This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json) Hash identifier: A7QAezD9nzjD5uU94FsM1G5khsPe2TYpGpuGBTFPuNs= Subject key identifier: 4A:67:18:AA:2D:16:A6:DB:1F:23:97:68:4E:CE:06:D8:C7:C2:9C:64 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B124C502C1BB39C4511415A7235ED3408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft Manifest number: 177D Signing time: Fri 12 Dec 2025 11:22:29 +0000 Manifest this update: Fri 12 Dec 2025 11:22:29 +0000 Manifest next update: Sat 13 Dec 2025 11:22:29 +0000 Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: vKwLSlwP6ctCaTUcDxCjEnNXKd2TiQ0cb7Nl2SZGF20=) 2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=) 3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=) 4: EQbezCZuZ92DkuV3XJNIJgpMcwQ.roa (hash: ouC7+qG8m6kvP27Cs9N1FzVBn73sZt27mXI2ZqqBOYg=) 5: LDm4Z6KcMo2VYx3_khyYeC8O4Iw.roa (hash: zcLdl9fx/6GOLrBrDhcPW18T+TQSB2ZgDSkWNEHGluY=) 6: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=) 7: WjbXz_T6fQwwsu_r4_F-5y3dX_Q.roa (hash: iLh3TGVs1ujNjbVfhiVUXg4fodd0lOsGlfiIAkQGeqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:4c:50:2c:1b:b3:9c:45:11:41:5a:72:35:ed:34:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Dec 12 11:22:29 2025 GMT Not After : Dec 13 11:22:29 2025 GMT Subject: CN=4a6718aa2d16a6db1f2397684ece06d8c7c29c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:60:85:a9:dc:a8:bc:c9:6d:67:c2:0a:c5: 7c:c2:19:97:79:f0:13:e8:3a:1f:a0:79:0d:74:ca: bf:0e:00:4d:b4:8b:80:df:63:bd:c4:87:87:95:bb: 7e:81:1b:33:69:25:e9:25:36:06:03:3a:bd:2c:94: 0a:35:5f:62:e9:45:3a:f7:51:cb:fc:78:44:4b:c4: 3f:89:4e:fb:2c:d7:17:8d:b2:16:a2:d9:81:51:d5: 29:f0:4f:e3:79:f8:df:fc:c9:1e:2f:b7:b1:dd:a3: 22:b5:d3:4d:22:7e:43:28:a9:18:09:5f:78:40:34: 6c:b4:b4:bc:f8:09:8c:25:ae:fa:65:d6:43:a1:3c: 5d:09:dc:a6:32:92:3d:b2:30:64:3c:34:58:9a:b9: 80:aa:9b:e8:d9:dd:23:9f:bc:60:ab:dd:bb:e5:8b: ee:5a:7a:e9:2a:0d:75:c9:22:98:9e:e1:7a:57:62: 59:e0:2c:89:be:33:35:96:94:06:65:cf:e9:7a:14: fa:09:de:2c:b0:9b:13:8c:90:89:59:fc:82:ff:19: 22:8f:e2:27:6a:41:9b:dd:ef:52:92:5a:79:2d:3e: 15:65:bd:09:0e:ae:e2:0d:32:f0:89:63:74:ac:ff: 14:0a:87:04:ab:ea:40:e3:05:56:74:57:b4:a8:26: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:18:AA:2D:16:A6:DB:1F:23:97:68:4E:CE:06:D8:C7:C2:9C:64 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:97:65:51:b3:44:17:42:4d:81:87:2f:7f:ab:64:4d:96:b5: 3f:d1:e3:65:b2:05:e1:5e:2c:7c:1f:0d:97:bc:a9:29:42:d2: fa:b2:26:64:2d:03:7b:98:c9:14:a0:c0:93:e1:77:1f:7b:83: c8:fb:77:2a:73:0c:28:eb:10:5a:ae:b9:b4:11:f3:91:81:54: 6c:6a:b9:12:20:ef:5f:bc:6f:9f:79:8e:3d:6e:38:aa:1a:83: 00:0a:25:db:52:14:78:58:0f:21:2b:8a:45:a3:3c:71:dd:fc: 5c:14:7d:73:fe:48:0e:a2:56:e3:11:9d:57:f4:bc:13:18:6e: a9:89:d9:f7:bc:30:89:85:72:98:56:be:e5:db:38:04:9a:04: 12:5f:24:49:4d:ab:47:53:6d:56:30:f8:a0:96:95:51:88:50: 71:43:fb:76:3e:b8:67:ba:85:22:ff:1a:0f:9a:ac:92:92:f8: a5:3a:a6:18:8f:df:77:0b:5c:2e:b4:f6:2a:dc:ea:a8:68:3e: dc:63:70:e6:18:fd:b0:56:96:bc:1d:d8:4e:cf:1a:5c:34:d1: 69:f3:92:98:e4:d5:4f:20:6f:48:48:e1:0f:1e:25:c1:63:b1: cf:70:6d:5d:2d:ab:6e:77:38:26:32:5e:4d:41:01:6a:5c:8a: f4:49:aa:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSTFAsG7OcRRFBWnI17TQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjUxMjEyMTEyMjI5WhcNMjUxMjEzMTEyMjI5WjAzMTEwLwYDVQQD Eyg0YTY3MThhYTJkMTZhNmRiMWYyMzk3Njg0ZWNlMDZkOGM3YzI5YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9ghancqLzJbWfCCsV8whmXefAT 6DofoHkNdMq/DgBNtIuA32O9xIeHlbt+gRszaSXpJTYGAzq9LJQKNV9i6UU691HL /HhES8Q/iU77LNcXjbIWotmBUdUp8E/jefjf/MkeL7ex3aMitdNNIn5DKKkYCV94 QDRstLS8+AmMJa76ZdZDoTxdCdymMpI9sjBkPDRYmrmAqpvo2d0jn7xgq9275Yvu WnrpKg11ySKYnuF6V2JZ4CyJvjM1lpQGZc/pehT6Cd4ssJsTjJCJWfyC/xkij+In akGb3e9Sklp5LT4VZb0JDq7iDTLwiWN0rP8UCocEq+pA4wVWdFe0qCZokQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpnGKotFqbbHyOXaE7OBtjHwpxkMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5dlUbNE F0JNgYcvf6tkTZa1P9HjZbIF4V4sfB8Nl7ypKULS+rImZC0De5jJFKDAk+F3H3uD yPt3KnMMKOsQWq65tBHzkYFUbGq5EiDvX7xvn3mOPW44qhqDAAol21IUeFgPISuK RaM8cd38XBR9c/5IDqJW4xGdV/S8ExhuqYnZ97wwiYVymFa+5ds4BJoEEl8kSU2r R1NtVjD4oJaVUYhQcUP7dj64Z7qFIv8aD5qskpL4pTqmGI/fdwtcLrT2KtzqqGg+ 3GNw5hj9sFaWvB3YTs8aXDTRafOSmOTVTyBvSEjhDx4lwWOxz3BtXS2rbnc4JjJe TUEBalyK9EmqOQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:23:03 2025 by rpki-client