This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json) Hash identifier: K9wBJTPpPhMEqGoAgWj05RVmnnpVXOX05YyHzTf81n8= Subject key identifier: CE:6B:9B:A8:50:D8:2F:FA:A1:84:40:C9:8B:FC:54:5A:7A:16:AA:6B Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Certificate serial: 019B5A1A7D569090E9775FB62289DC046361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 10:00:43 +0000 Manifest this update: Fri 26 Dec 2025 10:00:43 +0000 Manifest next update: Sat 27 Dec 2025 10:00:43 +0000 Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: K21wOUwfFVArwTY1RaHifuOi0ZquZOyKFY+Fvjz6EQg=) 2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:7d:56:90:90:e9:77:5f:b6:22:89:dc:04:63:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Validity Not Before: Dec 26 10:00:43 2025 GMT Not After : Dec 27 10:00:43 2025 GMT Subject: CN=ce6b9ba850d82ffaa18440c98bfc545a7a16aa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:10:c6:72:f5:0a:47:d6:b0:83:36:51:e3: f5:c5:61:f9:79:fd:21:8d:d5:e6:4d:41:30:ac:47: 2a:46:84:38:35:e7:9f:7e:1a:2b:4c:c6:a4:39:04: 3e:7d:3c:37:c8:1c:5c:c6:e4:f1:be:a5:7a:41:df: 6a:02:d9:df:08:28:f3:a6:46:b7:c3:a5:d1:54:e6: a4:1f:36:ba:63:cd:a4:a6:9f:02:99:82:01:0a:c9: 14:51:a6:da:1c:d1:4b:64:18:c3:4c:6f:ea:61:fc: 84:6f:8c:31:45:29:c0:be:5b:00:bf:c2:9e:af:65: 87:7f:7f:46:41:9a:28:d2:8a:1b:0f:cb:20:6c:73: 4c:8d:d2:1d:42:c1:18:b4:10:cf:c0:bb:8c:ef:1b: 20:99:25:2c:0f:3d:24:99:68:63:04:46:74:65:a4: e2:39:be:9f:15:09:05:e5:88:13:cd:8c:34:4b:54: 85:6d:4a:d0:cf:00:7c:25:a4:17:ba:7a:d0:16:f5: 3a:a6:c9:b3:fd:3d:29:85:50:50:2f:3c:54:e2:54: e2:90:ca:ab:91:e3:c8:8e:5a:c4:c9:54:f5:a4:90: ed:02:87:35:ec:54:28:7d:f0:bc:b9:fb:06:00:5c: 58:95:19:c5:cb:1c:d5:09:97:48:87:1e:a5:49:0b: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:9B:A8:50:D8:2F:FA:A1:84:40:C9:8B:FC:54:5A:7A:16:AA:6B X509v3 Authority Key Identifier: keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bc:1d:fe:47:1c:2d:1c:4b:32:ba:7e:6d:23:4e:bf:77:e9: 77:c3:70:52:fb:6e:c9:a3:74:a6:f3:2f:c4:94:1a:76:34:70: b4:98:6c:b2:ea:9d:40:5b:d1:7d:b4:0f:5d:0c:e3:c9:52:b4: e2:88:f0:0a:25:b5:59:d2:ae:9c:07:66:20:51:94:f0:76:75: e0:6f:b3:11:6f:d4:f9:2c:ea:1b:a6:26:0d:5e:a6:dc:7d:d6: d9:27:3a:40:0c:1f:35:0f:dd:47:a0:99:37:cf:bc:3f:0f:6f: fe:24:3b:78:97:27:7e:6c:8e:1c:37:9e:e9:e3:9a:d5:4e:ec: 05:85:91:ae:05:4a:21:a1:ee:1a:7b:b8:7d:9b:6c:12:9d:7a: dd:59:f4:0f:55:f3:db:26:c1:d5:05:d6:df:43:ab:c3:60:89: 91:1b:43:37:6e:85:d4:4d:65:d9:40:1e:9c:95:00:85:c5:eb: 33:78:19:c6:28:69:49:8c:fe:75:1b:68:01:22:96:dd:84:cf: 9a:30:c9:da:83:7b:22:93:33:8b:27:b5:f3:ba:14:ee:0d:87: f9:98:b0:7c:34:25:0c:89:ce:16:a4:fe:09:5a:65:6f:42:67: fb:8e:5f:79:b3:44:b3:c2:ef:fb:73:3a:de:bd:44:7c:2a:3a: 4e:dd:de:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGn1WkJDpd1+2IoncBGNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3 OWY2ZjUwHhcNMjUxMjI2MTAwMDQzWhcNMjUxMjI3MTAwMDQzWjAzMTEwLwYDVQQD EyhjZTZiOWJhODUwZDgyZmZhYTE4NDQwYzk4YmZjNTQ1YTdhMTZhYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz4QxnL1CkfWsIM2UeP1xWH5ef0h jdXmTUEwrEcqRoQ4NeeffhorTMakOQQ+fTw3yBxcxuTxvqV6Qd9qAtnfCCjzpka3 w6XRVOakHza6Y82kpp8CmYIBCskUUabaHNFLZBjDTG/qYfyEb4wxRSnAvlsAv8Ke r2WHf39GQZoo0oobD8sgbHNMjdIdQsEYtBDPwLuM7xsgmSUsDz0kmWhjBEZ0ZaTi Ob6fFQkF5YgTzYw0S1SFbUrQzwB8JaQXunrQFvU6psmz/T0phVBQLzxU4lTikMqr kePIjlrEyVT1pJDtAoc17FQoffC8ufsGAFxYlRnFyxzVCZdIhx6lSQtTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5rm6hQ2C/6oYRAyYv8VFp6FqprMB8GA1UdIwQY MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt Y2Q2MzBkYmMxZDE4LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4 LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLwd/kcc LRxLMrp+bSNOv3fpd8NwUvtuyaN0pvMvxJQadjRwtJhssuqdQFvRfbQPXQzjyVK0 4ojwCiW1WdKunAdmIFGU8HZ14G+zEW/U+SzqG6YmDV6m3H3W2Sc6QAwfNQ/dR6CZ N8+8Pw9v/iQ7eJcnfmyOHDee6eOa1U7sBYWRrgVKIaHuGnu4fZtsEp163Vn0D1Xz 2ybB1QXW30Orw2CJkRtDN26F1E1l2UAenJUAhcXrM3gZxihpSYz+dRtoASKW3YTP mjDJ2oN7IpMziye187oU7g2H+ZiwfDQlDInOFqT+CVplb0Jn+45febNEs8Lv+3M6 3r1EfCo6Tt3eRg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client