This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json) Hash identifier: cOPfuactklUlPNHdg+Gb5oYyfqnFQ3yFg0alII833zk= Subject key identifier: 1C:2A:14:2E:13:17:52:12:B9:74:DF:5E:6A:3B:99:12:96:51:3C:34 Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Certificate serial: 019B10817DBA252E3F97DC4B440F396A0283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft Manifest number: 0837 Signing time: Fri 12 Dec 2025 03:01:20 +0000 Manifest this update: Fri 12 Dec 2025 03:01:20 +0000 Manifest next update: Sat 13 Dec 2025 03:01:20 +0000 Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: FbFjefQSLXqD44GXdUZP2ZYNQo7xpQHIkpytlTvX2+c=) 2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:7d:ba:25:2e:3f:97:dc:4b:44:0f:39:6a:02:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Validity Not Before: Dec 12 03:01:20 2025 GMT Not After : Dec 13 03:01:20 2025 GMT Subject: CN=1c2a142e13175212b974df5e6a3b991296513c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:f6:52:8a:7b:e1:f0:57:6c:4c:12:31:6f: ff:34:0e:b2:e4:80:22:bf:b8:96:25:a7:50:a1:4f: 9c:3c:78:42:3f:5c:24:76:25:8e:d7:bd:8a:4c:10: d5:a5:32:00:b4:4f:45:66:ca:be:64:9c:a1:69:61: 2a:22:0c:c0:a1:f5:0b:d6:12:fa:06:46:22:34:f4: f8:06:39:7d:1a:fd:e8:6d:6b:41:7e:0e:7c:21:f6: c2:41:f2:09:26:84:d4:6b:6e:7b:4e:97:b9:d4:ad: b1:39:59:d9:62:72:af:1f:8e:c0:93:2b:a9:6d:14: 5d:0b:61:22:73:78:d6:a9:35:38:bc:6c:1b:04:0a: 01:97:88:8e:c1:d2:5a:4b:84:58:47:49:41:11:08: 83:74:ea:f0:5d:d5:e7:d4:75:ec:7b:d3:1a:a2:fa: bd:9b:55:eb:52:28:dd:a9:f9:15:14:35:b9:89:72: bb:ef:0d:de:ab:65:fb:c5:4d:ff:d5:42:2a:1d:ca: b8:d0:79:c6:82:86:65:32:a7:60:31:72:dd:df:5d: 05:09:d3:55:e0:0a:c1:ec:3f:43:15:42:66:d9:ca: 38:5c:e0:85:07:c7:19:8e:17:05:22:3d:92:21:70: 19:9b:ca:ce:75:3b:d8:bd:5c:7e:28:ca:b7:54:f7: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:14:2E:13:17:52:12:B9:74:DF:5E:6A:3B:99:12:96:51:3C:34 X509v3 Authority Key Identifier: keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0a:5d:59:73:a4:1b:62:d8:ff:a9:48:af:f8:ed:84:d2:2c: 2d:4e:c7:74:c8:2a:4b:ef:cc:da:f2:ab:8b:83:cc:c2:10:bd: 66:11:b8:aa:67:72:d7:2c:7c:d7:55:ee:60:43:07:f2:89:23: da:51:19:03:6d:13:dc:35:bc:d5:d8:48:0a:57:4c:b6:07:94: ed:ac:b1:0d:2e:3b:06:f3:53:73:24:5f:ea:2b:08:1e:53:32: 35:c0:89:6f:26:b0:00:d4:31:5c:8d:b3:c2:fb:85:b4:f2:07: ca:b5:9b:32:a7:5d:47:32:9a:3d:88:e5:78:78:88:da:3b:1d: 38:76:9a:b4:3c:14:53:37:25:96:41:41:ac:82:e8:01:e1:c1: 91:4b:d3:a4:37:c8:4d:1a:c9:bc:ac:20:05:88:ec:00:a3:32: 2d:8b:a9:9f:98:14:12:58:8c:ed:91:11:9b:49:76:bd:89:d2: 04:49:2b:b5:7b:6e:70:0f:97:1f:9b:9b:aa:e3:af:d6:e7:9f: 21:04:86:2b:da:65:df:21:49:78:18:48:73:99:86:84:92:ce: b6:dc:23:9d:65:63:0f:72:07:d6:f5:58:17:bc:78:f1:34:06: 50:62:5a:a1:c2:cb:bf:e8:c7:df:f0:4e:de:90:cc:40:cf:ca: 1d:9d:b7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgX26JS4/l9xLRA85agKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl ZjM1N2MwHhcNMjUxMjEyMDMwMTIwWhcNMjUxMjEzMDMwMTIwWjAzMTEwLwYDVQQD EygxYzJhMTQyZTEzMTc1MjEyYjk3NGRmNWU2YTNiOTkxMjk2NTEzYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLf2Uop74fBXbEwSMW//NA6y5IAi v7iWJadQoU+cPHhCP1wkdiWO172KTBDVpTIAtE9FZsq+ZJyhaWEqIgzAofUL1hL6 BkYiNPT4Bjl9Gv3obWtBfg58IfbCQfIJJoTUa257Tpe51K2xOVnZYnKvH47Akyup bRRdC2Eic3jWqTU4vGwbBAoBl4iOwdJaS4RYR0lBEQiDdOrwXdXn1HXse9Maovq9 m1XrUijdqfkVFDW5iXK77w3eq2X7xU3/1UIqHcq40HnGgoZlMqdgMXLd310FCdNV 4ArB7D9DFUJm2co4XOCFB8cZjhcFIj2SIXAZm8rOdTvYvVx+KMq3VPcYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwqFC4TF1ISuXTfXmo7mRKWUTw0MB8GA1UdIwQY MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQpdWXOk G2LY/6lIr/jthNIsLU7HdMgqS+/M2vKri4PMwhC9ZhG4qmdy1yx811XuYEMH8okj 2lEZA20T3DW81dhICldMtgeU7ayxDS47BvNTcyRf6isIHlMyNcCJbyawANQxXI2z wvuFtPIHyrWbMqddRzKaPYjleHiI2jsdOHaatDwUUzcllkFBrILoAeHBkUvTpDfI TRrJvKwgBYjsAKMyLYupn5gUEliM7ZERm0l2vYnSBEkrtXtucA+XH5ubquOv1uef IQSGK9pl3yFJeBhIc5mGhJLOttwjnWVjD3IH1vVYF7x48TQGUGJaocLLv+jH3/BO 3pDMQM/KHZ23+g== -----END CERTIFICATE-----Generated at Fri Dec 12 08:27:47 2025 by rpki-client