This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json) Hash identifier: qLW7ZMHfBtulnpzPK9g8jiNFgj9EiQ4j4knLBJzdAwk= Subject key identifier: 07:40:00:77:94:E0:B4:EB:44:24:C1:57:53:65:25:2E:9A:4C:E8:FB Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0 Certificate serial: 019B5A51DDC5B5F7D890B5E6E8D624D7EBFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:12 +0000 Manifest this update: Fri 26 Dec 2025 11:01:12 +0000 Manifest next update: Sat 27 Dec 2025 11:01:12 +0000 Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: e7wlKokl6ToTPvfXNZydb4mGQEOL92TmuzOOjpXUDCw=) 2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:dd:c5:b5:f7:d8:90:b5:e6:e8:d6:24:d7:eb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0 Validity Not Before: Dec 26 11:01:12 2025 GMT Not After : Dec 27 11:01:12 2025 GMT Subject: CN=0740007794e0b4eb4424c1575365252e9a4ce8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:a3:3a:bd:0f:45:9d:f5:6c:9f:28:d8:6d: c1:5e:ed:af:76:a2:d0:6a:8e:b5:b2:90:f4:66:cd: 5e:7c:8a:8c:17:34:1a:ac:ac:d6:0d:9e:73:d2:93: b7:2a:e0:5c:79:e8:9f:a9:2d:5e:ef:65:66:32:41: f9:95:fe:c0:ac:32:48:3b:98:a7:8a:a0:a0:24:5e: 32:2a:3c:9e:99:25:68:bc:1e:8e:0e:4b:74:58:cb: 52:69:74:27:24:30:df:b5:6a:f9:e1:95:5e:34:ab: 89:5a:1f:a5:e7:d4:5f:88:0d:4e:c7:39:42:13:72: 7c:21:6f:85:1c:be:d3:9b:ba:4c:c5:66:33:54:70: d9:68:e6:47:95:e5:57:b2:c0:0e:ba:6f:72:89:4f: b3:15:73:30:95:3b:56:7d:c8:ce:75:db:1a:43:ba: 92:da:3a:c5:96:2d:f8:09:3f:6b:67:bb:9e:b5:21: 89:e8:bc:61:a0:31:7a:f9:8f:0b:65:99:c0:65:2b: d6:cc:dd:c8:65:80:66:32:b4:5e:82:c1:2d:ee:0f: b9:23:22:01:c0:76:bb:d8:80:fc:65:8f:77:02:8a: e1:0e:87:29:69:21:8a:10:af:6f:81:3e:6f:66:71: 9b:a4:61:7c:6a:91:6a:82:e7:29:48:10:a0:36:19: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:00:77:94:E0:B4:EB:44:24:C1:57:53:65:25:2E:9A:4C:E8:FB X509v3 Authority Key Identifier: keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:18:19:23:1c:91:2e:59:a9:58:5d:fb:ad:5f:e8:89:86:d0: 6f:26:3e:7c:c0:24:8f:80:4a:a4:27:b8:ce:34:78:e5:19:cf: 92:7f:f9:fd:06:11:85:1c:be:47:1d:47:8a:1c:25:3a:a6:d2: 07:27:a6:7f:db:bd:86:c8:7f:79:ff:74:b3:42:04:31:3a:fb: 87:a9:74:32:f6:70:75:b8:d5:8e:46:47:66:b9:22:ff:86:53: 02:6e:3e:41:39:5f:f5:49:3e:66:18:eb:5e:5d:36:41:c6:8f: d2:fd:28:9b:a3:ef:c4:40:d0:42:c8:7c:de:82:bd:6c:d2:ca: 5a:5d:4c:49:74:17:d1:18:31:8c:0c:d7:c9:3b:b6:41:a4:f0: 61:14:c1:0c:e3:1f:49:75:79:a5:b9:68:73:f7:65:97:7c:d8: 9b:4a:cd:62:d1:f4:06:49:8b:42:f2:40:2b:fe:ef:e4:2b:c9: 3f:31:82:90:83:dc:ae:fb:52:4d:ee:a9:07:c5:43:d0:47:e7: f0:1d:f3:be:f0:a1:3c:3d:9b:f8:e3:02:2b:b1:d5:e8:cf:ff: c1:30:ca:df:7e:0c:74:8a:06:c9:34:18:4b:5c:cc:8d:75:8c: 41:eb:87:6e:de:d4:27:d9:b1:47:d4:bc:30:b8:05:a4:6a:38: 11:45:99:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUd3FtffYkLXm6NYk1+v9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy OTk4ZjAwHhcNMjUxMjI2MTEwMTEyWhcNMjUxMjI3MTEwMTEyWjAzMTEwLwYDVQQD EygwNzQwMDA3Nzk0ZTBiNGViNDQyNGMxNTc1MzY1MjUyZTlhNGNlOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzqjOr0PRZ31bJ8o2G3BXu2vdqLQ ao61spD0Zs1efIqMFzQarKzWDZ5z0pO3KuBceeifqS1e72VmMkH5lf7ArDJIO5in iqCgJF4yKjyemSVovB6ODkt0WMtSaXQnJDDftWr54ZVeNKuJWh+l59RfiA1OxzlC E3J8IW+FHL7Tm7pMxWYzVHDZaOZHleVXssAOum9yiU+zFXMwlTtWfcjOddsaQ7qS 2jrFli34CT9rZ7uetSGJ6LxhoDF6+Y8LZZnAZSvWzN3IZYBmMrRegsEt7g+5IyIB wHa72ID8ZY93AorhDocpaSGKEK9vgT5vZnGbpGF8apFqgucpSBCgNhlPtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdAAHeU4LTrRCTBV1NlJS6aTOj7MB8GA1UdIwQY MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0 LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhgZIxyR LlmpWF37rV/oiYbQbyY+fMAkj4BKpCe4zjR45RnPkn/5/QYRhRy+Rx1HihwlOqbS Byemf9u9hsh/ef90s0IEMTr7h6l0MvZwdbjVjkZHZrki/4ZTAm4+QTlf9Uk+Zhjr Xl02QcaP0v0om6PvxEDQQsh83oK9bNLKWl1MSXQX0RgxjAzXyTu2QaTwYRTBDOMf SXV5pbloc/dll3zYm0rNYtH0BkmLQvJAK/7v5CvJPzGCkIPcrvtSTe6pB8VD0Efn 8B3zvvChPD2b+OMCK7HV6M//wTDK334MdIoGyTQYS1zMjXWMQeuHbt7UJ9mxR9S8 MLgFpGo4EUWZOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:19 2025 by rpki-client