This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json) Hash identifier: 2waWfxcsfdb2XB3ES77EAAHSFhAocFbtENXu9WfbCi4= Subject key identifier: D7:EB:83:66:36:13:99:3E:DA:B9:E8:E5:C0:B2:78:57:D2:57:64:D4 Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Certificate serial: 019B6BE99BA0D9A003B7FEFD1F029C152343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft Manifest number: 0507 Signing time: Mon 29 Dec 2025 21:00:30 +0000 Manifest this update: Mon 29 Dec 2025 21:00:30 +0000 Manifest next update: Tue 30 Dec 2025 21:00:30 +0000 Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: LonQgoDz/pq2YlLFeXExfnb83N9ObNpT41NX067lGkw=) 2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:9b:a0:d9:a0:03:b7:fe:fd:1f:02:9c:15:23:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Validity Not Before: Dec 29 21:00:30 2025 GMT Not After : Dec 30 21:00:30 2025 GMT Subject: CN=d7eb83663613993edab9e8e5c0b27857d25764d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:20:71:b4:6c:b6:36:a1:7f:4b:cf:28:8f: a3:da:92:a8:29:29:f1:ed:66:4b:8a:b3:16:c1:58: fe:07:5c:af:63:44:8a:af:96:06:a5:17:74:12:97: 3b:11:7d:43:7e:53:12:c2:48:14:ee:11:8d:e1:43: 47:b9:50:d6:5d:a7:fc:39:67:3a:cf:2e:7c:65:85: f2:65:b3:aa:6b:82:dd:40:08:4f:9c:31:e6:2b:8c: 63:41:4f:d6:bf:ee:5b:47:f9:5c:bd:0e:89:40:41: d7:02:54:99:7e:c7:02:73:6b:88:41:ed:e3:be:e9: ef:89:1f:9e:4d:c7:33:e9:06:f8:10:93:a7:db:ad: 22:47:99:b7:db:0f:2d:cd:0e:c0:31:4e:33:e9:41: 4a:fd:51:2d:07:ff:36:08:8f:3e:3f:f1:aa:cc:ae: 42:a5:9a:d1:65:3f:d9:6e:46:ac:b6:bd:64:e3:d6: 63:85:f7:ab:cc:4d:e0:d8:66:60:9d:ae:84:40:53: da:e9:e2:14:39:d2:4f:5d:5c:af:36:7d:0f:e9:64: 3b:91:99:78:59:b2:e2:4a:2c:81:85:dd:5c:6f:c6: 4f:55:c7:43:cb:7a:6b:e9:2a:e4:15:2e:51:3b:99: 6d:e7:ed:44:73:d0:bb:c8:b1:cf:dc:97:b6:f2:7d: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:83:66:36:13:99:3E:DA:B9:E8:E5:C0:B2:78:57:D2:57:64:D4 X509v3 Authority Key Identifier: keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:2e:d5:c1:00:d1:70:8d:63:df:12:fb:95:aa:0f:eb:06: dd:b1:91:b0:99:f7:a5:57:91:3a:c8:ab:16:60:93:50:3e:10: 95:e4:c3:a5:92:2b:9c:88:5f:7c:a2:23:60:0b:d5:7c:4d:06: 39:e7:c9:ad:b1:ae:0e:b2:c4:fa:77:99:c7:5e:0f:59:c8:f2: 9a:20:54:92:e6:d2:44:06:88:ea:51:50:ea:e7:21:f3:41:44: 3b:c9:5e:c2:1a:a2:e7:c3:21:89:1e:93:a1:6b:22:d4:ac:33: d0:85:76:a9:69:e1:6c:0c:5f:ad:07:4d:85:4f:8f:eb:7f:44: 7a:de:b4:19:47:24:e1:76:9a:55:76:9f:2e:1e:43:55:10:fb: 25:dc:4e:d2:11:2e:42:c0:0c:37:ba:5b:9a:5d:71:b7:d0:99: 40:9c:d7:0e:5b:e6:6b:aa:f2:ac:6c:69:a2:3e:b8:ce:b6:f9: 96:84:60:a0:50:f9:6f:5e:b5:83:f1:86:f5:00:14:fc:ac:68: b0:1e:8b:f8:dd:93:c5:85:a7:81:9d:24:51:7e:b4:7c:66:79: 08:f8:ea:fb:f2:68:56:1d:6d:65:34:f0:2f:75:62:59:a1:e6: c8:f6:5e:07:96:88:7d:01:d0:ad:aa:ec:9b:70:fb:52:91:c2: 7e:08:4b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6Zug2aADt/79HwKcFSNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz Mzg2YzAwHhcNMjUxMjI5MjEwMDMwWhcNMjUxMjMwMjEwMDMwWjAzMTEwLwYDVQQD EyhkN2ViODM2NjM2MTM5OTNlZGFiOWU4ZTVjMGIyNzg1N2QyNTc2NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc4gcbRstjahf0vPKI+j2pKoKSnx 7WZLirMWwVj+B1yvY0SKr5YGpRd0Epc7EX1DflMSwkgU7hGN4UNHuVDWXaf8OWc6 zy58ZYXyZbOqa4LdQAhPnDHmK4xjQU/Wv+5bR/lcvQ6JQEHXAlSZfscCc2uIQe3j vunviR+eTccz6Qb4EJOn260iR5m32w8tzQ7AMU4z6UFK/VEtB/82CI8+P/GqzK5C pZrRZT/Zbkastr1k49ZjhferzE3g2GZgna6EQFPa6eIUOdJPXVyvNn0P6WQ7kZl4 WbLiSiyBhd1cb8ZPVcdDy3pr6SrkFS5RO5lt5+1Ec9C7yLHP3Je28n2blwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfrg2Y2E5k+2rno5cCyeFfSV2TUMB8GA1UdIwQY MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2wu1cEA 0XCNY98S+5WqD+sG3bGRsJn3pVeROsirFmCTUD4QleTDpZIrnIhffKIjYAvVfE0G OefJrbGuDrLE+neZx14PWcjymiBUkubSRAaI6lFQ6uch80FEO8lewhqi58MhiR6T oWsi1Kwz0IV2qWnhbAxfrQdNhU+P639Eet60GUck4XaaVXafLh5DVRD7JdxO0hEu QsAMN7pbml1xt9CZQJzXDlvma6ryrGxpoj64zrb5loRgoFD5b161g/GG9QAU/Kxo sB6L+N2TxYWngZ0kUX60fGZ5CPjq+/JoVh1tZTTwL3ViWaHmyPZeB5aIfQHQrars m3D7UpHCfghLpw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:12:43 2025 by rpki-client