This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json) Hash identifier: KvYmurHBRr/bVe7SmyjYad8oV7qLiqm9A3j1/2kzJA0= Subject key identifier: DD:78:F9:53:22:87:62:09:F7:94:26:23:B0:7D:18:7C:56:FC:56:47 Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc Certificate serial: 019B38A11A1FAEE6A82741A1DE1B1065F21B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft Manifest number: 09ED Signing time: Fri 19 Dec 2025 22:00:40 +0000 Manifest this update: Fri 19 Dec 2025 22:00:40 +0000 Manifest next update: Sat 20 Dec 2025 22:00:40 +0000 Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: HOahLe4HY3EzSTvOU95c+mJJsclUNACKJZnrRE2UFxM=) 2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:1a:1f:ae:e6:a8:27:41:a1:de:1b:10:65:f2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc Validity Not Before: Dec 19 22:00:40 2025 GMT Not After : Dec 20 22:00:40 2025 GMT Subject: CN=dd78f95322876209f7942623b07d187c56fc5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:2f:50:12:9e:f5:01:c7:23:52:c4:08:e9: 7a:f5:e9:01:8c:e3:ca:de:67:41:9c:db:28:7e:9c: 76:2c:0e:c0:e6:9f:0b:53:64:99:f2:bb:4c:10:4c: 28:fb:6f:f8:26:36:d7:06:f7:15:98:bc:4d:0c:ff: 9e:e0:31:8b:55:51:c6:a3:89:3d:dd:3e:aa:79:71: 78:25:32:2e:05:fb:94:d6:88:34:6f:86:99:0d:aa: 2f:dd:b5:0a:1d:43:e9:31:03:49:7f:d5:cd:23:5a: 04:ce:96:ce:79:f6:c3:29:51:8b:05:6d:d6:f9:36: 98:d0:00:54:64:91:05:72:20:bf:cf:69:60:67:68: 32:f1:ed:bd:00:a9:f7:b3:9b:bd:55:7a:78:a0:e7: 41:b5:b1:bf:b0:a7:9f:41:63:f2:fd:5d:b9:3f:14: 0c:66:02:67:02:b0:91:48:f6:d9:55:44:57:07:06: 3d:92:81:02:8d:a7:e6:93:fb:42:6e:cb:13:00:b3: 8a:9e:b9:96:b8:57:fe:cd:39:3b:e7:f9:56:0a:bb: 49:bd:b8:7e:04:9f:59:fa:98:a3:e9:88:2e:ff:e6: 6f:54:43:23:f6:db:9e:45:2e:4b:c0:b4:84:d0:c0: 6d:1f:37:01:df:6b:bc:d0:5f:a9:c4:92:0e:26:a3: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:F9:53:22:87:62:09:F7:94:26:23:B0:7D:18:7C:56:FC:56:47 X509v3 Authority Key Identifier: keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bc:82:e9:f2:21:d9:92:6b:f6:64:a7:63:e2:c4:bb:55:11: 6d:3d:22:b5:b7:e0:12:ce:72:72:c0:6e:c4:fb:41:5e:dc:23: f5:3e:09:f8:bc:d2:6c:97:6b:27:99:3a:30:a8:9d:82:51:75: fe:23:ad:5f:9e:60:af:bb:1f:69:17:65:50:a9:5c:1a:55:0a: 35:62:1e:79:77:66:a7:b8:1c:79:2c:06:75:5d:53:e5:cd:f6: 9f:41:65:60:a9:90:e5:b7:9b:85:58:2b:8b:c9:69:21:4b:02: 1e:ac:dc:85:d0:4a:7b:82:d9:c4:4d:38:32:43:b2:cb:d0:56: e6:75:96:6f:0a:eb:21:5d:a6:cd:53:f3:5a:05:52:79:d2:a3: fe:1b:e4:e5:6c:1e:12:e8:02:75:e9:43:21:16:14:cd:19:fd: a8:7b:9d:e2:e9:1b:d2:10:3a:d9:73:14:dd:61:e6:71:18:a7: b0:88:30:ef:fd:fa:ad:64:e8:70:33:8f:f8:7b:6f:b7:19:21: fe:0c:1d:d9:32:f7:35:7e:cc:45:cd:a8:bb:5f:8d:8b:23:85: e5:81:0e:26:03:23:7c:2f:18:94:05:21:28:12:f7:7a:6e:1e: 1c:e0:bb:b8:13:21:ad:46:55:15:05:32:b2:ad:a1:60:a7:cd: 7c:16:ba:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oRofruaoJ0Gh3hsQZfIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxN2ExYTYyMjQ4ZGY4NzkxMzNjMDczYWQ1NjJhZDAzYTJi OTJmZGMwHhcNMjUxMjE5MjIwMDQwWhcNMjUxMjIwMjIwMDQwWjAzMTEwLwYDVQQD EyhkZDc4Zjk1MzIyODc2MjA5Zjc5NDI2MjNiMDdkMTg3YzU2ZmM1NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GsvUBKe9QHHI1LECOl69ekBjOPK 3mdBnNsofpx2LA7A5p8LU2SZ8rtMEEwo+2/4JjbXBvcVmLxNDP+e4DGLVVHGo4k9 3T6qeXF4JTIuBfuU1og0b4aZDaov3bUKHUPpMQNJf9XNI1oEzpbOefbDKVGLBW3W +TaY0ABUZJEFciC/z2lgZ2gy8e29AKn3s5u9VXp4oOdBtbG/sKefQWPy/V25PxQM ZgJnArCRSPbZVURXBwY9koECjafmk/tCbssTALOKnrmWuFf+zTk75/lWCrtJvbh+ BJ9Z+pij6Ygu/+ZvVEMj9tueRS5LwLSE0MBtHzcB32u80F+pxJIOJqN8EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN14+VMih2IJ95QmI7B9GHxW/FZHMB8GA1UdIwQY MBaAFOF6GmIkjfh5EzwHOtVirQOiuS/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2Qt NWZkYzg3ZTZkMmEwLzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2QtNWZkYzg3ZTZkMmEw LzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbyC6fIh 2ZJr9mSnY+LEu1URbT0itbfgEs5ycsBuxPtBXtwj9T4J+LzSbJdrJ5k6MKidglF1 /iOtX55gr7sfaRdlUKlcGlUKNWIeeXdmp7gceSwGdV1T5c32n0FlYKmQ5bebhVgr i8lpIUsCHqzchdBKe4LZxE04MkOyy9BW5nWWbwrrIV2mzVPzWgVSedKj/hvk5Wwe EugCdelDIRYUzRn9qHud4ukb0hA62XMU3WHmcRinsIgw7/36rWTocDOP+Htvtxkh /gwd2TL3NX7MRc2ou1+NiyOF5YEOJgMjfC8YlAUhKBL3em4eHOC7uBMhrUZVFQUy sq2hYKfNfBa64g== -----END CERTIFICATE-----Generated at Sat Dec 20 05:51:29 2025 by rpki-client