This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json) Hash identifier: ks6iq6WPvU456JIUuuilGfl2Bfv72X1NQEb2/ET6c/s= Subject key identifier: C4:0C:86:05:27:F4:16:61:6C:C2:77:29:22:10:9D:CA:BF:7A:F4:42 Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Certificate serial: 019B42B7C634B1328A0C7A5BAEE6EF8DAB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft Manifest number: 0851 Signing time: Sun 21 Dec 2025 21:01:38 +0000 Manifest this update: Sun 21 Dec 2025 21:01:38 +0000 Manifest next update: Mon 22 Dec 2025 21:01:38 +0000 Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: x6d3JjAihnGu21kKjl9R15K6wyrgHNU0pfX49Yr4c9g=) 2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:c6:34:b1:32:8a:0c:7a:5b:ae:e6:ef:8d:ab:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Validity Not Before: Dec 21 21:01:38 2025 GMT Not After : Dec 22 21:01:38 2025 GMT Subject: CN=c40c860527f416616cc2772922109dcabf7af442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:93:f7:5c:e8:de:b1:8a:ee:ee:77:cd:e1: d5:8b:4a:b1:ea:af:27:25:87:8d:8f:30:15:f1:56: 43:e8:c3:09:92:f5:d7:c6:c8:40:9b:b0:59:f8:08: 20:9f:14:b3:c4:f9:19:c3:3c:56:94:01:ed:0b:2a: ad:fc:60:2a:e5:d4:6d:e6:05:8c:8f:e5:0d:aa:55: 17:3e:5f:ed:db:33:70:bd:56:90:0e:04:1d:91:36: 71:84:98:f4:f7:a8:1f:ec:59:e6:50:f5:f7:26:a2: c0:48:ee:1b:b7:71:7b:87:7c:c0:e9:c9:32:48:bc: b7:a9:44:f0:37:ec:18:c1:ed:d0:11:c1:f1:d9:e4: 3e:92:55:c0:ca:3e:ae:a8:0f:7a:1b:e4:d7:c0:c0: 05:60:83:8d:00:7d:93:41:ec:da:60:9c:d5:62:fd: 16:6e:5e:0f:27:1c:5c:8f:d2:a4:24:6c:8a:6d:9f: 96:28:e3:15:1d:38:e6:c0:17:d5:be:98:0c:da:d4: a9:cf:cd:9a:d4:4f:44:b1:cf:f4:26:75:67:4f:53: 64:a0:21:c8:e9:62:58:a2:2d:bc:13:72:fb:b4:db: 64:03:19:73:e9:f8:0b:e8:6f:fe:cc:b9:b8:a3:02: d0:be:76:c9:a6:3f:f6:4d:4a:d1:ca:be:2e:ba:bb: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0C:86:05:27:F4:16:61:6C:C2:77:29:22:10:9D:CA:BF:7A:F4:42 X509v3 Authority Key Identifier: keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:46:f8:d0:85:0b:1b:71:f6:8a:49:e4:45:ed:15:54:99:26: 5b:2d:90:08:ab:b3:42:13:92:2a:73:cb:8a:07:75:bd:fb:39: e2:e9:1c:d8:fd:e8:9b:fe:8c:14:9c:02:d8:85:25:38:88:39: 09:3a:f3:eb:33:f4:69:ff:7b:01:97:ce:00:f2:c5:df:c5:e8: ab:e9:8d:7b:47:0a:3a:1f:7f:11:77:6f:e2:5a:8b:7f:d8:f1: 3d:e3:ec:c3:fd:0f:3b:47:29:62:ae:41:02:f4:53:97:56:1d: 89:31:a2:87:ee:4d:c6:7f:73:e9:09:41:c4:f7:5c:e0:bd:b9: 29:81:34:0e:e5:6d:74:76:7a:64:b3:6f:e9:a5:26:d2:f3:45: 1f:13:96:d5:40:35:94:5a:c6:44:8f:dd:de:ef:a3:cb:d8:75: b4:97:9e:77:f6:db:8c:44:1a:0a:d8:a4:95:11:9a:1a:de:88: 29:d3:3d:ff:86:82:f8:6c:09:19:b8:56:ee:91:cd:fe:98:53: 8e:05:a5:01:f3:db:d9:f2:f8:a8:6b:bf:7d:bc:a9:46:c0:1c: 80:7f:91:f2:7b:51:05:fd:ee:e7:1d:42:fc:5c:91:ef:0f:74: 15:89:b5:ce:f8:90:28:dd:f5:e0:85:1d:4a:56:1e:60:bd:79: 72:de:f2:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt8Y0sTKKDHpbrubvjatoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl ZjM1N2MwHhcNMjUxMjIxMjEwMTM4WhcNMjUxMjIyMjEwMTM4WjAzMTEwLwYDVQQD EyhjNDBjODYwNTI3ZjQxNjYxNmNjMjc3MjkyMjEwOWRjYWJmN2FmNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWST91zo3rGK7u53zeHVi0qx6q8n JYeNjzAV8VZD6MMJkvXXxshAm7BZ+AggnxSzxPkZwzxWlAHtCyqt/GAq5dRt5gWM j+UNqlUXPl/t2zNwvVaQDgQdkTZxhJj096gf7FnmUPX3JqLASO4bt3F7h3zA6cky SLy3qUTwN+wYwe3QEcHx2eQ+klXAyj6uqA96G+TXwMAFYIONAH2TQezaYJzVYv0W bl4PJxxcj9KkJGyKbZ+WKOMVHTjmwBfVvpgM2tSpz82a1E9Esc/0JnVnT1NkoCHI 6WJYoi28E3L7tNtkAxlz6fgL6G/+zLm4owLQvnbJpj/2TUrRyr4uurvRGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQMhgUn9BZhbMJ3KSIQncq/evRCMB8GA1UdIwQY MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUb40IUL G3H2iknkRe0VVJkmWy2QCKuzQhOSKnPLigd1vfs54ukc2P3om/6MFJwC2IUlOIg5 CTrz6zP0af97AZfOAPLF38Xoq+mNe0cKOh9/EXdv4lqLf9jxPePsw/0PO0cpYq5B AvRTl1YdiTGih+5Nxn9z6QlBxPdc4L25KYE0DuVtdHZ6ZLNv6aUm0vNFHxOW1UA1 lFrGRI/d3u+jy9h1tJeed/bbjEQaCtiklRGaGt6IKdM9/4aC+GwJGbhW7pHN/phT jgWlAfPb2fL4qGu/fbypRsAcgH+R8ntRBf3u5x1C/FyR7w90FYm1zviQKN314IUd SlYeYL15ct7y+g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:38 2025 by rpki-client