This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json) Hash identifier: 9Wr4eHYgalwfegabg0qS1k6H70kRChJ6qiRFcAaI1r4= Subject key identifier: 77:3E:7A:A4:49:FD:BA:3F:C5:9E:ED:08:30:4A:46:8B:CF:F2:41:A1 Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Certificate serial: 019B2C9D4C04B8F002AA175A3CC1FE9EDE52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 14:01:04 +0000 Manifest this update: Wed 17 Dec 2025 14:01:04 +0000 Manifest next update: Thu 18 Dec 2025 14:01:04 +0000 Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: 6PBO1B9XSFrcylEKI/Zvi6/EvlSNVvHsurMj4jPIMYA=) 2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:4c:04:b8:f0:02:aa:17:5a:3c:c1:fe:9e:de:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Validity Not Before: Dec 17 14:01:04 2025 GMT Not After : Dec 18 14:01:04 2025 GMT Subject: CN=773e7aa449fdba3fc59eed08304a468bcff241a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:71:fa:e0:d6:57:db:8c:84:4f:ca:c8:2f: a5:da:3a:64:7a:b6:50:f9:a0:5d:67:a6:f3:6b:4d: d3:1d:fd:b6:8d:0d:53:12:85:33:03:ed:e5:34:a1: c5:60:c6:cf:c2:e6:94:cf:af:f4:b7:d4:e4:24:ea: 09:3e:71:6d:e2:6b:79:2e:ee:35:75:35:d2:2b:ce: 00:00:d7:85:2e:aa:15:3a:02:2e:59:12:91:5a:54: 81:b1:a2:d3:31:16:a6:76:ae:7f:9f:3f:f1:bf:9c: 5e:1c:49:14:f8:85:b6:9c:26:35:26:ad:8f:0e:d4: a5:50:f8:55:60:be:97:61:62:34:da:76:1b:11:8d: 1e:aa:b3:c0:21:8e:b6:9a:ec:32:06:be:c4:85:15: 58:c0:34:e5:7c:11:dd:af:9e:22:53:43:d3:0c:87: 4f:f4:6b:83:ed:bf:6c:45:ca:f0:39:1b:65:36:85: a9:f8:50:a1:c3:dc:ad:55:97:71:af:48:c7:d3:f5: ad:01:29:ba:f0:5e:55:e1:55:89:23:36:41:9f:7a: a9:1c:31:22:af:16:e9:33:d1:dd:87:71:28:f5:39: 41:f0:65:17:6c:5d:5c:63:24:9b:39:d8:f6:b4:80: d0:c6:36:1b:34:4f:af:4c:8b:aa:38:dd:f3:a9:a6: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:7A:A4:49:FD:BA:3F:C5:9E:ED:08:30:4A:46:8B:CF:F2:41:A1 X509v3 Authority Key Identifier: keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:44:8c:60:55:81:70:4d:36:ea:62:59:4e:10:77:52:dc:17: 09:6e:1c:83:c9:12:a1:06:48:d9:85:8d:0a:dd:b0:a9:0d:6c: 3a:0a:d1:13:94:55:08:d9:5a:6d:db:35:6a:d0:93:01:34:9a: ef:cf:cd:cf:cb:12:cb:35:6a:03:1b:a6:7e:2e:29:81:28:1c: b4:e3:ea:18:6b:18:35:0b:2b:bb:66:78:c0:c4:9b:66:1e:f4: 59:cb:63:50:ef:90:19:52:f0:a5:e1:47:22:0f:58:31:fd:1d: c8:a2:7e:84:8b:67:c5:b0:59:3f:b4:fc:8a:f0:e6:90:ea:94: 28:92:62:62:c4:2c:30:fd:59:0a:36:1d:4e:3a:02:1f:9c:3a: dd:eb:ea:06:2a:09:10:71:ac:e8:f8:56:03:c3:60:4a:af:ff: f8:0f:58:83:2c:9f:88:20:ee:ae:6b:73:00:ce:77:44:7c:b5: d1:6e:14:17:72:3c:92:82:bb:9a:98:02:33:1c:7f:0c:37:e6: e0:af:ea:81:4f:30:6e:b8:a8:2a:13:0f:ab:d2:82:a9:47:e5: 1e:62:1b:46:63:4b:5b:3a:a1:59:c7:0b:99:04:d7:64:5b:dd: 3c:b5:3c:fd:1d:c3:3d:2c:29:e9:26:e1:28:e8:85:ca:10:35: eb:8f:51:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnUwEuPACqhdaPMH+nt5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDhkNWJmMDFiMGUyOTViZDA4ODVmYzVjNGRmODI3NTQz ODIyZWQwHhcNMjUxMjE3MTQwMTA0WhcNMjUxMjE4MTQwMTA0WjAzMTEwLwYDVQQD Eyg3NzNlN2FhNDQ5ZmRiYTNmYzU5ZWVkMDgzMDRhNDY4YmNmZjI0MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtx+uDWV9uMhE/KyC+l2jpkerZQ +aBdZ6bza03THf22jQ1TEoUzA+3lNKHFYMbPwuaUz6/0t9TkJOoJPnFt4mt5Lu41 dTXSK84AANeFLqoVOgIuWRKRWlSBsaLTMRamdq5/nz/xv5xeHEkU+IW2nCY1Jq2P DtSlUPhVYL6XYWI02nYbEY0eqrPAIY62muwyBr7EhRVYwDTlfBHdr54iU0PTDIdP 9GuD7b9sRcrwORtlNoWp+FChw9ytVZdxr0jH0/WtASm68F5V4VWJIzZBn3qpHDEi rxbpM9Hdh3Eo9TlB8GUXbF1cYySbOdj2tIDQxjYbNE+vTIuqON3zqaZizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc+eqRJ/bo/xZ7tCDBKRovP8kGhMB8GA1UdIwQY MBaAFOJI1b8BsOKVvQiF/FxN+CdUOCLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMt YTAwYjU3MTNjNmFhLzEvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMtYTAwYjU3MTNjNmFh LzEvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeESMYFWB cE026mJZThB3UtwXCW4cg8kSoQZI2YWNCt2wqQ1sOgrRE5RVCNlabds1atCTATSa 78/Nz8sSyzVqAxumfi4pgSgctOPqGGsYNQsru2Z4wMSbZh70WctjUO+QGVLwpeFH Ig9YMf0dyKJ+hItnxbBZP7T8ivDmkOqUKJJiYsQsMP1ZCjYdTjoCH5w63evqBioJ EHGs6PhWA8NgSq//+A9YgyyfiCDurmtzAM53RHy10W4UF3I8koK7mpgCMxx/DDfm 4K/qgU8wbrioKhMPq9KCqUflHmIbRmNLWzqhWccLmQTXZFvdPLU8/R3DPSwp6Sbh KOiFyhA1649Rsg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:27 2025 by rpki-client