This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json) Hash identifier: jLQQPmOCvlxm0UTazwNVOa6Hpk9NSWwaietfBMJ6jcA= Subject key identifier: B8:71:03:8F:D8:CB:1A:56:AC:39:FA:6D:8A:47:C1:17:B7:A5:B8:95 Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Certificate serial: 019B427FD348BF4B3C12479CFB4157F45820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft Manifest number: 160B Signing time: Sun 21 Dec 2025 20:00:31 +0000 Manifest this update: Sun 21 Dec 2025 20:00:31 +0000 Manifest next update: Mon 22 Dec 2025 20:00:31 +0000 Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: D54SaKTgYLrzmqBHaTGotrRH8gDZav4niIlAvIaJaSc=) 2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:d3:48:bf:4b:3c:12:47:9c:fb:41:57:f4:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Validity Not Before: Dec 21 20:00:31 2025 GMT Not After : Dec 22 20:00:31 2025 GMT Subject: CN=b871038fd8cb1a56ac39fa6d8a47c117b7a5b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:57:26:f8:78:ac:b5:f6:9e:47:db:97:22: ec:37:cb:5b:31:a5:06:e3:2e:7d:08:c0:19:e8:a7: 76:d8:23:b1:15:c2:c7:6c:e8:3a:a7:21:ff:7b:50: c3:8b:41:89:e2:8a:b1:bf:cf:7e:05:b8:84:91:b6: 17:78:0b:18:4b:63:94:6b:af:5a:ed:b6:3c:e5:3b: 05:ea:be:16:89:13:2d:49:14:96:d5:bc:95:21:fa: 1d:a8:d5:b0:27:7b:c0:20:41:27:02:80:84:be:18: 53:74:ed:75:d9:e2:46:5c:a0:3d:50:5f:52:63:da: 02:df:6f:07:81:47:de:41:d5:f8:56:7b:49:98:b7: cd:c1:fb:ab:c5:bf:86:e9:a2:5a:c1:1b:2a:fa:3d: 0f:8a:1b:5b:e7:37:fa:ab:86:7b:d3:b1:79:1b:31: 74:71:7b:94:90:83:e2:2b:e7:24:77:02:46:c9:f4: df:8b:62:00:39:7c:ce:44:f4:01:7c:2d:1e:7c:20: 65:9c:a5:f5:e1:14:52:89:ad:6f:15:de:49:de:c1: f8:3e:eb:56:c6:56:00:5b:6c:5f:e8:70:5b:43:44: f5:76:1d:f1:94:af:62:ce:78:91:04:fb:9c:ad:ad: fa:9f:9a:46:ea:96:cc:d6:5c:f6:b4:43:82:65:90: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:71:03:8F:D8:CB:1A:56:AC:39:FA:6D:8A:47:C1:17:B7:A5:B8:95 X509v3 Authority Key Identifier: keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1f:d1:42:3c:38:08:95:52:67:34:30:a9:67:bb:32:ba:c8: 6c:65:73:dd:58:e6:06:b2:c1:51:7d:31:62:22:63:02:f1:7d: ca:8a:cf:15:38:34:92:dc:f8:1e:e7:17:30:e7:17:0d:86:1f: 20:e2:5b:34:0b:88:27:a8:34:83:cd:1a:24:09:66:50:08:ec: b3:cd:62:8f:cf:9e:d8:c8:3a:55:15:2a:93:c9:d5:d0:60:fb: 5e:0a:86:5e:34:3f:a7:b8:bc:68:e6:02:3b:82:5d:23:3c:dd: a8:20:68:6a:e0:d6:00:88:75:6f:7c:fe:a7:d9:ab:73:db:2c: bf:6a:6f:3c:41:72:83:12:ed:77:5e:6b:99:f4:e0:39:3f:06: 0a:00:d9:cf:84:63:0e:4f:15:b0:2b:f1:35:f4:45:26:35:82: 12:b6:2f:54:1e:89:76:67:71:97:67:d7:f0:3d:58:9b:04:55: bd:c8:91:e8:ad:e5:e1:be:b8:5f:d5:41:27:43:e2:6d:a5:89: 55:32:d8:be:db:03:71:85:1c:cc:5a:87:c6:1f:0a:ed:11:6c: 97:2d:ea:2c:c1:34:6b:e8:b2:ce:25:fa:95:33:b4:bf:a4:dd: af:1c:f4:a4:97:2a:70:9b:f9:29:a2:38:cc:ae:92:4d:dd:e1: 32:3d:62:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9NIv0s8Ekec+0FX9FggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4 ZDBmYWUwHhcNMjUxMjIxMjAwMDMxWhcNMjUxMjIyMjAwMDMxWjAzMTEwLwYDVQQD EyhiODcxMDM4ZmQ4Y2IxYTU2YWMzOWZhNmQ4YTQ3YzExN2I3YTViODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NBXJvh4rLX2nkfblyLsN8tbMaUG 4y59CMAZ6Kd22COxFcLHbOg6pyH/e1DDi0GJ4oqxv89+BbiEkbYXeAsYS2OUa69a 7bY85TsF6r4WiRMtSRSW1byVIfodqNWwJ3vAIEEnAoCEvhhTdO112eJGXKA9UF9S Y9oC328HgUfeQdX4VntJmLfNwfurxb+G6aJawRsq+j0Pihtb5zf6q4Z707F5GzF0 cXuUkIPiK+ckdwJGyfTfi2IAOXzORPQBfC0efCBlnKX14RRSia1vFd5J3sH4PutW xlYAW2xf6HBbQ0T1dh3xlK9izniRBPucra36n5pG6pbM1lz2tEOCZZCXsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhxA4/YyxpWrDn6bYpHwRe3pbiVMB8GA1UdIwQY MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4 LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh/RQjw4 CJVSZzQwqWe7MrrIbGVz3VjmBrLBUX0xYiJjAvF9yorPFTg0ktz4HucXMOcXDYYf IOJbNAuIJ6g0g80aJAlmUAjss81ij8+e2Mg6VRUqk8nV0GD7XgqGXjQ/p7i8aOYC O4JdIzzdqCBoauDWAIh1b3z+p9mrc9ssv2pvPEFygxLtd15rmfTgOT8GCgDZz4Rj Dk8VsCvxNfRFJjWCErYvVB6Jdmdxl2fX8D1YmwRVvciR6K3l4b64X9VBJ0PibaWJ VTLYvtsDcYUczFqHxh8K7RFsly3qLME0a+iyziX6lTO0v6Tdrxz0pJcqcJv5KaI4 zK6STd3hMj1inw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:18 2025 by rpki-client