This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json) Hash identifier: ba0gmPUIf0ktBgK4F7TS0MrNPxTfDfJWN58Y2Tey240= Subject key identifier: D1:DD:C1:2A:2B:90:2F:55:A4:9E:8A:D9:A7:6E:C0:D1:65:39:93:6D Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9 Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9 Certificate serial: 019B5A883804A2B3DF240B15173F59AED6D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 12:00:35 +0000 Manifest this update: Fri 26 Dec 2025 12:00:35 +0000 Manifest next update: Sat 27 Dec 2025 12:00:35 +0000 Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: YYD1tpiprUKy4r2ziUCjOH8mdr1npI99/ajmfh6XAMI=) 2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:38:04:a2:b3:df:24:0b:15:17:3f:59:ae:d6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9 Validity Not Before: Dec 26 12:00:35 2025 GMT Not After : Dec 27 12:00:35 2025 GMT Subject: CN=d1ddc12a2b902f55a49e8ad9a76ec0d16539936d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:5b:f5:db:dc:1e:66:9e:83:9b:1e:09:49: f0:55:26:0f:34:22:4f:54:ec:6d:3b:b1:b0:be:06: a1:46:0d:00:12:b2:2c:c8:ff:ea:e0:77:5e:c5:86: 80:73:67:5e:dc:ca:d3:db:2c:32:e1:6a:63:e5:92: fc:62:ff:01:cc:55:13:ea:ba:1a:ca:03:4f:f5:9d: 17:2d:d9:96:fd:0c:32:07:20:e9:4b:34:c3:10:28: d3:07:4f:c5:33:ea:df:89:9d:b9:11:f4:73:30:e1: ed:2c:1c:7f:df:1d:08:69:8c:d5:4d:02:f6:64:09: ef:c6:ba:ed:96:90:ba:8e:66:6b:f3:bb:41:82:44: 71:f2:ec:3f:15:c6:44:57:c3:50:70:18:ab:1b:48: 0e:eb:e6:5b:c1:bc:0f:66:79:42:11:b9:b1:ff:4b: ea:60:91:c4:c9:3e:5f:58:2c:e2:6a:67:55:ad:41: cf:7d:68:7d:67:ca:fd:a9:61:a2:e9:87:24:ef:fd: 71:56:48:aa:42:54:d5:ba:85:bb:43:90:42:30:0d: f9:ba:73:98:ba:d0:0b:22:fb:c2:19:8a:63:fe:0a: 4d:de:52:1f:d8:de:ee:54:e7:72:74:40:aa:e2:15: 58:e5:2f:7d:2f:2e:96:ec:c5:ad:cc:18:d1:93:e8: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:C1:2A:2B:90:2F:55:A4:9E:8A:D9:A7:6E:C0:D1:65:39:93:6D X509v3 Authority Key Identifier: keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:90:6b:ac:4f:25:cf:e4:d9:f0:07:63:3b:18:89:fe:30: 2b:b4:c7:f5:5b:38:6f:79:08:39:83:7e:4b:42:55:fe:48:1d: ca:41:17:70:34:37:5f:26:80:a1:33:9b:6a:7e:15:78:8b:df: a6:17:07:21:d1:b9:51:92:29:0d:1b:8a:f6:82:84:70:52:fe: 28:7b:e3:ba:4c:e0:89:a5:95:09:8b:0a:d6:71:7d:c6:75:6f: 1a:c9:83:bd:33:8b:c6:55:6b:c1:10:dd:37:0d:ed:d1:5d:ae: 7a:90:85:dc:ee:85:09:7e:8f:ce:4f:46:ca:fc:ec:7a:ac:98: d2:06:dd:14:44:cf:07:6f:e7:70:d6:50:0c:05:43:8f:b6:d7: 70:97:a1:d6:60:81:9e:c1:6e:92:33:23:b5:6c:51:4f:99:34: 33:05:14:86:38:e8:a3:fb:8e:42:cf:c2:a0:3a:fc:3a:b3:80: 32:1e:8d:e8:d1:42:0b:90:60:47:0e:bc:d3:b7:87:be:cc:1b: 5b:80:60:8b:49:ee:21:97:22:91:b8:56:01:28:03:32:fb:c1: 69:2f:41:60:e4:18:b4:a4:51:77:6e:aa:8d:f5:f5:5c:2f:ab: 16:8b:6a:12:3d:44:bd:fe:d0:b8:9f:ea:63:84:6a:a8:09:8d: b3:bb:65:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiDgEorPfJAsVFz9ZrtbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YWUyODhhOWRkYjBlZjUwYTI5NGIzY2FlOTYzZTE0N2M5 YzdkYzkwHhcNMjUxMjI2MTIwMDM1WhcNMjUxMjI3MTIwMDM1WjAzMTEwLwYDVQQD EyhkMWRkYzEyYTJiOTAyZjU1YTQ5ZThhZDlhNzZlYzBkMTY1Mzk5MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN5b9dvcHmaeg5seCUnwVSYPNCJP VOxtO7GwvgahRg0AErIsyP/q4HdexYaAc2de3MrT2ywy4Wpj5ZL8Yv8BzFUT6roa ygNP9Z0XLdmW/QwyByDpSzTDECjTB0/FM+rfiZ25EfRzMOHtLBx/3x0IaYzVTQL2 ZAnvxrrtlpC6jmZr87tBgkRx8uw/FcZEV8NQcBirG0gO6+ZbwbwPZnlCEbmx/0vq YJHEyT5fWCziamdVrUHPfWh9Z8r9qWGi6Yck7/1xVkiqQlTVuoW7Q5BCMA35unOY utALIvvCGYpj/gpN3lIf2N7uVOdydECq4hVY5S99Ly6W7MWtzBjRk+j9FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHdwSorkC9VpJ6K2aduwNFlOZNtMB8GA1UdIwQY MBaAFLSuKIqd2w71CilLPK6WPhR8nH3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAt MzAwNDI2Y2UzMmUyLzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAtMzAwNDI2Y2UzMmUy LzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnyQa6xP Jc/k2fAHYzsYif4wK7TH9Vs4b3kIOYN+S0JV/kgdykEXcDQ3XyaAoTOban4VeIvf phcHIdG5UZIpDRuK9oKEcFL+KHvjukzgiaWVCYsK1nF9xnVvGsmDvTOLxlVrwRDd Nw3t0V2uepCF3O6FCX6Pzk9GyvzseqyY0gbdFETPB2/ncNZQDAVDj7bXcJeh1mCB nsFukjMjtWxRT5k0MwUUhjjoo/uOQs/CoDr8OrOAMh6N6NFCC5BgRw6807eHvswb W4Bgi0nuIZcikbhWASgDMvvBaS9BYOQYtKRRd26qjfX1XC+rFotqEj1Evf7QuJ/q Y4RqqAmNs7tllQ== -----END CERTIFICATE-----Generated at Fri Dec 26 19:30:52 2025 by rpki-client