This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json) Hash identifier: A6D82XC5eNZp5qquGAdvD/5uloYnJK8f2GwPnEGTuF0= Subject key identifier: 09:C2:21:F3:56:D9:C4:C8:E7:9C:20:C1:88:00:03:74:58:46:BB:FF Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019B4ADE78EF603E5C60CACBD2D626EE9640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft Manifest number: 14E1 Signing time: Tue 23 Dec 2025 11:00:52 +0000 Manifest this update: Tue 23 Dec 2025 11:00:52 +0000 Manifest next update: Wed 24 Dec 2025 11:00:52 +0000 Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: ecZprxq8Dl617WXZ607GnZDShnqKB92tCUfWEJGxKU8=) 2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:78:ef:60:3e:5c:60:ca:cb:d2:d6:26:ee:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Dec 23 11:00:52 2025 GMT Not After : Dec 24 11:00:52 2025 GMT Subject: CN=09c221f356d9c4c8e79c20c1880003745846bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:68:5d:14:30:8e:7b:df:ec:4d:ad:3e:aa: ab:13:50:3e:34:b0:9d:35:c8:fd:06:0a:cf:ca:02: 31:87:07:3b:5e:16:52:8f:7e:ac:94:2d:2e:77:6c: e5:17:b0:20:92:1b:94:0a:18:3f:92:c4:08:db:16: 99:57:41:79:6e:39:a5:3e:b6:b5:42:2c:ab:35:e5: cd:c4:0f:49:ab:a4:80:50:6e:34:58:22:db:8a:35: b9:c6:6c:66:ba:80:73:cb:bc:8b:e7:b8:79:50:c7: 22:b4:30:09:38:8e:41:9a:9a:6b:f4:f7:80:00:db: cd:f6:48:4d:c1:2a:2d:ac:4a:9f:3a:23:bb:b4:eb: d0:87:5e:1c:c4:45:31:3a:95:51:37:c7:a4:77:ea: 89:f4:a1:2d:fc:34:56:6f:ad:37:b1:8a:ae:7d:df: f9:1c:c2:30:96:7a:f7:b6:2b:c2:3f:10:39:49:c2: f0:b4:d5:df:45:02:86:44:9c:9b:2c:f1:cb:81:79: 80:68:2b:41:b7:3d:e4:80:7a:c1:81:bd:4b:f3:f1: a1:6b:83:09:76:54:5c:25:c2:97:79:8c:70:a5:23: 39:4d:0a:18:36:5b:c4:4c:f0:9a:65:a7:b1:34:ef: 2e:b1:0e:bf:76:ca:8e:39:73:fc:c0:ce:51:43:52: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C2:21:F3:56:D9:C4:C8:E7:9C:20:C1:88:00:03:74:58:46:BB:FF X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:56:59:04:3f:f3:64:49:b6:62:17:c4:3f:4e:59:3c:7e:b3: 7d:78:42:94:a5:3b:96:a4:56:1e:c2:cf:db:40:8e:14:85:2c: 26:04:7d:41:91:bb:ad:6c:d9:79:cc:f0:57:11:d2:58:33:7c: 1b:a9:bf:a4:27:47:ce:bd:4b:6f:f8:9a:68:ff:07:74:0b:cd: 05:d9:cb:ca:56:c2:33:f9:89:8f:8b:e1:8e:bd:7a:a5:a2:88: e2:31:28:76:4c:78:20:3e:01:2e:b0:9d:02:34:7b:f3:e4:fc: 82:96:2d:f1:e2:b2:53:da:bd:8c:d5:c1:d8:c3:e4:f0:2c:5f: 21:57:81:d2:7f:6d:21:64:b1:58:32:cc:99:fa:be:f5:81:30: 0e:0b:3c:6f:b6:55:98:8a:96:fe:4d:ef:97:41:95:36:f9:4a: a2:58:9a:28:35:1f:77:82:c9:97:a2:c9:a4:17:d3:75:d7:28: ca:a3:73:a3:4b:46:42:67:35:3e:99:91:74:fe:ae:3d:82:07: 2f:95:86:b1:56:91:18:f4:d9:4e:e5:2f:ef:9a:4d:4e:a7:bf: 17:2e:29:95:e3:21:fe:68:85:ef:53:b7:b3:80:90:aa:ec:3a: 55:c3:2d:83:7b:b2:80:f7:2a:eb:c7:f3:3a:82:35:12:b8:22: f3:0a:87:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3njvYD5cYMrL0tYm7pZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjUxMjIzMTEwMDUyWhcNMjUxMjI0MTEwMDUyWjAzMTEwLwYDVQQD EygwOWMyMjFmMzU2ZDljNGM4ZTc5YzIwYzE4ODAwMDM3NDU4NDZiYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmdoXRQwjnvf7E2tPqqrE1A+NLCd Ncj9BgrPygIxhwc7XhZSj36slC0ud2zlF7AgkhuUChg/ksQI2xaZV0F5bjmlPra1 QiyrNeXNxA9Jq6SAUG40WCLbijW5xmxmuoBzy7yL57h5UMcitDAJOI5Bmppr9PeA ANvN9khNwSotrEqfOiO7tOvQh14cxEUxOpVRN8ekd+qJ9KEt/DRWb603sYqufd/5 HMIwlnr3tivCPxA5ScLwtNXfRQKGRJybLPHLgXmAaCtBtz3kgHrBgb1L8/Gha4MJ dlRcJcKXeYxwpSM5TQoYNlvETPCaZaexNO8usQ6/dsqOOXP8wM5RQ1K+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnCIfNW2cTI55wgwYgAA3RYRrv/MB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1ZZBD/z ZEm2YhfEP05ZPH6zfXhClKU7lqRWHsLP20COFIUsJgR9QZG7rWzZeczwVxHSWDN8 G6m/pCdHzr1Lb/iaaP8HdAvNBdnLylbCM/mJj4vhjr16paKI4jEodkx4ID4BLrCd AjR78+T8gpYt8eKyU9q9jNXB2MPk8CxfIVeB0n9tIWSxWDLMmfq+9YEwDgs8b7ZV mIqW/k3vl0GVNvlKoliaKDUfd4LJl6LJpBfTddcoyqNzo0tGQmc1PpmRdP6uPYIH L5WGsVaRGPTZTuUv75pNTqe/Fy4pleMh/miF71O3s4CQquw6VcMtg3uygPcq68fz OoI1Ergi8wqHIQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:01:00 2025 by rpki-client