This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json) Hash identifier: QdFR0D/UvXLhYXhuQZwLkLW98fI09EZjpnIrS7suUX0= Subject key identifier: 91:DD:58:A2:E4:26:C5:D7:42:3E:1F:FA:21:4F:35:0D:F0:0D:DD:F1 Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Certificate serial: 019B1F871AC02DAE8D026172921D7F7F5981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft Manifest number: 012C Signing time: Mon 15 Dec 2025 01:01:46 +0000 Manifest this update: Mon 15 Dec 2025 01:01:46 +0000 Manifest next update: Tue 16 Dec 2025 01:01:46 +0000 Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=) 2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: u1l0qnHXP5T0IOyrizBaQNI97UW6RBJ8MARtsRr70Qc=) 3: JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa (hash: WtaTh/P/aPKzmJKsdEQ9npXPcszgPjwctR1jbOex9BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:1a:c0:2d:ae:8d:02:61:72:92:1d:7f:7f:59:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Validity Not Before: Dec 15 01:01:46 2025 GMT Not After : Dec 16 01:01:46 2025 GMT Subject: CN=91dd58a2e426c5d7423e1ffa214f350df00dddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:64:15:b0:e8:78:35:0d:b4:3d:1f:76:5f: ba:57:37:b2:f6:49:1b:37:f5:c1:17:57:fd:e3:67: 2d:71:03:1d:d3:42:b7:5a:98:fb:c3:cf:6e:3d:66: b9:2b:f8:19:7c:01:5b:22:ae:b0:01:89:fe:ed:c8: 4f:0e:8c:d2:23:00:bd:30:ea:3b:29:ea:ad:1e:a6: 4f:ec:66:c9:0c:57:3b:99:c5:f6:e8:dc:67:c5:a6: 79:fd:8a:ac:3a:25:45:ac:93:13:4e:ab:69:40:4b: ba:c1:56:2b:54:87:63:5a:6b:73:f1:3a:d5:dd:f5: 74:d8:86:d8:48:27:66:1d:0e:6e:fd:b6:05:34:16: 0f:e1:69:6a:7b:43:73:5e:f2:02:98:ca:51:06:bf: a9:3a:7d:3d:3a:94:9b:a4:6e:51:c1:08:be:9b:4b: 1b:2b:43:85:9b:65:8f:d5:47:50:af:cd:99:4e:e9: 2d:5b:1d:a4:ae:d6:91:f0:92:f3:85:3b:eb:df:d3: f8:4f:81:92:3f:c7:18:27:4f:62:a8:85:8a:60:54: 01:e7:fe:03:b4:a9:8f:22:bf:34:ac:28:d1:c1:45: e7:50:2d:c9:d7:f9:a6:84:1d:7e:ca:23:f7:0f:38: 90:ea:c2:d4:6e:00:34:44:01:a6:15:29:2d:4e:fe: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:58:A2:E4:26:C5:D7:42:3E:1F:FA:21:4F:35:0D:F0:0D:DD:F1 X509v3 Authority Key Identifier: keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:cc:d8:31:6d:3f:b5:62:6b:6d:65:19:26:d3:3d:36:50: 86:1c:89:00:67:d0:41:5d:a0:89:87:8c:89:83:16:8c:6b:1d: 75:a2:4a:4f:d0:e4:1d:4c:bb:ed:77:f8:25:ee:bd:06:9f:ce: 52:ec:95:2c:ce:df:82:74:10:67:5b:97:19:d7:6d:61:aa:a8: 34:e4:84:83:6a:2e:ef:ed:8d:36:d2:ae:ba:16:3c:7d:ea:56: cd:97:ce:b0:5d:58:7b:f1:1a:78:f2:3c:1d:3d:c2:f7:11:98: 65:98:5b:cc:51:75:d9:8f:64:f4:ba:ef:65:b6:b8:51:b5:fc: 38:a3:ef:3a:84:a6:a3:0e:fe:1e:41:59:d0:75:53:33:e0:62: 1b:4c:08:a2:1e:39:ac:fe:97:74:0c:ba:0b:cd:c8:dc:14:3a: 29:15:69:6f:9a:7a:98:ac:be:6d:e9:97:9c:bb:fc:7c:a9:b8: d6:dc:63:5d:d0:a8:1d:29:11:0a:9e:bd:d8:5e:79:25:bb:2d: 7c:30:4b:0e:30:45:9b:b4:d6:5b:40:9b:30:09:61:8b:3d:0c: 99:51:4e:cc:00:eb:10:9b:d2:6f:51:d6:3a:40:8e:d9:c4:ed: 3f:43:11:b2:7a:0d:07:84:95:ee:66:7e:95:d0:ef:dd:8b:97: 18:be:d8:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhxrALa6NAmFykh1/f1mBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz MzFlODAwHhcNMjUxMjE1MDEwMTQ2WhcNMjUxMjE2MDEwMTQ2WjAzMTEwLwYDVQQD Eyg5MWRkNThhMmU0MjZjNWQ3NDIzZTFmZmEyMTRmMzUwZGYwMGRkZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlolkFbDoeDUNtD0fdl+6Vzey9kkb N/XBF1f942ctcQMd00K3Wpj7w89uPWa5K/gZfAFbIq6wAYn+7chPDozSIwC9MOo7 KeqtHqZP7GbJDFc7mcX26NxnxaZ5/YqsOiVFrJMTTqtpQEu6wVYrVIdjWmtz8TrV 3fV02IbYSCdmHQ5u/bYFNBYP4Wlqe0NzXvICmMpRBr+pOn09OpSbpG5RwQi+m0sb K0OFm2WP1UdQr82ZTuktWx2krtaR8JLzhTvr39P4T4GSP8cYJ09iqIWKYFQB5/4D tKmPIr80rCjRwUXnUC3J1/mmhB1+yiP3DziQ6sLUbgA0RAGmFSktTv43BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHdWKLkJsXXQj4f+iFPNQ3wDd3xMB8GA1UdIwQY MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg/M2DFt P7Via21lGSbTPTZQhhyJAGfQQV2giYeMiYMWjGsddaJKT9DkHUy77Xf4Je69Bp/O UuyVLM7fgnQQZ1uXGddtYaqoNOSEg2ou7+2NNtKuuhY8fepWzZfOsF1Ye/EaePI8 HT3C9xGYZZhbzFF12Y9k9LrvZba4UbX8OKPvOoSmow7+HkFZ0HVTM+BiG0wIoh45 rP6XdAy6C83I3BQ6KRVpb5p6mKy+bemXnLv8fKm41txjXdCoHSkRCp692F55Jbst fDBLDjBFm7TWW0CbMAlhiz0MmVFOzADrEJvSb1HWOkCO2cTtP0MRsnoNB4SV7mZ+ ldDv3YuXGL7YMA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:14:30 2025 by rpki-client