This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json) Hash identifier: 7bC1i3mtzroi2m77BC4EsiXYVX5aamdb/gbORwPL+Ao= Subject key identifier: 0A:71:92:15:97:71:0A:1C:98:2A:3A:30:A7:B2:5B:4A:87:71:FA:6C Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Certificate serial: 019B59E38ED1036A359EF757736FA48D3D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:44 +0000 Manifest this update: Fri 26 Dec 2025 09:00:44 +0000 Manifest next update: Sat 27 Dec 2025 09:00:44 +0000 Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: 7ZFc/D16eFR4aDzOEAjBWl9Fqi2jXV8oBwZoVpsfHi4=) 2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=) 3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=) 4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:8e:d1:03:6a:35:9e:f7:57:73:6f:a4:8d:3d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Validity Not Before: Dec 26 09:00:44 2025 GMT Not After : Dec 27 09:00:44 2025 GMT Subject: CN=0a71921597710a1c982a3a30a7b25b4a8771fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:89:7a:8c:0d:be:27:f3:0b:96:1f:9a:8c: fe:40:fb:03:4f:ee:01:cd:e0:77:b6:97:a9:48:0e: bb:93:1b:58:58:ac:b5:8b:b6:5d:86:20:b6:c6:cd: ed:dc:b5:93:68:46:5e:32:bd:06:05:62:76:5a:6d: 32:98:1d:64:f8:b8:fa:6b:75:7f:e6:06:ed:bc:db: c7:24:cb:1b:50:6d:64:68:99:2c:09:7b:4b:77:3b: f5:a4:d1:6d:41:e6:65:86:a5:1c:39:76:43:09:68: 89:c2:7d:1a:eb:4c:ea:93:83:b4:06:aa:5b:fd:25: 93:ff:8d:72:9c:f0:39:14:91:1b:42:b0:cc:42:4e: ea:62:1b:8b:b6:b5:9b:7a:53:5e:6a:37:7e:25:d6: b0:72:92:72:8d:6f:2b:28:ef:ab:52:e6:c2:a7:d4: cb:72:69:af:c9:68:fc:58:de:72:87:7a:8c:dd:c6: 96:b5:2c:a1:8c:57:7c:47:fc:97:62:65:bb:69:d3: f8:4f:bf:c4:5f:2f:ed:38:0f:d0:a8:1a:20:9b:3d: 8a:b1:da:09:e9:ff:2e:e7:eb:dd:73:ac:7e:93:42: 94:48:14:ab:9d:74:c7:04:b7:e9:a1:09:9e:99:ea: 25:3f:06:ce:45:95:0e:2b:24:85:16:ae:4c:88:c8: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:92:15:97:71:0A:1C:98:2A:3A:30:A7:B2:5B:4A:87:71:FA:6C X509v3 Authority Key Identifier: keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4d:f9:bc:f8:64:cb:6d:10:da:5e:d2:94:fb:ce:9a:96:5c: 81:cb:02:9f:6d:6a:f2:df:68:b3:dd:d1:55:5d:34:35:72:b5: 94:2a:82:e6:5b:6f:19:4b:3e:27:0e:46:ca:31:d8:e0:bc:fc: 23:1b:96:2d:2c:3f:78:9d:5f:e2:c1:65:69:ed:2a:f7:9f:3c: 75:a4:63:1c:a9:aa:3e:5c:f2:0a:f6:e8:1f:99:c9:54:07:2a: e8:56:57:9e:03:f8:69:a2:38:c4:ca:48:a1:89:57:b2:cf:6b: 51:85:2a:f1:e5:59:9e:dd:0c:50:91:cb:15:f9:a4:c6:cc:c7: ed:ce:1c:8e:cd:29:0b:0a:3b:a9:b8:02:7d:82:56:ec:d5:d2: 1e:c2:93:21:f8:fe:11:a6:8b:3f:42:c0:4e:73:ea:3c:97:14: 95:98:ff:5b:84:92:60:8b:2c:34:33:f8:10:c2:06:97:bc:d6: 6a:cd:f4:79:bd:b0:5b:54:3c:f2:66:61:e4:c5:cb:85:c6:c8: 5e:64:64:e9:21:03:99:f5:a2:9f:3b:1c:f8:7a:2a:98:f2:1b: 3b:a3:0b:fd:51:95:89:ef:0e:b2:7f:57:7f:30:d1:b6:73:e3: 44:ca:63:78:28:28:39:bb:f3:b6:1a:3a:40:0e:fb:cc:f5:21: 3b:b8:aa:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ447RA2o1nvdXc2+kjT2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2 OWM5NDkwHhcNMjUxMjI2MDkwMDQ0WhcNMjUxMjI3MDkwMDQ0WjAzMTEwLwYDVQQD EygwYTcxOTIxNTk3NzEwYTFjOTgyYTNhMzBhN2IyNWI0YTg3NzFmYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7+JeowNvifzC5Yfmoz+QPsDT+4B zeB3tpepSA67kxtYWKy1i7ZdhiC2xs3t3LWTaEZeMr0GBWJ2Wm0ymB1k+Lj6a3V/ 5gbtvNvHJMsbUG1kaJksCXtLdzv1pNFtQeZlhqUcOXZDCWiJwn0a60zqk4O0Bqpb /SWT/41ynPA5FJEbQrDMQk7qYhuLtrWbelNeajd+JdawcpJyjW8rKO+rUubCp9TL cmmvyWj8WN5yh3qM3caWtSyhjFd8R/yXYmW7adP4T7/EXy/tOA/QqBogmz2KsdoJ 6f8u5+vdc6x+k0KUSBSrnXTHBLfpoQmemeolPwbORZUOKySFFq5MiMh2fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApxkhWXcQocmCo6MKeyW0qHcfpsMB8GA1UdIwQY MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0 LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE35vPhk y20Q2l7SlPvOmpZcgcsCn21q8t9os93RVV00NXK1lCqC5ltvGUs+Jw5GyjHY4Lz8 IxuWLSw/eJ1f4sFlae0q9588daRjHKmqPlzyCvboH5nJVAcq6FZXngP4aaI4xMpI oYlXss9rUYUq8eVZnt0MUJHLFfmkxszH7c4cjs0pCwo7qbgCfYJW7NXSHsKTIfj+ EaaLP0LATnPqPJcUlZj/W4SSYIssNDP4EMIGl7zWas30eb2wW1Q88mZh5MXLhcbI XmRk6SEDmfWinzsc+HoqmPIbO6ML/VGVie8Osn9XfzDRtnPjRMpjeCgoObvztho6 QA77zPUhO7iq9w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client