This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json) Hash identifier: Pg0jm5h74+xSaRcVxNrpl+UTq1erdam0alaDvW0qUHw= Subject key identifier: B8:0D:91:81:87:35:D4:EB:F2:4B:65:8E:EC:53:DC:EF:2E:DB:FF:0B Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Certificate serial: 019B337B737F3BD6B3542089394E6C1AB583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft Manifest number: 064F Signing time: Thu 18 Dec 2025 22:01:26 +0000 Manifest this update: Thu 18 Dec 2025 22:01:26 +0000 Manifest next update: Fri 19 Dec 2025 22:01:26 +0000 Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: DooD2efj2IcnF9aRmEKlSmYdMwiG8T3cTK+y8ShZGCw=) 2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:73:7f:3b:d6:b3:54:20:89:39:4e:6c:1a:b5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Validity Not Before: Dec 18 22:01:26 2025 GMT Not After : Dec 19 22:01:26 2025 GMT Subject: CN=b80d91818735d4ebf24b658eec53dcef2edbff0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:1e:bc:36:f9:20:58:57:01:9b:ba:f2:a3: 2c:e6:07:9b:83:dc:84:1b:ad:33:fe:fc:86:d2:fd: 88:e4:61:9f:ca:75:0e:2c:1a:2b:cf:68:45:a6:60: 56:71:dd:05:f6:5f:5a:92:e3:8b:5e:c4:00:36:e1: 42:56:41:02:42:d1:92:98:80:f7:c9:00:a0:bf:8d: 95:0d:2e:57:81:c8:f8:fd:9a:2f:e4:39:46:73:0e: 92:e3:6a:3e:5e:56:21:1a:f4:53:53:50:e9:de:5f: ae:35:ae:c7:04:de:2f:6f:b2:13:f8:43:a9:83:94: 47:d2:e3:2d:9e:8c:e7:ec:b0:b6:43:27:93:1f:6c: b5:b9:c4:de:94:a1:5d:8f:f1:88:bb:a5:4d:31:8f: fd:6e:4e:d5:2c:30:4b:26:b0:31:53:d0:e8:1b:51: 88:f4:a8:1d:49:95:b1:e9:e6:6a:2c:cc:19:a9:66: 6f:fd:90:02:02:10:ed:26:b5:c1:fb:e2:ce:f3:6e: 1c:f4:39:ac:51:92:00:1e:01:74:d9:12:73:5e:ad: e5:a4:ca:71:85:42:e4:26:cb:a8:6f:17:2d:2d:96: 6b:2d:6e:14:78:5f:33:43:b1:35:2f:be:63:9c:61: a0:e9:99:92:9b:52:5a:c3:38:e1:ba:eb:2f:ce:62: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0D:91:81:87:35:D4:EB:F2:4B:65:8E:EC:53:DC:EF:2E:DB:FF:0B X509v3 Authority Key Identifier: keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f5:4a:60:32:1b:79:7d:bb:82:f7:04:42:b2:e7:ab:d6:8e: c7:f4:e8:f1:9f:08:09:27:68:22:f5:68:05:8a:90:9a:9c:5c: d4:9b:17:40:99:b2:1f:b0:1b:9a:cb:dd:99:46:c2:a9:47:84: fd:e9:95:69:1d:71:e0:5a:64:16:6b:18:da:76:36:a0:2f:66: bd:40:dc:53:80:99:b3:11:d2:c3:fe:59:f1:90:a9:65:fb:3a: c5:c9:95:10:30:57:8d:04:db:54:54:c4:26:62:60:49:ef:58: 50:6a:95:07:37:3b:84:fa:c9:b1:ee:bb:60:29:19:70:26:5c: 1b:fd:7c:ec:b5:10:8d:c5:fc:bf:07:4e:e3:0a:e8:2e:09:17: 5f:6f:2a:76:24:b8:3c:de:69:92:92:48:ce:72:7b:4d:9d:91: 68:2b:76:21:8c:ae:fc:42:41:29:fe:e3:c7:67:fe:1c:e1:c4: 8c:a6:79:02:a7:49:c3:de:45:6c:7f:37:e0:bf:e6:74:7b:c8: fd:c6:87:47:1c:ed:83:9c:9c:2b:03:c3:7b:87:13:93:48:9b: cc:d4:b8:1b:38:d0:fd:e6:b0:09:8e:f6:ca:31:2e:5d:b0:f5: 35:b8:02:9d:d0:8d:7a:88:ae:f1:0d:7d:50:4e:70:32:bf:65: 7e:1c:e1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze3N/O9azVCCJOU5sGrWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl ZGYyZDcwHhcNMjUxMjE4MjIwMTI2WhcNMjUxMjE5MjIwMTI2WjAzMTEwLwYDVQQD EyhiODBkOTE4MTg3MzVkNGViZjI0YjY1OGVlYzUzZGNlZjJlZGJmZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ogevDb5IFhXAZu68qMs5gebg9yE G60z/vyG0v2I5GGfynUOLBorz2hFpmBWcd0F9l9akuOLXsQANuFCVkECQtGSmID3 yQCgv42VDS5Xgcj4/Zov5DlGcw6S42o+XlYhGvRTU1Dp3l+uNa7HBN4vb7IT+EOp g5RH0uMtnozn7LC2QyeTH2y1ucTelKFdj/GIu6VNMY/9bk7VLDBLJrAxU9DoG1GI 9KgdSZWx6eZqLMwZqWZv/ZACAhDtJrXB++LO824c9DmsUZIAHgF02RJzXq3lpMpx hULkJsuobxctLZZrLW4UeF8zQ7E1L75jnGGg6ZmSm1JawzjhuusvzmLDIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgNkYGHNdTr8ktljuxT3O8u2/8LMB8GA1UdIwQY MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt N2RjNTI4YWE1ZDRlLzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPVKYDIb eX27gvcEQrLnq9aOx/To8Z8ICSdoIvVoBYqQmpxc1JsXQJmyH7AbmsvdmUbCqUeE /emVaR1x4FpkFmsY2nY2oC9mvUDcU4CZsxHSw/5Z8ZCpZfs6xcmVEDBXjQTbVFTE JmJgSe9YUGqVBzc7hPrJse67YCkZcCZcG/187LUQjcX8vwdO4wroLgkXX28qdiS4 PN5pkpJIznJ7TZ2RaCt2IYyu/EJBKf7jx2f+HOHEjKZ5AqdJw95FbH834L/mdHvI /caHRxztg5ycKwPDe4cTk0ibzNS4GzjQ/eawCY72yjEuXbD1NbgCndCNeoiu8Q19 UE5wMr9lfhzhQw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:08 2025 by rpki-client