This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json) Hash identifier: bNoZEz2LzIZ4z1alqR2itqJYhXnsJTcAeu1jWw3FHPg= Subject key identifier: 12:D5:36:A7:1A:6E:78:1F:47:29:8F:A5:26:4B:03:CF:DA:C3:CE:CE Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Certificate serial: 019B1F871486CAFB2B708B0ABF09B385AC1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft Manifest number: 0AB0 Signing time: Mon 15 Dec 2025 01:01:44 +0000 Manifest this update: Mon 15 Dec 2025 01:01:44 +0000 Manifest next update: Tue 16 Dec 2025 01:01:44 +0000 Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: zbmjEGvg0LePx20PqtShpnBPhQYqHpE5ob6DLr6QgDA=) 2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:14:86:ca:fb:2b:70:8b:0a:bf:09:b3:85:ac:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Validity Not Before: Dec 15 01:01:44 2025 GMT Not After : Dec 16 01:01:44 2025 GMT Subject: CN=12d536a71a6e781f47298fa5264b03cfdac3cece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:6d:c5:29:fe:43:bd:5e:4c:6d:c8:01:b1: 2b:8d:96:83:1c:ff:d6:b1:ca:54:29:cf:30:d6:c3: 99:9a:ba:be:9a:19:a8:3f:f4:81:8b:c4:de:ae:be: e9:02:a3:2d:59:bf:e7:30:db:6a:9a:99:09:a3:e8: cb:5a:df:da:c2:45:fc:ad:af:c2:3a:e8:f3:4f:7d: 7e:5d:0a:48:2b:3c:3a:f8:68:88:9d:eb:ed:ed:dc: a1:3f:6e:d2:70:d0:50:dc:12:44:e2:07:98:a3:c6: 1c:e9:54:29:ed:26:6f:99:6b:dc:7a:9d:cd:c4:69: 98:90:b5:bc:db:56:f9:7e:6a:80:7e:59:1a:f6:f8: bb:9e:44:a6:fb:d3:be:f1:0e:4e:46:92:33:07:36: 6a:0c:ee:9b:22:76:c9:e3:d4:58:a2:9d:e4:03:9d: 55:a6:79:3f:c9:24:3a:d6:c1:93:e0:c8:f9:83:20: 56:5b:b6:13:16:01:7d:b2:05:6d:da:34:0b:29:ec: 2e:2a:c6:e4:cd:57:65:5f:9f:ce:18:f7:3c:a8:11: 96:99:f4:3d:76:f8:cd:a1:a1:0c:ff:06:52:13:20: 54:03:df:ea:f2:af:ef:c8:23:02:01:d3:5b:0c:ba: cf:59:d8:14:4c:79:bc:44:89:b7:93:ce:2c:15:31: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:36:A7:1A:6E:78:1F:47:29:8F:A5:26:4B:03:CF:DA:C3:CE:CE X509v3 Authority Key Identifier: keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:78:56:cf:fd:a5:72:f3:cf:3b:00:67:81:4c:74:b7:02:c3: ad:78:ee:a6:b1:d5:64:e4:2e:a1:01:88:f3:f8:68:54:86:1c: 75:35:2f:25:54:4b:02:91:05:8c:1a:13:02:e0:5e:a2:c5:bc: bc:f1:d1:f0:db:d4:f7:fd:3e:c9:08:fa:80:c4:36:bd:e2:0e: 8e:53:a7:41:cf:8a:c0:d8:1d:7d:e1:bb:16:4f:3f:9d:17:92: 99:07:fd:c8:2d:32:42:25:bc:9c:04:85:db:3c:d1:e1:28:01: 0e:ed:f0:67:41:51:71:95:e6:8b:63:b0:8e:53:e2:54:45:0d: bb:ac:12:36:f1:2a:76:2d:55:07:5a:03:fd:81:e4:e4:e2:89: b4:ad:9d:21:82:fc:21:e8:46:02:00:4a:f5:a8:ed:f7:d6:3f: e4:2e:1e:18:72:55:2f:65:5e:57:f9:76:03:7c:e9:7e:aa:aa: 64:60:32:99:5c:3a:5c:c9:ed:ac:39:42:04:ce:49:5c:fa:e1: 98:f6:27:de:3e:58:0a:cd:42:a5:49:6d:3e:79:1a:03:e8:da: 55:e0:52:ef:48:ae:63:ff:85:ab:df:27:9f:58:3d:c9:16:20: a4:e9:f0:ae:a5:79:d1:60:3e:ad:ec:68:54:44:8a:27:65:00: 59:71:d3:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhxSGyvsrcIsKvwmzhawaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi ZmUwZTAwHhcNMjUxMjE1MDEwMTQ0WhcNMjUxMjE2MDEwMTQ0WjAzMTEwLwYDVQQD EygxMmQ1MzZhNzFhNmU3ODFmNDcyOThmYTUyNjRiMDNjZmRhYzNjZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zFtxSn+Q71eTG3IAbErjZaDHP/W scpUKc8w1sOZmrq+mhmoP/SBi8Terr7pAqMtWb/nMNtqmpkJo+jLWt/awkX8ra/C OujzT31+XQpIKzw6+GiInevt7dyhP27ScNBQ3BJE4geYo8Yc6VQp7SZvmWvcep3N xGmYkLW821b5fmqAflka9vi7nkSm+9O+8Q5ORpIzBzZqDO6bInbJ49RYop3kA51V pnk/ySQ61sGT4Mj5gyBWW7YTFgF9sgVt2jQLKewuKsbkzVdlX5/OGPc8qBGWmfQ9 dvjNoaEM/wZSEyBUA9/q8q/vyCMCAdNbDLrPWdgUTHm8RIm3k84sFTFVTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLVNqcabngfRymPpSZLA8/aw87OMB8GA1UdIwQY MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt ZWE2ZjcwNWQyYzBkLzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnhWz/2l cvPPOwBngUx0twLDrXjuprHVZOQuoQGI8/hoVIYcdTUvJVRLApEFjBoTAuBeosW8 vPHR8NvU9/0+yQj6gMQ2veIOjlOnQc+KwNgdfeG7Fk8/nReSmQf9yC0yQiW8nASF 2zzR4SgBDu3wZ0FRcZXmi2OwjlPiVEUNu6wSNvEqdi1VB1oD/YHk5OKJtK2dIYL8 IehGAgBK9ajt99Y/5C4eGHJVL2VeV/l2A3zpfqqqZGAymVw6XMntrDlCBM5JXPrh mPYn3j5YCs1CpUltPnkaA+jaVeBS70iuY/+Fq98nn1g9yRYgpOnwrqV50WA+rexo VESKJ2UAWXHTiA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:28 2025 by rpki-client