This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json) Hash identifier: nfMA/pzd5uePJlABcWdNHwAyBvW9xNLSgp41JQTmmaw= Subject key identifier: EE:E3:B7:29:76:95:FE:1A:8A:89:F8:33:B5:AD:1D:DB:8B:44:8B:53 Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Certificate serial: 019B5ABFA4DEBACB0D1E81308492E4E3ABE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft Manifest number: 2A Signing time: Fri 26 Dec 2025 13:01:07 +0000 Manifest this update: Fri 26 Dec 2025 13:01:07 +0000 Manifest next update: Sat 27 Dec 2025 13:01:07 +0000 Files and hashes: 1: 9O4IBBfmEECPTdHl1EfJXdQViDA.roa (hash: Sse+xDRukI4H9zJNAkpRk2yXjCfDGUfbJDIbylBubc0=) 2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: zCMG7rBo7RrBgd63/JWllta9kFUepDiDoMPJNpNF3nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a4:de:ba:cb:0d:1e:81:30:84:92:e4:e3:ab:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Validity Not Before: Dec 26 13:01:07 2025 GMT Not After : Dec 27 13:01:07 2025 GMT Subject: CN=eee3b7297695fe1a8a89f833b5ad1ddb8b448b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:5b:9b:6c:4f:b9:4c:f2:e0:d0:ae:87:b8: a0:f8:fe:7b:51:8c:f6:dc:ca:8e:c3:e3:97:10:e6: 18:1f:2e:9a:f2:bc:87:fe:63:97:ec:ac:38:7e:9d: ad:45:fc:c5:fc:c1:ec:c4:04:4b:d2:fb:05:76:c2: eb:06:62:6c:ff:b4:82:98:3a:3f:8f:6a:16:7a:74: 29:c5:87:6d:7d:2a:02:f7:de:e8:86:9b:7b:75:31: 46:be:dc:a7:46:f6:79:8d:c8:d5:9b:53:3c:73:42: c5:48:d7:f4:d7:49:ea:d4:f1:c4:d5:7e:4f:9e:cf: 18:b3:1e:1d:29:b5:74:37:f3:3c:5a:2a:7d:12:cf: ac:09:01:3b:d1:01:41:8f:33:6e:6a:03:73:af:17: fd:75:ef:f0:5d:e1:5c:92:99:3f:c8:19:c8:4f:3b: 97:0c:b9:23:9f:8b:02:23:62:a0:f3:a9:83:b9:49: 00:44:9c:62:96:c2:8e:22:03:fa:e7:eb:85:69:94: bf:0d:09:8e:48:47:c0:8a:8b:4f:d6:bd:e2:90:40: 6e:40:7f:55:b9:36:e3:f8:f6:c9:c7:f0:57:66:c7: 20:cf:1f:58:3f:d8:16:5e:04:f7:f3:77:df:34:f9: 5e:f0:9d:9a:e6:38:15:85:e8:77:c4:e1:23:11:7d: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E3:B7:29:76:95:FE:1A:8A:89:F8:33:B5:AD:1D:DB:8B:44:8B:53 X509v3 Authority Key Identifier: keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:dc:6c:17:06:4d:32:11:50:5b:98:6f:93:d2:dd:3b:26: d0:d9:37:e2:4c:60:17:3e:08:2c:d9:aa:56:36:7d:4a:58:cb: 90:be:9c:79:fe:41:3d:78:54:62:d4:17:7a:7b:db:3b:1c:2a: c4:76:aa:3c:11:6c:ed:0c:b4:e4:d8:dd:78:a7:f9:d0:29:d5: ec:09:66:18:29:0e:b9:15:ee:4b:bb:12:78:a0:73:76:68:45: 86:f7:0b:a3:cd:c6:60:89:c7:7a:28:d8:79:18:a3:f0:14:67: 59:91:ed:bc:3f:d1:69:87:e4:20:0a:31:7c:fb:9e:79:86:2a: 99:a5:0b:2b:80:0a:ff:84:c5:40:cc:b8:90:e8:b6:42:a1:2c: 7c:c9:48:80:a2:c4:f8:9f:b7:aa:fa:bf:27:28:ca:98:91:37: 23:5c:67:0a:61:a6:ad:72:8a:1f:09:10:82:93:d5:b2:38:ae: 7e:f2:45:dd:39:e7:41:21:c8:e4:b8:d9:b9:01:df:1e:2c:cd: 52:b6:5d:91:8e:52:64:a7:f5:f6:83:c2:1d:2a:8d:f5:ac:cc: f3:ba:6d:97:d9:34:00:5d:71:5b:4b:71:e2:b4:cf:b5:c2:fa: 7c:d9:a2:5e:38:62:1d:be:bc:72:0f:a7:e2:f6:41:42:9f:c1: 7f:9f:ed:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6TeussNHoEwhJLk46vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1 YWQwMTgwHhcNMjUxMjI2MTMwMTA3WhcNMjUxMjI3MTMwMTA3WjAzMTEwLwYDVQQD EyhlZWUzYjcyOTc2OTVmZTFhOGE4OWY4MzNiNWFkMWRkYjhiNDQ4YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFbm2xPuUzy4NCuh7ig+P57UYz2 3MqOw+OXEOYYHy6a8ryH/mOX7Kw4fp2tRfzF/MHsxARL0vsFdsLrBmJs/7SCmDo/ j2oWenQpxYdtfSoC997ohpt7dTFGvtynRvZ5jcjVm1M8c0LFSNf010nq1PHE1X5P ns8Ysx4dKbV0N/M8Wip9Es+sCQE70QFBjzNuagNzrxf9de/wXeFckpk/yBnITzuX DLkjn4sCI2Kg86mDuUkARJxilsKOIgP65+uFaZS/DQmOSEfAiotP1r3ikEBuQH9V uTbj+PbJx/BXZscgzx9YP9gWXgT383ffNPle8J2a5jgVheh3xOEjEX20TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7jtyl2lf4aion4M7WtHduLRItTMB8GA1UdIwQY MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6bcbBcG TTIRUFuYb5PS3Tsm0Nk34kxgFz4ILNmqVjZ9SljLkL6cef5BPXhUYtQXenvbOxwq xHaqPBFs7Qy05NjdeKf50CnV7AlmGCkOuRXuS7sSeKBzdmhFhvcLo83GYInHeijY eRij8BRnWZHtvD/RaYfkIAoxfPueeYYqmaULK4AK/4TFQMy4kOi2QqEsfMlIgKLE +J+3qvq/JyjKmJE3I1xnCmGmrXKKHwkQgpPVsjiufvJF3TnnQSHI5LjZuQHfHizN UrZdkY5SZKf19oPCHSqN9azM87ptl9k0AF1xW0tx4rTPtcL6fNmiXjhiHb68cg+n 4vZBQp/Bf5/tLw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client