This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json) Hash identifier: OaEfozf1d5zcXgHOw5K0w7MsQSGW1EbZh0HLeQ+Vdpo= Subject key identifier: 30:28:79:9E:C6:90:8B:C5:71:1C:B3:AF:28:F1:7C:3A:9A:9E:54:B8 Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f Certificate serial: 019B4F5FB2714ECA10E589A5CF4228A0ABB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft Manifest number: 09D0 Signing time: Wed 24 Dec 2025 08:00:30 +0000 Manifest this update: Wed 24 Dec 2025 08:00:30 +0000 Manifest next update: Thu 25 Dec 2025 08:00:30 +0000 Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: R+w7kyUYCDlOaRtpoxjmJlccARzFOMnW/oFyvI2d40c=) 2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:b2:71:4e:ca:10:e5:89:a5:cf:42:28:a0:ab:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f Validity Not Before: Dec 24 08:00:30 2025 GMT Not After : Dec 25 08:00:30 2025 GMT Subject: CN=3028799ec6908bc5711cb3af28f17c3a9a9e54b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:18:70:35:ba:a8:66:97:24:35:ce:72:ff: b5:b5:74:41:8c:d3:80:7b:a0:c3:48:bd:2b:89:b5: b5:17:88:95:d5:75:6e:d7:02:7f:ce:ae:e4:3c:6a: c2:c2:7b:be:64:e8:ab:3f:ee:8c:e9:d3:5a:88:63: f3:25:5e:72:83:fb:86:35:36:a4:37:05:28:c0:84: 82:73:f7:be:d2:5c:c1:45:b1:0f:f5:52:a5:bb:3e: 5b:6e:b4:21:27:3d:81:34:54:32:eb:c4:cc:51:65: 85:8d:00:55:71:b7:54:86:c8:a6:b3:5e:0c:d0:ee: 73:7f:3d:b9:99:5e:e0:73:1a:45:cc:13:40:6d:2c: 4f:c8:48:59:cf:ec:06:03:e4:98:a4:70:85:6f:72: 3d:75:fb:f4:96:d1:ff:97:cd:b8:bd:00:2c:4b:2b: ad:0c:bf:5b:3c:98:a0:e3:af:dc:53:c2:a0:54:e1: b6:44:ec:ff:b2:63:7e:e9:f9:8c:b8:6c:b7:ac:e0: 39:f1:cc:eb:92:2b:a5:10:0c:2f:a7:b6:bb:72:46: 8f:7f:c7:40:12:92:a8:d9:9c:08:35:db:50:4c:fa: 4c:91:18:5e:39:84:03:0f:58:fc:af:be:01:55:9b: 74:db:d1:49:7f:8e:42:16:54:9f:34:46:be:e6:84: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:28:79:9E:C6:90:8B:C5:71:1C:B3:AF:28:F1:7C:3A:9A:9E:54:B8 X509v3 Authority Key Identifier: keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:01:b2:02:ff:c8:b6:ca:b2:82:86:07:ea:f0:11:5e:85:ba: 54:a9:c7:e5:23:98:94:df:02:ec:f3:4e:4b:63:e3:7e:b5:4b: 92:13:5a:15:c5:91:d8:d8:8c:2c:67:87:a2:d1:16:10:84:e1: 19:cb:5a:a4:ff:9d:6f:fe:70:c9:ec:97:9d:0e:a4:ca:a5:61: 1c:33:c6:03:5d:dc:af:3a:8f:f6:65:2e:48:42:4b:73:95:e5: ad:72:d0:cb:79:91:4b:1b:7d:db:7d:a9:ff:66:08:70:62:3f: 59:62:03:5d:71:23:cf:03:81:33:7d:48:69:14:1c:f6:64:f2: 95:1d:7d:75:2c:ad:a0:fc:72:4a:7a:ce:d3:7c:05:6f:33:e8: 26:44:d0:a5:c7:94:de:6c:fe:21:91:6f:c9:24:b7:9b:f4:dc: a2:ee:01:19:d9:67:24:87:ff:7a:b7:81:7d:e0:07:1d:46:bc: 25:4f:76:a7:62:99:d3:4e:4d:d4:03:0a:62:14:2f:a1:a5:59: 17:ef:54:47:7a:1b:7d:24:75:d9:cd:5e:f0:8e:78:67:15:90: 5f:bc:1e:0f:ed:c5:2f:25:c9:42:c1:97:51:73:c5:68:2a:f9: 16:cb:19:b0:e2:b8:c4:bf:91:aa:c5:89:13:d2:2a:6d:91:80: 0a:4b:75:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX7JxTsoQ5Ymlz0IooKu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx NzkxMmYwHhcNMjUxMjI0MDgwMDMwWhcNMjUxMjI1MDgwMDMwWjAzMTEwLwYDVQQD EygzMDI4Nzk5ZWM2OTA4YmM1NzExY2IzYWYyOGYxN2MzYTlhOWU1NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN4YcDW6qGaXJDXOcv+1tXRBjNOA e6DDSL0ribW1F4iV1XVu1wJ/zq7kPGrCwnu+ZOirP+6M6dNaiGPzJV5yg/uGNTak NwUowISCc/e+0lzBRbEP9VKluz5bbrQhJz2BNFQy68TMUWWFjQBVcbdUhsims14M 0O5zfz25mV7gcxpFzBNAbSxPyEhZz+wGA+SYpHCFb3I9dfv0ltH/l824vQAsSyut DL9bPJig46/cU8KgVOG2ROz/smN+6fmMuGy3rOA58czrkiulEAwvp7a7ckaPf8dA EpKo2ZwINdtQTPpMkRheOYQDD1j8r74BVZt029FJf45CFlSfNEa+5oSrkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAoeZ7GkIvFcRyzryjxfDqanlS4MB8GA1UdIwQY MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwGyAv/I tsqygoYH6vARXoW6VKnH5SOYlN8C7PNOS2PjfrVLkhNaFcWR2NiMLGeHotEWEITh GctapP+db/5wyeyXnQ6kyqVhHDPGA13crzqP9mUuSEJLc5XlrXLQy3mRSxt9232p /2YIcGI/WWIDXXEjzwOBM31IaRQc9mTylR19dSytoPxySnrO03wFbzPoJkTQpceU 3mz+IZFvySS3m/Tcou4BGdlnJIf/ereBfeAHHUa8JU92p2KZ005N1AMKYhQvoaVZ F+9UR3obfSR12c1e8I54ZxWQX7weD+3FLyXJQsGXUXPFaCr5FssZsOK4xL+RqsWJ E9IqbZGACkt11A== -----END CERTIFICATE-----Generated at Wed Dec 24 13:23:08 2025 by rpki-client