This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json) Hash identifier: UhRueNn43hXLsbkKU9n5pYgaXKdFFqF7Lufu13/jQw0= Subject key identifier: AC:91:51:ED:7B:E0:BE:E4:22:0C:92:02:7B:FD:8B:0D:6F:C1:F1:F7 Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019B59AD02885455CAFD1F51FD0352A96BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft Manifest number: 06D6 Signing time: Fri 26 Dec 2025 08:01:09 +0000 Manifest this update: Fri 26 Dec 2025 08:01:09 +0000 Manifest next update: Sat 27 Dec 2025 08:01:09 +0000 Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: Pn6nhlDPsVxNA4wJV9UR5qeHRZSKvVBDX17yx/YSwAM=) 2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=) 3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=) 4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:02:88:54:55:ca:fd:1f:51:fd:03:52:a9:6b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Dec 26 08:01:09 2025 GMT Not After : Dec 27 08:01:09 2025 GMT Subject: CN=ac9151ed7be0bee4220c92027bfd8b0d6fc1f1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:a4:9c:3c:a0:d7:fc:fa:5e:a7:ba:2b:e7: f1:6e:9f:49:c6:d1:55:bb:cd:a4:ad:d5:29:15:59: c8:d9:bb:ee:4b:df:e9:19:69:ac:cb:da:51:72:20: 9f:07:05:72:2d:bf:e4:cf:32:03:99:84:57:d0:d6: a3:1e:d2:11:7f:43:da:72:2f:36:2b:01:1e:a5:09: 13:a7:01:cc:ea:53:b9:58:c3:5f:81:0b:01:52:61: 0e:ea:4d:94:33:58:9b:87:b8:5c:cb:63:34:61:3f: 28:b7:62:4a:06:5a:16:1e:09:95:93:c9:9e:1d:b3: 8b:9d:2c:de:18:cd:55:14:16:26:a4:2b:74:3c:72: 51:2d:e0:fb:af:77:9b:42:8b:1d:45:e1:97:02:21: 16:5e:ec:dc:6e:9c:d1:c6:77:46:cd:b8:d8:c3:5b: f8:85:a3:a0:f8:61:99:f5:95:1a:0e:6c:c5:d6:95: e7:ca:81:78:fa:2a:cb:f6:de:4b:f8:c7:14:ce:3a: cb:7c:34:01:85:e3:ed:75:64:60:c2:1b:f7:0a:3a: 9b:2d:27:44:c2:7f:1b:06:55:61:2a:83:03:97:27: 93:5f:7b:c9:70:3a:ff:2a:78:59:57:39:ca:4f:54: a7:64:7a:64:b4:f8:54:de:55:4c:ae:74:13:4b:2e: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:51:ED:7B:E0:BE:E4:22:0C:92:02:7B:FD:8B:0D:6F:C1:F1:F7 X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:06:7a:86:56:61:67:01:88:29:75:b5:df:91:68:f8:73:6b: b2:f9:5f:9f:27:e1:ab:d5:3a:92:8f:58:b8:16:2b:3d:f2:45: 46:08:82:3c:1b:2a:d3:1d:ac:45:50:40:88:7d:30:53:27:19: cb:d0:8f:c0:33:7b:af:99:04:a3:20:88:96:bd:59:6d:c2:71: e2:d2:03:80:f4:c0:cf:0e:3c:ad:17:43:65:63:0e:50:2f:9f: b1:8b:d8:1a:63:93:53:e6:c5:99:ad:b3:b9:36:9a:f3:85:9e: 5f:98:8d:70:fa:fc:55:e2:36:3c:22:a0:d3:10:3c:64:88:73: a4:fd:11:dd:de:e4:57:ec:18:ed:b4:c4:25:77:a5:d4:f4:2f: f4:1e:6e:8f:b6:b1:06:a3:77:5c:07:d2:02:8a:52:87:ff:54: 2d:9b:47:47:ae:9a:68:31:29:e9:ed:c6:98:bc:9f:68:7f:05: 27:8d:f7:5f:f0:94:ec:40:d2:d2:7b:57:c9:10:49:46:90:60: 7c:84:6c:92:9f:66:1d:e3:9f:1c:7c:7d:08:37:3e:c6:4a:2f: 10:5e:db:fc:74:5f:5d:f6:e7:38:46:a3:d8:e6:17:b0:80:6a: a0:14:88:9d:98:d6:a8:a7:d0:12:78:00:ae:6a:ad:a8:9b:53: 73:b7:3b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQKIVFXK/R9R/QNSqWvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjUxMjI2MDgwMTA5WhcNMjUxMjI3MDgwMTA5WjAzMTEwLwYDVQQD EyhhYzkxNTFlZDdiZTBiZWU0MjIwYzkyMDI3YmZkOGIwZDZmYzFmMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHqknDyg1/z6Xqe6K+fxbp9JxtFV u82krdUpFVnI2bvuS9/pGWmsy9pRciCfBwVyLb/kzzIDmYRX0NajHtIRf0Paci82 KwEepQkTpwHM6lO5WMNfgQsBUmEO6k2UM1ibh7hcy2M0YT8ot2JKBloWHgmVk8me HbOLnSzeGM1VFBYmpCt0PHJRLeD7r3ebQosdReGXAiEWXuzcbpzRxndGzbjYw1v4 haOg+GGZ9ZUaDmzF1pXnyoF4+irL9t5L+McUzjrLfDQBhePtdWRgwhv3CjqbLSdE wn8bBlVhKoMDlyeTX3vJcDr/KnhZVznKT1SnZHpktPhU3lVMrnQTSy63mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyRUe174L7kIgySAnv9iw1vwfH3MB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwZ6hlZh ZwGIKXW135Fo+HNrsvlfnyfhq9U6ko9YuBYrPfJFRgiCPBsq0x2sRVBAiH0wUycZ y9CPwDN7r5kEoyCIlr1ZbcJx4tIDgPTAzw48rRdDZWMOUC+fsYvYGmOTU+bFma2z uTaa84WeX5iNcPr8VeI2PCKg0xA8ZIhzpP0R3d7kV+wY7bTEJXel1PQv9B5uj7ax BqN3XAfSAopSh/9ULZtHR66aaDEp6e3GmLyfaH8FJ433X/CU7EDS0ntXyRBJRpBg fIRskp9mHeOfHHx9CDc+xkovEF7b/HRfXfbnOEaj2OYXsIBqoBSInZjWqKfQEngA rmqtqJtTc7c7vg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:37 2025 by rpki-client