This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json) Hash identifier: gnl8XCc23aOf6HgA645H7cVVcLgdJdWDYvUKJXgfa2s= Subject key identifier: 93:F5:51:FB:5C:12:59:A0:4C:9D:86:DD:2E:4A:3A:95:A0:44:18:7A Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f Certificate serial: 019B372136985ADED90E861E6FCEFBC9CB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 15:01:22 +0000 Manifest this update: Fri 19 Dec 2025 15:01:22 +0000 Manifest next update: Sat 20 Dec 2025 15:01:22 +0000 Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=) 2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: 8hv8e2OVTdfWAu1Mw9px5Opdd3NnXF/kh5Sc6aHLiho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:36:98:5a:de:d9:0e:86:1e:6f:ce:fb:c9:cb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f Validity Not Before: Dec 19 15:01:22 2025 GMT Not After : Dec 20 15:01:22 2025 GMT Subject: CN=93f551fb5c1259a04c9d86dd2e4a3a95a044187a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:80:4b:42:46:f9:87:bb:6f:91:63:12:ba: a6:47:f9:21:a6:2f:e9:86:f5:13:51:c9:3e:c7:b2: d4:76:a0:f6:78:5c:23:a1:1a:d3:e9:bc:88:41:b8: dc:7f:2b:b7:11:50:ac:7b:22:81:f3:d5:85:ad:a6: 6c:aa:4a:c3:ff:fa:48:3d:32:47:ce:94:73:4e:68: ce:2a:59:ff:fa:77:6d:bf:54:01:92:49:b7:d7:cb: c4:f7:7e:d4:1f:71:f2:ee:85:51:ff:8c:56:fe:cc: 4d:c7:8d:3b:21:47:61:2d:5f:cd:c4:48:61:ee:62: a1:71:bf:c0:8d:1d:2f:45:b1:c0:59:ee:94:07:fe: 79:db:b9:75:fd:80:31:d3:28:5e:10:db:11:fb:07: a1:a9:68:de:23:4e:bc:fe:05:1a:70:4f:f2:bf:1f: 07:03:d7:42:e0:cb:ab:a9:09:33:2f:54:1a:08:34: 56:3e:ed:dc:5a:6b:7b:1d:a2:ab:c8:a4:71:cb:53: 9b:bf:d7:82:c7:ab:a4:59:83:39:cb:80:e0:5a:7d: 85:68:29:c8:a0:91:ae:dd:41:71:78:7d:fc:0c:ac: b7:7a:76:33:93:2e:18:7c:c2:df:0b:93:4c:b2:00: 39:0f:f0:8b:8a:c1:cd:47:7b:66:79:56:23:51:e8: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:51:FB:5C:12:59:A0:4C:9D:86:DD:2E:4A:3A:95:A0:44:18:7A X509v3 Authority Key Identifier: keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:16:fd:9e:d1:f9:68:8e:05:93:a8:e0:ba:73:e5:cc:a0:73: 9c:53:35:af:f0:84:93:28:a9:3f:fe:b1:70:9f:b2:b3:eb:b9: 00:66:bd:8f:79:2c:fc:3e:9b:b0:51:3a:55:60:42:7f:c4:1f: ef:8e:e2:2e:0a:4b:33:7b:d0:dd:d0:ec:40:30:3e:06:4a:9c: 47:70:b8:c5:91:11:21:e1:af:59:ce:86:9e:cc:00:23:7a:c8: e2:7e:2f:59:16:d9:5f:33:00:84:76:4c:04:93:d4:d2:38:39: 16:da:7b:e9:12:63:55:ca:23:e2:ba:69:64:cf:0a:b2:b5:16: 6d:cf:cb:40:db:98:37:31:17:d0:53:38:00:df:3e:02:41:d7: e5:4d:ec:68:ed:34:2d:9d:29:8d:36:ee:5c:63:35:dd:89:be: 29:d6:5e:ca:de:9f:a8:c0:00:49:a9:9d:98:8a:2c:ce:6c:0a: 80:2d:e6:1f:61:e8:3e:a8:85:bc:3d:4f:df:67:5c:7d:da:56: d3:fb:a3:3b:a8:65:5e:33:2f:fb:1a:25:38:7e:0c:77:ce:c5: 64:9b:a8:50:80:14:9b:fc:72:9e:e6:c2:1d:21:68:fe:a5:c9: 26:62:66:45:54:c9:0a:ed:72:9b:1d:db:88:07:11:aa:64:64: 29:a6:d3:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITaYWt7ZDoYeb877yctRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw OTY4OWYwHhcNMjUxMjE5MTUwMTIyWhcNMjUxMjIwMTUwMTIyWjAzMTEwLwYDVQQD Eyg5M2Y1NTFmYjVjMTI1OWEwNGM5ZDg2ZGQyZTRhM2E5NWEwNDQxODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+AS0JG+Ye7b5FjErqmR/khpi/p hvUTUck+x7LUdqD2eFwjoRrT6byIQbjcfyu3EVCseyKB89WFraZsqkrD//pIPTJH zpRzTmjOKln/+ndtv1QBkkm318vE937UH3Hy7oVR/4xW/sxNx407IUdhLV/NxEhh 7mKhcb/AjR0vRbHAWe6UB/5527l1/YAx0yheENsR+wehqWjeI068/gUacE/yvx8H A9dC4MurqQkzL1QaCDRWPu3cWmt7HaKryKRxy1Obv9eCx6ukWYM5y4DgWn2FaCnI oJGu3UFxeH38DKy3enYzky4YfMLfC5NMsgA5D/CLisHNR3tmeVYjUegbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP1UftcElmgTJ2G3S5KOpWgRBh6MB8GA1UdIwQY MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhb9ntH5 aI4Fk6jgunPlzKBznFM1r/CEkyipP/6xcJ+ys+u5AGa9j3ks/D6bsFE6VWBCf8Qf 747iLgpLM3vQ3dDsQDA+BkqcR3C4xZERIeGvWc6GnswAI3rI4n4vWRbZXzMAhHZM BJPU0jg5Ftp76RJjVcoj4rppZM8KsrUWbc/LQNuYNzEX0FM4AN8+AkHX5U3saO00 LZ0pjTbuXGM13Ym+KdZeyt6fqMAASamdmIoszmwKgC3mH2HoPqiFvD1P32dcfdpW 0/ujO6hlXjMv+xolOH4Md87FZJuoUIAUm/xynubCHSFo/qXJJmJmRVTJCu1ymx3b iAcRqmRkKabT3A== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:19 2025 by rpki-client