This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft File: 4JnuB4Iu8qzpw1b3tCyur_JclpI.mft (raw, json) Hash identifier: JgJ0nM1+qaLGhtCgiQoP8/cSTdGzdQ+ysscu/2ndffs= Subject key identifier: 72:E9:CC:B2:78:7A:BB:7D:BC:51:08:E9:B1:AD:52:F9:13:E5:7D:E8 Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Certificate serial: 019B40C931D3A1447ED71631C6922F3EA469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft Manifest number: 04FC Signing time: Sun 21 Dec 2025 12:01:25 +0000 Manifest this update: Sun 21 Dec 2025 12:01:25 +0000 Manifest next update: Mon 22 Dec 2025 12:01:25 +0000 Files and hashes: 1: 1iS_m3lD3dXmwGgBO22atH55ZJQ.roa (hash: dudlGcQ03vBBCIjSveQDl5YeTGubffbp9QB39KgS7sA=) 2: 4JnuB4Iu8qzpw1b3tCyur_JclpI.crl (hash: fp5kXuGroClJTYIXDzCZ6CJwut0D6cwE++dHek90k0I=) 3: XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa (hash: ZDVLnDp+CjsJYq9nGB8Fx25sme4loxzKQeCqC4xcibs=) 4: nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa (hash: G5UWZxYAvoCWsXhSSwnd86ky6SZpPBzCIKBhsZP0lcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:31:d3:a1:44:7e:d7:16:31:c6:92:2f:3e:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Validity Not Before: Dec 21 12:01:25 2025 GMT Not After : Dec 22 12:01:25 2025 GMT Subject: CN=72e9ccb2787abb7dbc5108e9b1ad52f913e57de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:ac:94:f8:32:a1:af:f9:4a:4e:db:71:2d: dd:88:28:01:49:db:04:a8:c9:18:d7:d4:23:a6:d4: 5d:95:55:d5:08:ed:25:a4:84:e9:bb:ce:ee:0c:7b: 42:01:7e:b3:df:57:61:14:1d:5d:96:16:2e:43:15: 9c:fd:6b:f3:50:56:66:b5:e0:27:05:97:1d:15:5a: bc:18:81:43:d1:85:18:0e:1d:22:0e:1c:32:03:81: 02:7c:cd:e0:92:f2:cc:62:05:da:13:71:05:5b:32: 61:5a:0b:e5:cc:3e:fc:cb:5e:7c:b7:40:47:47:ee: be:5a:dd:a7:a2:6b:4a:42:4c:db:ce:6a:8a:df:26: 92:fd:a0:86:13:19:40:31:ae:41:c5:f2:58:12:c3: d3:68:63:45:ee:d7:67:4f:f1:c3:0c:1e:2f:f3:a6: 91:74:f2:19:1d:5b:c6:f1:05:dd:52:82:14:5b:bd: e8:72:b1:8e:28:b7:bc:82:44:54:3b:cb:da:ce:a8: 09:c8:e1:6d:2d:8f:89:a6:93:3b:dd:37:cf:66:2d: 6c:a4:05:18:7e:62:d1:94:fd:d4:ed:da:ca:eb:9a: f9:58:fa:40:1d:8d:8c:c2:56:8f:d8:65:21:f2:9b: fa:ad:13:97:f3:42:d5:60:14:c1:86:3b:e4:db:1b: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E9:CC:B2:78:7A:BB:7D:BC:51:08:E9:B1:AD:52:F9:13:E5:7D:E8 X509v3 Authority Key Identifier: keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ee:70:2e:19:7d:6d:1e:0f:ea:91:f3:4a:57:3b:b1:51:f5: fd:1e:d9:a1:72:bd:e4:7f:a1:81:7b:83:81:68:e8:84:b7:d7: 88:10:4a:3f:34:7e:5e:9b:6d:75:30:84:9b:18:ac:4c:8b:d8: 3a:b3:ed:8d:32:f3:ed:5c:fc:67:46:0b:b1:8f:a5:30:96:ce: ff:18:96:7f:f1:61:dd:d3:15:e9:5c:76:05:05:9e:72:7e:e8: a7:50:32:74:24:e1:8a:33:87:67:48:c7:54:b0:11:01:65:cb: 29:e6:d4:4b:4b:2b:f3:c4:b5:15:ba:c9:de:37:61:38:7c:8f: e9:84:bc:54:c5:a8:5f:33:27:52:f5:b7:f1:7e:ff:18:f3:91: fb:b0:0a:09:ad:5a:4c:6d:8d:80:85:5d:fd:d5:6e:12:c0:af: 7d:ac:5e:52:38:4d:aa:36:c5:9d:d3:03:5b:7d:c0:d1:d6:e8: 01:a2:82:fd:c3:ff:f0:a2:09:f0:a6:bc:13:0b:d1:fe:d0:53: 64:c2:5b:26:30:e3:2d:d3:a2:4a:12:b8:59:92:3d:ae:3e:b2: eb:0c:91:81:6a:10:e4:41:a7:67:78:f1:24:75:6d:83:b0:87: 57:d3:6f:64:40:0a:51:fe:81:8c:f7:af:05:50:e2:78:33:b4: d0:7e:1c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyTHToUR+1xYxxpIvPqRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTllZTA3ODIyZWYyYWNlOWMzNTZmN2I0MmNhZWFmZjI1 Yzk2OTIwHhcNMjUxMjIxMTIwMTI1WhcNMjUxMjIyMTIwMTI1WjAzMTEwLwYDVQQD Eyg3MmU5Y2NiMjc4N2FiYjdkYmM1MTA4ZTliMWFkNTJmOTEzZTU3ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j6slPgyoa/5Sk7bcS3diCgBSdsE qMkY19QjptRdlVXVCO0lpITpu87uDHtCAX6z31dhFB1dlhYuQxWc/WvzUFZmteAn BZcdFVq8GIFD0YUYDh0iDhwyA4ECfM3gkvLMYgXaE3EFWzJhWgvlzD78y158t0BH R+6+Wt2nomtKQkzbzmqK3yaS/aCGExlAMa5BxfJYEsPTaGNF7tdnT/HDDB4v86aR dPIZHVvG8QXdUoIUW73ocrGOKLe8gkRUO8vazqgJyOFtLY+JppM73TfPZi1spAUY fmLRlP3U7drK65r5WPpAHY2MwlaP2GUh8pv6rROX80LVYBTBhjvk2xvydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLpzLJ4ert9vFEI6bGtUvkT5X3oMB8GA1UdIwQY MBaAFOCZ7geCLvKs6cNW97Qsrq/yXJaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUt ZDA2OWYxNzYwMmI2LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUtZDA2OWYxNzYwMmI2 LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu5wLhl9 bR4P6pHzSlc7sVH1/R7ZoXK95H+hgXuDgWjohLfXiBBKPzR+XpttdTCEmxisTIvY OrPtjTLz7Vz8Z0YLsY+lMJbO/xiWf/Fh3dMV6Vx2BQWecn7op1AydCThijOHZ0jH VLARAWXLKebUS0sr88S1FbrJ3jdhOHyP6YS8VMWoXzMnUvW38X7/GPOR+7AKCa1a TG2NgIVd/dVuEsCvfaxeUjhNqjbFndMDW33A0dboAaKC/cP/8KIJ8Ka8EwvR/tBT ZMJbJjDjLdOiShK4WZI9rj6y6wyRgWoQ5EGnZ3jxJHVtg7CHV9NvZEAKUf6BjPev BVDieDO00H4cBA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:59:58 2025 by rpki-client