This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json) Hash identifier: bOZqxKe8FEmTaoPnRpB72vubLEz4LR6Wz/jwUPcO7Qk= Subject key identifier: 09:91:A4:EF:7B:B9:02:6F:44:F4:CD:C6:CC:9F:36:11:1E:A3:E7:4A Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Certificate serial: 019B39B3DD5D7E3146CC3B2F37C1C467E649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft Manifest number: 04ED Signing time: Sat 20 Dec 2025 03:00:47 +0000 Manifest this update: Sat 20 Dec 2025 03:00:47 +0000 Manifest next update: Sun 21 Dec 2025 03:00:47 +0000 Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: a/Iufdp8dXu/XR8PAW0faZT+d8CkbU9jbU9FT2vquDY=) 2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:dd:5d:7e:31:46:cc:3b:2f:37:c1:c4:67:e6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Validity Not Before: Dec 20 03:00:47 2025 GMT Not After : Dec 21 03:00:47 2025 GMT Subject: CN=0991a4ef7bb9026f44f4cdc6cc9f36111ea3e74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:65:b7:4f:a3:57:05:b7:29:90:22:6b:a6: 12:17:3e:b9:4c:bb:54:9f:59:ef:53:58:24:c2:3d: 62:02:97:2e:67:ea:be:18:7c:58:b5:7e:bf:76:46: 24:bc:5e:11:bb:81:61:a4:b2:e6:87:72:47:62:bd: fb:a1:68:43:56:b8:38:5d:07:a3:71:db:15:83:67: 5e:5a:00:30:01:15:33:74:a7:68:8d:c3:8f:60:7d: cb:19:a2:ca:e4:d9:f7:35:98:48:a7:72:ca:51:16: 43:a5:1b:72:63:15:33:7f:f1:61:6a:f3:89:76:b1: c3:41:9d:e5:6d:1d:c7:fa:36:ef:e7:06:95:fb:aa: d6:7c:4f:91:cc:00:ae:3a:db:52:64:a8:61:3a:f5: 2b:83:7a:0e:4c:b0:33:5f:d9:bd:e0:d2:78:89:26: 31:83:71:f3:c8:eb:a6:0c:ad:b0:60:94:d6:df:78: f7:42:41:36:6a:70:3a:8c:c3:5d:d6:3e:72:db:df: 1e:90:cd:af:3c:9d:12:1f:9f:19:9e:1c:22:32:40: 17:f5:6d:a5:6d:39:51:3e:21:51:3d:11:85:f4:ff: f7:49:ce:ff:69:f5:ae:ea:91:d0:99:8d:c7:a8:17: a0:fe:cf:52:50:10:70:e0:1f:9e:6a:24:df:e9:7f: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:A4:EF:7B:B9:02:6F:44:F4:CD:C6:CC:9F:36:11:1E:A3:E7:4A X509v3 Authority Key Identifier: keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b0:ec:bb:e5:26:3c:af:59:63:8a:7b:ee:3e:0c:16:59:c5: 63:43:f8:b7:51:91:4f:19:97:aa:df:ab:67:47:44:6e:84:db: af:e3:1b:8f:f5:f4:e4:11:0b:6e:8d:d7:e2:07:c6:27:f3:c0: 7d:33:06:03:ba:06:29:8c:dc:ae:e1:0c:52:6f:2d:ae:2d:86: 5d:2d:be:fe:ab:4f:a8:de:ab:c2:b9:f3:f9:7d:a7:92:0a:f3: 42:41:0e:10:23:99:3d:a2:64:1e:d3:bf:11:53:a6:df:a9:73: 89:08:77:23:2e:fd:2a:13:c3:96:4a:b4:18:21:bf:1f:2a:91: a3:82:b2:42:35:bf:c5:de:6b:30:65:06:1a:62:4e:9d:67:6b: 96:0f:d1:80:e8:a7:3f:19:6d:c7:e0:67:69:fb:7b:30:3d:d3: 60:5a:e6:9d:d1:68:4b:35:ca:15:07:72:d1:10:a1:4c:5d:ed: 9a:6d:26:0e:11:12:bb:06:98:80:ff:0f:e7:75:f4:6d:ed:59: 21:a9:36:78:88:4f:a5:bc:d0:d0:81:ca:2a:0c:23:4c:d1:13: 8b:53:26:fc:5b:5c:a3:14:99:87:e2:6d:9d:49:d7:05:30:a1: a3:39:ff:a4:21:df:87:5e:c1:2c:e5:3d:30:f4:e7:a9:0b:3e: 42:9a:7c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s91dfjFGzDsvN8HEZ+ZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz Mzg2YzAwHhcNMjUxMjIwMDMwMDQ3WhcNMjUxMjIxMDMwMDQ3WjAzMTEwLwYDVQQD EygwOTkxYTRlZjdiYjkwMjZmNDRmNGNkYzZjYzlmMzYxMTFlYTNlNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Nlt0+jVwW3KZAia6YSFz65TLtU n1nvU1gkwj1iApcuZ+q+GHxYtX6/dkYkvF4Ru4FhpLLmh3JHYr37oWhDVrg4XQej cdsVg2deWgAwARUzdKdojcOPYH3LGaLK5Nn3NZhIp3LKURZDpRtyYxUzf/FhavOJ drHDQZ3lbR3H+jbv5waV+6rWfE+RzACuOttSZKhhOvUrg3oOTLAzX9m94NJ4iSYx g3HzyOumDK2wYJTW33j3QkE2anA6jMNd1j5y298ekM2vPJ0SH58ZnhwiMkAX9W2l bTlRPiFRPRGF9P/3Sc7/afWu6pHQmY3HqBeg/s9SUBBw4B+eaiTf6X+V2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmRpO97uQJvRPTNxsyfNhEeo+dKMB8GA1UdIwQY MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrDsu+Um PK9ZY4p77j4MFlnFY0P4t1GRTxmXqt+rZ0dEboTbr+Mbj/X05BELbo3X4gfGJ/PA fTMGA7oGKYzcruEMUm8tri2GXS2+/qtPqN6rwrnz+X2nkgrzQkEOECOZPaJkHtO/ EVOm36lziQh3Iy79KhPDlkq0GCG/HyqRo4KyQjW/xd5rMGUGGmJOnWdrlg/RgOin Pxltx+Bnaft7MD3TYFrmndFoSzXKFQdy0RChTF3tmm0mDhESuwaYgP8P53X0be1Z Iak2eIhPpbzQ0IHKKgwjTNETi1Mm/FtcoxSZh+JtnUnXBTChozn/pCHfh17BLOU9 MPTnqQs+Qpp8PA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:40:18 2025 by rpki-client