This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json) Hash identifier: vKsqta/+BSvx8+z+i9juxHRPSl7wrZngTdEdBv64S50= Subject key identifier: 7D:1F:E7:F2:11:CE:00:55:71:D6:96:68:7F:EF:51:B1:DF:93:89:4A Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Certificate serial: 019B3A21A06BD92C47C08F80B727B0BD95EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft Manifest number: 1097 Signing time: Sat 20 Dec 2025 05:00:40 +0000 Manifest this update: Sat 20 Dec 2025 05:00:40 +0000 Manifest next update: Sun 21 Dec 2025 05:00:40 +0000 Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: BNuTzk+65BHrnNqVY2O5bCM+kZrvg7zhq1s/iytIyFM=) 2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:a0:6b:d9:2c:47:c0:8f:80:b7:27:b0:bd:95:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Validity Not Before: Dec 20 05:00:40 2025 GMT Not After : Dec 21 05:00:40 2025 GMT Subject: CN=7d1fe7f211ce005571d696687fef51b1df93894a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:0a:49:48:b3:bb:00:9d:54:51:c6:d1:d1: 4a:e6:a0:ed:ab:60:fb:55:21:24:fa:4b:3b:23:2e: cc:bb:97:d4:63:e2:0e:e3:e5:ad:4a:ff:9a:83:7b: 97:31:df:88:ab:52:c9:b6:ea:6a:3e:02:1f:4e:42: 3f:6c:09:bc:6d:de:bd:15:96:91:fd:fd:52:81:6b: c2:3c:11:f6:22:be:5e:1f:82:c3:60:fb:35:91:18: 04:47:27:10:5d:31:ea:88:ae:76:8c:36:f9:09:39: e0:f8:cd:61:af:87:20:3a:3e:5f:e7:d5:0c:eb:2f: 0f:8a:a1:7d:c7:49:9a:5e:b3:5b:75:3e:78:11:ca: 32:19:ed:db:f7:11:95:be:e1:b0:c6:be:e6:37:f2: 42:7f:dc:3f:4a:d9:5a:0c:54:11:95:77:89:6a:05: 97:dd:02:b6:32:af:ee:8e:53:d0:88:8b:3c:46:d0: f3:19:1b:71:4d:c2:d7:90:27:87:cc:85:85:e3:c6: c7:30:2f:4d:24:2a:8e:1d:66:60:b7:e1:bb:46:e0: 73:6a:d8:b4:c5:b6:21:d7:49:ae:cc:b0:56:6f:45: cc:5a:03:1c:25:7b:ef:df:70:9f:4c:b3:2a:b9:12: b5:fa:07:fe:83:ff:42:29:72:24:92:6c:bd:03:35: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1F:E7:F2:11:CE:00:55:71:D6:96:68:7F:EF:51:B1:DF:93:89:4A X509v3 Authority Key Identifier: keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:10:51:29:f6:f3:18:4d:74:fe:4e:5a:f6:60:db:67:4b: 92:14:11:b4:1d:04:b4:82:9a:f5:ae:61:5c:d9:da:85:03:da: 34:b5:85:c6:b6:67:c1:ba:cc:8d:6e:ba:a8:f0:7a:89:e1:9c: 9a:16:85:bc:0c:27:0d:a6:1b:67:10:80:92:6e:b9:3e:e4:07: f0:77:fb:30:69:46:12:fe:87:39:e6:91:9f:e7:c0:e5:42:b4: e7:27:06:5c:16:a9:06:97:06:32:b4:fc:35:72:65:63:f3:fd: a4:75:51:88:13:c9:c9:4b:14:73:3e:25:66:98:f8:4b:85:c2: d9:57:b5:3a:06:6f:ba:2a:3b:ad:22:6f:62:f2:0b:d0:c2:06: 4e:24:73:5f:20:09:bd:ac:7f:be:72:e8:b0:44:49:ea:a8:87: 64:9a:34:b7:ba:51:fa:94:b4:45:e0:9b:3c:cd:d4:b2:21:b0: f0:c7:9a:f6:48:9a:e2:bb:ae:84:31:34:1d:14:85:34:3b:38: a7:85:d3:93:58:c8:af:fd:69:93:e6:d2:fc:dc:5c:a6:d1:fb: 1b:0f:fc:1c:aa:6b:99:1b:f8:bb:67:8e:97:9a:4a:8e:07:76: 6a:30:b4:6b:2d:06:bc:9a:b2:68:a9:53:e3:29:19:0d:78:cb: 65:a7:52:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IaBr2SxHwI+AtyewvZXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk NmMxZjAwHhcNMjUxMjIwMDUwMDQwWhcNMjUxMjIxMDUwMDQwWjAzMTEwLwYDVQQD Eyg3ZDFmZTdmMjExY2UwMDU1NzFkNjk2Njg3ZmVmNTFiMWRmOTM4OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5EKSUizuwCdVFHG0dFK5qDtq2D7 VSEk+ks7Iy7Mu5fUY+IO4+WtSv+ag3uXMd+Iq1LJtupqPgIfTkI/bAm8bd69FZaR /f1SgWvCPBH2Ir5eH4LDYPs1kRgERycQXTHqiK52jDb5CTng+M1hr4cgOj5f59UM 6y8PiqF9x0maXrNbdT54EcoyGe3b9xGVvuGwxr7mN/JCf9w/StlaDFQRlXeJagWX 3QK2Mq/ujlPQiIs8RtDzGRtxTcLXkCeHzIWF48bHMC9NJCqOHWZgt+G7RuBzati0 xbYh10muzLBWb0XMWgMcJXvv33CfTLMquRK1+gf+g/9CKXIkkmy9AzUIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0f5/IRzgBVcdaWaH/vUbHfk4lKMB8GA1UdIwQY MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ8QUSn2 8xhNdP5OWvZg22dLkhQRtB0EtIKa9a5hXNnahQPaNLWFxrZnwbrMjW66qPB6ieGc mhaFvAwnDaYbZxCAkm65PuQH8Hf7MGlGEv6HOeaRn+fA5UK05ycGXBapBpcGMrT8 NXJlY/P9pHVRiBPJyUsUcz4lZpj4S4XC2Ve1OgZvuio7rSJvYvIL0MIGTiRzXyAJ vax/vnLosERJ6qiHZJo0t7pR+pS0ReCbPM3UsiGw8Mea9kia4ruuhDE0HRSFNDs4 p4XTk1jIr/1pk+bS/NxcptH7Gw/8HKprmRv4u2eOl5pKjgd2ajC0ay0GvJqyaKlT 4ykZDXjLZadSNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:03 2025 by rpki-client