This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json) Hash identifier: h/vE8tUi8vJKUInNlomwYEoQyo9Whl4EPKpzf80b/nw= Subject key identifier: 29:57:27:DB:E4:15:BC:A8:A5:20:94:7D:E5:46:E7:4C:B5:42:F6:6B Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a Certificate serial: 019B3C7E15B00A2D6188B282430B61B0921D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:00:54 +0000 Manifest this update: Sat 20 Dec 2025 16:00:54 +0000 Manifest next update: Sun 21 Dec 2025 16:00:54 +0000 Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: QpgMp+zOK0hh2x9ccKMR4Y7RjOZ5FkAkcE8gYQaPaKg=) 2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:15:b0:0a:2d:61:88:b2:82:43:0b:61:b0:92:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a Validity Not Before: Dec 20 16:00:54 2025 GMT Not After : Dec 21 16:00:54 2025 GMT Subject: CN=295727dbe415bca8a520947de546e74cb542f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:1d:79:59:07:81:84:a8:bb:b0:3c:54:92: 2e:c8:2b:91:79:a1:51:e9:8a:47:86:df:52:c4:4a: dc:51:8a:be:b7:97:02:82:d2:a3:d2:f4:56:18:b1: 67:5a:3b:51:91:37:8e:15:c4:2e:6c:dd:ff:5f:be: a2:5f:63:f6:34:ff:8c:b7:e8:ff:16:0d:3e:6d:a2: e8:a5:27:cd:fc:6a:71:93:72:2d:b5:a0:8e:5c:ee: 86:2d:0e:0e:e0:07:54:8c:94:49:db:a4:49:de:5f: b6:4d:46:c7:1b:9c:85:66:0e:c1:d3:4a:3f:ed:25: a2:5c:a9:5c:0b:9a:75:e3:0d:ce:51:56:a3:bb:76: 3e:3e:5d:67:b4:9a:ee:bc:61:e7:e1:56:0a:38:57: 7e:4a:7b:27:8e:e0:36:cc:63:bf:ca:9d:a5:1b:2a: 71:88:48:80:23:63:0b:63:66:9a:8d:b5:4a:1c:a4: a7:8f:55:7f:55:84:8f:13:dc:a0:f6:70:13:40:20: ff:75:bf:70:16:29:13:50:29:88:d5:a6:5b:5c:c3: 5b:df:ec:f3:ee:de:63:81:8c:b0:58:fd:bb:f0:c4: 83:db:e9:54:06:61:1f:79:c8:d6:d2:d1:d1:98:c0: 71:ae:49:57:0a:01:40:da:00:0d:9f:52:60:22:c4: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:57:27:DB:E4:15:BC:A8:A5:20:94:7D:E5:46:E7:4C:B5:42:F6:6B X509v3 Authority Key Identifier: keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:15:60:e1:4e:8b:f6:7a:4c:ec:44:70:1c:a1:0a:29:69: 77:5f:ca:f3:f9:f4:4c:a3:34:a6:d3:96:42:42:22:19:c1:65: 31:51:da:d5:00:00:e8:0f:1a:b7:0a:6f:be:ef:7f:d4:25:cc: 5e:a6:a0:f4:c9:5e:28:d1:e2:d5:46:60:bb:7d:12:6e:bd:21: 3c:cf:db:60:be:d5:28:06:ff:af:79:1b:93:ad:88:0a:d3:ad: 38:a6:12:d3:2d:47:18:31:cf:12:fc:18:9f:0f:12:8e:66:97: df:31:40:2b:f3:dc:44:df:1b:2f:fc:c6:3e:4a:76:eb:f8:b1: a9:f5:31:25:f3:bf:7a:a8:f4:a9:cf:92:0f:36:a7:fb:2b:60: 67:d6:75:3a:0a:cf:ab:39:e7:d4:9f:7a:6b:de:ef:23:d6:43: c4:4f:f3:aa:50:5d:b4:a0:dd:b5:20:87:17:93:4f:50:58:5b: e9:7c:b6:0c:28:3a:ea:25:30:d0:37:dc:ef:bb:55:dd:b5:fc: a0:4c:91:5c:aa:a2:37:d1:41:15:72:c3:9c:be:45:21:32:0f: f3:94:a7:4e:c0:7f:1d:a8:0d:d3:34:0f:46:92:19:a4:0e:7a: 04:fc:db:0d:d2:af:55:02:01:f5:fb:8b:6a:f5:e2:be:b0:7c: 98:be:b7:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhWwCi1hiLKCQwthsJIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmFmOTBlZDEzZDE3NTQ1MmNmNWU1YTE2MzJhNzk0YmYx ZjRjOWEwHhcNMjUxMjIwMTYwMDU0WhcNMjUxMjIxMTYwMDU0WjAzMTEwLwYDVQQD EygyOTU3MjdkYmU0MTViY2E4YTUyMDk0N2RlNTQ2ZTc0Y2I1NDJmNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYdeVkHgYSou7A8VJIuyCuReaFR 6YpHht9SxErcUYq+t5cCgtKj0vRWGLFnWjtRkTeOFcQubN3/X76iX2P2NP+Mt+j/ Fg0+baLopSfN/Gpxk3IttaCOXO6GLQ4O4AdUjJRJ26RJ3l+2TUbHG5yFZg7B00o/ 7SWiXKlcC5p14w3OUVaju3Y+Pl1ntJruvGHn4VYKOFd+SnsnjuA2zGO/yp2lGypx iEiAI2MLY2aajbVKHKSnj1V/VYSPE9yg9nATQCD/db9wFikTUCmI1aZbXMNb3+zz 7t5jgYywWP278MSD2+lUBmEfecjW0tHRmMBxrklXCgFA2gANn1JgIsQIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClXJ9vkFbyopSCUfeVG50y1QvZrMB8GA1UdIwQY MBaAFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYt ZDUyZmRjOWU4Mjg3LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYtZDUyZmRjOWU4Mjg3 LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwQVYOFO i/Z6TOxEcByhCilpd1/K8/n0TKM0ptOWQkIiGcFlMVHa1QAA6A8atwpvvu9/1CXM Xqag9MleKNHi1UZgu30Sbr0hPM/bYL7VKAb/r3kbk62ICtOtOKYS0y1HGDHPEvwY nw8SjmaX3zFAK/PcRN8bL/zGPkp26/ixqfUxJfO/eqj0qc+SDzan+ytgZ9Z1OgrP qznn1J96a97vI9ZDxE/zqlBdtKDdtSCHF5NPUFhb6Xy2DCg66iUw0Dfc77tV3bX8 oEyRXKqiN9FBFXLDnL5FITIP85SnTsB/HagN0zQPRpIZpA56BPzbDdKvVQIB9fuL avXivrB8mL63oA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:49 2025 by rpki-client