This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: SqkD6WspeKitTUtenVOiNTQvk0yMaMiB4MShK6kJF70= Subject key identifier: 7C:6E:9D:C3:63:07:33:16:03:63:10:E2:B7:4E:CC:F1:9B:8E:69:65 Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019B3C7FCC1647DE96D6E59E1AF795544522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 026D Signing time: Sat 20 Dec 2025 16:02:46 +0000 Manifest this update: Sat 20 Dec 2025 16:02:46 +0000 Manifest next update: Sun 21 Dec 2025 16:02:46 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: PtXPmRDyNEIrC2uy3L+K4jVmRzVMYOoCC4jm2ybxGNA=) 2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:cc:16:47:de:96:d6:e5:9e:1a:f7:95:54:45:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Dec 20 16:02:46 2025 GMT Not After : Dec 21 16:02:46 2025 GMT Subject: CN=7c6e9dc363073316036310e2b74eccf19b8e6965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:73:f8:33:e1:93:33:85:85:56:0d:17:d9: 98:a4:ff:42:bf:6d:ee:5f:dd:71:4a:0a:b6:01:de: e3:84:83:02:5f:5b:e7:c0:94:37:bf:0a:e4:18:7b: 4f:f7:6e:fa:54:51:71:19:18:e0:16:1d:f7:21:fc: 9e:44:7b:ed:98:e5:f1:fa:e6:04:c5:1f:a2:dd:94: dc:6e:e3:3e:52:dc:46:bc:dc:8d:70:78:b0:20:e0: ad:51:23:9d:f9:ae:c3:0c:b1:ba:e0:39:05:74:29: c9:a0:4e:1f:fe:a5:2e:f5:8d:b0:09:3a:5d:b1:2c: 22:ea:d7:59:19:3c:de:b8:0e:8f:7f:cf:34:b9:81: e7:af:5d:8a:51:ce:a2:0f:89:ed:27:99:b6:61:66: 61:20:94:20:ce:ee:f4:e0:eb:3c:70:ea:ce:6b:92: 4b:6d:1f:d8:45:09:e1:d2:7c:99:91:b4:06:a9:b3: 86:f6:fe:b0:84:6a:48:7f:6b:b3:22:b2:5e:7f:a9: 0b:91:f1:1b:8b:84:48:ce:6b:d8:62:f4:9b:56:00: 18:fb:71:08:59:0c:fc:09:a0:ee:31:6a:01:07:6a: 70:c7:fa:8c:29:2f:49:9c:0f:ca:1d:2f:70:37:26: b9:c1:3e:4b:89:42:26:2c:49:cc:bc:89:a4:90:dc: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6E:9D:C3:63:07:33:16:03:63:10:E2:B7:4E:CC:F1:9B:8E:69:65 X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:49:41:a6:ad:7d:16:5a:e7:75:88:5d:f6:5c:0c:ff:c0:fa: 3c:b8:b9:8f:99:60:ac:3f:ed:f1:6b:b0:66:00:e0:8c:bc:34: 3f:fe:48:60:9f:13:39:9a:68:e1:fb:49:37:6e:e4:e4:b3:82: d0:76:a5:c5:82:6a:8e:7b:3b:54:33:29:6e:95:44:22:82:bb: a4:86:87:43:93:ef:b3:14:6c:7b:cb:44:57:13:be:14:ae:f4: 73:fe:ca:db:9c:fd:59:93:54:b3:16:d3:cd:62:ae:db:39:7c: 5e:47:6e:e6:e1:14:81:0b:4d:73:57:7e:3f:cc:40:4c:05:b1: 97:c1:d3:d7:c2:68:60:2a:10:92:51:29:de:39:e1:97:ee:84: 4b:90:3e:af:a0:cd:ac:62:05:8e:ec:2a:a4:42:80:19:bc:17: 9e:6c:4d:21:bb:a4:60:7e:34:d8:c2:9a:19:63:74:bc:a1:3e: 15:4a:3d:12:a9:04:b6:b3:91:8a:36:d1:10:64:5b:54:e8:96: 06:66:4c:22:73:63:8e:9a:eb:4f:05:73:8d:b1:2a:d8:0d:96: 93:ff:0d:d7:60:91:5b:1b:b0:20:12:6d:b1:07:54:be:6b:36: b1:58:a3:bc:18:09:eb:ea:c0:78:95:01:8c:b0:eb:79:42:11: c0:6b:2d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8wWR96W1uWeGveVVEUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjUxMjIwMTYwMjQ2WhcNMjUxMjIxMTYwMjQ2WjAzMTEwLwYDVQQD Eyg3YzZlOWRjMzYzMDczMzE2MDM2MzEwZTJiNzRlY2NmMTliOGU2OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtz+DPhkzOFhVYNF9mYpP9Cv23u X91xSgq2Ad7jhIMCX1vnwJQ3vwrkGHtP9276VFFxGRjgFh33IfyeRHvtmOXx+uYE xR+i3ZTcbuM+UtxGvNyNcHiwIOCtUSOd+a7DDLG64DkFdCnJoE4f/qUu9Y2wCTpd sSwi6tdZGTzeuA6Pf880uYHnr12KUc6iD4ntJ5m2YWZhIJQgzu704Os8cOrOa5JL bR/YRQnh0nyZkbQGqbOG9v6whGpIf2uzIrJef6kLkfEbi4RIzmvYYvSbVgAY+3EI WQz8CaDuMWoBB2pwx/qMKS9JnA/KHS9wNya5wT5LiUImLEnMvImkkNzz8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxuncNjBzMWA2MQ4rdOzPGbjmllMB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUElBpq19 FlrndYhd9lwM/8D6PLi5j5lgrD/t8WuwZgDgjLw0P/5IYJ8TOZpo4ftJN27k5LOC 0HalxYJqjns7VDMpbpVEIoK7pIaHQ5PvsxRse8tEVxO+FK70c/7K25z9WZNUsxbT zWKu2zl8Xkdu5uEUgQtNc1d+P8xATAWxl8HT18JoYCoQklEp3jnhl+6ES5A+r6DN rGIFjuwqpEKAGbwXnmxNIbukYH402MKaGWN0vKE+FUo9EqkEtrORijbREGRbVOiW BmZMInNjjprrTwVzjbEq2A2Wk/8N12CRWxuwIBJtsQdUvms2sVijvBgJ6+rAeJUB jLDreUIRwGst1A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:25 2025 by rpki-client