This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json) Hash identifier: fagbNAEtcIOyRNymfkkISxfas1F0DVsUyH4lbzk1VlA= Subject key identifier: BA:F1:7D:F9:21:48:6C:DC:43:1B:35:16:28:03:36:97:69:29:5F:EE Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff Certificate serial: 019B1C4E07AED85508205FB377EEB0EAE11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft Manifest number: 03D2 Signing time: Sun 14 Dec 2025 10:00:34 +0000 Manifest this update: Sun 14 Dec 2025 10:00:34 +0000 Manifest next update: Mon 15 Dec 2025 10:00:34 +0000 Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: bUJqE2vQ6jfWZpS5g54BwBkww2W741K59WV66U+9a8k=) 2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:07:ae:d8:55:08:20:5f:b3:77:ee:b0:ea:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff Validity Not Before: Dec 14 10:00:34 2025 GMT Not After : Dec 15 10:00:34 2025 GMT Subject: CN=baf17df921486cdc431b35162803369769295fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:e0:57:65:a2:32:48:7b:14:fa:fe:da:24: 0d:c8:86:21:1e:a7:a3:ab:14:a0:e4:4a:f5:82:64: 5c:c9:8a:ca:d0:c5:1d:b8:a7:ec:69:fd:1e:10:4d: 38:03:cd:e8:6d:3a:29:58:72:6c:77:98:e7:45:93: 9f:b5:39:77:b2:ff:c3:1f:43:98:58:83:ff:30:30: ed:c9:d3:a8:08:d1:6f:b7:cf:98:40:34:c9:f7:20: bc:35:53:7b:df:3a:41:a7:95:52:29:c9:00:95:61: eb:e6:93:8c:f4:35:f5:5a:45:62:78:87:71:d9:49: 01:9f:7c:c3:46:07:fd:44:64:84:33:6e:6e:f0:0d: 5e:6c:ec:66:04:43:a0:c0:e0:48:ec:74:98:4e:e0: 69:8e:f7:af:07:07:3c:53:53:93:61:a8:43:1a:38: eb:9e:7b:a6:90:84:5e:4b:32:8d:e9:59:62:e7:19: 0c:1d:36:e1:89:26:1b:f7:c4:33:bc:2e:69:f4:15: 48:05:51:35:96:bf:64:0f:d4:a0:f5:b5:1c:d1:dd: d2:1b:99:72:a7:6d:80:a3:64:95:fd:e8:6d:19:1f: 6e:52:62:d1:99:28:ff:d1:08:b3:e5:c7:d5:00:8a: 25:0f:f4:df:9f:7b:e5:a3:6a:3d:a5:ac:8c:91:6e: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:7D:F9:21:48:6C:DC:43:1B:35:16:28:03:36:97:69:29:5F:EE X509v3 Authority Key Identifier: keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:38:9a:eb:5c:25:e3:c8:1e:eb:cc:08:70:07:67:4e:cb:1f: d3:36:07:73:20:e0:bd:1b:ea:84:df:d3:e8:f9:23:96:ad:79: 86:dd:ad:90:c5:ca:42:ee:40:78:b5:dd:0d:04:08:24:e0:41: 02:c7:80:15:cc:61:0e:4a:00:94:0b:f8:5b:30:0d:59:de:3e: 68:f1:5c:a6:b0:82:09:37:85:68:46:4a:9e:e2:99:de:17:5b: f9:92:bb:c3:6c:f4:7e:6e:1f:dc:28:bd:b7:95:9b:76:3d:cb: 79:f7:89:23:56:b0:98:1d:ae:ef:a6:1b:47:8a:bf:de:09:ff: bb:ca:e5:a6:ab:69:ea:b0:6c:60:8c:51:a2:d8:7a:3b:f5:51: d8:78:6f:1f:13:d6:3a:a1:f5:f2:4b:06:59:75:ec:8d:92:f7: 87:1f:55:ef:e8:3f:43:4c:33:f4:18:6c:9d:93:d1:98:b8:f1: ff:6a:67:b7:09:bb:7b:0c:35:2e:de:c4:ba:93:6c:6e:cb:7c: b5:cb:4f:e8:a1:e9:24:cc:eb:21:0d:db:80:c0:ae:2b:07:37: 87:27:7c:f0:ba:0b:ab:83:1e:7d:80:57:1a:3e:5f:4b:05:2c: 0c:65:e9:bd:e6:fa:08:fc:9d:9c:c0:a8:e8:bf:86:96:11:94: f2:6e:a7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTgeu2FUIIF+zd+6w6uEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5 N2M0ZmYwHhcNMjUxMjE0MTAwMDM0WhcNMjUxMjE1MTAwMDM0WjAzMTEwLwYDVQQD EyhiYWYxN2RmOTIxNDg2Y2RjNDMxYjM1MTYyODAzMzY5NzY5Mjk1ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0DgV2WiMkh7FPr+2iQNyIYhHqej qxSg5Er1gmRcyYrK0MUduKfsaf0eEE04A83obTopWHJsd5jnRZOftTl3sv/DH0OY WIP/MDDtydOoCNFvt8+YQDTJ9yC8NVN73zpBp5VSKckAlWHr5pOM9DX1WkVieIdx 2UkBn3zDRgf9RGSEM25u8A1ebOxmBEOgwOBI7HSYTuBpjvevBwc8U1OTYahDGjjr nnumkIReSzKN6Vli5xkMHTbhiSYb98QzvC5p9BVIBVE1lr9kD9Sg9bUc0d3SG5ly p22Ao2SV/ehtGR9uUmLRmSj/0Qiz5cfVAIolD/Tfn3vlo2o9payMkW4NtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrxffkhSGzcQxs1FigDNpdpKV/uMB8GA1UdIwQY MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDia61wl 48ge68wIcAdnTssf0zYHcyDgvRvqhN/T6Pkjlq15ht2tkMXKQu5AeLXdDQQIJOBB AseAFcxhDkoAlAv4WzANWd4+aPFcprCCCTeFaEZKnuKZ3hdb+ZK7w2z0fm4f3Ci9 t5Wbdj3LefeJI1awmB2u76YbR4q/3gn/u8rlpqtp6rBsYIxRoth6O/VR2HhvHxPW OqH18ksGWXXsjZL3hx9V7+g/Q0wz9BhsnZPRmLjx/2pntwm7eww1Lt7EupNsbst8 tctP6KHpJMzrIQ3bgMCuKwc3hyd88LoLq4MefYBXGj5fSwUsDGXpveb6CPydnMCo 6L+GlhGU8m6nvQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:41:47 2025 by rpki-client