This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json) Hash identifier: ECd1cB7IGooh7/h13AfRpYn78h4YnMs6Sc9/Y3Ok5Hk= Subject key identifier: 24:50:8C:DA:C0:18:CC:86:53:C2:28:A6:18:5F:E6:34:CF:6C:2B:4F Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68 Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068 Certificate serial: 019B31FAC6F1DDF6255544522FDAC45FCDF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 15:01:16 +0000 Manifest this update: Thu 18 Dec 2025 15:01:16 +0000 Manifest next update: Fri 19 Dec 2025 15:01:16 +0000 Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: 9unvGdJqltmMSyyPDl4VJFrOPt+eH6/gsrqUI/D+Hpc=) 2: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (hash: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:c6:f1:dd:f6:25:55:44:52:2f:da:c4:5f:cd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068 Validity Not Before: Dec 18 15:01:16 2025 GMT Not After : Dec 19 15:01:16 2025 GMT Subject: CN=24508cdac018cc8653c228a6185fe634cf6c2b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:05:6d:fa:cf:74:7d:f5:80:c4:7a:3d:49: 56:af:64:ec:f4:c2:67:87:ac:01:a9:c7:56:7f:1c: 30:e9:84:c8:99:70:15:17:27:bd:34:53:86:86:77: 81:94:bc:03:cf:bd:59:11:4e:c8:87:79:75:64:51: 5d:82:2b:46:c8:c2:9e:fd:63:e9:a5:1f:50:67:37: 4b:75:64:97:64:df:88:eb:67:0d:80:00:10:9b:e0: 2f:46:e8:54:11:90:79:0c:60:b3:4a:c1:00:b9:f4: a6:e8:d4:a4:30:b0:3e:61:38:e9:c8:ef:b7:c4:e0: 25:72:97:29:59:e3:f8:7a:23:fa:2e:3f:5f:33:03: d4:bb:3a:eb:cb:e2:aa:85:77:67:f9:eb:be:d0:1a: 87:31:77:8f:96:c1:e9:eb:41:33:e3:d2:bd:2a:36: ce:c2:3d:07:ad:3e:ac:8d:fa:68:bf:61:e3:d3:78: a1:cb:2e:68:2c:fe:a8:8f:be:72:68:db:b6:c0:81: 12:08:9c:a6:d3:5e:ac:1f:e7:6c:f3:cf:6b:e8:da: ce:c6:30:3a:37:30:4e:f7:d8:c5:c3:e2:2c:9b:02: c4:ce:28:8c:ba:49:12:c7:d9:a7:5f:ca:7b:64:71: 97:0a:b0:5d:3e:8c:23:ba:f3:6f:61:2f:0c:f8:7e: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:50:8C:DA:C0:18:CC:86:53:C2:28:A6:18:5F:E6:34:CF:6C:2B:4F X509v3 Authority Key Identifier: keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e5:e6:74:34:ea:1c:64:e8:b7:f9:9e:aa:5d:cb:50:4b:b2: 76:b4:e3:ba:aa:c9:6c:44:09:65:14:cb:00:94:b2:19:ca:be: ef:aa:9b:76:63:76:c3:af:a4:f4:1c:56:a8:26:9c:93:0f:84: b5:6a:ee:b9:13:de:f5:ea:e8:32:39:e0:e3:5c:36:c5:da:67: b8:d6:50:bb:11:de:9a:bf:02:76:9a:d3:dc:c2:15:38:31:3b: 12:d7:33:a4:46:56:6e:c4:81:eb:52:c2:37:c5:26:be:54:7e: 79:80:72:12:f6:81:8f:06:5d:16:13:ff:40:52:65:ab:87:fd: dd:ab:0d:7e:f4:e0:f3:e3:ec:7c:3c:d0:c9:61:0c:74:dc:36: 0d:44:f5:1d:85:cc:06:78:3a:fd:90:7a:4f:b3:3a:81:25:d0: fe:55:29:e1:23:43:f0:a6:a9:b6:9e:7f:dc:09:17:3a:3b:e3: f4:2e:64:30:5d:2c:3b:30:29:25:71:86:b1:70:50:9a:e2:25: 50:3d:44:5e:11:f6:25:c9:01:bd:cb:ba:3f:fe:20:af:68:5d: 74:e2:bc:b3:05:66:2d:15:41:b8:dc:9b:c4:3d:08:0e:43:e7: a2:57:1c:a9:ba:16:d8:f2:69:15:4c:ea:e0:6d:8b:17:90:37: 32:3f:e3:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+sbx3fYlVURSL9rEX83xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWRhMmJhMDU3ZTlhNTRhNjE3MGYyNTdmZjk3ODU2ZGM5 N2UwNjgwHhcNMjUxMjE4MTUwMTE2WhcNMjUxMjE5MTUwMTE2WjAzMTEwLwYDVQQD EygyNDUwOGNkYWMwMThjYzg2NTNjMjI4YTYxODVmZTYzNGNmNmMyYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfcFbfrPdH31gMR6PUlWr2Ts9MJn h6wBqcdWfxww6YTImXAVFye9NFOGhneBlLwDz71ZEU7Ih3l1ZFFdgitGyMKe/WPp pR9QZzdLdWSXZN+I62cNgAAQm+AvRuhUEZB5DGCzSsEAufSm6NSkMLA+YTjpyO+3 xOAlcpcpWeP4eiP6Lj9fMwPUuzrry+KqhXdn+eu+0BqHMXePlsHp60Ez49K9KjbO wj0HrT6sjfpov2Hj03ihyy5oLP6oj75yaNu2wIESCJym016sH+ds889r6NrOxjA6 NzBO99jFw+IsmwLEziiMukkSx9mnX8p7ZHGXCrBdPowjuvNvYS8M+H6BIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRQjNrAGMyGU8Iophhf5jTPbCtPMB8GA1UdIwQY MBaAFOMdoroFfppUphcPJX/5eFbcl+BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzIt NzUwN2U4MTlhNzk1LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzItNzUwN2U4MTlhNzk1 LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+XmdDTq HGTot/meql3LUEuydrTjuqrJbEQJZRTLAJSyGcq+76qbdmN2w6+k9BxWqCackw+E tWruuRPe9eroMjng41w2xdpnuNZQuxHemr8CdprT3MIVODE7EtczpEZWbsSB61LC N8UmvlR+eYByEvaBjwZdFhP/QFJlq4f93asNfvTg8+PsfDzQyWEMdNw2DUT1HYXM Bng6/ZB6T7M6gSXQ/lUp4SND8Kaptp5/3AkXOjvj9C5kMF0sOzApJXGGsXBQmuIl UD1EXhH2JckBvcu6P/4gr2hddOK8swVmLRVBuNybxD0IDkPnolccqboW2PJpFUzq 4G2LF5A3Mj/j+w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:42 2025 by rpki-client