This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json) Hash identifier: lw4YBTkXtdxnVifso1pDSXm2zuiQO7K4JvQ2Xwg0BvY= Subject key identifier: A2:B4:F9:C7:49:9E:D1:4E:58:B4:A9:EA:92:F6:29:0B:46:63:35:20 Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Certificate serial: 019B40FFCA625580B71429A05C91A4506B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft Manifest number: 1720 Signing time: Sun 21 Dec 2025 13:01:03 +0000 Manifest this update: Sun 21 Dec 2025 13:01:03 +0000 Manifest next update: Mon 22 Dec 2025 13:01:03 +0000 Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=) 2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: zv2vsCfynKfdXBVm5+EZLfMypj7IufhrQxiTv4S3fRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:ca:62:55:80:b7:14:29:a0:5c:91:a4:50:6b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Validity Not Before: Dec 21 13:01:03 2025 GMT Not After : Dec 22 13:01:03 2025 GMT Subject: CN=a2b4f9c7499ed14e58b4a9ea92f6290b46633520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:08:27:a6:56:8e:0f:50:86:14:8a:6b:16: 87:67:2b:c4:70:f2:41:f7:73:d3:8a:f4:4b:1c:a3: 4a:a5:69:79:8b:9d:dd:8a:52:74:89:ed:7f:bd:a1: 6e:9d:4a:88:ca:99:1d:63:ed:3f:4d:87:fe:e9:c6: 11:9c:25:a6:20:c7:21:95:9a:f1:6c:b5:d8:fb:e1: 73:1a:07:02:95:e4:4f:1d:db:54:1a:34:37:d5:8c: 7c:53:34:03:02:69:fb:c6:57:79:c9:c2:d3:98:ec: 93:68:07:8f:00:67:90:54:b6:9c:72:32:b0:c1:96: cc:37:10:f3:a6:01:16:a9:9d:69:a4:36:a9:2a:25: 56:0c:f4:de:ff:1b:de:67:cf:ad:08:47:f1:a7:35: af:1e:81:d0:89:f3:be:50:ab:9a:d6:ce:06:20:26: 1d:56:c8:7e:76:18:03:48:5a:7d:02:40:18:f7:02: 75:7e:35:95:f4:70:02:f6:cf:13:54:68:99:89:dd: 4d:af:c7:bd:6d:ab:d3:56:4e:51:6b:a8:0d:21:fc: 08:bb:d5:cc:4c:0b:b8:cb:27:62:4b:5a:47:d7:f5: a4:93:3d:66:c0:a7:71:90:5b:4c:96:46:cc:90:3f: 28:f0:06:ba:93:23:b6:f5:64:e9:7f:6f:97:ea:c3: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B4:F9:C7:49:9E:D1:4E:58:B4:A9:EA:92:F6:29:0B:46:63:35:20 X509v3 Authority Key Identifier: keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:45:13:16:30:a7:38:d1:ae:58:21:31:e9:48:24:f8:9d:6a: ea:b7:6d:5f:1a:a6:a8:51:fe:45:62:e1:67:7b:37:86:5c:ae: 5c:b8:ef:80:f7:e9:49:8a:7a:ac:ce:44:7c:3f:ba:92:11:aa: d0:c0:cb:90:5b:2b:f7:40:c7:34:77:e2:45:47:56:9e:53:24: 60:39:b6:15:02:04:83:6b:ff:da:ee:2e:d4:0c:cb:d4:97:22: ee:f6:7f:47:9b:2b:dd:92:83:ca:de:a9:21:7a:f1:55:1c:8e: 17:77:8e:5c:56:b0:0c:57:5d:ac:35:a1:75:92:5d:83:c2:68: 7b:53:73:22:58:c6:61:d6:70:25:7f:d2:7a:71:81:5b:3f:da: 38:28:d8:0c:17:7e:51:e7:2e:55:93:64:ee:19:20:b0:29:30: b5:db:3c:2f:a5:b5:4b:c6:0c:9b:cc:2b:93:8c:66:a9:a6:e1: d6:38:f9:1d:c5:7e:9e:29:d2:a0:87:dc:61:41:1a:f4:2c:46: f8:2d:e2:83:cd:76:1e:1e:31:1e:e5:5b:28:c9:f1:e0:f5:b8: 5c:7e:5d:11:c6:35:47:62:2f:ee:5d:7c:7a:fc:76:cc:e5:86: 6f:65:60:85:59:e0:ab:94:7b:0f:5d:8e:ba:32:e4:a2:c8:d0: 14:6a:39:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/8piVYC3FCmgXJGkUGsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjlhYjZmMDk1NzJhZmI0NmU5ZjhlOWEwNjM5ZDgyMGI5 Njk0MjIwHhcNMjUxMjIxMTMwMTAzWhcNMjUxMjIyMTMwMTAzWjAzMTEwLwYDVQQD EyhhMmI0ZjljNzQ5OWVkMTRlNThiNGE5ZWE5MmY2MjkwYjQ2NjMzNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJsIJ6ZWjg9QhhSKaxaHZyvEcPJB 93PTivRLHKNKpWl5i53dilJ0ie1/vaFunUqIypkdY+0/TYf+6cYRnCWmIMchlZrx bLXY++FzGgcCleRPHdtUGjQ31Yx8UzQDAmn7xld5ycLTmOyTaAePAGeQVLaccjKw wZbMNxDzpgEWqZ1ppDapKiVWDPTe/xveZ8+tCEfxpzWvHoHQifO+UKua1s4GICYd Vsh+dhgDSFp9AkAY9wJ1fjWV9HAC9s8TVGiZid1Nr8e9bavTVk5Ra6gNIfwIu9XM TAu4yydiS1pH1/Wkkz1mwKdxkFtMlkbMkD8o8Aa6kyO29WTpf2+X6sOgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK0+cdJntFOWLSp6pL2KQtGYzUgMB8GA1UdIwQY MBaAFOBpq28JVyr7Run46aBjnYILlpQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEt NDRmNDFkOWUxMjc3LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEtNDRmNDFkOWUxMjc3 LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0UTFjCn ONGuWCEx6Ugk+J1q6rdtXxqmqFH+RWLhZ3s3hlyuXLjvgPfpSYp6rM5EfD+6khGq 0MDLkFsr90DHNHfiRUdWnlMkYDm2FQIEg2v/2u4u1AzL1Jci7vZ/R5sr3ZKDyt6p IXrxVRyOF3eOXFawDFddrDWhdZJdg8Joe1NzIljGYdZwJX/SenGBWz/aOCjYDBd+ UecuVZNk7hkgsCkwtds8L6W1S8YMm8wrk4xmqabh1jj5HcV+ninSoIfcYUEa9CxG +C3ig812Hh4xHuVbKMnx4PW4XH5dEcY1R2Iv7l18evx2zOWGb2VghVngq5R7D12O ujLkosjQFGo5Hg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:27:47 2025 by rpki-client