This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: G3Kwp6vWbWOfOgv6jQrYVgRbjXGeK7iVkrFiLFS3Lus= Subject key identifier: D8:FC:FD:74:44:22:10:0E:A2:EE:02:44:0B:46:0A:03:6C:28:06:D4 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B34C583EBCE3D31207DA6118B1C606E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1792 Signing time: Fri 19 Dec 2025 04:01:58 +0000 Manifest this update: Fri 19 Dec 2025 04:01:58 +0000 Manifest next update: Sat 20 Dec 2025 04:01:58 +0000 Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: MsJG8wcNQ/S50zExA7oPAfolcUpi2rq4+8k/Y6zV/BY=) 2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=) 3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=) 4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=) 5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=) 6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=) 7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=) 8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=) 9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:83:eb:ce:3d:31:20:7d:a6:11:8b:1c:60:6e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Dec 19 04:01:58 2025 GMT Not After : Dec 20 04:01:58 2025 GMT Subject: CN=d8fcfd744422100ea2ee02440b460a036c2806d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e2:ab:aa:a4:c0:ec:f0:51:6d:64:90:d6:f2: 6b:b7:a9:cd:8c:42:c2:f1:ae:48:45:a2:7e:90:88: a5:fa:d5:35:3f:a1:a4:a9:0d:4d:4d:46:f1:fa:05: 1c:6d:f5:58:0a:61:22:33:f5:a3:f0:90:64:dd:2d: c6:99:d8:01:a1:c0:94:fa:e9:68:7b:28:be:a9:9a: b9:96:67:34:3e:69:d4:d3:ba:36:77:a3:bd:cd:4b: 87:88:ce:0e:09:d2:c1:fb:d5:a5:e0:eb:7f:55:06: 40:37:dc:1b:09:23:62:98:78:82:f2:12:8f:02:91: c0:9a:12:03:9b:9c:06:65:62:47:06:71:4b:34:b7: b3:d2:6e:45:f5:d4:c8:33:58:3e:46:6d:df:a1:f0: b0:9f:93:b7:53:53:a7:2a:ab:35:b3:90:b3:6b:c9: 97:66:37:84:b5:49:b4:a6:6f:69:57:b5:64:f0:6d: f7:d1:cb:ff:06:6e:75:69:c7:92:d1:3a:11:6c:30: a5:73:7e:1b:7f:4c:f7:27:f4:06:5f:17:8c:e8:b8: 22:aa:fe:d1:cb:4e:47:2d:cb:fc:fd:16:86:e1:76: 43:e2:52:ac:6d:e7:e8:2e:da:b3:fc:33:01:12:01: 8f:cf:c6:1e:d1:cc:8a:cb:bd:21:ac:cb:de:5b:47: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:FD:74:44:22:10:0E:A2:EE:02:44:0B:46:0A:03:6C:28:06:D4 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:21:f7:c1:d1:78:0e:ed:14:bc:84:0e:88:ab:8f:48:80:8d: 3b:7f:22:0a:f2:4d:0e:c7:2a:a4:3a:5c:ee:1b:1d:a4:86:07: c0:9b:90:bd:a5:20:a8:84:9d:93:b3:44:59:14:1f:ca:54:76: be:7b:cc:bc:b3:06:d6:4c:b2:db:4b:16:3d:40:a8:e6:25:60: d7:0b:40:8e:0d:84:03:b3:ba:18:8f:ea:33:a0:f1:83:e0:38: 24:1b:14:7e:d9:eb:ad:47:37:5c:02:8e:2d:3c:d3:da:13:e5: a8:b0:93:b9:d9:da:e2:c7:c0:cc:1b:d2:f6:f0:7e:d9:74:81: 97:23:67:7b:c9:d2:48:dd:11:b5:c6:6a:b0:53:77:c5:9a:0e: ef:0b:31:ad:51:92:e7:5e:93:28:c3:96:36:9e:40:94:08:6d: fb:ef:68:66:e1:1b:2e:a9:6a:e0:ee:77:82:b8:41:2c:89:27: 99:8c:f4:2f:da:05:a5:2b:c9:7d:15:a1:f7:ff:c4:8b:13:c9: 2f:eb:54:8c:39:bf:7a:b5:2a:31:c2:4f:78:d8:5b:ff:7b:9c: 95:23:f1:d8:3e:3b:c5:cf:a8:29:b5:c4:ba:dc:f8:cd:9c:25: 1a:83:a6:a8:45:9e:48:35:02:73:4a:fb:7e:a1:56:7d:08:23: cc:2a:dc:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xYPrzj0xIH2mEYscYG6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjUxMjE5MDQwMTU4WhcNMjUxMjIwMDQwMTU4WjAzMTEwLwYDVQQD EyhkOGZjZmQ3NDQ0MjIxMDBlYTJlZTAyNDQwYjQ2MGEwMzZjMjgwNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uKrqqTA7PBRbWSQ1vJrt6nNjELC 8a5IRaJ+kIil+tU1P6GkqQ1NTUbx+gUcbfVYCmEiM/Wj8JBk3S3GmdgBocCU+ulo eyi+qZq5lmc0PmnU07o2d6O9zUuHiM4OCdLB+9Wl4Ot/VQZAN9wbCSNimHiC8hKP ApHAmhIDm5wGZWJHBnFLNLez0m5F9dTIM1g+Rm3fofCwn5O3U1OnKqs1s5Cza8mX ZjeEtUm0pm9pV7Vk8G330cv/Bm51aceS0ToRbDClc34bf0z3J/QGXxeM6Lgiqv7R y05HLcv8/RaG4XZD4lKsbefoLtqz/DMBEgGPz8Ye0cyKy70hrMveW0e+ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj8/XREIhAOou4CRAtGCgNsKAbUMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSH3wdF4 Du0UvIQOiKuPSICNO38iCvJNDscqpDpc7hsdpIYHwJuQvaUgqISdk7NEWRQfylR2 vnvMvLMG1kyy20sWPUCo5iVg1wtAjg2EA7O6GI/qM6Dxg+A4JBsUftnrrUc3XAKO LTzT2hPlqLCTudna4sfAzBvS9vB+2XSBlyNne8nSSN0RtcZqsFN3xZoO7wsxrVGS 516TKMOWNp5AlAht++9oZuEbLqlq4O53grhBLIknmYz0L9oFpSvJfRWh9//EixPJ L+tUjDm/erUqMcJPeNhb/3uclSPx2D47xc+oKbXEutz4zZwlGoOmqEWeSDUCc0r7 fqFWfQgjzCrc4A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:11:22 2025 by rpki-client