This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json) Hash identifier: HidchWNCPG/Zyw7Sol2JAJidv2GbsrME7PC+XakIUAg= Subject key identifier: 12:52:74:57:7C:6D:41:E7:F3:52:E2:C3:E6:64:6B:E4:17:40:E1:52 Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Certificate serial: 019B31C39B65B5EBB053EFC1A54F635ED8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft Manifest number: 0C86 Signing time: Thu 18 Dec 2025 14:01:01 +0000 Manifest this update: Thu 18 Dec 2025 14:01:01 +0000 Manifest next update: Fri 19 Dec 2025 14:01:01 +0000 Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: tM04gdVtAQPmKdf/9fJVeJVa5m79L8fcpTNBmWgsTFo=) 2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:9b:65:b5:eb:b0:53:ef:c1:a5:4f:63:5e:d8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Validity Not Before: Dec 18 14:01:01 2025 GMT Not After : Dec 19 14:01:01 2025 GMT Subject: CN=125274577c6d41e7f352e2c3e6646be41740e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:3d:5b:20:02:da:09:f3:23:03:5e:ef:8b: 39:de:61:b5:95:2f:96:bd:82:99:6b:b2:b8:52:3b: 44:22:e4:fc:56:7d:8e:59:b6:6b:14:31:c0:35:29: 3e:30:2c:e3:b4:c3:a0:c5:2b:53:f2:52:f5:d7:7c: d4:b3:fb:9c:43:c9:fc:0e:7d:38:6a:46:ac:4c:78: d9:5e:73:38:1f:6b:56:35:71:35:b9:ec:65:59:66: 25:c1:3a:a6:7e:aa:33:da:5e:21:69:a4:47:ab:18: 7e:68:59:d2:31:89:7f:50:f0:36:55:6e:59:f2:f2: 75:90:9e:09:e0:1b:e3:85:3a:f8:2d:56:d0:6d:74: ab:af:88:b9:58:17:25:1e:41:b5:7e:4f:91:2c:c4: fe:35:9b:52:c7:e4:07:2e:f3:39:86:73:37:10:55: cf:1c:8e:94:f6:63:76:ac:ab:30:40:14:04:05:ff: 7a:b1:72:93:be:8f:4e:7b:87:94:c0:2d:5e:96:bf: 9c:dc:93:ff:c6:d0:63:f0:23:d6:0e:c0:2d:76:aa: 3a:06:08:bf:a5:8a:8d:38:c3:5e:c2:4d:fb:38:6f: ba:59:19:23:0b:84:65:36:99:80:a5:7f:8b:b3:09: ba:f9:63:ac:40:2e:eb:b6:ca:8f:e6:a9:66:b0:47: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:74:57:7C:6D:41:E7:F3:52:E2:C3:E6:64:6B:E4:17:40:E1:52 X509v3 Authority Key Identifier: keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8c:2b:47:24:55:c9:6a:fd:b4:d7:ed:23:2e:9e:f6:ba:fa: 78:5c:1e:c4:b8:d7:14:65:fa:96:38:41:9e:3e:2c:1b:e6:2b: 6c:6b:54:e7:3a:ca:c5:97:07:70:35:5f:7e:73:47:31:1b:d3: 48:b3:6a:5e:d6:63:41:2a:f0:db:f2:cf:89:af:8d:f9:1a:45: 65:db:05:f0:ae:1a:78:93:c3:42:69:b8:d0:58:b1:80:8d:28: c3:c6:f6:06:ce:23:40:be:39:c0:42:47:dd:c8:0a:32:6c:17: d0:a5:02:e0:e9:c2:1d:93:a2:2d:df:3d:10:02:26:44:07:aa: 4f:0a:2e:e7:b3:d4:b7:8b:a7:7c:ac:7c:49:cd:27:26:c0:c0: b3:dd:78:84:71:57:da:0d:7b:67:1a:8a:4a:1a:ae:8f:20:7c: e4:0f:c1:90:ab:64:e1:5d:21:4d:f8:7d:7b:0a:19:dd:73:a1: de:a1:b0:1e:23:06:01:30:d3:6a:3d:98:0a:35:52:0d:18:47: ce:a3:ad:56:7d:5a:2b:52:2c:89:32:cc:6d:41:f3:f9:df:ed: 7b:64:6d:32:a8:5a:45:b3:c1:95:b5:6a:45:58:f1:94:17:0e: dd:18:6b:25:8f:b9:d0:3a:c4:78:99:8c:21:2b:dc:85:ec:3b: 03:29:60:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5tlteuwU+/BpU9jXtjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk YTViYmMwHhcNMjUxMjE4MTQwMTAxWhcNMjUxMjE5MTQwMTAxWjAzMTEwLwYDVQQD EygxMjUyNzQ1NzdjNmQ0MWU3ZjM1MmUyYzNlNjY0NmJlNDE3NDBlMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptg9WyAC2gnzIwNe74s53mG1lS+W vYKZa7K4UjtEIuT8Vn2OWbZrFDHANSk+MCzjtMOgxStT8lL113zUs/ucQ8n8Dn04 akasTHjZXnM4H2tWNXE1uexlWWYlwTqmfqoz2l4haaRHqxh+aFnSMYl/UPA2VW5Z 8vJ1kJ4J4BvjhTr4LVbQbXSrr4i5WBclHkG1fk+RLMT+NZtSx+QHLvM5hnM3EFXP HI6U9mN2rKswQBQEBf96sXKTvo9Oe4eUwC1elr+c3JP/xtBj8CPWDsAtdqo6Bgi/ pYqNOMNewk37OG+6WRkjC4RlNpmApX+Lswm6+WOsQC7rtsqP5qlmsEewowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJSdFd8bUHn81Liw+Zka+QXQOFSMB8GA1UdIwQY MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt NWI5MTAxNTcyNzFiLzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIwrRyRV yWr9tNftIy6e9rr6eFwexLjXFGX6ljhBnj4sG+YrbGtU5zrKxZcHcDVffnNHMRvT SLNqXtZjQSrw2/LPia+N+RpFZdsF8K4aeJPDQmm40FixgI0ow8b2Bs4jQL45wEJH 3cgKMmwX0KUC4OnCHZOiLd89EAImRAeqTwou57PUt4unfKx8Sc0nJsDAs914hHFX 2g17ZxqKShqujyB85A/BkKtk4V0hTfh9ewoZ3XOh3qGwHiMGATDTaj2YCjVSDRhH zqOtVn1aK1IsiTLMbUHz+d/te2RtMqhaRbPBlbVqRVjxlBcO3RhrJY+50DrEeJmM ISvchew7Aylgvg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:12:46 2025 by rpki-client