This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json) Hash identifier: M7EPC0pjxdjOG6oObvG2DXEtp159S2Ct+bLh//XSSng= Subject key identifier: 23:DB:B7:09:16:35:DA:75:0D:C0:3C:BB:95:F0:ED:82:41:F4:DB:BB Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b Certificate serial: 019B1A978DCA85137A3AB0737DA1D09EBB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft Manifest number: 104F Signing time: Sun 14 Dec 2025 02:01:38 +0000 Manifest this update: Sun 14 Dec 2025 02:01:38 +0000 Manifest next update: Mon 15 Dec 2025 02:01:38 +0000 Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: idEXmIK3/596pK0E/MvoUIuPa6zWaEyMlU67NMdWCHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:8d:ca:85:13:7a:3a:b0:73:7d:a1:d0:9e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b Validity Not Before: Dec 14 02:01:38 2025 GMT Not After : Dec 15 02:01:38 2025 GMT Subject: CN=23dbb7091635da750dc03cbb95f0ed8241f4dbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:8e:02:cb:d0:58:33:2f:b2:52:0d:41:fc: 12:be:44:2b:04:05:c0:f1:b2:cc:41:b4:e4:e4:5d: 91:b7:69:88:6d:46:17:57:dc:b6:c4:a4:50:8e:69: b8:12:1d:43:dc:ed:e6:81:79:b4:f1:e0:c8:e9:b7: cd:0d:7b:78:e4:af:ca:bc:14:32:87:f1:12:bd:e4: 42:82:eb:2d:b9:3a:c6:aa:f3:ee:11:06:bb:28:47: 41:9e:cc:a1:c0:f5:61:4c:6b:b4:1b:88:7b:a3:11: 7b:51:4f:00:96:48:47:df:94:92:65:07:72:85:c2: 95:ff:1b:8e:96:97:80:a7:fd:a5:70:8f:5c:d8:4b: 2e:6a:ec:c4:58:70:fd:24:77:64:c4:a1:ac:d2:5b: 37:bc:53:19:41:ca:8d:6c:65:63:f2:73:bb:eb:c3: 4b:cd:98:87:88:90:dd:f8:98:6e:e4:99:68:c5:38: 7b:be:0c:e3:1d:07:10:1a:91:55:e9:06:27:0a:6d: 14:a4:d8:18:28:b8:da:54:70:46:19:b7:b9:bb:6e: bb:ba:bd:d4:08:6f:b5:78:be:48:09:c0:e0:cc:ce: 40:4b:c4:ac:38:d2:87:aa:59:15:1e:bc:4e:f9:cf: 79:9d:18:ee:00:55:13:c0:07:24:6e:cc:e0:04:21: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:B7:09:16:35:DA:75:0D:C0:3C:BB:95:F0:ED:82:41:F4:DB:BB X509v3 Authority Key Identifier: keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:b2:35:3a:29:90:0e:cf:e4:40:96:b1:2f:c7:f0:da:d2: cc:9d:f2:fc:b6:bd:c5:46:c1:b4:81:c2:fe:3a:df:4b:b0:8d: a8:d0:45:9e:44:71:69:15:50:e5:bf:41:36:57:f1:1e:2a:51: 83:3a:57:1d:c7:d5:33:8f:f1:11:3b:0f:2a:16:6f:ac:72:eb: 14:57:c4:39:4c:df:84:22:dd:4d:2f:1c:52:62:50:5a:ca:d6: f4:39:54:be:ca:a7:76:1e:61:1d:e2:38:2b:63:7f:3d:dc:71: d8:83:a1:63:0d:e3:94:b9:dd:fc:c5:2b:c2:60:82:7b:9b:81: c8:3a:15:52:0d:f0:36:b1:94:0f:ef:18:5f:0b:65:a4:41:2b: 9e:ae:b1:dd:21:89:41:6a:fd:3b:7f:46:72:73:52:fd:53:25: eb:01:9b:90:20:19:e3:a3:aa:50:b1:36:7c:b8:37:e1:19:3f: 24:de:91:4f:49:e1:5a:60:a1:2a:8a:0c:cd:1c:60:0c:52:1f: 37:a0:85:7f:09:fd:ef:f6:52:14:b9:7e:70:48:c4:be:bb:06: 42:62:15:51:67:78:72:74:95:3b:de:c0:cd:98:33:e8:6c:63: c0:94:d4:34:c9:b6:45:f4:03:5e:f4:95:22:d6:40:06:55:07: f5:9f:86:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal43KhRN6OrBzfaHQnruAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDYzY2EwNTQyODMyZTY0MjY0ZjNhY2IxNTYxOTkyMmZl Y2Y4M2IwHhcNMjUxMjE0MDIwMTM4WhcNMjUxMjE1MDIwMTM4WjAzMTEwLwYDVQQD EygyM2RiYjcwOTE2MzVkYTc1MGRjMDNjYmI5NWYwZWQ4MjQxZjRkYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WyOAsvQWDMvslINQfwSvkQrBAXA 8bLMQbTk5F2Rt2mIbUYXV9y2xKRQjmm4Eh1D3O3mgXm08eDI6bfNDXt45K/KvBQy h/ESveRCgustuTrGqvPuEQa7KEdBnsyhwPVhTGu0G4h7oxF7UU8AlkhH35SSZQdy hcKV/xuOlpeAp/2lcI9c2EsuauzEWHD9JHdkxKGs0ls3vFMZQcqNbGVj8nO768NL zZiHiJDd+Jhu5JloxTh7vgzjHQcQGpFV6QYnCm0UpNgYKLjaVHBGGbe5u267ur3U CG+1eL5ICcDgzM5AS8SsONKHqlkVHrxO+c95nRjuAFUTwAckbszgBCEJGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPbtwkWNdp1DcA8u5Xw7YJB9Nu7MB8GA1UdIwQY MBaAFOLWPKBUKDLmQmTzrLFWGZIv7Pg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEt YzViMDBjYjhkOTE0LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEtYzViMDBjYjhkOTE0 LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmeyNTop kA7P5ECWsS/H8NrSzJ3y/La9xUbBtIHC/jrfS7CNqNBFnkRxaRVQ5b9BNlfxHipR gzpXHcfVM4/xETsPKhZvrHLrFFfEOUzfhCLdTS8cUmJQWsrW9DlUvsqndh5hHeI4 K2N/Pdxx2IOhYw3jlLnd/MUrwmCCe5uByDoVUg3wNrGUD+8YXwtlpEErnq6x3SGJ QWr9O39GcnNS/VMl6wGbkCAZ46OqULE2fLg34Rk/JN6RT0nhWmChKooMzRxgDFIf N6CFfwn97/ZSFLl+cEjEvrsGQmIVUWd4cnSVO97AzZgz6GxjwJTUNMm2RfQDXvSV ItZABlUH9Z+Gag== -----END CERTIFICATE-----Generated at Sun Dec 14 05:30:27 2025 by rpki-client