This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json) Hash identifier: ng3vM/1iJrHyFhjruooP0n8vkrF1KzO6nRIaH188hB4= Subject key identifier: 79:76:D0:FB:F0:B3:65:D2:2B:53:3C:BE:1C:79:97:06:69:84:77:17 Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Certificate serial: 019B3344C8E4DFC08A038F1685D02A1BA706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:01:44 +0000 Manifest this update: Thu 18 Dec 2025 21:01:44 +0000 Manifest next update: Fri 19 Dec 2025 21:01:44 +0000 Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: i5RhsZozbS/WdgFy/1bOMlLiT0hWiEEFLCBnQN69Ymk=) 2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:c8:e4:df:c0:8a:03:8f:16:85:d0:2a:1b:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Validity Not Before: Dec 18 21:01:44 2025 GMT Not After : Dec 19 21:01:44 2025 GMT Subject: CN=7976d0fbf0b365d22b533cbe1c79970669847717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:90:39:e2:16:63:01:9a:78:82:80:2e:a7: 76:e5:ab:92:9d:92:df:4f:0e:15:67:2c:f5:03:a2: 10:92:a9:1e:89:05:9d:73:85:c3:17:ef:a7:d7:e6: 1a:d4:91:84:0a:c9:57:80:00:e4:04:db:8d:76:58: f0:33:5e:ed:61:de:1e:7c:fd:16:26:27:9c:02:f9: fc:01:fc:32:be:67:ec:ad:bf:ea:e9:0f:54:44:79: a0:93:ec:94:5e:80:c9:f8:73:6b:3a:b0:01:da:f4: c7:0c:b4:2f:39:98:af:7e:63:78:19:5a:f6:d0:8e: 50:63:7a:3b:14:68:41:79:38:7c:4c:d0:00:b4:e6: 6e:7d:56:51:54:0e:5f:42:b6:ce:16:8d:96:10:10: 0e:cd:94:af:97:1e:fc:8e:5f:8c:9c:7a:19:84:c1: d4:7e:6a:a3:35:d5:0e:96:18:3b:90:34:50:63:ff: e0:bb:b2:05:cc:4d:6f:51:18:b2:34:33:27:25:ba: f3:9f:81:36:e4:2d:b3:15:e1:58:b1:63:d5:3b:b1: 84:11:a4:53:6c:5e:1c:d1:d0:39:d6:5d:47:3d:7b: a2:cd:a1:c9:3d:18:f6:7d:8e:40:64:5d:a3:5c:21: a4:e4:2f:11:47:5f:5d:7a:e0:45:a2:08:5d:78:67: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:D0:FB:F0:B3:65:D2:2B:53:3C:BE:1C:79:97:06:69:84:77:17 X509v3 Authority Key Identifier: keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3e:dc:e7:f0:e9:98:74:07:8a:81:78:8b:b1:d5:e9:c0:de: 46:0e:4e:b4:79:8b:0e:5a:30:13:4b:9c:c0:92:6f:65:d4:1d: 49:b0:b7:0a:7d:b5:07:1e:df:c7:31:bd:3b:ea:87:c6:28:4a: c5:47:cf:e2:43:f5:b5:0b:48:91:06:45:d7:a5:a2:60:a0:ac: a1:35:71:0e:20:f9:f2:65:e8:7c:22:1c:7c:96:f5:c2:22:7b: 5d:35:30:94:48:36:66:85:64:8b:2a:7f:ad:b3:2f:22:df:d7: 5f:dd:ab:1a:f5:ff:bb:40:35:ae:db:46:8f:03:98:1c:c0:c9: 81:a1:3c:6a:75:dd:4f:cc:2d:c6:c1:77:4e:28:16:17:cb:a7: 00:b5:ae:29:36:d9:36:c1:e3:8b:6e:9e:5c:af:db:f5:c6:e8: ae:d5:3b:07:37:26:72:96:89:82:f4:61:d3:d3:05:9f:2e:bb: b4:de:57:12:3e:10:33:95:94:43:99:1e:0f:05:30:fb:62:8b: cf:b5:73:f4:0b:40:08:12:5f:e0:e1:25:91:ff:36:e2:f6:30: 2b:41:c8:5f:e6:97:9a:de:50:af:08:89:6e:17:f9:11:51:0d: 38:c0:bc:3a:c6:84:32:f3:2f:85:6b:44:12:51:a2:84:19:07: 35:b3:76:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRMjk38CKA48WhdAqG6cGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky MjQwMzQwHhcNMjUxMjE4MjEwMTQ0WhcNMjUxMjE5MjEwMTQ0WjAzMTEwLwYDVQQD Eyg3OTc2ZDBmYmYwYjM2NWQyMmI1MzNjYmUxYzc5OTcwNjY5ODQ3NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRKQOeIWYwGaeIKALqd25auSnZLf Tw4VZyz1A6IQkqkeiQWdc4XDF++n1+Ya1JGECslXgADkBNuNdljwM17tYd4efP0W JiecAvn8Afwyvmfsrb/q6Q9URHmgk+yUXoDJ+HNrOrAB2vTHDLQvOZivfmN4GVr2 0I5QY3o7FGhBeTh8TNAAtOZufVZRVA5fQrbOFo2WEBAOzZSvlx78jl+MnHoZhMHU fmqjNdUOlhg7kDRQY//gu7IFzE1vURiyNDMnJbrzn4E25C2zFeFYsWPVO7GEEaRT bF4c0dA51l1HPXuizaHJPRj2fY5AZF2jXCGk5C8RR19deuBFoghdeGcoBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl20Pvws2XSK1M8vhx5lwZphHcXMB8GA1UdIwQY MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3 LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT7c5/Dp mHQHioF4i7HV6cDeRg5OtHmLDlowE0ucwJJvZdQdSbC3Cn21Bx7fxzG9O+qHxihK xUfP4kP1tQtIkQZF16WiYKCsoTVxDiD58mXofCIcfJb1wiJ7XTUwlEg2ZoVkiyp/ rbMvIt/XX92rGvX/u0A1rttGjwOYHMDJgaE8anXdT8wtxsF3TigWF8unALWuKTbZ NsHji26eXK/b9cbortU7BzcmcpaJgvRh09MFny67tN5XEj4QM5WUQ5keDwUw+2KL z7Vz9AtACBJf4OElkf824vYwK0HIX+aXmt5QrwiJbhf5EVENOMC8OsaEMvMvhWtE ElGihBkHNbN2ow== -----END CERTIFICATE-----Generated at Fri Dec 19 06:45:15 2025 by rpki-client