This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json) Hash identifier: DCS0oU1OEBlayfKhMF20VY1f1kj2TZt8ddIilPdV/Ks= Subject key identifier: C8:C5:63:2E:D0:D4:A4:05:EE:64:B8:AB:CC:F7:22:9E:27:0D:5B:4C Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019B59E35770E8EB0041DB4B462705BC07C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 09:00:29 +0000 Manifest this update: Fri 26 Dec 2025 09:00:29 +0000 Manifest next update: Sat 27 Dec 2025 09:00:29 +0000 Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: o4+bjR6Kxdn5G7cd5xlSS3zShDtkfnTAJjxtlGiIBg8=) 2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=) 3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:57:70:e8:eb:00:41:db:4b:46:27:05:bc:07:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Dec 26 09:00:29 2025 GMT Not After : Dec 27 09:00:29 2025 GMT Subject: CN=c8c5632ed0d4a405ee64b8abccf7229e270d5b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:79:f5:07:35:a7:bc:51:75:af:be:77:db: a2:66:97:cc:24:6b:c3:0a:fd:fd:f6:2b:23:64:26: d8:2b:0b:b7:80:ce:ba:a4:ab:d4:1e:5d:dc:7f:59: 27:f4:ca:63:07:88:72:8d:49:9f:7a:31:6c:29:ca: 57:0c:96:e8:02:f5:25:41:19:2d:b4:c8:dc:07:1f: 9e:33:be:51:51:b6:96:7b:c5:49:ec:4a:89:2d:4c: 47:58:9d:e4:94:25:05:61:11:f3:7d:bf:13:22:2c: 78:dc:4a:81:05:bb:ab:9e:a2:8d:03:4e:26:5c:b6: 8e:82:56:04:49:56:47:ed:ca:6f:1b:c4:07:c8:92: ab:8e:25:69:2c:7a:9f:07:9e:e7:91:b7:20:9a:e8: 3b:fe:d8:13:70:6b:00:ed:1d:4e:7f:e5:19:b7:87: 76:41:df:55:91:64:0f:b2:aa:f6:9e:06:d1:8d:e5: dc:50:98:f8:a8:0d:28:bd:f7:0f:bd:ba:40:d7:98: 1b:81:87:fa:be:6d:af:21:c8:46:4b:d6:fa:19:b3: dd:1c:99:b7:3c:53:78:ef:d0:3c:75:e1:97:50:ff: af:70:03:21:81:45:bc:0e:84:2e:3e:41:6b:06:c6: b1:e2:e0:01:2d:8f:3f:5f:4c:53:bc:93:65:cf:df: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C5:63:2E:D0:D4:A4:05:EE:64:B8:AB:CC:F7:22:9E:27:0D:5B:4C X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:3a:ca:05:ef:13:2a:3a:56:5f:54:db:93:ed:11:ed:46: 78:99:4e:79:ed:fa:97:8a:4f:1d:15:52:6b:18:56:ef:97:8f: 52:0f:c3:2c:24:86:f6:c9:e2:f4:3a:08:ac:b7:d7:cd:84:ad: 6e:1f:73:dc:99:13:0a:95:a7:fb:8f:71:43:e0:69:0d:ed:1c: cb:f3:17:ea:05:f7:9d:4f:00:79:eb:a2:15:ed:ad:03:66:eb: 0e:94:f8:9f:8c:e1:e6:e1:db:13:27:e4:88:3c:98:3e:38:9d: de:09:c4:97:b0:a2:4a:ff:86:e7:00:d6:13:5d:87:15:4f:01: c3:e9:75:73:89:36:6f:db:fd:7c:2a:72:80:88:30:68:06:58: b7:68:35:51:59:30:2d:99:a7:1f:29:d1:91:d5:d7:be:52:81: 23:d7:7a:c0:9c:a8:ef:48:fb:72:12:7c:79:e6:92:07:f1:0f: 4f:99:c2:5c:60:c5:aa:4b:d5:1f:fb:b6:ee:06:3c:12:b0:3c: 18:c9:43:df:fa:b6:a3:22:ce:6c:90:12:e6:e0:d3:74:ed:bf: 52:bb:00:50:f0:ac:e5:31:e3:7b:a4:f1:8e:66:bc:aa:ff:bf: 0d:59:38:2f:23:f9:98:6c:34:f7:37:54:37:04:38:9f:31:0a: 12:30:20:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ41dw6OsAQdtLRicFvAfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjUxMjI2MDkwMDI5WhcNMjUxMjI3MDkwMDI5WjAzMTEwLwYDVQQD EyhjOGM1NjMyZWQwZDRhNDA1ZWU2NGI4YWJjY2Y3MjI5ZTI3MGQ1YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjl59Qc1p7xRda++d9uiZpfMJGvD Cv399isjZCbYKwu3gM66pKvUHl3cf1kn9MpjB4hyjUmfejFsKcpXDJboAvUlQRkt tMjcBx+eM75RUbaWe8VJ7EqJLUxHWJ3klCUFYRHzfb8TIix43EqBBburnqKNA04m XLaOglYESVZH7cpvG8QHyJKrjiVpLHqfB57nkbcgmug7/tgTcGsA7R1Of+UZt4d2 Qd9VkWQPsqr2ngbRjeXcUJj4qA0ovfcPvbpA15gbgYf6vm2vIchGS9b6GbPdHJm3 PFN479A8deGXUP+vcAMhgUW8DoQuPkFrBsax4uABLY8/X0xTvJNlz9/O+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjFYy7Q1KQF7mS4q8z3Ip4nDVtMMB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeo6ygXv Eyo6Vl9U25PtEe1GeJlOee36l4pPHRVSaxhW75ePUg/DLCSG9sni9DoIrLfXzYSt bh9z3JkTCpWn+49xQ+BpDe0cy/MX6gX3nU8AeeuiFe2tA2brDpT4n4zh5uHbEyfk iDyYPjid3gnEl7CiSv+G5wDWE12HFU8Bw+l1c4k2b9v9fCpygIgwaAZYt2g1UVkw LZmnHynRkdXXvlKBI9d6wJyo70j7chJ8eeaSB/EPT5nCXGDFqkvVH/u27gY8ErA8 GMlD3/q2oyLObJAS5uDTdO2/UrsAUPCs5THje6Txjma8qv+/DVk4LyP5mGw09zdU NwQ4nzEKEjAgvg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:01 2025 by rpki-client