This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json) Hash identifier: 0JDPja0vPVORTdchyFpphnKRozvco3wsBho9U84tcBc= Subject key identifier: D7:7C:7C:54:41:27:92:A1:12:57:CD:79:BD:09:B4:9B:4C:06:41:33 Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Certificate serial: 019B1A96C12FC1B64CF39878F4342E27F178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft Manifest number: 142F Signing time: Sun 14 Dec 2025 02:00:46 +0000 Manifest this update: Sun 14 Dec 2025 02:00:46 +0000 Manifest next update: Mon 15 Dec 2025 02:00:46 +0000 Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: u4v4mGkL6wga/omg8ktKTKHLQpsBhNVJy2yYJHR/RqU=) 2: i1C2_03VF6U3TLTnhfWa-hdk8nE.roa (hash: 4u0sP/VUO27djDGleUL6lxDzjUMPiLw8ur/+xoa5LIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:c1:2f:c1:b6:4c:f3:98:78:f4:34:2e:27:f1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Validity Not Before: Dec 14 02:00:46 2025 GMT Not After : Dec 15 02:00:46 2025 GMT Subject: CN=d77c7c54412792a11257cd79bd09b49b4c064133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:f5:1a:c7:c0:52:cc:3c:df:04:e6:39:78: 2b:bc:0f:b6:4b:fb:3e:58:18:8f:95:b9:68:6e:e4: e8:a7:92:2b:bd:48:18:6f:2f:aa:1a:55:92:19:34: ab:0d:3c:7d:d8:df:86:b0:c2:f9:89:90:0d:41:04: 92:4d:8f:70:59:d7:59:10:d2:76:0e:8a:95:2f:38: 77:ad:5e:3b:eb:79:ad:a0:b0:9d:9f:dd:fa:6a:a7: f2:0c:7b:f6:ca:ae:4d:27:f2:21:9e:dd:b4:f6:61: 9f:75:2e:ca:49:80:dd:16:ae:ce:f5:2b:09:fa:23: 21:5b:66:4c:38:55:a8:74:40:07:ce:e3:58:36:80: 98:0f:86:39:96:2b:d4:84:92:e4:fb:1a:7d:00:db: f9:0c:e7:e9:70:fc:b9:85:1a:dc:5b:cf:1d:3f:9f: ca:2c:30:3e:dc:50:29:1c:a9:c9:0f:92:72:aa:07: 39:f9:08:d9:71:7c:bb:44:5b:8a:23:e6:da:d4:d3: 2d:0d:41:fe:78:37:cd:fa:c6:ba:08:03:bf:65:1e: 5b:1f:05:48:cf:aa:51:48:7e:a0:a2:05:50:9c:09: 8c:13:f8:c3:16:c6:9a:a2:23:31:4d:65:6c:a0:64: 7a:3e:a5:0a:f2:33:ba:d1:07:fa:92:97:5c:ae:86: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:7C:54:41:27:92:A1:12:57:CD:79:BD:09:B4:9B:4C:06:41:33 X509v3 Authority Key Identifier: keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7f:ff:e8:ca:3c:03:cc:6e:3a:71:84:54:e7:e8:c9:e3:50: c5:4a:09:0d:a0:b6:7d:f7:30:22:81:e9:32:5d:9d:f5:cd:d6: 1e:66:55:ae:4d:d0:e6:89:c3:d3:de:29:e3:f7:85:e3:1f:b9: ea:b3:87:8b:e1:39:8a:09:f5:55:ec:4d:f0:57:26:82:bf:64: 85:f4:81:47:f4:a5:8b:b9:37:1c:54:1d:98:4d:ee:68:d2:5c: fc:c8:83:1d:f9:30:95:ee:fa:70:6f:9b:84:c4:be:fd:74:03: f5:ac:3e:18:ed:76:63:7f:56:c8:7e:ba:96:e4:69:a0:68:cc: eb:da:1d:7f:f5:01:02:74:31:73:c9:51:c9:75:11:fc:92:e4: c3:9f:ea:b9:eb:85:7f:5a:b9:a5:66:a2:79:a4:18:c5:e0:d6: 62:9e:4f:3b:03:0d:98:f9:1b:33:e7:24:d5:43:3f:5e:af:f6: af:26:18:25:cc:67:6d:2e:4a:96:c0:e2:0c:f6:d8:82:3f:87: 5e:ec:ad:a1:7b:f3:59:ca:cc:7e:ca:7f:bb:3a:c8:15:5a:20: 9a:67:e2:a1:60:1d:25:cc:fd:ed:38:ed:fc:ca:bb:f0:54:b4: 40:c5:61:21:93:74:32:11:16:d4:d9:e8:71:81:c1:b5:5a:33: 21:e5:39:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalsEvwbZM85h49DQuJ/F4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk YWU5ZDkwHhcNMjUxMjE0MDIwMDQ2WhcNMjUxMjE1MDIwMDQ2WjAzMTEwLwYDVQQD EyhkNzdjN2M1NDQxMjc5MmExMTI1N2NkNzliZDA5YjQ5YjRjMDY0MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0b1GsfAUsw83wTmOXgrvA+2S/s+ WBiPlblobuTop5IrvUgYby+qGlWSGTSrDTx92N+GsML5iZANQQSSTY9wWddZENJ2 DoqVLzh3rV4763mtoLCdn936aqfyDHv2yq5NJ/Ihnt209mGfdS7KSYDdFq7O9SsJ +iMhW2ZMOFWodEAHzuNYNoCYD4Y5livUhJLk+xp9ANv5DOfpcPy5hRrcW88dP5/K LDA+3FApHKnJD5Jyqgc5+QjZcXy7RFuKI+ba1NMtDUH+eDfN+sa6CAO/ZR5bHwVI z6pRSH6gogVQnAmME/jDFsaaoiMxTWVsoGR6PqUK8jO60Qf6kpdcroaZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd8fFRBJ5KhElfNeb0JtJtMBkEzMB8GA1UdIwQY MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5 LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3//6Mo8 A8xuOnGEVOfoyeNQxUoJDaC2ffcwIoHpMl2d9c3WHmZVrk3Q5onD094p4/eF4x+5 6rOHi+E5ign1VexN8Fcmgr9khfSBR/Sli7k3HFQdmE3uaNJc/MiDHfkwle76cG+b hMS+/XQD9aw+GO12Y39WyH66luRpoGjM69odf/UBAnQxc8lRyXUR/JLkw5/queuF f1q5pWaieaQYxeDWYp5POwMNmPkbM+ck1UM/Xq/2ryYYJcxnbS5KlsDiDPbYgj+H XuytoXvzWcrMfsp/uzrIFVogmmfioWAdJcz97Tjt/Mq78FS0QMVhIZN0MhEW1Nno cYHBtVozIeU5Fw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:37 2025 by rpki-client