This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json) Hash identifier: Mw6Zv7G8A38YQh6Y4Epdjkgt+7Wl9KtEyMe1ZWkiSqU= Subject key identifier: 3D:C3:81:5F:5D:85:16:A8:F1:6D:74:05:4C:73:C0:34:B5:98:F4:13 Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93 Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93 Certificate serial: 019B5975882711AB170DFBC6683ED4D8DDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 07:00:33 +0000 Manifest this update: Fri 26 Dec 2025 07:00:33 +0000 Manifest next update: Sat 27 Dec 2025 07:00:33 +0000 Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: ZH3S7otk6BTfKsNeYk/HnbMMb9cxvu95B5LPB53R4hM=) 2: BiNIPlrjeE3rdm2XK22vRf-wuzQ.roa (hash: ezcE9QgtvtC5wwnkaiaobICKGA7cBVTWIAYbMzMm22U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:88:27:11:ab:17:0d:fb:c6:68:3e:d4:d8:dd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93 Validity Not Before: Dec 26 07:00:33 2025 GMT Not After : Dec 27 07:00:33 2025 GMT Subject: CN=3dc3815f5d8516a8f16d74054c73c034b598f413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:2b:6c:6e:06:99:54:01:f1:dd:43:9c:71: 1f:b6:cb:e1:ab:e7:e6:e5:8d:db:70:26:8e:df:71: 45:57:2d:4e:3b:8d:e0:a9:b7:97:4c:cf:cd:8f:a2: 54:db:5e:b1:75:50:18:fc:e1:67:49:d2:b8:cf:5a: 7b:1f:80:c4:55:00:1a:34:29:7f:ba:1a:08:3d:5c: e8:e4:c4:03:42:87:3b:a6:3e:6c:fa:40:96:38:ef: f0:12:6f:cf:84:22:0f:65:db:91:9c:70:63:78:9c: de:97:03:d8:59:36:dd:13:65:a7:5d:40:bd:99:63: 0d:46:9f:3c:6b:4b:06:93:d3:c9:05:d4:f7:8e:9d: e2:b4:6a:aa:f8:bf:41:c0:eb:b5:0e:3a:e8:d4:f3: 8a:fe:3b:98:08:2d:43:56:03:c3:0c:de:e4:e4:00: 40:44:66:e3:a4:7c:a4:97:e5:0f:70:b7:e7:cd:8b: 34:47:22:f6:d2:b4:f0:9f:86:a5:01:d8:2d:f8:a8: 82:eb:0e:04:a4:a4:f1:35:2d:24:1b:81:ea:9f:0f: 70:21:98:72:4e:4c:f0:03:08:d7:fd:d9:c5:81:2c: 0b:31:53:8c:21:f6:90:fb:60:63:b6:91:47:3f:94: 9c:f6:ef:28:31:98:90:66:40:a4:24:11:fd:83:e9: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C3:81:5F:5D:85:16:A8:F1:6D:74:05:4C:73:C0:34:B5:98:F4:13 X509v3 Authority Key Identifier: keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:21:a5:4c:83:9f:47:f0:34:ad:b6:6c:19:3c:bf:9d:c7:ce: c5:c6:e0:27:80:af:13:cc:ad:d0:9f:a5:c0:71:23:5a:d3:97: 70:89:18:30:b6:15:aa:74:ae:4c:ce:ce:3a:e5:0c:66:1a:5f: af:6e:fb:fc:75:b5:31:e5:70:f7:bb:67:33:c2:ff:26:af:93: ae:cc:c9:6d:ea:95:3a:92:c9:ec:6d:e7:f6:af:8e:48:01:7c: 69:67:0c:af:d4:3c:7a:c7:80:a7:f7:15:f5:a0:10:6f:37:12: a3:0b:c1:c2:aa:9e:79:0e:44:d3:7a:fb:bb:bf:ee:e9:b2:cc: f2:f1:c5:7b:8f:39:0b:b7:19:a6:d3:10:92:07:3f:f0:ab:d4: 41:e3:82:e5:5e:de:79:5d:06:91:97:e2:a1:9c:0a:3c:dd:41: cb:58:78:2a:72:b3:0b:9c:2c:16:16:55:9d:7b:f0:18:97:f2: e5:4c:d1:0f:9a:28:e8:4f:ca:93:ba:4f:b8:c9:cd:02:86:2f: bb:11:14:2f:43:a8:0a:cb:45:d0:ed:a9:27:15:0b:9d:48:ab: 06:48:36:de:ed:e3:1b:c5:b4:fd:86:f6:4b:d0:5d:90:05:95: 90:9d:1e:3a:ff:39:93:e7:7f:47:ef:bb:f1:c8:49:d3:00:0f: f6:cc:53:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdYgnEasXDfvGaD7U2N3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAxMDZjZDI4NTdlZjEzMjM0ODY3Y2I3ZjE2YTIzYTkz ZmFhOTMwHhcNMjUxMjI2MDcwMDMzWhcNMjUxMjI3MDcwMDMzWjAzMTEwLwYDVQQD EygzZGMzODE1ZjVkODUxNmE4ZjE2ZDc0MDU0YzczYzAzNGI1OThmNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqkrbG4GmVQB8d1DnHEftsvhq+fm 5Y3bcCaO33FFVy1OO43gqbeXTM/Nj6JU216xdVAY/OFnSdK4z1p7H4DEVQAaNCl/ uhoIPVzo5MQDQoc7pj5s+kCWOO/wEm/PhCIPZduRnHBjeJzelwPYWTbdE2WnXUC9 mWMNRp88a0sGk9PJBdT3jp3itGqq+L9BwOu1Djro1POK/juYCC1DVgPDDN7k5ABA RGbjpHykl+UPcLfnzYs0RyL20rTwn4alAdgt+KiC6w4EpKTxNS0kG4Hqnw9wIZhy TkzwAwjX/dnFgSwLMVOMIfaQ+2BjtpFHP5Sc9u8oMZiQZkCkJBH9g+kI5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3DgV9dhRao8W10BUxzwDS1mPQTMB8GA1UdIwQY MBaAFOCgEGzShX7xMjSGfLfxaiOpP6qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2It M2E2YmY4OTBhMDFkLzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2ItM2E2YmY4OTBhMDFk LzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyGlTIOf R/A0rbZsGTy/ncfOxcbgJ4CvE8yt0J+lwHEjWtOXcIkYMLYVqnSuTM7OOuUMZhpf r277/HW1MeVw97tnM8L/Jq+TrszJbeqVOpLJ7G3n9q+OSAF8aWcMr9Q8eseAp/cV 9aAQbzcSowvBwqqeeQ5E03r7u7/u6bLM8vHFe485C7cZptMQkgc/8KvUQeOC5V7e eV0GkZfioZwKPN1By1h4KnKzC5wsFhZVnXvwGJfy5UzRD5oo6E/Kk7pPuMnNAoYv uxEUL0OoCstF0O2pJxULnUirBkg23u3jG8W0/Yb2S9BdkAWVkJ0eOv85k+d/R++7 8chJ0wAP9sxT5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client