This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json) Hash identifier: RkHzi/w/BFRMmqZbyggrnWWac1XNti577DzIICzzE2A= Subject key identifier: 95:C7:CD:72:DC:DE:D0:4D:D0:AD:FA:64:C4:D9:B4:39:17:32:C1:3D Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17 Certificate serial: 019B269B1BA7E4FDAE25FAD099F25D6AABB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 10:00:57 +0000 Manifest this update: Tue 16 Dec 2025 10:00:57 +0000 Manifest next update: Wed 17 Dec 2025 10:00:57 +0000 Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=) 2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: JamodN1v7BEq4IMv7E0ra8j2RHGLVnCV0OLttWfMkug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:1b:a7:e4:fd:ae:25:fa:d0:99:f2:5d:6a:ab:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17 Validity Not Before: Dec 16 10:00:57 2025 GMT Not After : Dec 17 10:00:57 2025 GMT Subject: CN=95c7cd72dcded04dd0adfa64c4d9b4391732c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:9b:0f:4f:b4:c9:a3:33:5b:50:e4:d9:1f: ea:ad:e0:a3:59:54:d3:1b:df:36:6b:df:87:79:39: 4d:93:f5:b4:6c:0a:59:36:29:72:f4:39:f9:4b:18: 50:54:f1:6d:6c:b9:c7:7a:4d:8b:5b:6a:25:ac:30: 99:c4:7c:42:76:51:90:ac:d5:b2:f5:5e:33:a7:12: d3:3b:fe:61:50:4a:9a:67:f4:a8:bf:19:39:92:11: 2a:14:9c:f2:67:eb:e8:d2:f1:5a:9b:55:08:15:21: 57:5e:d1:b4:80:9e:7f:05:43:de:f4:9f:e3:24:cf: dc:82:c3:16:df:9e:8e:aa:87:71:ea:87:37:9f:b5: 73:a9:f4:ab:ce:3e:15:96:9b:4b:6a:bd:12:fb:11: 84:ba:69:ed:ee:ad:f4:07:22:b4:5f:18:c4:62:85: bc:65:14:58:e6:7f:47:8e:45:c9:af:c2:b1:b6:8e: db:07:36:ac:89:ec:90:56:e9:7b:30:9f:e3:b2:c3: 7b:41:bd:6d:d9:f9:7c:6f:94:0e:14:c8:24:00:e9: 2d:fe:52:aa:5d:b8:e1:e9:1d:bd:bc:b4:d5:a0:da: b1:35:bd:9d:e5:c7:10:e4:0e:37:a4:13:d9:83:f7: a7:2a:05:8a:c6:de:b0:30:89:9b:2f:1f:7f:1a:04: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C7:CD:72:DC:DE:D0:4D:D0:AD:FA:64:C4:D9:B4:39:17:32:C1:3D X509v3 Authority Key Identifier: keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:1c:6c:08:7e:c3:4a:9c:9a:cc:ad:26:38:fc:43:6e:cc: 56:6b:f0:b4:0d:c7:61:c7:96:19:88:70:06:f2:bb:b0:75:0c: 1b:d0:4c:86:32:b2:46:2d:37:91:b3:9f:f1:bb:24:c7:6a:52: 44:ed:cc:ec:21:b1:19:f6:b4:66:5c:46:7c:14:5d:61:3f:d4: a5:bc:4f:4e:3f:78:0b:80:69:03:4a:d3:01:6b:01:1b:d0:34: ea:24:d0:4f:92:a3:e8:ca:30:ee:4c:5c:0e:91:69:2a:48:2f: d0:3e:37:f1:17:75:36:05:d7:37:14:97:99:0c:17:fd:84:a3: be:25:6b:4d:d8:76:72:02:d8:87:82:55:cd:94:9d:ae:84:30: dc:17:57:7f:d4:df:90:43:b5:36:79:6f:88:ef:e6:08:10:0b: f6:96:5e:8e:38:34:c7:00:e7:7b:31:c2:46:4a:bd:dd:1c:88: 87:2c:29:64:eb:45:73:c9:c8:18:a0:2c:a2:01:a0:b3:1c:9e: df:ae:39:db:ca:db:09:4a:bf:c4:d9:fa:15:8e:52:17:0f:0c: 7a:60:94:ac:30:8b:d2:95:ed:c8:e0:eb:00:f0:4d:53:3b:ad: 3a:ab:0d:55:cf:16:39:7d:47:ec:9c:c9:b9:8b:48:7c:cf:de: 49:08:0c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmxun5P2uJfrQmfJdaqu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2 OGVmMTcwHhcNMjUxMjE2MTAwMDU3WhcNMjUxMjE3MTAwMDU3WjAzMTEwLwYDVQQD Eyg5NWM3Y2Q3MmRjZGVkMDRkZDBhZGZhNjRjNGQ5YjQzOTE3MzJjMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseGbD0+0yaMzW1Dk2R/qreCjWVTT G982a9+HeTlNk/W0bApZNily9Dn5SxhQVPFtbLnHek2LW2olrDCZxHxCdlGQrNWy 9V4zpxLTO/5hUEqaZ/Sovxk5khEqFJzyZ+vo0vFam1UIFSFXXtG0gJ5/BUPe9J/j JM/cgsMW356Oqodx6oc3n7VzqfSrzj4VlptLar0S+xGEumnt7q30ByK0XxjEYoW8 ZRRY5n9HjkXJr8Kxto7bBzasieyQVul7MJ/jssN7Qb1t2fl8b5QOFMgkAOkt/lKq Xbjh6R29vLTVoNqxNb2d5ccQ5A43pBPZg/enKgWKxt6wMImbLx9/GgTbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXHzXLc3tBN0K36ZMTZtDkXMsE9MB8GA1UdIwQY MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3 LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCccbAh+ w0qcmsytJjj8Q27MVmvwtA3HYceWGYhwBvK7sHUMG9BMhjKyRi03kbOf8bskx2pS RO3M7CGxGfa0ZlxGfBRdYT/UpbxPTj94C4BpA0rTAWsBG9A06iTQT5Kj6Mow7kxc DpFpKkgv0D438Rd1NgXXNxSXmQwX/YSjviVrTdh2cgLYh4JVzZSdroQw3BdXf9Tf kEO1NnlviO/mCBAL9pZejjg0xwDnezHCRkq93RyIhywpZOtFc8nIGKAsogGgsxye 364528rbCUq/xNn6FY5SFw8MemCUrDCL0pXtyODrAPBNUzutOqsNVc8WOX1H7JzJ uYtIfM/eSQgMrA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:11:24 2025 by rpki-client