This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json) Hash identifier: 09zbLrJRYawIMzaKu3JcqY4ksMPUUTLGEffbSESGFYM= Subject key identifier: 9E:2F:03:1F:F7:A4:DC:E5:1C:34:38:62:32:83:C0:60:EE:06:4C:F6 Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Certificate serial: 019B4BF1D46DBE3F4EFFBC47A2AA16AFA352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft Manifest number: 0E5F Signing time: Tue 23 Dec 2025 16:01:38 +0000 Manifest this update: Tue 23 Dec 2025 16:01:38 +0000 Manifest next update: Wed 24 Dec 2025 16:01:38 +0000 Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=) 2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: eXT24WJbiUqQORGzgLptmFXWTPKtvIPyoC8fdSafbtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:d4:6d:be:3f:4e:ff:bc:47:a2:aa:16:af:a3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Validity Not Before: Dec 23 16:01:38 2025 GMT Not After : Dec 24 16:01:38 2025 GMT Subject: CN=9e2f031ff7a4dce51c3438623283c060ee064cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:5f:ed:6d:c8:98:4f:82:b8:26:96:3f:72: cb:31:4f:7c:93:3d:57:01:77:46:70:9a:32:db:1a: 81:b7:07:fd:a4:f0:07:ec:0b:c4:c4:92:3d:c1:fe: 68:30:79:91:70:9c:4d:ef:88:13:44:7f:fe:93:2f: 77:fd:eb:8e:65:54:7e:e0:3c:04:92:ec:ef:ac:8f: 8c:95:a1:89:be:4c:e9:b5:dc:54:c2:17:5c:4c:12: b7:2a:16:da:48:01:f7:19:aa:0f:1f:f0:06:1d:c2: 68:13:e4:39:4e:9a:fc:21:67:fb:14:eb:44:df:a0: 02:19:e1:af:d4:b8:b2:67:4a:d0:32:8b:32:22:b6: 8c:74:fb:ba:6d:fd:d1:02:4f:ab:f5:2f:31:8a:0e: 32:16:d7:6f:e9:0f:9f:12:77:86:cf:99:fa:cd:de: 0e:7d:a1:6c:ff:ee:cf:92:e0:d7:8c:e9:2f:fd:d5: ec:64:44:bc:b9:b4:b5:7c:2c:d6:30:37:0f:54:2e: e8:1f:2b:c6:d4:78:5f:6e:6c:23:0a:18:1f:99:1f: 94:be:6a:cd:d1:18:6f:f2:60:10:0b:99:9c:5f:70: 14:a3:92:e1:7e:83:06:fa:52:4d:52:92:fc:5f:ea: 88:c5:43:3d:15:33:e3:ba:7b:d7:09:3a:f2:b3:91: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:03:1F:F7:A4:DC:E5:1C:34:38:62:32:83:C0:60:EE:06:4C:F6 X509v3 Authority Key Identifier: keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ba:92:cc:f8:bc:ad:e5:3c:a0:20:1c:5a:b8:b0:ad:ba:d7: 24:5c:f9:c3:ba:0c:43:fd:4e:d6:bd:8d:a6:89:e2:b1:91:19: eb:5f:3f:cb:57:6a:10:69:ff:db:9a:cc:f4:5e:4e:3b:11:36: 30:c1:76:20:bb:1f:af:67:e8:25:12:bf:06:8e:25:d6:58:b3: 50:24:e2:56:eb:3e:ee:26:e8:3e:91:59:90:2e:1f:1a:23:e6: 2b:b0:24:dc:5f:02:13:d3:86:42:57:15:7d:0a:7e:9f:a3:ef: 6d:37:fd:cb:7c:3d:3d:36:ea:17:a8:ee:5f:e7:39:57:47:7c: e4:46:bb:19:da:89:f7:f2:35:08:a1:18:ba:63:6a:07:00:47: ea:37:46:79:b1:70:14:81:55:8d:de:36:01:32:db:ed:45:4b: f3:52:f4:2e:29:34:eb:92:2f:f4:bf:06:e4:16:4c:17:69:fd: 92:81:d7:9a:3b:3e:f3:17:ab:7b:f4:41:3a:e5:ad:8b:cc:a1: e1:aa:ae:f4:93:34:d9:20:98:d4:58:8e:70:55:0b:de:f2:c5: 12:16:5b:50:f2:d2:e7:32:40:3e:8c:14:01:1f:b3:78:0d:a4: c6:d3:82:af:b4:f1:6c:55:8e:39:c7:dc:eb:81:83:4c:50:2f: 60:cc:b1:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8dRtvj9O/7xHoqoWr6NSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh NGQ2MzUwHhcNMjUxMjIzMTYwMTM4WhcNMjUxMjI0MTYwMTM4WjAzMTEwLwYDVQQD Eyg5ZTJmMDMxZmY3YTRkY2U1MWMzNDM4NjIzMjgzYzA2MGVlMDY0Y2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ohf7W3ImE+CuCaWP3LLMU98kz1X AXdGcJoy2xqBtwf9pPAH7AvExJI9wf5oMHmRcJxN74gTRH/+ky93/euOZVR+4DwE kuzvrI+MlaGJvkzptdxUwhdcTBK3KhbaSAH3GaoPH/AGHcJoE+Q5Tpr8IWf7FOtE 36ACGeGv1LiyZ0rQMosyIraMdPu6bf3RAk+r9S8xig4yFtdv6Q+fEneGz5n6zd4O faFs/+7PkuDXjOkv/dXsZES8ubS1fCzWMDcPVC7oHyvG1HhfbmwjChgfmR+UvmrN 0Rhv8mAQC5mcX3AUo5LhfoMG+lJNUpL8X+qIxUM9FTPjunvXCTrys5FO4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4vAx/3pNzlHDQ4YjKDwGDuBkz2MB8GA1UdIwQY MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4 LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILqSzPi8 reU8oCAcWriwrbrXJFz5w7oMQ/1O1r2NponisZEZ618/y1dqEGn/25rM9F5OOxE2 MMF2ILsfr2foJRK/Bo4l1lizUCTiVus+7iboPpFZkC4fGiPmK7Ak3F8CE9OGQlcV fQp+n6PvbTf9y3w9PTbqF6juX+c5V0d85Ea7GdqJ9/I1CKEYumNqBwBH6jdGebFw FIFVjd42ATLb7UVL81L0Lik065Iv9L8G5BZMF2n9koHXmjs+8xere/RBOuWti8yh 4aqu9JM02SCY1FiOcFUL3vLFEhZbUPLS5zJAPowUAR+zeA2kxtOCr7TxbFWOOcfc 64GDTFAvYMyxXA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:55:16 2025 by rpki-client