This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json) Hash identifier: fpaKk6EbZqI35vCqjlW0qkNcW4eg55RgSlnOF0M5xO0= Subject key identifier: C7:65:71:DB:DA:B1:FF:16:77:CC:89:87:9F:BE:73:33:83:D1:90:8C Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad Certificate serial: 019B59AD0E014E34312C2D5565194F0ED1B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft Manifest number: 0894 Signing time: Fri 26 Dec 2025 08:01:12 +0000 Manifest this update: Fri 26 Dec 2025 08:01:12 +0000 Manifest next update: Sat 27 Dec 2025 08:01:12 +0000 Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: GbsuqAl3law5IYRjDfXRXqiDiMpacy5wB6OiMmpzPDw=) 2: xDa2Pz3B2wJL0zsTAMbvnocyPXU.roa (hash: 19U6IHM0vI18XeQ16uR+0FI1EeWINNJvH4VpJNwKK8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:0e:01:4e:34:31:2c:2d:55:65:19:4f:0e:d1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad Validity Not Before: Dec 26 08:01:12 2025 GMT Not After : Dec 27 08:01:12 2025 GMT Subject: CN=c76571dbdab1ff1677cc89879fbe733383d1908c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:21:9b:d8:32:42:b5:3c:d9:ee:04:95:ce: e7:33:61:c7:90:fb:f1:41:6b:a0:85:d8:89:f7:af: 64:e8:89:a7:b7:a0:7e:31:22:b6:7e:e4:1e:f6:8e: 9c:ce:d0:23:05:7a:ab:12:01:2d:51:25:bc:6b:d6: 85:e4:d5:8d:79:74:48:a6:89:f7:88:76:12:cc:07: 53:b8:d7:6e:82:31:5f:fa:62:36:c4:95:75:39:92: dd:92:d9:38:fb:e0:89:63:39:08:92:58:f1:ab:5d: 4e:cd:cd:38:a1:28:40:c1:b4:5d:0e:93:9d:24:b1: 89:1d:9e:2d:2e:c4:b8:83:a2:f9:13:cb:70:ae:50: 20:4b:e8:43:c8:b4:e9:55:42:d2:01:5b:74:85:0f: fd:ce:8e:06:f7:fa:37:35:9b:ff:49:46:2e:5a:b1: 14:60:19:38:91:45:0e:37:1e:29:f4:08:0b:7d:6a: 31:6e:75:01:cb:4b:d1:86:a6:ff:0b:bf:90:d2:38: 73:07:96:2a:b4:6d:2f:93:7b:1c:67:78:ce:87:b4: 2c:bb:9b:78:d6:3c:29:6f:14:8c:4c:84:12:ed:1b: 4c:6c:4a:ec:fc:95:81:57:45:77:db:af:c4:b9:0a: d2:44:48:fd:11:e6:4d:2f:a2:eb:4d:c4:85:0b:f9: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:71:DB:DA:B1:FF:16:77:CC:89:87:9F:BE:73:33:83:D1:90:8C X509v3 Authority Key Identifier: keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:47:af:2f:37:0f:74:c2:50:4e:5e:87:a4:0e:38:9a:ad:9c: 2a:21:c9:a0:f4:36:90:ea:c0:bc:4f:83:d7:fe:2b:86:77:34: 49:25:55:f1:1c:c4:c9:b2:db:5d:41:04:e4:68:11:ce:27:25: 91:4a:c1:e1:4b:90:fc:c0:26:1d:c2:45:69:e0:60:f7:b4:af: 3d:6b:1a:56:0f:72:48:1e:a2:ab:50:12:da:32:b5:7b:f6:7c: 2f:b0:29:da:1d:c2:e0:f4:e7:22:4d:01:ed:e1:4c:01:92:c5: 62:fa:4a:7f:66:bf:9b:8d:be:45:e3:47:af:22:b9:4c:c1:50: cf:98:1a:cc:77:df:e9:2a:cf:f9:24:21:88:17:46:32:b6:7c: 26:46:b4:7d:e0:f4:09:14:16:83:87:ac:07:6e:13:04:28:aa: 16:f7:e3:85:85:79:41:9a:3a:15:39:28:b6:d3:9e:64:50:14: ad:4c:58:ef:4d:05:bc:b7:bf:d4:00:01:68:87:81:5d:1f:37: 58:de:e2:54:cf:e3:94:39:5d:ee:dd:f0:5d:3b:f8:18:51:20: d7:ff:63:0d:f6:c7:fa:dc:e4:b4:53:4b:fb:88:08:17:0e:1e: dd:23:d7:a4:09:4f:d7:fe:0d:1b:78:2d:33:26:f8:1f:bd:fc: fb:59:44:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQ4BTjQxLC1VZRlPDtGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz ZWFkYWQwHhcNMjUxMjI2MDgwMTEyWhcNMjUxMjI3MDgwMTEyWjAzMTEwLwYDVQQD EyhjNzY1NzFkYmRhYjFmZjE2NzdjYzg5ODc5ZmJlNzMzMzgzZDE5MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Qhm9gyQrU82e4Elc7nM2HHkPvx QWughdiJ969k6Imnt6B+MSK2fuQe9o6cztAjBXqrEgEtUSW8a9aF5NWNeXRIpon3 iHYSzAdTuNdugjFf+mI2xJV1OZLdktk4++CJYzkIkljxq11Ozc04oShAwbRdDpOd JLGJHZ4tLsS4g6L5E8twrlAgS+hDyLTpVULSAVt0hQ/9zo4G9/o3NZv/SUYuWrEU YBk4kUUONx4p9AgLfWoxbnUBy0vRhqb/C7+Q0jhzB5YqtG0vk3scZ3jOh7Qsu5t4 1jwpbxSMTIQS7RtMbErs/JWBV0V326/EuQrSREj9EeZNL6LrTcSFC/m/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdlcdvasf8Wd8yJh5++czOD0ZCMMB8GA1UdIwQY MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt M2U2NjBkMDI1MmRiLzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekevLzcP dMJQTl6HpA44mq2cKiHJoPQ2kOrAvE+D1/4rhnc0SSVV8RzEybLbXUEE5GgRzicl kUrB4UuQ/MAmHcJFaeBg97SvPWsaVg9ySB6iq1AS2jK1e/Z8L7Ap2h3C4PTnIk0B 7eFMAZLFYvpKf2a/m42+ReNHryK5TMFQz5gazHff6SrP+SQhiBdGMrZ8Jka0feD0 CRQWg4esB24TBCiqFvfjhYV5QZo6FTkottOeZFAUrUxY700FvLe/1AABaIeBXR83 WN7iVM/jlDld7t3wXTv4GFEg1/9jDfbH+tzktFNL+4gIFw4e3SPXpAlP1/4NG3gt Myb4H738+1lESw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:01 2025 by rpki-client