This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json) Hash identifier: mYZUK6SrKpbRkaXJbO0Q8anEQJgUR/V9ejDCON4Q25w= Subject key identifier: 92:CF:40:C4:E3:EC:07:D5:C3:FA:4C:4E:7B:04:90:FA:8B:61:02:AF Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B1D997E04608F953FE1536D383A6A644E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 16:02:36 +0000 Manifest this update: Sun 14 Dec 2025 16:02:36 +0000 Manifest next update: Mon 15 Dec 2025 16:02:36 +0000 Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: NXv+8WWyy7il/D86y2Rd9hntdyVzvWVPVfBu1jnpSvs=) 2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=) 3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:7e:04:60:8f:95:3f:e1:53:6d:38:3a:6a:64:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Dec 14 16:02:36 2025 GMT Not After : Dec 15 16:02:36 2025 GMT Subject: CN=92cf40c4e3ec07d5c3fa4c4e7b0490fa8b6102af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:9a:68:1e:78:a5:47:12:5c:e8:00:15:30: f4:3a:0c:6a:14:0b:07:7c:d2:e1:dc:58:32:96:84: 42:eb:5b:5e:c7:96:03:bc:c8:1d:38:d3:b8:ad:cc: c2:2c:4b:a6:b7:d0:ed:e3:67:7f:41:f8:15:2d:bc: cd:0a:a2:44:43:95:61:91:c9:38:0e:72:18:57:9a: 08:cd:19:eb:bd:82:fb:8f:08:81:c9:6b:1d:93:b4: c7:bb:4c:be:c0:bd:b5:e3:67:63:de:81:ea:99:0f: af:ce:0a:e1:9a:b0:cb:a1:64:48:10:bb:27:19:c9: 4c:38:1c:03:69:cf:33:d8:04:78:9b:73:4c:7e:ec: 15:e5:e0:7c:4d:c2:ce:2f:73:a8:ca:41:2e:18:4f: 6f:a2:36:3c:4c:9d:47:15:4e:08:ae:e9:c4:7e:24: 0c:c1:ce:8e:b2:e9:c5:6b:98:5c:b1:c6:4b:f7:e1: 0d:96:6f:bd:91:71:d4:94:f0:a8:94:78:50:bf:65: 68:65:bc:09:e3:8b:4a:b0:2a:7b:d9:50:44:67:c9: c3:f8:47:4d:df:18:9d:48:f2:59:40:1f:b4:0b:98: 9a:20:74:b7:ab:57:52:ca:7b:a1:16:35:71:7d:ab: de:65:61:29:de:89:8f:d7:31:f4:b0:c4:37:81:da: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:40:C4:E3:EC:07:D5:C3:FA:4C:4E:7B:04:90:FA:8B:61:02:AF X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:27:40:54:69:b4:47:95:f3:21:58:6a:4b:fe:c5:c5:e4:29: 61:5a:73:80:43:ce:e3:98:2c:a4:4a:e7:61:8d:75:51:39:51: 8b:b3:43:6b:30:87:90:b0:a3:9c:d2:10:56:2d:2b:ac:7a:71: 2f:50:0a:df:27:39:e1:76:91:4f:43:d1:35:9c:b4:ec:43:ae: 7e:e1:a5:4d:3a:eb:bf:4f:10:08:5a:58:ad:32:d8:be:c9:e6: 9c:0a:54:4f:72:5e:4a:be:2c:2f:29:7b:3c:4e:7c:7d:d1:d8: 85:87:8f:8a:71:df:ab:ad:65:30:d4:e6:05:ab:08:58:b9:a7: 18:ce:fe:ec:12:70:79:ec:d3:ac:4a:d3:bb:e6:c1:b2:ba:42: 9b:fe:23:b3:3e:ea:96:f3:05:4d:62:cf:cd:96:a9:46:7e:b5: 19:bb:c9:a1:0e:64:91:71:53:00:53:cb:07:19:ec:ec:41:36: c3:7c:0a:58:5e:bf:ab:af:e0:3a:e5:d4:5b:a4:7e:5c:74:54: 53:8d:39:4b:be:03:d1:be:7a:e0:fc:15:4d:20:f3:fb:ba:17: d7:4d:68:f0:ed:a3:e1:77:7a:f1:61:e2:45:d4:c8:07:0c:c6: 4a:02:06:66:6b:d9:34:4b:3f:b2:38:74:d1:b2:fc:9d:e7:39: 14:a1:3e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmX4EYI+VP+FTbTg6amROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjUxMjE0MTYwMjM2WhcNMjUxMjE1MTYwMjM2WjAzMTEwLwYDVQQD Eyg5MmNmNDBjNGUzZWMwN2Q1YzNmYTRjNGU3YjA0OTBmYThiNjEwMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/aaaB54pUcSXOgAFTD0OgxqFAsH fNLh3FgyloRC61tex5YDvMgdONO4rczCLEumt9Dt42d/QfgVLbzNCqJEQ5Vhkck4 DnIYV5oIzRnrvYL7jwiByWsdk7THu0y+wL2142dj3oHqmQ+vzgrhmrDLoWRIELsn GclMOBwDac8z2AR4m3NMfuwV5eB8TcLOL3OoykEuGE9vojY8TJ1HFU4IrunEfiQM wc6OsunFa5hcscZL9+ENlm+9kXHUlPColHhQv2VoZbwJ44tKsCp72VBEZ8nD+EdN 3xidSPJZQB+0C5iaIHS3q1dSynuhFjVxfaveZWEp3omP1zH0sMQ3gdqW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLPQMTj7AfVw/pMTnsEkPqLYQKvMB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCdAVGm0 R5XzIVhqS/7FxeQpYVpzgEPO45gspErnYY11UTlRi7NDazCHkLCjnNIQVi0rrHpx L1AK3yc54XaRT0PRNZy07EOufuGlTTrrv08QCFpYrTLYvsnmnApUT3JeSr4sLyl7 PE58fdHYhYePinHfq61lMNTmBasIWLmnGM7+7BJweezTrErTu+bBsrpCm/4jsz7q lvMFTWLPzZapRn61GbvJoQ5kkXFTAFPLBxns7EE2w3wKWF6/q6/gOuXUW6R+XHRU U405S74D0b564PwVTSDz+7oX101o8O2j4Xd68WHiRdTIBwzGSgIGZmvZNEs/sjh0 0bL8nec5FKE+GA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:46 2025 by rpki-client