This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json) Hash identifier: 3NIz9MxegbWAWupVfXiNtyWPAMt3niQPRoNyU5YVA9I= Subject key identifier: 37:87:8E:6F:EC:7D:DF:9C:FF:FB:B3:AF:F9:52:F3:F0:3B:38:DA:7D Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce Certificate serial: 019B53AAB4D84B12739A6B95A653C79DADBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft Manifest number: 0B48 Signing time: Thu 25 Dec 2025 04:00:54 +0000 Manifest this update: Thu 25 Dec 2025 04:00:54 +0000 Manifest next update: Fri 26 Dec 2025 04:00:54 +0000 Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=) 2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: pIaC4E8KwSBuKx2hmX9CfjO649FxEid+RjvUF0Myrzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:b4:d8:4b:12:73:9a:6b:95:a6:53:c7:9d:ad:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce Validity Not Before: Dec 25 04:00:54 2025 GMT Not After : Dec 26 04:00:54 2025 GMT Subject: CN=37878e6fec7ddf9cfffbb3aff952f3f03b38da7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:da:09:e3:10:5d:20:3d:92:2f:2e:15:9a:a5: 57:4d:1e:39:91:5e:6a:3d:66:7c:70:7e:0c:e1:9a: 5d:26:b2:49:94:63:6d:c7:a1:cc:3b:df:5a:47:fb: 4c:8c:47:18:a8:e7:a7:d9:16:85:ec:ad:df:b1:6d: f5:53:8b:f3:51:db:70:b1:54:c4:f0:1c:a6:b0:c7: 30:bb:89:3f:39:f9:c0:ef:fe:dd:aa:cd:68:97:95: 75:c9:7c:e2:0f:b5:c3:74:5c:cc:ce:3b:10:0b:65: 56:42:6d:d5:2a:ad:f7:64:1b:96:60:3f:dc:c4:83: 5f:5e:66:11:d4:bb:dd:c4:0d:35:87:a8:67:b8:10: 22:e1:26:18:ae:04:9c:24:82:50:90:04:5d:f0:25: e4:8d:6b:1b:4d:42:6e:3a:e6:fa:cf:f3:83:db:d4: eb:9d:cb:ec:41:ae:97:74:03:63:6b:2d:76:bc:28: 9b:57:16:ae:95:97:aa:3c:dc:f9:2d:0e:f7:f3:22: c4:9e:73:e1:d2:f5:db:1c:7b:2a:5b:5d:b3:aa:86: 51:1b:54:64:66:fa:1b:d0:0e:b8:b9:16:1e:d1:03: 65:25:72:d7:c5:53:ab:6c:10:be:d3:65:82:95:30: 44:a7:a7:99:c9:5b:60:45:b7:35:f6:4e:df:af:0e: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:87:8E:6F:EC:7D:DF:9C:FF:FB:B3:AF:F9:52:F3:F0:3B:38:DA:7D X509v3 Authority Key Identifier: keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3b:7a:66:89:ba:88:5b:08:17:9c:2c:0d:f9:b8:40:6b:40: 2c:fc:6b:b3:a9:cd:ad:69:9e:cc:5b:17:4d:e3:b0:91:d5:72: bf:c0:94:f8:ef:10:64:7a:d0:07:bb:b6:61:4c:80:ae:0d:f0: fe:a9:bd:fe:68:6a:ec:70:9e:82:ba:d1:9c:26:31:c1:0e:b2: 2a:c7:4e:59:7f:c1:e0:e8:b9:3b:a2:71:2b:b9:ba:09:2d:b0: 9c:ae:6b:c1:44:b7:20:51:ec:07:06:db:31:f6:db:b3:94:11: 64:36:3c:91:8c:43:81:8e:6f:34:22:82:3d:67:5b:8e:fc:33: 41:39:5b:5b:e2:74:57:9c:2b:4f:8a:59:58:5d:0a:dc:41:f5: 5a:9a:02:f7:12:54:df:45:14:d0:14:80:c1:55:b4:ff:01:38: 4c:89:f4:f9:0a:ca:0a:72:97:a6:7a:1c:7b:11:3d:9e:45:49: a0:79:89:22:f1:fd:b3:8c:7c:90:e0:a7:b1:19:1d:16:47:61: 52:6e:a7:b6:a2:b5:37:a3:f4:51:fa:6b:14:73:d0:f5:6b:c8: ae:95:29:8c:d3:ec:61:5e:4a:1d:c2:5c:fa:9f:4a:01:6f:01: d2:6a:00:e1:e5:3c:12:38:ab:e3:36:d1:6e:7d:a2:d3:a7:8f: 8b:76:37:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqrTYSxJzmmuVplPHna29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy MzA4Y2UwHhcNMjUxMjI1MDQwMDU0WhcNMjUxMjI2MDQwMDU0WjAzMTEwLwYDVQQD EygzNzg3OGU2ZmVjN2RkZjljZmZmYmIzYWZmOTUyZjNmMDNiMzhkYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8toJ4xBdID2SLy4VmqVXTR45kV5q PWZ8cH4M4ZpdJrJJlGNtx6HMO99aR/tMjEcYqOen2RaF7K3fsW31U4vzUdtwsVTE 8BymsMcwu4k/OfnA7/7dqs1ol5V1yXziD7XDdFzMzjsQC2VWQm3VKq33ZBuWYD/c xINfXmYR1LvdxA01h6hnuBAi4SYYrgScJIJQkARd8CXkjWsbTUJuOub6z/OD29Tr ncvsQa6XdANjay12vCibVxaulZeqPNz5LQ738yLEnnPh0vXbHHsqW12zqoZRG1Rk Zvob0A64uRYe0QNlJXLXxVOrbBC+02WClTBEp6eZyVtgRbc19k7frw7zGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeHjm/sfd+c//uzr/lS8/A7ONp9MB8GA1UdIwQY MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1 LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTt6Zom6 iFsIF5wsDfm4QGtALPxrs6nNrWmezFsXTeOwkdVyv8CU+O8QZHrQB7u2YUyArg3w /qm9/mhq7HCegrrRnCYxwQ6yKsdOWX/B4Oi5O6JxK7m6CS2wnK5rwUS3IFHsBwbb Mfbbs5QRZDY8kYxDgY5vNCKCPWdbjvwzQTlbW+J0V5wrT4pZWF0K3EH1WpoC9xJU 30UU0BSAwVW0/wE4TIn0+QrKCnKXpnocexE9nkVJoHmJIvH9s4x8kOCnsRkdFkdh Um6ntqK1N6P0UfprFHPQ9WvIrpUpjNPsYV5KHcJc+p9KAW8B0moA4eU8Ejir4zbR bn2i06ePi3Y39g== -----END CERTIFICATE-----Generated at Thu Dec 25 07:21:48 2025 by rpki-client