This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json) Hash identifier: xUgqutVT0GXB0/cOL5oIdxt0LypOwxv76KRe2LeQwJc= Subject key identifier: A0:8B:A6:E1:7F:28:B6:B1:40:CC:5A:80:A4:E8:43:AE:C2:F7:43:D7 Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Certificate serial: 019B37585D0338E9B69881EA8463220EF722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft Manifest number: 140B Signing time: Fri 19 Dec 2025 16:01:36 +0000 Manifest this update: Fri 19 Dec 2025 16:01:36 +0000 Manifest next update: Sat 20 Dec 2025 16:01:36 +0000 Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: qu566thw558hceBxD3mMqUkuBySkLMLD4SK0YWGZ7dk=) 2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:5d:03:38:e9:b6:98:81:ea:84:63:22:0e:f7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Validity Not Before: Dec 19 16:01:36 2025 GMT Not After : Dec 20 16:01:36 2025 GMT Subject: CN=a08ba6e17f28b6b140cc5a80a4e843aec2f743d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:7f:a3:a8:f2:4f:99:a3:59:71:ca:e4:d7: 80:3e:de:4a:71:55:4a:ed:dd:b0:88:51:64:62:82: 40:99:6d:8b:67:32:2b:2f:1b:e2:a1:73:79:cc:bd: 6c:00:63:cd:5e:45:08:83:ae:30:17:05:0a:98:0a: d3:50:7f:2d:b1:e2:75:bf:c4:b7:24:51:d5:f5:b5: 64:3a:fb:e1:ba:6c:67:75:03:24:98:74:07:55:05: 02:98:59:4f:70:d5:65:ac:04:f9:bb:c5:82:ea:ec: 1a:1f:55:96:97:0f:3a:c3:a2:9c:0e:ca:a4:96:75: 91:84:6b:cb:ec:5f:57:4d:fb:5e:5e:48:de:42:00: 32:76:7f:5a:99:1e:16:ef:0d:3e:15:eb:7f:27:5c: 89:4b:3c:0b:52:d1:56:b8:3b:85:f9:aa:9b:54:88: ad:c0:40:65:15:41:b8:e3:1a:ee:5a:1e:b3:68:a7: d4:d1:04:25:4b:fc:94:d4:8d:49:be:94:5e:e7:91: 48:8f:f6:d7:48:83:9a:01:f0:7d:30:0e:47:64:49: d4:0b:5f:b6:99:4b:28:cb:8f:b9:8f:0c:54:85:81: 5e:26:0f:83:40:15:08:2e:4d:64:75:87:66:a1:96: a0:02:b0:32:02:69:7d:97:2d:57:ce:54:23:bc:59: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:A6:E1:7F:28:B6:B1:40:CC:5A:80:A4:E8:43:AE:C2:F7:43:D7 X509v3 Authority Key Identifier: keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b2:0d:80:0a:b0:97:90:3d:11:e0:dd:c9:00:a7:25:33:eb: 97:f0:34:df:c9:2d:5a:c6:1d:be:56:5b:3a:dc:1d:1f:4d:97: d7:4d:09:47:ee:6b:ed:d8:76:c4:6b:c0:b7:dd:d6:e6:99:3c: 3d:98:87:51:38:63:fe:d4:be:a4:52:d8:b4:5c:7f:23:03:6a: 94:32:bd:03:83:15:28:33:4c:34:d0:e7:69:f8:84:58:6f:96: 9d:4e:a7:cc:d4:35:63:eb:b7:a3:52:97:53:b7:4e:59:71:2b: 9e:08:f8:c5:c3:cd:2f:98:80:bb:8a:de:97:01:6d:c7:45:e0: 95:6b:ff:8b:ff:04:f5:08:8a:83:03:bd:f3:3c:23:f2:c2:32: 68:51:6d:7e:aa:33:a1:33:c4:4c:98:b7:c4:f3:80:84:e4:74: 5b:ca:90:68:91:90:45:2e:15:b6:ae:03:48:f6:db:0a:85:3f: 2d:ce:26:03:ed:40:cd:8d:36:b0:53:cf:18:c5:f5:f8:e7:94: da:c8:c5:3c:b9:65:ca:52:7a:ad:0f:4c:04:83:7e:b3:f1:d4: 58:da:81:01:da:28:f0:42:d0:71:53:ed:bf:08:53:8f:cb:88: 17:47:a8:ba:5d:92:72:08:d1:da:77:94:9e:47:5b:b5:13:50: 7f:7c:bb:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WF0DOOm2mIHqhGMiDvciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj ZjRhOTcwHhcNMjUxMjE5MTYwMTM2WhcNMjUxMjIwMTYwMTM2WjAzMTEwLwYDVQQD EyhhMDhiYTZlMTdmMjhiNmIxNDBjYzVhODBhNGU4NDNhZWMyZjc0M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06V/o6jyT5mjWXHK5NeAPt5KcVVK 7d2wiFFkYoJAmW2LZzIrLxvioXN5zL1sAGPNXkUIg64wFwUKmArTUH8tseJ1v8S3 JFHV9bVkOvvhumxndQMkmHQHVQUCmFlPcNVlrAT5u8WC6uwaH1WWlw86w6KcDsqk lnWRhGvL7F9XTfteXkjeQgAydn9amR4W7w0+Fet/J1yJSzwLUtFWuDuF+aqbVIit wEBlFUG44xruWh6zaKfU0QQlS/yU1I1JvpRe55FIj/bXSIOaAfB9MA5HZEnUC1+2 mUsoy4+5jwxUhYFeJg+DQBUILk1kdYdmoZagArAyAml9ly1XzlQjvFlGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCLpuF/KLaxQMxagKToQ67C90PXMB8GA1UdIwQY MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt MGJmNTM5YjNiNzE0LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0 LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrINgAqw l5A9EeDdyQCnJTPrl/A038ktWsYdvlZbOtwdH02X100JR+5r7dh2xGvAt93W5pk8 PZiHUThj/tS+pFLYtFx/IwNqlDK9A4MVKDNMNNDnafiEWG+WnU6nzNQ1Y+u3o1KX U7dOWXErngj4xcPNL5iAu4relwFtx0XglWv/i/8E9QiKgwO98zwj8sIyaFFtfqoz oTPETJi3xPOAhOR0W8qQaJGQRS4Vtq4DSPbbCoU/Lc4mA+1AzY02sFPPGMX1+OeU 2sjFPLllylJ6rQ9MBIN+s/HUWNqBAdoo8ELQcVPtvwhTj8uIF0eoul2ScgjR2neU nkdbtRNQf3y75g== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:05 2025 by rpki-client