This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json) Hash identifier: pLi2BUNow718GHaqlVoziY2uvTOrEkp0R2YzwhOTLz4= Subject key identifier: B6:53:F2:3F:F7:9A:0A:01:9F:26:EB:24:56:2E:78:7E:A5:A6:47:4F Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Certificate serial: 019B3E6C71FF9BD7EE9DA4F3AEF188F03F24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:00:53 +0000 Manifest this update: Sun 21 Dec 2025 01:00:53 +0000 Manifest next update: Mon 22 Dec 2025 01:00:53 +0000 Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: 5nEyo3xhrE2MRXDtQt9IV28FKdmSHTrMZaOfj51rbug=) 2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:71:ff:9b:d7:ee:9d:a4:f3:ae:f1:88:f0:3f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0 Validity Not Before: Dec 21 01:00:53 2025 GMT Not After : Dec 22 01:00:53 2025 GMT Subject: CN=b653f23ff79a0a019f26eb24562e787ea5a6474f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:74:3d:f9:27:33:b0:33:de:73:60:9e:91: 64:71:0d:51:5a:a5:fd:94:3a:28:4c:c6:a5:06:13: 65:f4:b0:2d:9a:9b:e7:bf:74:b5:d4:dc:54:d2:eb: 9e:b4:1f:09:ea:db:79:1a:e3:e8:a9:ce:c7:5a:c1: ec:19:8f:ef:b4:56:ff:0e:f7:92:12:73:83:18:05: 53:67:1e:51:52:97:5e:00:59:5c:39:62:24:f7:e6: 8f:18:15:f4:e4:10:e2:2f:f9:90:84:72:1d:c1:11: 6e:54:41:ec:89:3f:88:93:20:f9:39:92:86:dc:40: ab:ee:03:98:de:0a:57:53:0d:fe:dd:58:30:06:b8: 27:ed:97:67:6f:9d:23:c6:b7:1c:58:fd:78:80:e0: 13:b2:19:96:53:a2:6a:30:71:d4:42:85:31:05:cf: fd:f9:4c:32:6a:3c:25:8d:84:d8:0a:df:6d:d2:7e: 5a:8f:af:c3:39:d1:5c:3f:76:f7:c8:0f:b8:51:e4: 65:cb:64:99:5b:2d:8a:67:ea:6b:76:fc:97:19:a6: 31:21:8b:35:bb:e6:1a:dc:65:bc:88:3e:c2:de:65: d1:9b:34:91:30:21:53:ea:35:a9:10:88:7d:49:40: 74:c6:72:9c:cb:a8:27:8d:29:66:3b:8a:c6:a6:d4: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:F2:3F:F7:9A:0A:01:9F:26:EB:24:56:2E:78:7E:A5:A6:47:4F X509v3 Authority Key Identifier: keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:83:d4:f9:1c:68:d1:4d:58:ad:95:c0:c4:1e:20:25:a8:a7: 7b:d2:0d:bf:1d:41:1a:e5:a6:9c:cf:e9:fa:85:71:86:9c:5a: c2:8a:32:75:da:31:4e:df:71:d6:cb:e2:3f:be:34:35:93:4a: b5:af:ed:1b:3c:62:cb:34:25:d6:98:42:46:2b:39:73:12:68: 74:c6:ef:ce:28:1b:07:bb:0a:e5:f6:f3:1c:06:61:ac:2e:83: 03:aa:a1:8f:86:10:a9:0c:7d:d2:94:af:f0:33:3c:63:2e:22: e2:63:b1:6b:3a:c8:a8:0b:c8:3c:ae:b8:c2:ae:c8:a6:e4:13: d6:ad:db:70:e8:4a:f2:2e:64:58:0c:3b:3f:a8:75:60:77:1d: 84:a4:5f:22:43:b8:fd:c7:12:f4:b2:ee:94:75:5e:55:bb:c3: a0:44:36:28:68:62:9c:73:94:27:38:18:be:77:24:b1:1a:71: fd:30:8c:4f:3c:09:7b:a1:b2:0c:80:cb:3b:1a:31:62:2a:e5: 4a:b2:8d:58:84:93:34:9c:7b:c9:f3:ae:ae:2d:c1:90:8e:39: 16:38:5b:2a:73:6f:b7:72:bc:72:22:fe:75:d3:e8:2c:e6:98: b0:5d:f1:88:0c:3f:af:28:06:eb:c4:a1:a6:59:41:a5:7a:fc: a8:6e:9f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHH/m9funaTzrvGI8D8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx NTAzYjAwHhcNMjUxMjIxMDEwMDUzWhcNMjUxMjIyMDEwMDUzWjAzMTEwLwYDVQQD EyhiNjUzZjIzZmY3OWEwYTAxOWYyNmViMjQ1NjJlNzg3ZWE1YTY0NzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyad0PfknM7Az3nNgnpFkcQ1RWqX9 lDooTMalBhNl9LAtmpvnv3S11NxU0uuetB8J6tt5GuPoqc7HWsHsGY/vtFb/DveS EnODGAVTZx5RUpdeAFlcOWIk9+aPGBX05BDiL/mQhHIdwRFuVEHsiT+IkyD5OZKG 3ECr7gOY3gpXUw3+3VgwBrgn7Zdnb50jxrccWP14gOATshmWU6JqMHHUQoUxBc/9 +UwyajwljYTYCt9t0n5aj6/DOdFcP3b3yA+4UeRly2SZWy2KZ+prdvyXGaYxIYs1 u+Ya3GW8iD7C3mXRmzSRMCFT6jWpEIh9SUB0xnKcy6gnjSlmO4rGptSeJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZT8j/3mgoBnybrJFYueH6lpkdPMB8GA1UdIwQY MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoPU+Rxo 0U1YrZXAxB4gJaine9INvx1BGuWmnM/p+oVxhpxawooyddoxTt9x1sviP740NZNK ta/tGzxiyzQl1phCRis5cxJodMbvzigbB7sK5fbzHAZhrC6DA6qhj4YQqQx90pSv 8DM8Yy4i4mOxazrIqAvIPK64wq7IpuQT1q3bcOhK8i5kWAw7P6h1YHcdhKRfIkO4 /ccS9LLulHVeVbvDoEQ2KGhinHOUJzgYvncksRpx/TCMTzwJe6GyDIDLOxoxYirl SrKNWISTNJx7yfOuri3BkI45FjhbKnNvt3K8ciL+ddPoLOaYsF3xiAw/rygG68Sh pllBpXr8qG6fpw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:04 2025 by rpki-client