This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json) Hash identifier: hSWBp0DHWqHw/oNBaJNR30cUsMWFf8nDwgqp+6Bhub8= Subject key identifier: 73:3F:82:62:B6:AB:16:E9:AD:01:D9:B1:A5:D8:B3:C6:2E:28:FF:D6 Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Certificate serial: 019B5A884DD631B0FE9B3C76F3CF5611C9A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft Manifest number: 0A1D Signing time: Fri 26 Dec 2025 12:00:40 +0000 Manifest this update: Fri 26 Dec 2025 12:00:40 +0000 Manifest next update: Sat 27 Dec 2025 12:00:40 +0000 Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=) 2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: yjipKH2T8CVgGB1KPJ+2fjX4sk96tj1q3Dgag/yUPgc=) 3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4d:d6:31:b0:fe:9b:3c:76:f3:cf:56:11:c9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Validity Not Before: Dec 26 12:00:40 2025 GMT Not After : Dec 27 12:00:40 2025 GMT Subject: CN=733f8262b6ab16e9ad01d9b1a5d8b3c62e28ffd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:93:a6:4b:a4:fd:9a:b4:90:97:83:9a:91: b9:ce:2d:c1:56:4a:b3:38:fb:f6:aa:78:88:db:12: b5:dc:18:36:71:be:ff:a3:2e:9a:56:7f:d2:c7:b3: 41:fd:f7:51:ee:8e:5d:a1:0e:27:54:e9:7f:16:dd: 28:e8:1d:4b:6e:d0:35:f0:f0:1e:62:c2:bc:be:6e: 73:94:94:2c:f4:5a:14:3d:38:4f:66:fa:08:78:d0: 6d:5b:52:86:57:b0:ff:33:e6:f2:a0:71:98:2d:f2: fa:21:48:37:a2:e9:95:96:93:17:f3:bd:f6:b7:96: 2c:92:0c:08:0d:b5:1f:6d:48:67:59:a2:88:ce:b6: cc:62:25:38:34:a9:74:7c:03:94:c2:54:96:8b:d7: 4c:28:af:67:ff:4c:cb:7b:a2:21:68:fe:04:8a:61: e8:7b:8c:04:68:2b:cf:0a:9b:55:b3:a8:a2:72:ae: 94:cf:0d:a2:68:6e:18:d3:38:7e:55:b6:62:8d:21: 47:15:d4:af:e5:b1:d5:32:be:56:86:44:30:7f:7b: f1:e1:cb:c4:b9:b1:d2:a7:54:fc:c4:39:ff:21:0d: ba:b5:09:37:f0:a4:ec:7d:d5:45:ff:07:f3:5c:12: e7:8d:cc:bc:fe:d3:e3:13:5a:e2:a9:8a:bd:cc:81: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3F:82:62:B6:AB:16:E9:AD:01:D9:B1:A5:D8:B3:C6:2E:28:FF:D6 X509v3 Authority Key Identifier: keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:19:f0:67:3a:ed:bb:a7:71:a2:ca:92:8d:18:0f:e1:48:f4: c8:af:4c:cc:21:f7:0a:cb:98:4f:14:a3:c7:4e:dd:66:c9:ba: 57:0f:17:09:47:4f:32:ae:d9:4b:7c:35:58:01:38:f0:65:91: 11:72:b4:66:5e:df:05:f9:08:b1:8e:a8:e7:1e:25:fd:4a:e9: 7b:29:db:5d:e7:23:ef:57:f2:d6:3c:f1:49:c9:14:31:79:6d: 34:53:37:b6:92:ac:49:2c:95:24:0f:97:46:f2:58:e6:6e:78: 9a:12:e3:b7:3f:54:b5:1c:8a:0e:c1:85:70:15:3e:db:75:c0: f8:9d:ef:d4:60:14:d9:e0:39:d7:dc:21:1e:9c:11:79:ac:5c: 4c:0a:ce:24:8f:59:bc:7f:85:ce:18:71:f5:9f:c9:ca:ed:8a: b8:3c:cc:a4:50:c6:af:6f:e0:98:7b:cf:44:3f:c6:80:4c:bb: e1:2b:0e:65:8c:44:38:89:6b:31:c8:2b:70:39:4c:aa:39:ef: 8b:0d:c1:95:de:d7:64:b7:49:12:4b:2b:cd:5d:77:22:6a:ef: b0:60:7b:68:b8:b5:99:9c:1f:54:a6:15:38:17:93:af:3d:b6: d3:a4:4f:5b:54:eb:6f:63:15:32:27:96:ef:89:b5:a3:af:34: db:24:33:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE3WMbD+mzx2889WEcmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0 YTdiYTgwHhcNMjUxMjI2MTIwMDQwWhcNMjUxMjI3MTIwMDQwWjAzMTEwLwYDVQQD Eyg3MzNmODI2MmI2YWIxNmU5YWQwMWQ5YjFhNWQ4YjNjNjJlMjhmZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ziTpkuk/Zq0kJeDmpG5zi3BVkqz OPv2qniI2xK13Bg2cb7/oy6aVn/Sx7NB/fdR7o5doQ4nVOl/Ft0o6B1LbtA18PAe YsK8vm5zlJQs9FoUPThPZvoIeNBtW1KGV7D/M+byoHGYLfL6IUg3oumVlpMX8732 t5YskgwIDbUfbUhnWaKIzrbMYiU4NKl0fAOUwlSWi9dMKK9n/0zLe6IhaP4EimHo e4wEaCvPCptVs6iicq6Uzw2iaG4Y0zh+VbZijSFHFdSv5bHVMr5WhkQwf3vx4cvE ubHSp1T8xDn/IQ26tQk38KTsfdVF/wfzXBLnjcy8/tPjE1riqYq9zIEoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM/gmK2qxbprQHZsaXYs8YuKP/WMB8GA1UdIwQY MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxnwZzrt u6dxosqSjRgP4Uj0yK9MzCH3CsuYTxSjx07dZsm6Vw8XCUdPMq7ZS3w1WAE48GWR EXK0Zl7fBfkIsY6o5x4l/UrpeynbXecj71fy1jzxSckUMXltNFM3tpKsSSyVJA+X RvJY5m54mhLjtz9UtRyKDsGFcBU+23XA+J3v1GAU2eA519whHpwReaxcTArOJI9Z vH+Fzhhx9Z/Jyu2KuDzMpFDGr2/gmHvPRD/GgEy74SsOZYxEOIlrMcgrcDlMqjnv iw3Bld7XZLdJEksrzV13ImrvsGB7aLi1mZwfVKYVOBeTrz2206RPW1Trb2MVMieW 74m1o6802yQz+g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client