This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json) Hash identifier: 55V7KykdbTWnafnepRFDLzz8bIBFXi3vX6dY3vte7Sw= Subject key identifier: 1A:FD:F3:1D:B4:9A:85:A4:6A:9B:F8:86:62:FC:96:E6:AC:DB:8D:35 Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91 Certificate serial: 019B3C7F97A01DC8D472DB3D365396F82727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft Manifest number: 108B Signing time: Sat 20 Dec 2025 16:02:33 +0000 Manifest this update: Sat 20 Dec 2025 16:02:33 +0000 Manifest next update: Sun 21 Dec 2025 16:02:33 +0000 Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: gwYnmByx/r84RAzYj/T/J2b24EbnqBet5UvTZPw/Ggo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:97:a0:1d:c8:d4:72:db:3d:36:53:96:f8:27:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91 Validity Not Before: Dec 20 16:02:33 2025 GMT Not After : Dec 21 16:02:33 2025 GMT Subject: CN=1afdf31db49a85a46a9bf88662fc96e6acdb8d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:a8:9d:85:e4:05:15:09:23:51:e8:de:dc: 80:9f:bb:c7:a8:0a:19:ed:7c:f6:a1:6b:b2:03:8e: d7:6a:50:31:b3:1b:7b:e0:b3:17:45:a0:96:ea:5f: da:56:24:0c:a8:4d:c1:58:cf:78:b1:0d:05:6e:43: e5:cc:15:64:5e:79:cc:41:26:ab:6b:50:d9:ee:4c: 64:91:f3:82:29:b8:b0:a4:91:f3:bb:e3:32:af:7e: 02:8f:e6:32:32:39:64:c4:1d:7e:26:56:0f:4d:8e: 66:d5:90:fd:1a:56:24:88:2d:69:70:01:3d:0d:91: 3f:30:a4:70:5b:c2:58:9b:d4:56:9b:98:4a:f7:b2: 18:40:a6:83:f3:36:ad:97:91:d8:05:58:d3:9b:5e: c2:e0:b8:f6:64:41:a0:85:00:da:9d:f7:a5:b2:1c: 47:95:f1:58:49:9d:24:3a:26:2b:7a:20:31:e4:5b: 8f:88:f5:11:63:08:4a:44:00:45:ad:e6:18:eb:f7: e5:6d:5c:d5:b7:40:06:6b:28:e3:22:3c:ac:4c:f2: 5d:84:c4:06:9c:51:08:59:19:82:7a:89:ca:f0:7e: cb:24:4d:69:ba:b7:06:91:e4:3c:af:7e:53:f1:8b: ba:99:b6:28:23:fa:e7:fd:9c:9d:12:74:be:d4:cb: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FD:F3:1D:B4:9A:85:A4:6A:9B:F8:86:62:FC:96:E6:AC:DB:8D:35 X509v3 Authority Key Identifier: keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:56:b4:7f:39:cd:31:3b:69:65:85:4d:5c:3c:36:75:57:b9: 77:a7:73:fd:b4:ff:d2:c4:21:fb:6e:af:94:8e:ac:cc:34:1c: d8:b0:2c:af:bb:23:ea:2b:02:82:02:92:dd:f7:72:1a:82:c0: 7d:49:71:4f:f5:03:14:0a:30:34:36:d0:b5:83:8b:0b:63:f1: cd:b1:84:bd:f8:84:10:ca:34:d0:6f:46:d9:dd:50:64:64:0a: 81:01:98:a5:67:c5:52:0d:76:21:1b:5a:e8:49:ae:d6:ca:b7: 31:48:27:de:f2:c5:88:7a:ee:95:e1:97:4f:31:e3:bb:e1:08: 91:eb:10:e7:89:b9:b0:af:6b:4f:30:cb:db:95:36:42:ac:59: b3:74:a9:17:eb:8c:75:83:7a:52:e0:76:ed:1e:eb:ba:2d:e7: df:80:03:a9:99:11:6a:84:59:44:e4:9a:b1:8d:59:29:d7:e3: 3b:33:92:ff:88:b0:cd:33:16:47:71:be:ee:d6:1d:16:b1:bd: 2e:47:22:16:2f:a9:28:64:62:5c:2f:15:0e:7d:3e:a2:cf:bc: 8f:fc:ac:df:84:02:ee:58:30:ae:35:a7:88:f2:84:09:14:c5: 2e:28:d8:b6:20:a1:1e:cb:cf:3d:90:01:63:99:cf:de:8b:07: 5d:1a:57:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f5egHcjUcts9NlOW+CcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjUzNDNkOTViZDRkYmMzMGYzZDcyMjQ5NTQxYTlkNDdl NzZkOTEwHhcNMjUxMjIwMTYwMjMzWhcNMjUxMjIxMTYwMjMzWjAzMTEwLwYDVQQD EygxYWZkZjMxZGI0OWE4NWE0NmE5YmY4ODY2MmZjOTZlNmFjZGI4ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEmonYXkBRUJI1Ho3tyAn7vHqAoZ 7Xz2oWuyA47XalAxsxt74LMXRaCW6l/aViQMqE3BWM94sQ0FbkPlzBVkXnnMQSar a1DZ7kxkkfOCKbiwpJHzu+Myr34Cj+YyMjlkxB1+JlYPTY5m1ZD9GlYkiC1pcAE9 DZE/MKRwW8JYm9RWm5hK97IYQKaD8zatl5HYBVjTm17C4Lj2ZEGghQDanfelshxH lfFYSZ0kOiYreiAx5FuPiPURYwhKRABFreYY6/flbVzVt0AGayjjIjysTPJdhMQG nFEIWRmCeonK8H7LJE1purcGkeQ8r35T8Yu6mbYoI/rn/ZydEnS+1MuXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr98x20moWkapv4hmL8luas2401MB8GA1UdIwQY MBaAFOFlND2VvU28MPPXIklUGp1H522RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZDI2YjgtZjc0Ny00ZDlhLTlhYTIt NmUyYzA1M2Q5OTkzLzEvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZDI2YjgtZjc0Ny00ZDlhLTlhYTItNmUyYzA1M2Q5OTkz LzEvNFdVMFBaVzlUYnd3ODljaVNWUWFuVWZuYlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVa0fznN MTtpZYVNXDw2dVe5d6dz/bT/0sQh+26vlI6szDQc2LAsr7sj6isCggKS3fdyGoLA fUlxT/UDFAowNDbQtYOLC2PxzbGEvfiEEMo00G9G2d1QZGQKgQGYpWfFUg12IRta 6Emu1sq3MUgn3vLFiHruleGXTzHju+EIkesQ54m5sK9rTzDL25U2QqxZs3SpF+uM dYN6UuB27R7rui3n34ADqZkRaoRZROSasY1ZKdfjOzOS/4iwzTMWR3G+7tYdFrG9 LkciFi+pKGRiXC8VDn0+os+8j/ys34QC7lgwrjWniPKECRTFLijYtiChHsvPPZAB Y5nP3osHXRpXpA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:11 2025 by rpki-client