This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json) Hash identifier: NfyNBac8TZpMqdkzL1+Ch8f6uf9Y7w6TXT2TQsjOhLA= Subject key identifier: 73:94:84:E9:91:23:C0:14:B4:9E:21:47:00:E5:8D:EE:67:08:0C:2D Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Certificate serial: 019B46CB1AFE8158DDC0EEC09DAF5F0D4BD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft Manifest number: 0E5D Signing time: Mon 22 Dec 2025 16:01:14 +0000 Manifest this update: Mon 22 Dec 2025 16:01:14 +0000 Manifest next update: Tue 23 Dec 2025 16:01:14 +0000 Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 6/pMop7c4GgTAXolUcrKwkl6r6aXHkr3Aup9R4Vrv5s=) 2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:1a:fe:81:58:dd:c0:ee:c0:9d:af:5f:0d:4b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Validity Not Before: Dec 22 16:01:14 2025 GMT Not After : Dec 23 16:01:14 2025 GMT Subject: CN=739484e99123c014b49e214700e58dee67080c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:23:ce:c6:ef:d7:72:e5:d6:3d:d6:47:a3: 79:c9:29:a1:f5:4e:4e:31:37:1a:dd:20:84:c1:36: 05:02:33:2d:8b:af:0a:31:6d:32:92:f8:25:8a:d2: f0:a9:7c:f6:2c:66:2d:ae:db:12:15:d9:6d:e2:54: 45:66:e5:f7:0e:c2:a0:ce:5f:37:f9:fb:91:2f:1c: 9c:36:3a:93:02:b6:61:05:e5:ed:13:1d:f3:9f:20: 48:a0:62:c4:58:7e:e7:74:ce:f5:db:5f:b0:3b:0a: 3c:ff:be:a4:80:78:cd:ef:25:e5:a9:89:fa:a4:5c: bb:f3:37:16:8b:11:4a:a2:7a:c7:2a:42:07:29:ad: cd:6d:8a:07:96:0b:e5:b5:22:4e:e7:a1:ce:a2:37: 46:6e:00:e0:48:33:2d:6b:41:16:df:a4:53:07:52: 0a:c5:e1:2e:00:30:2c:a9:5c:44:4c:af:67:b9:72: 9f:91:2f:7d:59:5f:90:45:07:70:e8:39:c8:ef:72: 1d:64:aa:1c:2d:d2:c6:b7:0e:46:8a:32:ed:c7:97: 85:f4:31:9b:01:c7:39:ea:2c:81:ee:49:6e:56:7a: 4f:73:cc:24:d4:f4:6a:4e:e6:c4:de:d6:c5:47:9e: db:28:f8:4f:db:e5:ad:f5:6b:00:80:65:7f:c6:b3: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:94:84:E9:91:23:C0:14:B4:9E:21:47:00:E5:8D:EE:67:08:0C:2D X509v3 Authority Key Identifier: keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8f:3a:a9:e2:ef:ea:22:59:84:98:39:bd:04:00:38:e1:50: 3d:95:80:99:57:b5:01:0d:49:78:5f:ef:f1:52:13:3d:9d:71: 31:3a:df:32:bc:b0:6b:68:65:17:44:ca:3b:cc:d8:fe:17:55: 67:f7:d7:91:5c:ef:8e:6d:18:90:ff:52:72:d3:48:03:77:61: c3:2d:43:3c:a6:4e:d5:b4:12:96:54:e7:b8:2f:48:cb:80:5b: 66:28:ce:28:94:b7:d2:57:bb:05:eb:14:50:2c:d7:72:ab:3d: e4:65:20:d0:10:06:fd:05:69:ff:cd:53:bb:31:5b:84:4a:7e: 11:44:98:46:79:9d:84:ac:90:81:71:0e:94:1a:70:fd:7c:5c: 57:00:95:40:ff:60:e4:c2:ff:e0:4e:2b:c0:ee:b3:84:69:a0: d2:c7:28:e6:2e:90:2e:e0:16:8d:db:5d:66:44:41:91:54:ab: cb:24:80:a7:e3:e2:dd:1b:ad:5e:b6:2f:11:cb:9f:d5:4d:99: 65:89:af:50:a4:11:e5:da:39:2b:20:cd:4b:7a:39:3f:99:18: 7b:1e:e9:6b:6f:d4:79:58:b8:5d:72:23:47:b3:70:40:d1:3d: 02:84:9e:91:ab:29:44:0d:89:f8:5a:52:23:c1:63:57:01:95: d3:5c:0f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyxr+gVjdwO7Ana9fDUvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji MmQzZmUwHhcNMjUxMjIyMTYwMTE0WhcNMjUxMjIzMTYwMTE0WjAzMTEwLwYDVQQD Eyg3Mzk0ODRlOTkxMjNjMDE0YjQ5ZTIxNDcwMGU1OGRlZTY3MDgwYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtcjzsbv13Ll1j3WR6N5ySmh9U5O MTca3SCEwTYFAjMti68KMW0ykvglitLwqXz2LGYtrtsSFdlt4lRFZuX3DsKgzl83 +fuRLxycNjqTArZhBeXtEx3znyBIoGLEWH7ndM7121+wOwo8/76kgHjN7yXlqYn6 pFy78zcWixFKonrHKkIHKa3NbYoHlgvltSJO56HOojdGbgDgSDMta0EW36RTB1IK xeEuADAsqVxETK9nuXKfkS99WV+QRQdw6DnI73IdZKocLdLGtw5GijLtx5eF9DGb Acc56iyB7kluVnpPc8wk1PRqTubE3tbFR57bKPhP2+Wt9WsAgGV/xrMFqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOUhOmRI8AUtJ4hRwDlje5nCAwtMB8GA1UdIwQY MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY86qeLv 6iJZhJg5vQQAOOFQPZWAmVe1AQ1JeF/v8VITPZ1xMTrfMrywa2hlF0TKO8zY/hdV Z/fXkVzvjm0YkP9SctNIA3dhwy1DPKZO1bQSllTnuC9Iy4BbZijOKJS30le7BesU UCzXcqs95GUg0BAG/QVp/81TuzFbhEp+EUSYRnmdhKyQgXEOlBpw/XxcVwCVQP9g 5ML/4E4rwO6zhGmg0sco5i6QLuAWjdtdZkRBkVSryySAp+Pi3RutXrYvEcuf1U2Z ZYmvUKQR5do5KyDNS3o5P5kYex7pa2/UeVi4XXIjR7NwQNE9AoSekaspRA2J+FpS I8FjVwGV01wPoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:37:18 2025 by rpki-client