This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json) Hash identifier: a2BHYFXvlVzf+CsJlFdUV+UAYaQt3m6lu5NwEGEwPXg= Subject key identifier: B8:8C:CC:38:6B:80:7D:4F:5A:98:B6:C2:C2:88:8B:F6:EE:12:00:85 Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Certificate serial: 019B5AF63468DD4BDC74C97DBABD29925CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 14:00:43 +0000 Manifest this update: Fri 26 Dec 2025 14:00:43 +0000 Manifest next update: Sat 27 Dec 2025 14:00:43 +0000 Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: aYxPMQ73d9INfPSvCaMTHhZJq+E8Sw79dF5gABC6kcQ=) 2: ZbE6_5RoZcWnsisvAhCbHllA4JA.roa (hash: P92IIpl6umna4vLKMyTJWbFn3/vOtFT+JdFg8tJqnDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:34:68:dd:4b:dc:74:c9:7d:ba:bd:29:92:5c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Validity Not Before: Dec 26 14:00:43 2025 GMT Not After : Dec 27 14:00:43 2025 GMT Subject: CN=b88ccc386b807d4f5a98b6c2c2888bf6ee120085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:14:e4:6d:b2:66:d1:fa:9d:cd:ee:3f:de: 42:7c:38:62:19:72:64:5b:f1:39:ec:a6:49:9d:9a: ed:dd:8a:37:5b:7f:6a:33:91:8e:b0:56:02:94:a6: 2b:38:15:ff:06:d3:0a:de:62:ab:5c:61:da:16:8d: 19:a6:2e:a7:4b:76:24:63:ab:4b:67:4f:7d:34:0a: b8:c8:b4:41:fc:4a:a7:c0:20:7e:00:f8:36:00:d5: e3:90:9c:c4:89:2b:25:78:39:af:a1:c6:02:c9:1b: b8:ef:b7:a4:75:8d:6e:24:38:2b:41:6f:52:be:69: 72:d7:9e:63:8e:e6:ff:d1:ca:4b:4c:6b:17:0c:8b: 92:3e:eb:44:ba:97:dd:f1:03:a2:bd:03:8d:04:ac: 6c:f8:0d:d5:2f:ca:9a:a7:4e:f3:8d:db:b4:53:c6: 71:aa:92:bd:34:c5:f5:b3:76:18:3e:e0:ed:74:08: ba:c8:b3:8d:cc:0c:18:1d:17:e9:41:6f:3d:98:4c: 36:52:33:bd:1e:60:e8:88:e2:44:2d:27:b3:71:2d: 3c:57:ad:db:35:6e:ac:5c:df:8e:d3:64:d4:55:f7: b0:3c:81:09:89:46:95:5e:ba:2e:f2:c0:27:50:3d: 16:6c:f7:6e:aa:ee:dc:23:de:c9:78:87:b2:45:80: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:CC:38:6B:80:7D:4F:5A:98:B6:C2:C2:88:8B:F6:EE:12:00:85 X509v3 Authority Key Identifier: keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a8:2f:2d:61:08:cb:3d:59:a1:81:e5:47:b3:e6:5c:b6:da: 8a:31:f7:1e:2a:a2:f9:af:52:f6:65:41:f6:81:5e:72:d5:67: 49:a4:49:7e:b3:59:12:ee:f3:78:e6:9e:fc:2a:e1:de:37:60: c5:d1:6f:da:41:a9:c7:1a:08:96:68:d5:c0:bf:6f:82:cd:f1: 56:13:f1:f5:c8:6f:04:f2:b6:2d:e3:68:19:8c:7a:75:3f:b4: 4b:bb:bf:0f:4f:b2:b0:ea:a9:2a:6c:6c:c1:f6:91:bb:03:85: 2e:0d:a6:c4:32:9e:6f:c9:d0:f9:8f:ba:36:d3:c7:47:46:28: c3:90:fe:7f:bf:b6:f3:e0:50:03:70:27:79:67:78:0b:de:5e: 7b:a4:77:94:fd:28:a0:08:ee:c0:ae:7a:d0:06:7d:d1:a9:c4: fc:22:72:d2:5c:c5:7e:43:cc:4e:74:03:09:44:fc:30:2d:c2: b3:a8:70:f3:3a:51:25:c8:e0:76:65:05:74:6f:66:65:27:f7: b1:fe:f9:8b:48:76:47:05:ad:6d:c1:5a:6a:2c:fc:00:25:a6: ac:c2:73:4c:6e:07:69:3b:2a:9b:04:1a:d3:f4:c0:e4:91:f5: 50:55:e0:ce:40:e7:0d:9b:15:cf:aa:72:c7:49:75:aa:fe:68: ea:c3:51:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jRo3UvcdMl9ur0pklzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi NDM0YmIwHhcNMjUxMjI2MTQwMDQzWhcNMjUxMjI3MTQwMDQzWjAzMTEwLwYDVQQD EyhiODhjY2MzODZiODA3ZDRmNWE5OGI2YzJjMjg4OGJmNmVlMTIwMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI8U5G2yZtH6nc3uP95CfDhiGXJk W/E57KZJnZrt3Yo3W39qM5GOsFYClKYrOBX/BtMK3mKrXGHaFo0Zpi6nS3YkY6tL Z099NAq4yLRB/EqnwCB+APg2ANXjkJzEiSsleDmvocYCyRu477ekdY1uJDgrQW9S vmly155jjub/0cpLTGsXDIuSPutEupfd8QOivQONBKxs+A3VL8qap07zjdu0U8Zx qpK9NMX1s3YYPuDtdAi6yLONzAwYHRfpQW89mEw2UjO9HmDoiOJELSezcS08V63b NW6sXN+O02TUVfewPIEJiUaVXrou8sAnUD0WbPduqu7cI97JeIeyRYBRMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiMzDhrgH1PWpi2wsKIi/buEgCFMB8GA1UdIwQY MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt MmViMGFmM2FjNzgxLzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6gvLWEI yz1ZoYHlR7PmXLbaijH3Hiqi+a9S9mVB9oFectVnSaRJfrNZEu7zeOae/Crh3jdg xdFv2kGpxxoIlmjVwL9vgs3xVhPx9chvBPK2LeNoGYx6dT+0S7u/D0+ysOqpKmxs wfaRuwOFLg2mxDKeb8nQ+Y+6NtPHR0Yow5D+f7+28+BQA3AneWd4C95ee6R3lP0o oAjuwK560AZ90anE/CJy0lzFfkPMTnQDCUT8MC3Cs6hw8zpRJcjgdmUFdG9mZSf3 sf75i0h2RwWtbcFaaiz8ACWmrMJzTG4HaTsqmwQa0/TA5JH1UFXgzkDnDZsVz6py x0l1qv5o6sNRXw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:57 2025 by rpki-client