This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json) Hash identifier: lr+HhC3Bq+DZWqygH92QtehmagQ1Kuh2W4/Wb4g9xxI= Subject key identifier: 14:F7:5B:ED:AC:A3:CC:C9:00:CE:D7:36:63:D1:2C:DA:FC:BE:33:27 Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Certificate serial: 019B5A8824EE6FD6038C3CEAE9FB54BE1349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft Manifest number: 0C61 Signing time: Fri 26 Dec 2025 12:00:30 +0000 Manifest this update: Fri 26 Dec 2025 12:00:30 +0000 Manifest next update: Sat 27 Dec 2025 12:00:30 +0000 Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: 3oQJiH1YFeyqVXnTnLOVQcMyYJyCqS2kzAbUY2989I0=) 2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:24:ee:6f:d6:03:8c:3c:ea:e9:fb:54:be:13:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Validity Not Before: Dec 26 12:00:30 2025 GMT Not After : Dec 27 12:00:30 2025 GMT Subject: CN=14f75bedaca3ccc900ced73663d12cdafcbe3327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fb:cc:18:5e:29:59:a9:88:e9:7e:fe:b9:dc: d7:66:d4:eb:3c:51:c2:24:b5:16:8a:6d:b5:f6:b4: 14:fd:25:f9:12:34:98:1a:cb:98:c5:9d:af:69:8a: 0f:77:93:d2:1e:df:c4:10:49:22:73:0f:ff:85:f7: ca:2c:00:be:76:07:b7:1a:46:90:bd:f1:50:27:33: 68:f1:cb:69:c2:f7:dc:c7:25:7c:6b:42:31:91:99: 03:7f:b1:1c:2c:0f:94:2b:9d:6d:fc:ad:6a:2d:64: e6:d3:ad:63:c1:6e:24:cb:f1:d0:dd:b8:44:58:ea: 47:07:b1:2d:6b:60:b8:0a:5f:7b:b2:0e:c7:53:0d: 2c:80:61:9d:94:b9:9a:ed:8e:60:72:6f:71:e2:da: 26:89:d8:84:08:60:4f:9a:12:85:5a:2e:88:fb:49: bf:d0:ab:25:41:4c:b0:39:9a:99:38:f1:d1:4e:ce: 23:96:27:57:29:55:be:bb:a1:92:3b:4a:8c:f4:c4: 1d:aa:cb:8c:86:af:d8:4b:d0:74:f9:9a:d5:c8:00: fc:72:ec:5a:3c:bd:e3:bf:8c:39:19:55:5e:e5:f7: 2c:23:69:64:46:30:2e:e2:7e:c2:ba:87:fd:22:1a: b3:f4:20:54:b7:51:c0:e7:20:30:41:f2:2a:10:db: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F7:5B:ED:AC:A3:CC:C9:00:CE:D7:36:63:D1:2C:DA:FC:BE:33:27 X509v3 Authority Key Identifier: keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:b1:c2:a2:50:cb:5d:5b:4c:9a:df:00:3c:7d:11:96:43: 53:20:07:17:91:74:64:02:a0:a2:92:06:2e:4f:ca:8d:4c:4d: 91:3b:0e:63:d5:30:57:fe:72:86:59:79:c9:4e:9f:a8:65:80: 22:37:f3:f8:c3:ff:df:bc:d7:e4:92:48:b9:50:df:fa:c2:94: 12:9a:4d:4f:44:b9:58:3d:32:96:11:7a:44:15:c4:ca:cb:eb: 64:cd:9a:01:99:0a:f4:62:8d:17:f4:63:29:e7:cb:8f:3c:06: 0d:e5:94:64:7d:b9:35:1c:a1:fc:2d:d5:a7:28:50:91:1a:b2: ef:ce:1e:3c:1b:f1:8c:cd:e8:56:5e:e0:41:97:de:48:8b:88: 0d:98:ad:94:56:c1:ee:de:75:6c:a4:23:a9:1a:cc:a8:f8:48: 4f:45:42:7f:6d:1d:7e:57:ec:22:c8:5b:d8:23:ae:d0:be:ec: 9a:be:ea:ac:d0:a7:7b:33:4f:61:c0:29:b2:bd:85:ed:bb:30: a3:e0:5f:58:7e:fe:9e:cd:75:b1:5b:0d:dc:02:e9:18:e0:e1: 39:86:db:37:f7:b4:9b:60:57:c6:9a:d0:5b:d6:87:1a:82:5b: d3:dc:9d:e5:a0:4d:9e:05:d2:23:3f:67:8c:96:a5:dc:42:c1: e3:52:be:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiCTub9YDjDzq6ftUvhNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz NmVjZDQwHhcNMjUxMjI2MTIwMDMwWhcNMjUxMjI3MTIwMDMwWjAzMTEwLwYDVQQD EygxNGY3NWJlZGFjYTNjY2M5MDBjZWQ3MzY2M2QxMmNkYWZjYmUzMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PvMGF4pWamI6X7+udzXZtTrPFHC JLUWim219rQU/SX5EjSYGsuYxZ2vaYoPd5PSHt/EEEkicw//hffKLAC+dge3GkaQ vfFQJzNo8ctpwvfcxyV8a0IxkZkDf7EcLA+UK51t/K1qLWTm061jwW4ky/HQ3bhE WOpHB7Eta2C4Cl97sg7HUw0sgGGdlLma7Y5gcm9x4tomidiECGBPmhKFWi6I+0m/ 0KslQUywOZqZOPHRTs4jlidXKVW+u6GSO0qM9MQdqsuMhq/YS9B0+ZrVyAD8cuxa PL3jv4w5GVVe5fcsI2lkRjAu4n7Cuof9Ihqz9CBUt1HA5yAwQfIqENvcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT3W+2so8zJAM7XNmPRLNr8vjMnMB8GA1UdIwQY MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3 LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPyxwqJQ y11bTJrfADx9EZZDUyAHF5F0ZAKgopIGLk/KjUxNkTsOY9UwV/5yhll5yU6fqGWA Ijfz+MP/37zX5JJIuVDf+sKUEppNT0S5WD0ylhF6RBXEysvrZM2aAZkK9GKNF/Rj KefLjzwGDeWUZH25NRyh/C3VpyhQkRqy784ePBvxjM3oVl7gQZfeSIuIDZitlFbB 7t51bKQjqRrMqPhIT0VCf20dflfsIshb2COu0L7smr7qrNCnezNPYcApsr2F7bsw o+BfWH7+ns11sVsN3ALpGODhOYbbN/e0m2BXxprQW9aHGoJb09yd5aBNngXSIz9n jJal3ELB41K+xQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:16 2025 by rpki-client