:41:c7:5d:9c:71:1e:a9:fa:8d:d7:68:f4:d2:f2:b6:3d:75: b1:5d:15:52:92:36:29:c6:31:96:00:2a:ec:54:f6:b2:32:6b: e7:02:56:13:a4:72:81:85:e4:b4:7e:c6:45:98:5c:2f:95:bd: 9d:51:dc:d7:88:f4:71:dc:7f:2d:3e:60:93:b0:05:42:f8:4e: a7:70:af:c3:be:ab:8f:5b:eb:8f:c5:ed:b7:35:9b:bd:18:12: 1e:fb:73:67:7d:63:fe:7a:6f:7d:bb:a4:7d:40:9e:1a:20:e6: a8:71:30:75:dc:ef:13:d9:9d:69:a6:1a:fb:d3:ca:75:a9:be: 58:d7:71:b2:af:21:3a:90:44:cb:3d:3b:a2:6d:51:31:7b:13: 1c:f1:ad:0a:a8:73:c1:8e:39:f8:7c:22:a4:6f:c1:ae:4d:32: 55:0a:42:0c:db:55:c7:4d:8f:89:a0:6b:c5:67:72:30:9b:b9: 76:23:29:aa:98:ca:27:13:3f:3e:8f:f2:10:a9:eb:07:74:9e: 4b:9f:06:30:68:41:94:2f:dc:30:fb:2f:9d:96:55:c9:48:56: 61:91:e8:7d:f4:3d:be:bd:dd:1c:bc:e1:7d:22:05:4c:57:ae: 77:0f:c3:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwkAZA/FTrsmbHnqjSqsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1 YWE2YTgwHhcNMjUxMjE3MTAwMTQ5WhcNMjUxMjE4MTAwMTQ5WjAzMTEwLwYDVQQD EygyMDJjNzgyNzM2ODlmOTkwNzM4MmE5MzNhZTVmODQ3NmVmNjBmNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jHaM8dJQCKbr5AQYSNBGtAWH4KV 7aQ+bjP0ISi8zuLvV6vwWC17OmeAz28QYT4lpYz/XKChY0hByzUC5vw+b/fSbonO 8UfWt4Kkz0PnerREYNeGpXG5gi94arC677cIjLBwq8hmLQPId0vkuj69N1j0uOZo eJhr2aEvtlUX8I4JBACuGrAvmON2rXui4J9NXnFUC4ce2bPvgRlLhK9U2yQHeVgX WsYZAEWXoVV3tNkP8nlA2piHGU+30+M/aWkVe5ji7ZaUrN01ud8kujGJO7Qln2te xos/olKgo/gLDSrn6alrhO9/+1HgGEdhHmuHGxBlbU5gVouvdNKAOhjl5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAseCc2ifmQc4KpM65fhHbvYPduMB8GA1UdIwQY MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0 LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhzRYf8W MtkJ9djTn1BY2vhKmkHHXZxxHqn6jddo9NLytj11sV0VUpI2KcYxlgAq7FT2sjJr 5wJWE6RygYXktH7GRZhcL5W9nVHc14j0cdx/LT5gk7AFQvhOp3Cvw76rj1vrj8Xt tzWbvRgSHvtzZ31j/npvfbukfUCeGiDmqHEwddzvE9mdaaYa+9PKdam+WNdxsq8h OpBEyz07om1RMXsTHPGtCqhzwY45+HwipG/Brk0yVQpCDNtVx02PiaBrxWdyMJu5 diMpqpjKJxM/Po/yEKnrB3SeS58GMGhBlC/cMPsvnZZVyUhWYZHoffQ9vr3dHLzh fSIFTFeudw/DQQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:36 2025 by rpki-client