This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json) Hash identifier: 7f09F5xDO/Z1Jsek+qpa0ybNuiLQdtWPbV/0YNd7dWI= Subject key identifier: A3:3C:55:7E:56:46:DE:78:5D:9E:4A:32:29:25:B6:9D:D9:7D:28:99 Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019B2EF9BAB2970547651F940F8D550B41C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:01:16 +0000 Manifest this update: Thu 18 Dec 2025 01:01:16 +0000 Manifest next update: Fri 19 Dec 2025 01:01:16 +0000 Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=) 2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: 4WhCfhDDbZfAYovwH48pX0kHZuB0WtI6MXCTxzWWUTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:ba:b2:97:05:47:65:1f:94:0f:8d:55:0b:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Dec 18 01:01:16 2025 GMT Not After : Dec 19 01:01:16 2025 GMT Subject: CN=a33c557e5646de785d9e4a322925b69dd97d2899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:ef:76:78:8b:d2:f5:b0:ae:39:84:9c:91: 05:23:b0:85:73:40:e2:ed:ce:3a:3d:65:fa:15:49: 65:f5:f8:87:66:35:5f:dd:e4:df:52:43:ee:7b:03: 06:8c:ed:a6:85:c6:c4:91:bc:03:8a:3c:ee:b6:67: 3c:67:3f:65:ca:5f:77:b8:14:fa:db:28:e3:50:7f: 44:31:60:07:b2:67:b5:8d:2f:4a:bb:bb:78:3a:53: e7:a3:fc:f9:2a:ae:ad:0f:66:c5:c7:f5:1a:99:99: 6b:5c:d3:21:49:d8:3b:6c:26:af:d2:49:9f:49:87: b1:bd:d9:b4:e9:80:a4:c5:2e:ea:89:b5:38:7c:19: eb:15:34:04:34:1d:5d:0a:8a:67:53:f6:ae:4b:6a: 87:68:42:ed:b1:10:da:55:52:51:29:84:8f:96:a1: 69:16:98:9a:2f:9e:e1:20:5d:84:00:e0:6b:09:0e: 6c:72:18:31:ca:9b:e4:f5:fc:5f:fd:aa:29:18:88: f3:5b:d0:20:0d:d5:57:3b:d6:07:19:d6:86:1b:3c: b8:61:94:1b:2c:be:77:57:b3:50:3e:2c:9a:b8:7e: 25:8c:15:da:cc:ed:d0:c1:e4:8f:9e:ec:59:5b:4c: a1:a8:64:4e:e8:31:00:ed:21:c0:52:c7:13:f4:22: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:55:7E:56:46:DE:78:5D:9E:4A:32:29:25:B6:9D:D9:7D:28:99 X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:06:02:c1:9b:8f:be:94:ac:36:07:56:48:e4:45:4e:6e:2e: 87:df:ce:90:1b:58:c2:4c:2d:bc:d6:35:e6:a2:49:ca:16:52: 2e:2f:0b:ab:92:53:be:b9:9d:c8:bc:1a:62:00:15:27:14:5c: 82:a7:75:26:3f:5e:7b:5d:e6:e1:4b:95:8e:29:43:11:3a:3a: ae:79:54:48:83:b3:e7:e4:6a:e3:85:b4:4e:1b:12:d4:33:9c: f8:e4:4f:de:74:f8:95:b6:68:09:4f:89:c4:cf:4c:4e:c9:44: 22:41:9e:ce:5a:3b:ab:85:e7:f5:f3:09:ee:48:7a:b6:cf:8f: 01:da:3b:1b:d8:70:5b:3d:9e:b0:10:13:c4:ed:13:15:fe:56: c5:8a:0b:62:ef:19:24:0b:b3:32:63:a2:24:e8:81:5f:87:88: 3b:c1:fe:52:9c:79:16:09:f3:a5:b3:28:f4:ba:20:d2:c9:34: 39:d3:fa:29:9d:c1:40:8d:5c:7b:ba:e7:75:4e:56:24:50:b6: bc:83:41:75:53:4c:f1:3b:86:a4:19:f6:c0:96:a0:80:f5:35: 09:91:fc:c1:fa:73:a6:ce:7b:43:b2:7d:13:1b:fb:98:3d:97: 12:d4:56:1d:d5:12:50:e1:9b:3a:13:8f:bf:67:39:e3:87:20: db:4e:91:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bqylwVHZR+UD41VC0HJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjUxMjE4MDEwMTE2WhcNMjUxMjE5MDEwMTE2WjAzMTEwLwYDVQQD EyhhMzNjNTU3ZTU2NDZkZTc4NWQ5ZTRhMzIyOTI1YjY5ZGQ5N2QyODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI3vdniL0vWwrjmEnJEFI7CFc0Di 7c46PWX6FUll9fiHZjVf3eTfUkPuewMGjO2mhcbEkbwDijzutmc8Zz9lyl93uBT6 2yjjUH9EMWAHsme1jS9Ku7t4OlPno/z5Kq6tD2bFx/UamZlrXNMhSdg7bCav0kmf SYexvdm06YCkxS7qibU4fBnrFTQENB1dCopnU/auS2qHaELtsRDaVVJRKYSPlqFp FpiaL57hIF2EAOBrCQ5schgxypvk9fxf/aopGIjzW9AgDdVXO9YHGdaGGzy4YZQb LL53V7NQPiyauH4ljBXazO3QweSPnuxZW0yhqGRO6DEA7SHAUscT9CJX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM8VX5WRt54XZ5KMikltp3ZfSiZMB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQYCwZuP vpSsNgdWSORFTm4uh9/OkBtYwkwtvNY15qJJyhZSLi8Lq5JTvrmdyLwaYgAVJxRc gqd1Jj9ee13m4UuVjilDETo6rnlUSIOz5+Rq44W0ThsS1DOc+ORP3nT4lbZoCU+J xM9MTslEIkGezlo7q4Xn9fMJ7kh6ts+PAdo7G9hwWz2esBATxO0TFf5WxYoLYu8Z JAuzMmOiJOiBX4eIO8H+Upx5FgnzpbMo9Log0sk0OdP6KZ3BQI1ce7rndU5WJFC2 vINBdVNM8TuGpBn2wJaggPU1CZH8wfpzps57Q7J9Exv7mD2XEtRWHdUSUOGbOhOP v2c544cg206ReQ== -----END CERTIFICATE-----Generated at Thu Dec 18 03:26:03 2025 by rpki-client