This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json) Hash identifier: 5MZ2an2BegV/K3Xg8ex/Pqj+BCTnvcOAVowoA1DQKrg= Subject key identifier: 71:87:F6:88:93:34:B1:BB:EA:B0:9D:F2:35:40:37:21:1E:C9:10:07 Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c Certificate serial: 019B39EB1DEC821F861DFF8BC5DADE62C55B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft Manifest number: 1557 Signing time: Sat 20 Dec 2025 04:01:08 +0000 Manifest this update: Sat 20 Dec 2025 04:01:08 +0000 Manifest next update: Sun 21 Dec 2025 04:01:08 +0000 Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: qdJaPFUtWUa9N0ckCtRbhhSri6xWMFdDOo3+Pj+EOBo=) 2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1d:ec:82:1f:86:1d:ff:8b:c5:da:de:62:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c Validity Not Before: Dec 20 04:01:08 2025 GMT Not After : Dec 21 04:01:08 2025 GMT Subject: CN=7187f6889334b1bbeab09df2354037211ec91007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:50:9f:73:78:d2:15:70:a4:b8:24:e4:3a: 37:fb:7a:ac:f5:b9:d9:6d:9f:55:1c:4f:66:20:24: 43:fa:db:60:45:0d:53:75:c3:d1:66:55:3d:aa:7d: 92:1b:2f:40:99:87:6c:ae:a3:c4:08:3e:a9:71:80: b0:37:71:d8:ea:27:35:18:ad:1b:94:20:99:a8:37: dd:96:ef:6e:e9:d9:f4:63:3f:81:34:54:2c:a3:01: 97:29:55:e1:8f:d1:4a:db:e2:5d:e8:42:c6:7e:5e: 37:11:74:da:ee:b8:12:c8:a4:b4:d4:3c:58:f6:06: 47:e1:51:9f:49:8b:43:8f:e0:23:af:63:4c:e0:c4: 04:d3:db:3f:44:54:61:64:eb:1c:31:4b:6c:7c:3e: d4:24:88:f1:5a:d6:71:2f:e0:bd:b4:15:f3:59:b1: 79:de:fe:00:33:83:98:ec:18:7b:c0:89:06:6d:6e: e0:60:67:1d:fb:64:76:c2:5c:76:37:df:a3:eb:42: c9:f8:e3:ff:bf:fd:6a:81:b2:29:ea:26:16:fd:9b: ca:19:3b:4d:42:51:8d:e9:ac:2c:69:8e:c3:fc:9b: e0:7d:c2:ef:2e:62:e4:3f:61:25:22:88:ca:24:19: 7c:16:6b:e2:e6:72:a0:4f:3a:1e:e7:73:9c:cc:73: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:F6:88:93:34:B1:BB:EA:B0:9D:F2:35:40:37:21:1E:C9:10:07 X509v3 Authority Key Identifier: keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:32:e6:32:a2:dd:96:8c:02:fc:b3:f7:92:29:12:ff:ea:7c: d9:5d:39:ea:09:5f:af:aa:5a:97:59:97:31:4a:5c:4c:e3:82: fb:df:ee:14:29:46:3f:3a:54:03:3d:f2:77:ef:77:03:c1:cb: 0b:fd:cf:74:bc:ed:4a:9c:89:e3:10:6d:a4:9d:4e:c6:37:7b: 4b:fc:c9:fb:76:e9:c8:74:27:b9:bd:e1:d6:b9:4d:ad:2d:b7: 80:92:97:6f:41:7a:be:4c:79:5f:27:e9:92:b6:9b:6e:cb:e7: 7b:1c:11:bd:38:ff:8a:00:75:2b:79:d2:18:60:8c:54:b5:8b: 3b:e8:3c:61:11:f4:22:08:57:e8:0f:b2:6b:80:07:a2:9a:1a: a7:0b:76:66:81:fd:73:0a:ff:0d:bb:53:d2:57:3b:e7:05:0d: f7:8a:4e:46:f7:7f:c7:2e:f0:2c:4f:ff:b3:57:5e:c3:79:a9: c0:d6:7d:90:8d:17:dd:b1:86:8f:e3:33:74:85:9c:73:d3:da: 44:8e:51:76:51:03:1f:75:3b:d8:e8:a7:e0:49:67:3f:8b:70: f0:49:3e:f7:12:fb:d3:c9:70:0f:e7:77:02:a6:c4:66:e9:61: 85:58:27:39:5b:30:69:d9:ba:69:b4:59:5c:80:5d:f6:ec:39: 73:5c:5b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56x3sgh+GHf+LxdreYsVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm ZDgzMWMwHhcNMjUxMjIwMDQwMTA4WhcNMjUxMjIxMDQwMTA4WjAzMTEwLwYDVQQD Eyg3MTg3ZjY4ODkzMzRiMWJiZWFiMDlkZjIzNTQwMzcyMTFlYzkxMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlVQn3N40hVwpLgk5Do3+3qs9bnZ bZ9VHE9mICRD+ttgRQ1TdcPRZlU9qn2SGy9AmYdsrqPECD6pcYCwN3HY6ic1GK0b lCCZqDfdlu9u6dn0Yz+BNFQsowGXKVXhj9FK2+Jd6ELGfl43EXTa7rgSyKS01DxY 9gZH4VGfSYtDj+Ajr2NM4MQE09s/RFRhZOscMUtsfD7UJIjxWtZxL+C9tBXzWbF5 3v4AM4OY7Bh7wIkGbW7gYGcd+2R2wlx2N9+j60LJ+OP/v/1qgbIp6iYW/ZvKGTtN QlGN6awsaY7D/JvgfcLvLmLkP2ElIojKJBl8Fmvi5nKgTzoe53OczHPcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGH9oiTNLG76rCd8jVANyEeyRAHMB8GA1UdIwQY MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzLmMqLd lowC/LP3kikS/+p82V056glfr6pal1mXMUpcTOOC+9/uFClGPzpUAz3yd+93A8HL C/3PdLztSpyJ4xBtpJ1Oxjd7S/zJ+3bpyHQnub3h1rlNrS23gJKXb0F6vkx5Xyfp krabbsvnexwRvTj/igB1K3nSGGCMVLWLO+g8YRH0IghX6A+ya4AHopoapwt2ZoH9 cwr/DbtT0lc75wUN94pORvd/xy7wLE//s1dew3mpwNZ9kI0X3bGGj+MzdIWcc9Pa RI5RdlEDH3U72Oin4ElnP4tw8Ek+9xL708lwD+d3AqbEZulhhVgnOVswadm6abRZ XIBd9uw5c1xbNA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:17:44 2025 by rpki-client