This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json) Hash identifier: GxXTpO+pZMQB2oV931wGDtH6sZDfuSNQ5eghCY0McfU= Subject key identifier: 52:61:F6:3A:E8:D3:C2:B0:5E:1A:00:47:9E:7D:12:53:76:80:05:CB Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef Certificate serial: 019B1E3CEE57E3486C8A88D50804A5D2D51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft Manifest number: 0C8B Signing time: Sun 14 Dec 2025 19:01:08 +0000 Manifest this update: Sun 14 Dec 2025 19:01:08 +0000 Manifest next update: Mon 15 Dec 2025 19:01:08 +0000 Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: 4xFeTFwu0fG9VHgV3ltLNNzFHkdxHomwMR9G8i8qf0c=) 2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:ee:57:e3:48:6c:8a:88:d5:08:04:a5:d2:d5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef Validity Not Before: Dec 14 19:01:08 2025 GMT Not After : Dec 15 19:01:08 2025 GMT Subject: CN=5261f63ae8d3c2b05e1a00479e7d1253768005cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:15:53:b0:ba:88:73:ea:1a:3a:f8:6d:93: fa:a7:34:c5:06:92:34:f7:5d:64:29:da:ae:ea:34: b0:ba:f7:7a:52:5e:73:d8:0f:6a:76:b7:45:d3:df: 54:d8:73:12:0c:e3:84:4a:de:db:50:16:33:30:04: ec:f5:e3:e7:84:e0:b5:b8:9d:d3:ce:9e:e3:41:b8: c1:d0:b9:27:15:8c:a4:64:04:02:37:1f:50:79:47: 2f:72:d2:aa:74:68:47:5a:56:01:d6:7d:e7:04:13: c7:0f:18:32:6f:12:f5:67:b9:c0:08:f9:33:79:ce: 5f:20:3a:98:ab:5b:f1:9a:3d:ac:9d:28:d4:45:3a: 2e:f2:5c:a2:28:b1:e8:28:80:39:47:58:2d:34:2d: 67:87:70:71:1c:cf:a6:c4:15:21:d9:f8:ed:3b:55: 02:67:b3:47:d0:d0:17:4a:38:3f:1b:37:b4:a0:a1: 25:c1:33:09:c8:8c:a8:4f:63:ca:1c:56:a7:45:41: 49:18:05:9c:ca:63:7c:b5:10:a1:a9:01:5b:1c:06: 28:2e:53:07:57:2d:69:e5:69:53:11:ea:ac:31:78: 9b:6f:2c:7d:44:76:a6:28:88:30:d1:d7:b6:d5:cd: 1b:ed:3e:c4:96:ec:a6:bf:02:29:06:15:74:a7:43: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:F6:3A:E8:D3:C2:B0:5E:1A:00:47:9E:7D:12:53:76:80:05:CB X509v3 Authority Key Identifier: keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:92:0f:10:e1:43:a4:b2:a6:3c:7c:b4:e3:b8:71:45:7b: 15:d4:31:97:39:c6:36:6b:57:e9:fb:cf:a0:cb:de:60:45:e2: 72:d4:c4:93:a4:72:b7:63:b4:02:9d:a1:1d:4f:1e:e9:78:6e: b0:fb:da:36:be:9f:38:29:9b:52:b2:c5:1b:dd:e1:2f:28:32: d7:e6:82:f2:4b:e8:3b:15:22:8b:f1:b7:cb:6f:5b:69:93:13: aa:ac:cd:a1:08:7d:47:0d:0e:1c:5e:65:b9:68:4d:d1:32:06: be:60:14:a5:81:d8:1f:b6:d0:8f:9c:c0:19:d8:6c:2e:10:ec: da:c7:22:b7:ed:c6:99:c2:0d:3b:1b:5b:71:7f:61:46:17:96: 5d:d7:ba:e2:cd:ef:1a:6b:8e:5c:78:89:24:1c:b7:a0:88:34: 78:b0:50:c7:75:41:2f:f3:8b:e2:25:76:ae:bf:0c:7b:c8:eb: 1f:e8:b4:4a:9e:93:d7:7d:89:96:f7:54:bb:5a:6e:47:0f:9c: fd:af:cc:f4:11:2f:b4:30:fc:42:c2:1d:9c:ff:72:1b:f4:28: df:eb:8b:92:87:96:12:85:03:15:05:fa:f5:d5:2b:33:3b:5b: 51:88:b9:ac:37:28:6b:89:86:05:bd:38:63:1b:eb:ac:80:1f: 84:9f:99:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePO5X40hsiojVCASl0tUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWYxOTZkZDdlZGQxMTMxZDAyMjBmZGI3NzcxMjI2MjFi YmJkZWYwHhcNMjUxMjE0MTkwMTA4WhcNMjUxMjE1MTkwMTA4WjAzMTEwLwYDVQQD Eyg1MjYxZjYzYWU4ZDNjMmIwNWUxYTAwNDc5ZTdkMTI1Mzc2ODAwNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K4VU7C6iHPqGjr4bZP6pzTFBpI0 911kKdqu6jSwuvd6Ul5z2A9qdrdF099U2HMSDOOESt7bUBYzMATs9ePnhOC1uJ3T zp7jQbjB0LknFYykZAQCNx9QeUcvctKqdGhHWlYB1n3nBBPHDxgybxL1Z7nACPkz ec5fIDqYq1vxmj2snSjURTou8lyiKLHoKIA5R1gtNC1nh3BxHM+mxBUh2fjtO1UC Z7NH0NAXSjg/Gze0oKElwTMJyIyoT2PKHFanRUFJGAWcymN8tRChqQFbHAYoLlMH Vy1p5WlTEeqsMXibbyx9RHamKIgw0de21c0b7T7EluymvwIpBhV0p0OsnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJh9jro08KwXhoAR559ElN2gAXLMB8GA1UdIwQY MBaAFOAfGW3X7dETHQIg/bd3EiYhu73vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85NjhhODUtMDFkMy00YjBjLWI5MjAt NjZjYmY4NzZhYjNlLzEvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85NjhhODUtMDFkMy00YjBjLWI5MjAtNjZjYmY4NzZhYjNl LzEvNEI4WmJkZnQwUk1kQWlEOXQzY1NKaUc3dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYeSDxDh Q6Sypjx8tOO4cUV7FdQxlznGNmtX6fvPoMveYEXictTEk6Ryt2O0Ap2hHU8e6Xhu sPvaNr6fOCmbUrLFG93hLygy1+aC8kvoOxUii/G3y29baZMTqqzNoQh9Rw0OHF5l uWhN0TIGvmAUpYHYH7bQj5zAGdhsLhDs2scit+3GmcINOxtbcX9hRheWXde64s3v GmuOXHiJJBy3oIg0eLBQx3VBL/OL4iV2rr8Me8jrH+i0Sp6T132JlvdUu1puRw+c /a/M9BEvtDD8QsIdnP9yG/Qo3+uLkoeWEoUDFQX69dUrMztbUYi5rDcoa4mGBb04 YxvrrIAfhJ+Z3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:22 2025 by rpki-client