This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json) Hash identifier: l3rB51P9voraQpOeyPyBzsvyT5pbIGx5CQtYRAzi7sY= Subject key identifier: 40:7E:5D:EA:E0:77:A3:1C:B2:58:C7:CC:6B:38:43:60:75:C4:D6:12 Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Certificate serial: 019B38D81FC49AA19B575CD19BEF9BBFA21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft Manifest number: 0741 Signing time: Fri 19 Dec 2025 23:00:46 +0000 Manifest this update: Fri 19 Dec 2025 23:00:46 +0000 Manifest next update: Sat 20 Dec 2025 23:00:46 +0000 Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: AbKBLmW6e74gY1Yd68U1C5i+Fk4wUeefLDjBNFBKXM4=) 2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:1f:c4:9a:a1:9b:57:5c:d1:9b:ef:9b:bf:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879 Validity Not Before: Dec 19 23:00:46 2025 GMT Not After : Dec 20 23:00:46 2025 GMT Subject: CN=407e5deae077a31cb258c7cc6b38436075c4d612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:78:56:71:04:43:0a:20:5d:89:32:5e:20: 2f:44:eb:5c:2d:f9:fd:93:fd:98:22:96:20:ab:9e: fc:35:8c:92:fe:d0:12:eb:1d:f1:7f:93:aa:e8:d3: 05:24:f0:61:d9:98:0f:3d:04:bc:4a:b1:7c:b2:0b: db:e0:5f:bd:89:47:1c:17:dc:e5:c8:24:0b:1c:ce: 67:f3:80:88:75:49:2d:d5:73:6f:ec:23:ae:11:af: 37:6f:21:a5:3a:2a:d7:d5:85:b2:e8:81:f5:fb:e8: dc:ab:5e:54:9b:f0:dc:64:2a:48:fd:8c:e6:9d:39: fc:b9:00:39:5f:ae:9c:63:dd:7f:43:63:ba:6f:24: 2f:6c:50:d0:e0:c7:44:c2:49:2a:ae:df:63:e9:94: 57:64:87:a1:ff:0e:8a:fc:6b:34:1b:93:90:2c:1b: 13:e2:93:df:a3:41:9b:7e:55:56:58:f1:aa:44:1a: 74:06:be:a1:8b:ec:b6:08:bc:85:81:8d:f1:71:68: 50:9a:62:68:02:d7:91:f1:a3:01:ab:3d:2f:a1:c7: d0:30:c8:fe:f3:b5:24:3a:34:24:95:fe:49:94:e5: ff:eb:23:9a:e6:75:0d:e2:54:9b:15:11:b9:81:95: bd:32:44:b6:dc:e1:e9:93:1b:7a:fd:34:f7:33:44: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:5D:EA:E0:77:A3:1C:B2:58:C7:CC:6B:38:43:60:75:C4:D6:12 X509v3 Authority Key Identifier: keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:81:1c:51:92:7c:0f:14:4e:34:be:13:31:d2:f0:28:fd: 28:9b:bf:e6:8e:da:5b:fe:fd:21:dd:18:60:a9:c8:8a:20:a9: 6b:a4:11:3d:54:d7:18:09:6e:36:97:c0:fb:59:ae:83:9b:57: 3b:d6:c8:18:a0:d5:07:28:63:7a:b8:62:ac:30:ac:dc:2d:f7: 9e:b9:9d:13:51:40:38:6d:62:52:60:5c:4c:af:88:2d:7b:05: bf:93:5e:b4:47:30:81:b2:76:14:ac:79:31:cb:b1:5a:85:f2: b9:3a:c2:6e:fe:5c:a6:88:78:05:68:33:1c:6e:09:d6:89:64: 74:97:0f:73:30:45:6a:e8:d8:95:e4:7f:04:02:28:10:83:ff: 73:1a:35:46:4e:f0:62:fb:44:85:1f:b1:14:51:91:c3:8b:47: cd:f9:2f:e0:fa:c2:d2:f6:bb:c9:05:20:b6:c6:9a:03:fd:bd: fa:ee:6d:bd:ea:25:d2:0f:ed:87:23:2e:74:e8:e2:40:15:d9: 0b:22:c9:ca:2b:2f:9d:6b:c1:b8:10:6f:28:dc:e0:6b:8d:d1: 3e:2a:c9:c6:f9:73:c8:7b:6c:6f:b9:29:0c:5d:b1:1b:56:43: 36:36:d0:5f:29:4d:97:7c:3d:21:11:d2:53:43:ae:ad:53:c4: be:13:9b:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42B/EmqGbV1zRm++bv6IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz YWU4NzkwHhcNMjUxMjE5MjMwMDQ2WhcNMjUxMjIwMjMwMDQ2WjAzMTEwLwYDVQQD Eyg0MDdlNWRlYWUwNzdhMzFjYjI1OGM3Y2M2YjM4NDM2MDc1YzRkNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjl4VnEEQwogXYkyXiAvROtcLfn9 k/2YIpYgq578NYyS/tAS6x3xf5Oq6NMFJPBh2ZgPPQS8SrF8sgvb4F+9iUccF9zl yCQLHM5n84CIdUkt1XNv7COuEa83byGlOirX1YWy6IH1++jcq15Um/DcZCpI/Yzm nTn8uQA5X66cY91/Q2O6byQvbFDQ4MdEwkkqrt9j6ZRXZIeh/w6K/Gs0G5OQLBsT 4pPfo0GbflVWWPGqRBp0Br6hi+y2CLyFgY3xcWhQmmJoAteR8aMBqz0vocfQMMj+ 87UkOjQklf5JlOX/6yOa5nUN4lSbFRG5gZW9MkS23OHpkxt6/TT3M0SokQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB+Xergd6McsljHzGs4Q2B1xNYSMB8GA1UdIwQY MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQniBHFGS fA8UTjS+EzHS8Cj9KJu/5o7aW/79Id0YYKnIiiCpa6QRPVTXGAluNpfA+1mug5tX O9bIGKDVByhjerhirDCs3C33nrmdE1FAOG1iUmBcTK+ILXsFv5NetEcwgbJ2FKx5 McuxWoXyuTrCbv5cpoh4BWgzHG4J1olkdJcPczBFaujYleR/BAIoEIP/cxo1Rk7w YvtEhR+xFFGRw4tHzfkv4PrC0va7yQUgtsaaA/29+u5tveol0g/thyMudOjiQBXZ CyLJyisvnWvBuBBvKNzga43RPirJxvlzyHtsb7kpDF2xG1ZDNjbQXylNl3w9IRHS U0OurVPEvhOb/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 03:46:40 2025 by rpki-client