This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json) Hash identifier: I7e7KdhXeiM5/BELjMk3ufXjUmXg/MzRScbQLVXbsas= Subject key identifier: 6C:27:30:15:76:9F:5E:9B:04:B6:D8:0F:F1:05:28:81:EF:40:8B:76 Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Certificate serial: 019B6E45C88AC1CF98C4CB7BFB5313CE3A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft Manifest number: 0E8A Signing time: Tue 30 Dec 2025 08:00:25 +0000 Manifest this update: Tue 30 Dec 2025 08:00:25 +0000 Manifest next update: Wed 31 Dec 2025 08:00:25 +0000 Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: 3ZVBjRZIsBjg/2bBPFEgEjVdfvZflgxS9pguBrNk0t4=) 2: nmDQ5sn6P7ecn55KSWAGIphgo6U.roa (hash: fC95GsgDpVAuW+5RC4Zgw8UvFD2E/5JtR14wL2gAYEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:c8:8a:c1:cf:98:c4:cb:7b:fb:53:13:ce:3a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Validity Not Before: Dec 30 08:00:25 2025 GMT Not After : Dec 31 08:00:25 2025 GMT Subject: CN=6c273015769f5e9b04b6d80ff1052881ef408b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:0c:d1:c1:82:50:17:0f:6a:d4:52:79:18: bb:cc:1a:f9:b2:ab:24:26:47:5a:48:37:33:11:9b: 98:76:54:f7:c5:d5:67:1f:be:36:77:d0:20:3e:09: 04:99:07:a4:64:4b:c8:55:7d:6c:b9:71:26:74:df: f1:c1:9a:52:e8:c5:48:6e:98:b8:d4:4c:fb:c3:b9: dd:07:2c:b5:41:d0:54:9f:eb:9e:e9:90:59:d0:d8: 38:83:f0:0d:bf:12:4a:97:ea:fb:1a:2f:4c:a6:8b: 3c:a5:05:9e:ab:c2:42:1e:17:22:0f:c3:a3:c9:a2: 3e:3d:41:53:be:80:e5:9b:fd:51:71:de:db:04:2f: b2:03:4b:8a:f8:7f:80:e0:ae:f2:09:c5:11:34:10: a1:53:64:a4:9a:81:3d:ca:2b:1d:ea:58:99:cc:2c: a1:68:c3:a3:cd:e8:8a:37:b4:c9:45:d3:df:4e:63: ac:95:72:c3:6d:15:46:57:d1:b3:65:8e:e2:16:3b: d4:02:4e:72:7a:e3:0b:be:31:b9:30:30:f8:3c:32: c3:fe:72:e8:fc:b1:d8:9b:18:bd:86:68:dc:6b:bb: da:5b:dd:21:e4:00:92:73:b3:23:af:a5:96:25:bd: e7:87:8d:dd:3b:0f:0a:0c:f2:05:3b:3a:3a:67:8a: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:30:15:76:9F:5E:9B:04:B6:D8:0F:F1:05:28:81:EF:40:8B:76 X509v3 Authority Key Identifier: keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:31:3d:a7:5f:c6:2b:21:36:e7:5b:f4:70:d8:4d:75:ea:09: 0d:04:43:df:e8:69:e8:e1:f8:f0:1c:8f:a1:f3:26:8a:3d:9f: 32:38:0c:43:9b:f7:9c:50:a3:48:6a:4c:01:34:04:7d:65:09: b9:73:a2:86:cb:4e:e0:44:09:57:89:3c:50:0a:02:99:92:50: 22:83:f5:50:16:24:b4:df:98:09:0b:26:30:65:15:7c:f0:c1: 8f:f1:c2:bf:b0:b7:48:ab:23:3c:35:d1:a2:c0:29:c3:19:59: 59:c9:82:5e:3b:ef:1c:f0:53:4e:ca:37:3d:0a:81:66:c0:de: 09:dc:58:69:6b:15:6a:be:3a:8d:b3:de:5f:29:4b:40:5f:00: fd:d5:41:39:18:6a:be:db:d1:5b:63:d3:08:25:73:7a:62:5c: 3a:bc:20:4f:a2:83:6e:fe:51:49:20:bf:1a:a9:71:fe:10:7b: 9d:8c:ae:6a:56:ec:da:1c:e1:e1:12:8a:c6:21:72:39:12:b6: 1a:19:7e:cb:92:56:5f:58:3d:78:91:04:66:de:fb:a7:03:af: dd:bc:8d:fc:d8:cc:36:9d:00:45:0b:7c:65:90:c4:b8:e4:90: cd:04:0c:1b:01:04:c1:02:b1:98:c9:ec:86:89:c0:3b:1e:18: c1:59:2d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRciKwc+YxMt7+1MTzjoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2 MDVkNzcwHhcNMjUxMjMwMDgwMDI1WhcNMjUxMjMxMDgwMDI1WjAzMTEwLwYDVQQD Eyg2YzI3MzAxNTc2OWY1ZTliMDRiNmQ4MGZmMTA1Mjg4MWVmNDA4Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBMM0cGCUBcPatRSeRi7zBr5sqsk JkdaSDczEZuYdlT3xdVnH742d9AgPgkEmQekZEvIVX1suXEmdN/xwZpS6MVIbpi4 1Ez7w7ndByy1QdBUn+ue6ZBZ0Ng4g/ANvxJKl+r7Gi9Mpos8pQWeq8JCHhciD8Oj yaI+PUFTvoDlm/1Rcd7bBC+yA0uK+H+A4K7yCcURNBChU2SkmoE9yisd6liZzCyh aMOjzeiKN7TJRdPfTmOslXLDbRVGV9GzZY7iFjvUAk5yeuMLvjG5MDD4PDLD/nLo /LHYmxi9hmjca7vaW90h5ACSc7Mjr6WWJb3nh43dOw8KDPIFOzo6Z4q/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwnMBV2n16bBLbYD/EFKIHvQIt2MB8GA1UdIwQY MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0 LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDE9p1/G KyE251v0cNhNdeoJDQRD3+hp6OH48ByPofMmij2fMjgMQ5v3nFCjSGpMATQEfWUJ uXOihstO4EQJV4k8UAoCmZJQIoP1UBYktN+YCQsmMGUVfPDBj/HCv7C3SKsjPDXR osApwxlZWcmCXjvvHPBTTso3PQqBZsDeCdxYaWsVar46jbPeXylLQF8A/dVBORhq vtvRW2PTCCVzemJcOrwgT6KDbv5RSSC/Gqlx/hB7nYyualbs2hzh4RKKxiFyORK2 Ghl+y5JWX1g9eJEEZt77pwOv3byN/NjMNp0ARQt8ZZDEuOSQzQQMGwEEwQKxmMns honAOx4YwVktsQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:25 2025 by rpki-client