This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json) Hash identifier: QhEzydiAYyTfN4aKAKzVlc8hLzGEMW3bJ0KsAffpPIw= Subject key identifier: 26:2E:D9:67:4C:5F:7B:68:CD:EF:E7:56:EF:AB:85:FC:6F:46:FC:8F Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Certificate serial: 019B424AE4F66B4F4EDD0362BB7612194D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:43 +0000 Manifest this update: Sun 21 Dec 2025 19:02:43 +0000 Manifest next update: Mon 22 Dec 2025 19:02:43 +0000 Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: nphP4PqRpNkSw6PyYTWugbSgfj2X7rbdpbPc1j6Tz0c=) 2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:e4:f6:6b:4f:4e:dd:03:62:bb:76:12:19:4d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Validity Not Before: Dec 21 19:02:43 2025 GMT Not After : Dec 22 19:02:43 2025 GMT Subject: CN=262ed9674c5f7b68cdefe756efab85fc6f46fc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:c2:df:f7:12:94:c6:bf:bf:33:96:6f:d1: 91:f6:40:e6:0a:bd:55:1a:04:ea:8a:7f:e0:d2:40: 75:13:40:94:e0:65:76:ad:9d:d8:58:23:26:0e:17: 68:59:8b:17:8b:ed:2d:fa:09:81:27:3d:34:e6:93: 8b:90:32:dc:71:01:0c:09:9b:83:bc:5c:14:1f:3d: 3b:5f:8a:ae:ff:a9:8f:1d:40:fe:52:84:4b:10:10: e0:7c:2b:20:b6:8e:ce:fa:94:39:34:ef:11:9e:f8: a0:f6:54:74:9c:ac:39:36:5a:72:90:8d:9f:a8:e8: 70:88:7a:e6:56:16:0d:82:b8:6b:d8:29:92:f0:9f: d4:c4:1e:4a:66:0e:c4:5d:e9:08:d4:85:1b:2d:1a: 89:1a:b4:85:d1:98:9c:99:ca:b6:0f:99:08:9c:1c: c7:b8:bd:57:b1:c8:fa:e9:e4:4c:70:48:78:9e:7f: 15:d5:3a:00:77:2f:f3:49:b1:d2:2f:07:42:70:17: 4f:b6:8c:fc:b2:0f:bb:e7:e6:55:a1:e9:a7:28:d0: be:fb:61:83:8f:fb:18:c3:ed:f2:02:9a:b1:24:5c: 34:74:47:30:38:91:5b:6a:1a:b3:4f:42:30:33:b4: f6:99:11:96:76:e1:c6:a3:04:31:08:e4:34:a9:b3: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2E:D9:67:4C:5F:7B:68:CD:EF:E7:56:EF:AB:85:FC:6F:46:FC:8F X509v3 Authority Key Identifier: keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:40:78:22:27:03:5c:b8:59:9f:57:47:d1:cb:8e:c2:9e: 21:63:90:c4:ac:93:68:dc:fd:e8:5e:af:4d:91:1a:0e:67:03: a6:a6:32:ac:89:0c:77:d7:41:37:f5:18:94:9f:2f:80:ed:88: ef:67:df:23:75:51:3f:95:2f:a9:b8:7a:71:0c:d1:f5:41:b6: c2:19:3b:db:4b:36:ea:6d:1c:c5:57:b7:be:5e:92:27:72:7a: 5d:59:7b:d3:6f:ca:df:60:83:24:ab:25:e4:00:7e:b3:55:bc: dc:f4:b1:07:86:a5:68:ac:3a:36:fc:59:60:33:15:84:01:f4: 7a:a6:0a:14:3f:f5:21:97:59:60:49:98:b2:da:c0:8c:b7:e0: fb:ee:30:55:87:35:d8:60:2c:78:83:ab:65:bd:90:e2:5c:6d: 38:ed:2e:58:65:ac:75:10:89:68:45:cd:92:ab:db:7e:ff:f4: 9e:5f:6b:2f:85:81:32:cd:af:0d:b9:91:53:51:e7:ee:9c:d5: a0:df:be:57:4e:82:58:9f:8a:48:dd:1e:bf:13:82:8d:70:2c: bf:23:9c:1a:5d:ff:54:d6:5f:0c:05:4b:6a:93:83:75:a5:c3: 9f:46:82:12:76:9e:a8:aa:1a:3a:13:24:85:65:bc:fe:bc:be: 34:ad:f8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSuT2a09O3QNiu3YSGU0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2 MTNiYzUwHhcNMjUxMjIxMTkwMjQzWhcNMjUxMjIyMTkwMjQzWjAzMTEwLwYDVQQD EygyNjJlZDk2NzRjNWY3YjY4Y2RlZmU3NTZlZmFiODVmYzZmNDZmYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnrC3/cSlMa/vzOWb9GR9kDmCr1V GgTqin/g0kB1E0CU4GV2rZ3YWCMmDhdoWYsXi+0t+gmBJz005pOLkDLccQEMCZuD vFwUHz07X4qu/6mPHUD+UoRLEBDgfCsgto7O+pQ5NO8Rnvig9lR0nKw5NlpykI2f qOhwiHrmVhYNgrhr2CmS8J/UxB5KZg7EXekI1IUbLRqJGrSF0Zicmcq2D5kInBzH uL1Xscj66eRMcEh4nn8V1ToAdy/zSbHSLwdCcBdPtoz8sg+75+ZVoemnKNC++2GD j/sYw+3yApqxJFw0dEcwOJFbahqzT0IwM7T2mRGWduHGowQxCOQ0qbPJGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYu2WdMX3toze/nVu+rhfxvRvyPMB8GA1UdIwQY MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4 LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsBAeCIn A1y4WZ9XR9HLjsKeIWOQxKyTaNz96F6vTZEaDmcDpqYyrIkMd9dBN/UYlJ8vgO2I 72ffI3VRP5Uvqbh6cQzR9UG2whk720s26m0cxVe3vl6SJ3J6XVl702/K32CDJKsl 5AB+s1W83PSxB4alaKw6NvxZYDMVhAH0eqYKFD/1IZdZYEmYstrAjLfg++4wVYc1 2GAseIOrZb2Q4lxtOO0uWGWsdRCJaEXNkqvbfv/0nl9rL4WBMs2vDbmRU1Hn7pzV oN++V06CWJ+KSN0evxOCjXAsvyOcGl3/VNZfDAVLapODdaXDn0aCEnaeqKoaOhMk hWW8/ry+NK34OQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:09 2025 by rpki-client