This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json) Hash identifier: l0A95R0v9jIVqCOgqkF0k8skCRS6qek3Q/JhxcESou4= Subject key identifier: 01:F4:F8:ED:74:2D:37:0C:6C:DD:3C:A1:0C:37:44:E5:CB:53:7F:4C Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f Certificate serial: 019B1D29E06CA711F3D036A9AAA81E649A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft Manifest number: 09B6 Signing time: Sun 14 Dec 2025 14:00:42 +0000 Manifest this update: Sun 14 Dec 2025 14:00:42 +0000 Manifest next update: Mon 15 Dec 2025 14:00:42 +0000 Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: N5j6jkvwgJjDxhFiZJ6S2zeWHBFgvUdTYykTUDQGTnY=) 2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:e0:6c:a7:11:f3:d0:36:a9:aa:a8:1e:64:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f Validity Not Before: Dec 14 14:00:42 2025 GMT Not After : Dec 15 14:00:42 2025 GMT Subject: CN=01f4f8ed742d370c6cdd3ca10c3744e5cb537f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:68:75:eb:ca:ff:ea:8a:42:ec:21:44:17: c8:26:8d:d8:50:16:60:96:72:4e:ad:3a:e7:36:5a: fd:fa:00:09:85:4b:ba:fc:78:b1:30:2c:d7:be:97: 86:ef:1d:01:2b:fd:7d:18:7b:4d:ff:4e:51:a0:aa: 67:39:94:5f:f9:84:54:c4:cb:92:b5:82:54:b8:e1: 27:c8:5a:01:e7:98:a0:e6:54:6e:85:7c:3a:0e:a4: 2b:b2:9f:fd:e6:9d:fe:a9:89:c4:f6:65:8e:15:56: a8:8a:6c:23:c2:34:bf:91:50:ff:91:64:ce:06:cc: 21:91:43:07:20:06:57:86:33:8b:55:ca:66:2b:b3: a6:f5:87:6c:e9:6f:12:7a:9f:55:15:35:52:f3:60: d9:c5:93:b0:89:17:2c:82:22:c4:78:b9:80:3d:46: 4e:99:44:b4:ba:6b:44:b7:b8:2f:37:65:dc:79:f6: ed:c7:b2:e4:44:83:35:26:e1:53:4a:a2:03:c8:9c: d8:77:73:7e:e5:d6:b4:5b:6c:e1:ba:dc:1c:91:13: ae:70:7c:d0:27:8d:77:d8:a2:f4:fd:94:f3:f7:fd: b9:39:54:45:3a:02:ef:b3:c0:c1:58:62:57:78:d7: b7:a1:80:ea:b5:98:ea:4a:61:21:d3:17:19:33:6e: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:F8:ED:74:2D:37:0C:6C:DD:3C:A1:0C:37:44:E5:CB:53:7F:4C X509v3 Authority Key Identifier: keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:6a:38:e6:f0:1c:ab:68:9e:3a:2c:c4:d0:ae:04:6b:ed: d3:09:38:0e:23:de:d0:75:b7:09:f7:e5:ae:96:0f:98:28:7a: 3e:78:50:26:1a:9c:d8:58:0e:81:4a:f7:52:dc:ba:82:83:68: d9:62:0b:7c:a1:91:52:65:35:47:3f:2b:c5:61:87:ac:0d:aa: ea:49:85:6e:14:27:40:66:6c:ab:5e:0b:3b:d7:b8:f1:98:4e: aa:a9:e4:b6:79:3f:b1:c4:4b:ac:02:a4:1c:ef:ae:95:31:d6: dd:80:12:9f:61:b4:a6:6f:f5:f2:4d:0d:62:8c:7b:34:31:a1: 02:32:8c:c8:2b:be:62:30:79:36:f9:6c:15:9c:9c:32:7d:4a: 69:ee:2f:96:00:f3:54:38:b9:a0:7c:14:5f:87:3a:7e:97:30: ea:db:d3:9d:26:bd:0f:64:59:a9:9d:4b:59:43:ab:d5:0d:51: 89:a0:f5:c0:6c:4d:b7:4a:96:41:4a:3f:86:e0:e2:60:bf:f4: 46:c5:b5:ac:00:93:ca:75:6f:87:9c:67:f2:4c:e9:f9:6b:15: 4f:c9:45:52:19:36:a3:4a:89:9d:27:38:34:dd:e3:c1:67:32: c4:12:cc:1e:a2:82:8d:16:8d:d6:86:04:60:47:e1:1e:5c:3e: ae:ef:2f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKeBspxHz0DapqqgeZJpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx NzkxMmYwHhcNMjUxMjE0MTQwMDQyWhcNMjUxMjE1MTQwMDQyWjAzMTEwLwYDVQQD EygwMWY0ZjhlZDc0MmQzNzBjNmNkZDNjYTEwYzM3NDRlNWNiNTM3ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhodevK/+qKQuwhRBfIJo3YUBZg lnJOrTrnNlr9+gAJhUu6/HixMCzXvpeG7x0BK/19GHtN/05RoKpnOZRf+YRUxMuS tYJUuOEnyFoB55ig5lRuhXw6DqQrsp/95p3+qYnE9mWOFVaoimwjwjS/kVD/kWTO BswhkUMHIAZXhjOLVcpmK7Om9Yds6W8Sep9VFTVS82DZxZOwiRcsgiLEeLmAPUZO mUS0umtEt7gvN2Xcefbtx7LkRIM1JuFTSqIDyJzYd3N+5da0W2zhutwckROucHzQ J4132KL0/ZTz9/25OVRFOgLvs8DBWGJXeNe3oYDqtZjqSmEh0xcZM24fswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH0+O10LTcMbN08oQw3ROXLU39MMB8GA1UdIwQY MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPNqOObw HKtonjosxNCuBGvt0wk4DiPe0HW3CfflrpYPmCh6PnhQJhqc2FgOgUr3Uty6goNo 2WILfKGRUmU1Rz8rxWGHrA2q6kmFbhQnQGZsq14LO9e48ZhOqqnktnk/scRLrAKk HO+ulTHW3YASn2G0pm/18k0NYox7NDGhAjKMyCu+YjB5NvlsFZycMn1Kae4vlgDz VDi5oHwUX4c6fpcw6tvTnSa9D2RZqZ1LWUOr1Q1RiaD1wGxNt0qWQUo/huDiYL/0 RsW1rACTynVvh5xn8kzp+WsVT8lFUhk2o0qJnSc4NN3jwWcyxBLMHqKCjRaN1oYE YEfhHlw+ru8vUg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:16:51 2025 by rpki-client