This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json) Hash identifier: JmJvzSKub/XE/phwGgCoK1Rsl0WyVnD30qrjJudCEPw= Subject key identifier: 99:C8:7F:14:A2:02:ED:D4:37:2E:66:92:90:7F:6C:FD:F6:2D:E8:37 Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9 Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9 Certificate serial: 019B427FEAE6F7057A016E70FDF57440C658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 20:00:37 +0000 Manifest this update: Sun 21 Dec 2025 20:00:37 +0000 Manifest next update: Mon 22 Dec 2025 20:00:37 +0000 Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: 82ytHiEvsjdd9LohvuUkOGvihyCFWjQmbsjBJCpKF+0=) 2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:ea:e6:f7:05:7a:01:6e:70:fd:f5:74:40:c6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9 Validity Not Before: Dec 21 20:00:37 2025 GMT Not After : Dec 22 20:00:37 2025 GMT Subject: CN=99c87f14a202edd4372e6692907f6cfdf62de837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:5e:3f:26:c6:0e:69:c4:27:48:37:c9:9b: aa:15:8e:eb:68:f1:8e:40:ca:bb:32:5f:a2:a7:9a: f5:4b:4f:fb:42:4a:2b:7b:eb:d2:23:d2:0c:9b:67: 27:50:c9:df:3f:a9:a3:23:2a:c6:37:d5:ef:ba:a0: dc:9f:83:91:55:a3:f4:78:83:44:75:7e:f6:a8:31: 73:d1:5c:a8:10:77:26:4d:ec:1e:05:31:10:9f:25: b7:58:ba:bd:15:c4:99:f2:bc:3b:3b:12:eb:62:0b: 40:aa:1c:bb:60:39:73:d2:a9:72:8d:b3:f6:32:9d: 8e:be:68:ff:3c:48:e9:b0:8c:92:1f:3b:61:1a:96: 3a:ec:a9:7f:8f:25:b0:66:f2:2d:9e:40:c9:ea:84: db:7f:7d:e6:2f:a4:43:7c:4c:ca:d6:e1:06:8a:ef: f8:13:26:12:16:f8:3f:ff:18:11:8a:f9:ed:87:47: 9e:93:89:d2:6f:f3:7d:4d:bf:26:3d:cc:61:97:97: c1:48:fb:2e:9f:55:52:75:1f:7e:bf:f9:e5:f8:64: d2:5a:31:46:30:23:5f:8c:8b:7d:bc:73:ef:a3:41: e1:78:09:66:5f:e7:68:ab:5a:57:5f:ba:4e:94:ca: 8b:0b:4b:4d:d2:b3:90:f6:36:85:03:83:5d:0b:2e: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C8:7F:14:A2:02:ED:D4:37:2E:66:92:90:7F:6C:FD:F6:2D:E8:37 X509v3 Authority Key Identifier: keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:db:be:d2:4e:fe:7d:a9:0f:7c:7b:1a:59:4c:25:82:7d:b7: 7b:82:cc:a3:38:8a:0b:57:b5:8d:7d:f6:d5:33:9c:a4:47:45: d6:cb:e5:a7:0c:c4:da:44:73:38:be:84:d5:8f:3b:a5:56:3c: 7a:b1:1f:b1:03:e8:9b:68:eb:cc:7e:28:e9:77:0b:99:8f:e9: 83:9d:2f:51:a2:8e:1e:27:52:c6:6f:65:9d:37:f0:d3:dd:8f: 4d:16:35:99:13:a3:6c:56:4f:08:08:a7:4b:76:01:8e:77:14: ef:8d:41:4f:04:18:01:e1:57:0d:e6:53:14:83:63:58:18:6b: 61:b9:57:03:40:06:a8:cd:81:88:24:88:9f:79:ca:9c:ce:c9: 1c:06:3d:8f:0d:43:e5:26:38:0c:e9:c7:60:e4:36:2b:e2:03: a9:6e:ff:4a:9e:c2:17:2b:cb:b8:ff:44:46:1a:a0:ab:ef:2c: 04:9f:32:be:bf:02:38:8c:3f:8c:c0:de:8d:ba:34:d5:a0:22: f7:7c:8d:5e:be:5a:03:68:94:6f:f4:83:81:2e:26:ff:93:13: 55:f8:e6:1d:3a:ad:fc:7f:ab:4d:5c:7a:29:8b:db:a3:f0:1b: ab:d0:70:7b:00:84:3c:24:c0:36:2c:72:d9:5c:7b:00:2e:f8: 89:b3:cb:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+rm9wV6AW5w/fV0QMZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjQ0NWIwMGE4NjAwYjgzMzRjMWQzYWFkZjFlZjcxOTE0 ZTY4YzkwHhcNMjUxMjIxMjAwMDM3WhcNMjUxMjIyMjAwMDM3WjAzMTEwLwYDVQQD Eyg5OWM4N2YxNGEyMDJlZGQ0MzcyZTY2OTI5MDdmNmNmZGY2MmRlODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEdePybGDmnEJ0g3yZuqFY7raPGO QMq7Ml+ip5r1S0/7Qkore+vSI9IMm2cnUMnfP6mjIyrGN9XvuqDcn4ORVaP0eINE dX72qDFz0VyoEHcmTeweBTEQnyW3WLq9FcSZ8rw7OxLrYgtAqhy7YDlz0qlyjbP2 Mp2Ovmj/PEjpsIySHzthGpY67Kl/jyWwZvItnkDJ6oTbf33mL6RDfEzK1uEGiu/4 EyYSFvg//xgRivnth0eek4nSb/N9Tb8mPcxhl5fBSPsun1VSdR9+v/nl+GTSWjFG MCNfjIt9vHPvo0HheAlmX+doq1pXX7pOlMqLC0tN0rOQ9jaFA4NdCy61pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnIfxSiAu3UNy5mkpB/bP32Leg3MB8GA1UdIwQY MBaAFOK0RbAKhgC4M0wdOq3x73GRTmjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgt ZDgzOTNlMTg1NzMyLzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgtZDgzOTNlMTg1NzMy LzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotu+0k7+ fakPfHsaWUwlgn23e4LMoziKC1e1jX321TOcpEdF1svlpwzE2kRzOL6E1Y87pVY8 erEfsQPom2jrzH4o6XcLmY/pg50vUaKOHidSxm9lnTfw092PTRY1mROjbFZPCAin S3YBjncU741BTwQYAeFXDeZTFINjWBhrYblXA0AGqM2BiCSIn3nKnM7JHAY9jw1D 5SY4DOnHYOQ2K+IDqW7/Sp7CFyvLuP9ERhqgq+8sBJ8yvr8COIw/jMDejbo01aAi 93yNXr5aA2iUb/SDgS4m/5MTVfjmHTqt/H+rTVx6KYvbo/Abq9BwewCEPCTANixy 2Vx7AC74ibPLYw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:14:29 2025 by rpki-client