This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json) Hash identifier: MRuStm7IANh6uuqApjLU/tqPuyX+Z976W+lv843y5xo= Subject key identifier: 53:F4:21:AA:78:79:74:F8:09:C2:86:59:C9:5C:DA:13:37:A4:3D:E3 Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f Certificate serial: 019B364546A0B1F3141E4785E16A1AAD3E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft Manifest number: 0375 Signing time: Fri 19 Dec 2025 11:01:08 +0000 Manifest this update: Fri 19 Dec 2025 11:01:08 +0000 Manifest next update: Sat 20 Dec 2025 11:01:08 +0000 Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: 0gN7NzpMJq+bjpJNN8y5CTr0iAROGX0sf9+PNM7ZQ3s=) 2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:46:a0:b1:f3:14:1e:47:85:e1:6a:1a:ad:3e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f Validity Not Before: Dec 19 11:01:08 2025 GMT Not After : Dec 20 11:01:08 2025 GMT Subject: CN=53f421aa787974f809c28659c95cda1337a43de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:3a:64:0c:af:3f:6c:5d:9b:b5:9f:4f:f5: b3:bb:d8:cd:ee:46:76:4c:3b:a2:38:88:14:56:b8: 78:5e:d1:ad:3a:3d:14:b5:ee:7f:3a:03:8b:1f:d0: c1:1c:ae:14:0f:97:e0:5b:18:62:da:ca:f9:00:ad: 25:46:a8:e8:4b:c9:c4:63:d6:c9:05:31:80:01:47: 70:9f:81:9a:4d:2b:d9:67:3d:e3:2c:ec:69:1a:47: d5:f2:55:25:76:f6:6a:a0:d4:2f:bd:d7:10:43:5e: 1d:bd:1c:0c:f5:e3:98:ff:07:bd:15:ab:84:11:eb: 1e:4e:60:bc:43:c2:f2:a6:46:0c:e5:e5:2d:d6:4f: ca:5b:b1:c8:20:5a:e0:31:ad:b4:41:8e:67:2e:c6: cd:c2:53:96:85:0a:39:fe:d9:e8:c9:2f:03:27:e3: f6:b7:59:ff:48:31:f6:f0:b3:01:b0:72:7e:62:17: 3b:0c:92:a7:f8:ea:83:cd:4e:da:60:4a:3e:bd:bd: 45:94:e3:3f:9c:f8:f2:a1:7f:70:79:67:0f:ab:0b: 97:db:72:0f:75:6b:28:18:22:ed:46:b5:6e:ef:dd: 40:dd:b5:3f:85:78:74:1b:87:13:62:58:b7:a8:b5: ce:c7:eb:46:11:e2:2c:2f:df:a7:28:41:ad:e9:c7: b2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F4:21:AA:78:79:74:F8:09:C2:86:59:C9:5C:DA:13:37:A4:3D:E3 X509v3 Authority Key Identifier: keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:5a:ae:30:33:23:66:27:3f:6f:16:bb:44:66:65:ea:13:6d: 6e:85:be:be:03:6c:65:2e:7e:62:6c:7b:e8:5d:5f:9c:c8:18: 03:be:89:81:ca:54:a6:35:d4:3c:37:5e:b9:e4:e6:9c:d8:10: d8:e5:d4:cd:27:05:17:fe:66:4e:9f:85:4c:d0:5a:de:38:73: a3:2b:2c:c5:62:96:c2:8d:5e:a5:8a:56:56:a6:36:d9:1a:54: 8d:f3:c5:23:e9:d2:32:f5:e6:2c:9b:2b:bc:03:a0:14:4d:39: eb:20:aa:2e:5d:ce:9a:46:0f:6d:70:de:d1:1e:a7:6d:7c:c7: 36:b3:c3:e3:e6:ec:59:4f:c4:ff:37:fb:44:e5:19:50:35:3e: 0e:7c:17:f6:cf:3c:81:ba:d9:95:58:89:8d:d7:24:74:65:9d: db:a1:6e:64:a0:26:e7:cb:2b:58:c5:13:af:46:03:87:21:3b: d9:90:f2:a7:b4:d5:13:61:f3:41:0f:bb:7b:c2:c4:0a:ae:5f: e8:c1:52:d4:a5:8e:7b:98:ed:7a:80:cb:c1:3e:15:8a:a4:85: 79:69:2b:2d:5b:6f:8f:30:56:75:2b:3b:3d:b4:71:0d:3d:36: ac:6e:2b:c2:0a:74:40:25:c8:23:1d:56:a2:e7:5b:6f:49:89: 54:14:16:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RUagsfMUHkeF4WoarT6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx NGMxNWYwHhcNMjUxMjE5MTEwMTA4WhcNMjUxMjIwMTEwMTA4WjAzMTEwLwYDVQQD Eyg1M2Y0MjFhYTc4Nzk3NGY4MDljMjg2NTljOTVjZGExMzM3YTQzZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3U6ZAyvP2xdm7WfT/Wzu9jN7kZ2 TDuiOIgUVrh4XtGtOj0Ute5/OgOLH9DBHK4UD5fgWxhi2sr5AK0lRqjoS8nEY9bJ BTGAAUdwn4GaTSvZZz3jLOxpGkfV8lUldvZqoNQvvdcQQ14dvRwM9eOY/we9FauE EeseTmC8Q8LypkYM5eUt1k/KW7HIIFrgMa20QY5nLsbNwlOWhQo5/tnoyS8DJ+P2 t1n/SDH28LMBsHJ+Yhc7DJKn+OqDzU7aYEo+vb1FlOM/nPjyoX9weWcPqwuX23IP dWsoGCLtRrVu791A3bU/hXh0G4cTYli3qLXOx+tGEeIsL9+nKEGt6ceyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFP0Iap4eXT4CcKGWclc2hM3pD3jMB8GA1UdIwQY MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2 LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1quMDMj Zic/bxa7RGZl6hNtboW+vgNsZS5+Ymx76F1fnMgYA76JgcpUpjXUPDdeueTmnNgQ 2OXUzScFF/5mTp+FTNBa3jhzoyssxWKWwo1epYpWVqY22RpUjfPFI+nSMvXmLJsr vAOgFE056yCqLl3OmkYPbXDe0R6nbXzHNrPD4+bsWU/E/zf7ROUZUDU+DnwX9s88 gbrZlViJjdckdGWd26FuZKAm58srWMUTr0YDhyE72ZDyp7TVE2HzQQ+7e8LECq5f 6MFS1KWOe5jteoDLwT4ViqSFeWkrLVtvjzBWdSs7PbRxDT02rG4rwgp0QCXIIx1W oudbb0mJVBQW8w== -----END CERTIFICATE-----Generated at Fri Dec 19 16:40:44 2025 by rpki-client