This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json) Hash identifier: JHWc7h7nRD/5GEMUoyi2c1q0xbrup+1p86f3OqFyKMg= Subject key identifier: EC:35:91:FC:57:E9:F3:FB:71:55:F7:D2:77:86:D2:B0:92:4F:43:2C Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Certificate serial: 019B0E9373DDE04F874E2AC95B6589FCA259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 18:01:42 +0000 Manifest this update: Thu 11 Dec 2025 18:01:42 +0000 Manifest next update: Fri 12 Dec 2025 18:01:42 +0000 Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: FV2ImooeGdH/GWsnCocM6hlx9EiYjiV2KqKV1EwAmSY=) 2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:73:dd:e0:4f:87:4e:2a:c9:5b:65:89:fc:a2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Validity Not Before: Dec 11 18:01:42 2025 GMT Not After : Dec 12 18:01:42 2025 GMT Subject: CN=ec3591fc57e9f3fb7155f7d27786d2b0924f432c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:e5:08:c2:39:01:e9:c5:c8:34:ec:85:8e: 9a:9b:da:5e:42:40:44:e1:1f:39:c7:ee:20:43:94: a7:bf:1b:84:27:d0:20:b8:15:87:1e:a0:3f:4a:64: e0:f0:b3:f3:c9:b3:f8:bc:5b:b9:6c:29:f1:b5:11: 2c:28:52:a4:e0:31:16:2c:5c:35:c7:6b:12:95:d1: fa:b6:c3:bf:9e:c6:81:cb:4d:bd:09:ff:23:ca:6a: 3e:e2:61:ef:98:12:69:98:a9:86:22:e8:91:ea:57: 07:62:00:a5:35:32:be:51:95:96:20:01:9e:31:e4: 64:8d:06:c6:93:34:0d:43:43:50:ac:b2:4a:25:97: f7:6c:d4:08:4f:81:32:2b:e3:9f:7e:82:24:32:7b: c1:5e:68:3c:e4:f2:2a:6d:fa:01:d1:45:13:bd:73: 62:fd:e2:18:cc:aa:5c:b2:57:68:7f:12:db:7e:7d: 3e:f1:ff:c8:08:0d:9f:63:06:2c:66:fe:c2:fd:f3: 7c:ca:74:82:9c:ee:f6:cd:00:10:fd:87:33:90:d3: 9c:4e:86:41:9f:9a:b2:f0:dd:11:0f:d2:3b:13:f0: 6e:46:cc:7f:85:de:d6:a1:73:6a:d0:c4:fa:1a:ac: 55:5c:25:f1:bc:d6:3b:2f:2c:08:8d:40:9c:05:6b: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:35:91:FC:57:E9:F3:FB:71:55:F7:D2:77:86:D2:B0:92:4F:43:2C X509v3 Authority Key Identifier: keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:75:a5:98:be:34:ba:e4:70:3e:6b:70:7e:e2:be:25:0c: f9:8e:ba:01:ba:e1:d8:ee:34:da:ec:e8:ca:88:fe:2c:45:04: e6:ae:a6:8d:ab:39:05:87:92:af:9f:c8:4b:45:79:e0:b8:01: b1:69:71:bf:8d:9a:39:ce:fd:56:e4:36:ec:7f:fe:43:85:7d: 81:38:07:3a:cb:fc:a4:17:7e:99:de:ce:2f:cb:7d:10:e8:bb: 1b:42:8a:0a:90:76:ff:3e:2d:5e:08:5d:d8:3f:ce:4a:b3:d4: 1f:7c:4d:0f:9d:2e:7b:e8:62:d1:e1:12:c3:c4:a7:ff:ae:8b: 46:c4:4d:e4:f7:6f:62:91:e1:12:6e:34:1b:fd:cb:94:58:6f: c7:cc:6c:82:e5:cb:16:92:ef:b0:3c:72:9e:c9:d8:e2:28:05: 53:6a:47:bd:98:fc:0c:82:3e:b7:72:cf:39:62:6a:dd:cd:fa: 6c:32:68:e3:9b:80:45:bf:f2:ff:d1:e6:b2:16:16:87:ee:b3: 49:0f:ec:eb:fb:54:4f:5a:db:4f:d1:1d:b9:d6:7a:ec:5d:5f: 58:94:1a:33:60:37:e9:ef:15:d1:40:60:e7:f9:c6:67:e5:1f: 6f:f1:4c:ce:8d:6d:35:5a:4b:3b:e5:6a:04:b9:11:16:69:15: 2c:43:a9:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk3Pd4E+HTirJW2WJ/KJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi ODliMmIwHhcNMjUxMjExMTgwMTQyWhcNMjUxMjEyMTgwMTQyWjAzMTEwLwYDVQQD EyhlYzM1OTFmYzU3ZTlmM2ZiNzE1NWY3ZDI3Nzg2ZDJiMDkyNGY0MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtDlCMI5AenFyDTshY6am9peQkBE 4R85x+4gQ5SnvxuEJ9AguBWHHqA/SmTg8LPzybP4vFu5bCnxtREsKFKk4DEWLFw1 x2sSldH6tsO/nsaBy029Cf8jymo+4mHvmBJpmKmGIuiR6lcHYgClNTK+UZWWIAGe MeRkjQbGkzQNQ0NQrLJKJZf3bNQIT4EyK+OffoIkMnvBXmg85PIqbfoB0UUTvXNi /eIYzKpcsldofxLbfn0+8f/ICA2fYwYsZv7C/fN8ynSCnO72zQAQ/YczkNOcToZB n5qy8N0RD9I7E/BuRsx/hd7WoXNq0MT6GqxVXCXxvNY7LywIjUCcBWso+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw1kfxX6fP7cVX30neG0rCST0MsMB8GA1UdIwQY MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt OWE3MmQ5OTAzZWI4LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4 LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsN1pZi+ NLrkcD5rcH7iviUM+Y66Abrh2O402uzoyoj+LEUE5q6mjas5BYeSr5/IS0V54LgB sWlxv42aOc79VuQ27H/+Q4V9gTgHOsv8pBd+md7OL8t9EOi7G0KKCpB2/z4tXghd 2D/OSrPUH3xND50ue+hi0eESw8Sn/66LRsRN5PdvYpHhEm40G/3LlFhvx8xsguXL FpLvsDxynsnY4igFU2pHvZj8DII+t3LPOWJq3c36bDJo45uARb/y/9HmshYWh+6z SQ/s6/tUT1rbT9EdudZ67F1fWJQaM2A36e8V0UBg5/nGZ+Ufb/FMzo1tNVpLO+Vq BLkRFmkVLEOpbQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:25:44 2025 by rpki-client