This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json) Hash identifier: 24m54QJFFUroLunEynGVaBDQ9D9a/CRGlvzrQrUREB4= Subject key identifier: 78:85:FB:59:EB:A9:19:AF:68:15:EE:4D:4B:27:2F:09:7B:8D:0B:28 Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d Certificate serial: 019B3A90026BAB8BDEAD8CBF306FE2DDE4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft Manifest number: 0406 Signing time: Sat 20 Dec 2025 07:01:14 +0000 Manifest this update: Sat 20 Dec 2025 07:01:14 +0000 Manifest next update: Sun 21 Dec 2025 07:01:14 +0000 Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: NXjoozP5v0QoTnhEIb5XrpiZ7JlyvU3uKz+m30Hg8yM=) 2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:02:6b:ab:8b:de:ad:8c:bf:30:6f:e2:dd:e4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d Validity Not Before: Dec 20 07:01:14 2025 GMT Not After : Dec 21 07:01:14 2025 GMT Subject: CN=7885fb59eba919af6815ee4d4b272f097b8d0b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:97:e5:be:e1:bf:4d:e5:ed:15:f2:c5:ef: bb:48:75:2d:de:b8:4d:27:d2:d1:58:b8:f3:34:b3: b9:14:f9:97:b6:ff:c6:84:b6:c1:55:a0:9c:d0:fd: 55:45:32:2b:8a:88:2a:84:b9:32:25:9e:2f:84:06: a8:10:e1:3c:96:75:93:5d:d1:26:2f:47:b9:cc:78: 99:03:86:ff:6d:9a:26:97:f9:1c:e9:59:ee:e2:13: c4:d6:41:7d:af:88:65:e7:ee:9f:a1:63:98:d1:a2: 25:51:28:08:21:bf:51:6c:d5:24:aa:87:8d:5e:62: 44:62:ec:86:b4:2a:2c:ae:f9:63:8b:2d:9b:56:a7: d2:b4:5b:de:3f:0e:08:eb:24:c7:bf:be:4b:9a:6a: 13:ce:64:3c:38:bb:44:b0:80:64:8a:b9:a9:b1:17: f8:e6:0f:51:a4:12:cc:79:ae:c8:23:f5:3b:1f:56: 20:f9:86:fe:e7:23:c5:95:9c:a0:ad:2f:40:b7:8b: f0:8f:c9:2e:92:58:d2:8a:16:e3:65:7a:98:80:16: 53:33:2c:d0:9d:13:0d:49:29:84:be:fd:e7:79:30: d5:66:9c:99:3b:c4:09:34:e8:a0:9b:6b:41:95:29: b5:ad:5d:bb:24:67:bc:95:6b:78:27:ec:c9:0f:e7: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:FB:59:EB:A9:19:AF:68:15:EE:4D:4B:27:2F:09:7B:8D:0B:28 X509v3 Authority Key Identifier: keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9a:c7:44:c2:ea:f0:19:47:d4:c0:09:e2:e8:b8:33:c3:cc: 32:96:be:ff:f6:d4:a5:e7:24:dc:56:47:2f:6e:60:73:56:85: 5e:02:f0:22:02:13:b8:a8:58:eb:dc:78:12:04:12:86:c7:04: 24:46:46:03:e9:af:59:db:77:df:57:66:2d:f9:e4:ba:d0:b2: ca:06:4c:cc:b2:71:b0:43:c9:d8:2a:a7:36:99:9b:ba:0e:00: e2:26:d3:fe:d4:d9:2e:61:d9:48:15:49:ab:c4:2a:fd:84:79: 72:f8:38:7a:72:f2:4c:d6:09:c0:9e:2d:19:c6:26:b1:b2:77: 80:d6:7e:90:65:ba:36:ff:46:d4:8f:5d:6b:e1:87:d5:c9:af: 9b:79:65:75:c2:a8:88:60:28:51:37:01:9d:94:be:bf:e0:ab: 87:d7:0d:23:fc:7a:0b:00:a5:75:a2:cf:ff:58:ac:9c:7b:38: cc:a9:d7:fd:4d:86:bb:f7:ef:81:2b:17:90:8a:0d:41:81:7a: cc:ba:49:1a:2f:6a:cc:21:85:dd:f2:18:63:ae:74:90:fd:b8: 2d:42:d1:ac:fc:36:ea:d9:93:bf:91:ab:bd:25:ce:c8:9b:1f: 89:0c:ae:4c:d7:70:5d:73:c5:eb:b6:2c:43:7f:c4:46:90:0c: d8:b8:99:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kAJrq4verYy/MG/i3eTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2Y4ZjVjNTI0MjVkZjYyYjQ0NDU0MzNhYWNmZDhjYTVi ZjJlOWQwHhcNMjUxMjIwMDcwMTE0WhcNMjUxMjIxMDcwMTE0WjAzMTEwLwYDVQQD Eyg3ODg1ZmI1OWViYTkxOWFmNjgxNWVlNGQ0YjI3MmYwOTdiOGQwYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06aX5b7hv03l7RXyxe+7SHUt3rhN J9LRWLjzNLO5FPmXtv/GhLbBVaCc0P1VRTIriogqhLkyJZ4vhAaoEOE8lnWTXdEm L0e5zHiZA4b/bZoml/kc6Vnu4hPE1kF9r4hl5+6foWOY0aIlUSgIIb9RbNUkqoeN XmJEYuyGtCosrvljiy2bVqfStFvePw4I6yTHv75LmmoTzmQ8OLtEsIBkirmpsRf4 5g9RpBLMea7II/U7H1Yg+Yb+5yPFlZygrS9At4vwj8kukljSihbjZXqYgBZTMyzQ nRMNSSmEvv3neTDVZpyZO8QJNOigm2tBlSm1rV27JGe8lWt4J+zJD+dASQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiF+1nrqRmvaBXuTUsnLwl7jQsoMB8GA1UdIwQY MBaAFOI/j1xSQl32K0RFQzqs/Yylvy6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGotUFhGSkNYZllyUkVWRE9xejlqS1dfTHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84ZjhlODQtZmYzNS00OWJlLThmYTIt YjZiNzQ4MWJlYzllLzEvNGotUFhGSkNYZllyUkVWRE9xejlqS1dfTHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84ZjhlODQtZmYzNS00OWJlLThmYTItYjZiNzQ4MWJlYzll LzEvNGotUFhGSkNYZllyUkVWRE9xejlqS1dfTHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZrHRMLq 8BlH1MAJ4ui4M8PMMpa+//bUpeck3FZHL25gc1aFXgLwIgITuKhY69x4EgQShscE JEZGA+mvWdt331dmLfnkutCyygZMzLJxsEPJ2CqnNpmbug4A4ibT/tTZLmHZSBVJ q8Qq/YR5cvg4enLyTNYJwJ4tGcYmsbJ3gNZ+kGW6Nv9G1I9da+GH1cmvm3lldcKo iGAoUTcBnZS+v+Crh9cNI/x6CwCldaLP/1isnHs4zKnX/U2Gu/fvgSsXkIoNQYF6 zLpJGi9qzCGF3fIYY650kP24LULRrPw26tmTv5GrvSXOyJsfiQyuTNdwXXPF67Ys Q3/ERpAM2LiZ6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:24 2025 by rpki-client