This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft File: 4BGYDkOhYAqXZWfbBqNKARRf14o.mft (raw, json) Hash identifier: Co5CXWO+9NdzvGH81ckqS11hAlIvhKgFoCqDlqtNxtk= Subject key identifier: E4:FC:F8:B6:A8:DA:50:D8:17:41:CE:50:9D:EE:DC:48:B3:23:34:3D Authority key identifier: E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A Certificate issuer: /CN=e011980e43a1600a976567db06a34a01145fd78a Certificate serial: 019B5A88C7F356CDD8762237B2B8CC7159A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft Manifest number: 19 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 4BGYDkOhYAqXZWfbBqNKARRf14o.crl (hash: XiWSojUP4qe6PpfTnn1UzqSewU8BZwPDj6D6uZ0BYmc=) 2: mVX2DySh2vviAvnTFaLC2LDpd58.roa (hash: vNb8MHFl/kQoBnt/aX4VdYGtSd7OjLoAss0gvnJyM3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c7:f3:56:cd:d8:76:22:37:b2:b8:cc:71:59:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e011980e43a1600a976567db06a34a01145fd78a Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=e4fcf8b6a8da50d81741ce509deedc48b323343d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:af:8e:83:cf:92:84:72:17:23:0b:22:28:b2: 8e:b8:4a:eb:61:91:52:9c:90:37:c7:71:b8:b9:1a: dd:a0:e2:1c:69:de:ca:17:55:92:a1:b7:fe:66:e8: a0:42:a0:28:c6:ef:3a:e8:60:58:cc:d0:0a:c3:40: 73:aa:b9:00:d6:eb:dc:9d:cf:44:47:10:01:f9:39: 52:1c:04:2c:59:17:9a:7d:5e:82:a6:49:72:c4:2e: 62:76:de:03:41:6d:b7:84:87:12:8f:86:ee:9f:74: a9:2f:ee:03:05:4f:8c:fb:2b:9e:0b:15:a9:40:3b: 3d:9d:d4:67:a3:92:48:81:cc:57:ae:55:cb:b6:ef: f0:d1:18:78:42:d0:ea:f6:c4:6b:11:ba:39:c0:39: d0:51:56:1e:99:b9:2d:b8:da:9a:33:9c:0f:19:e6: 0b:13:2e:97:e0:8a:5a:d3:b5:f3:83:1d:60:f2:96: 65:bf:0c:a1:d8:41:38:e7:56:93:37:49:35:c8:25: 43:c4:ab:50:9f:d4:1e:ed:57:5c:55:75:3f:25:10: ef:98:81:f9:48:72:78:d2:64:13:42:cd:8c:9b:94: eb:d1:ae:f4:ef:6d:58:82:c5:33:e8:a2:02:a6:5d: 8d:ed:1e:ed:b8:f2:94:05:11:5d:da:ef:e1:9b:6e: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FC:F8:B6:A8:DA:50:D8:17:41:CE:50:9D:EE:DC:48:B3:23:34:3D X509v3 Authority Key Identifier: keyid:E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:10:56:31:df:ae:50:06:44:d8:f5:67:dc:bd:4b:b1:b9:3f: 68:90:61:c7:99:7c:5b:4b:52:7d:26:23:69:08:b0:ec:5f:32: bd:f3:4f:8d:79:ed:ad:9f:00:f9:2e:98:d0:5b:f9:9a:62:d9: 26:69:bc:82:21:12:d0:73:6f:e2:84:0e:12:83:ca:0a:f9:3a: 74:8a:9d:4e:86:4c:70:e2:1c:d1:e6:cc:4a:be:54:84:1d:b0: 31:84:0d:e3:1d:03:c7:1e:52:d1:d0:30:4b:71:c4:65:40:83: 5a:88:31:83:02:19:2d:a1:00:7a:96:de:a7:94:5f:29:21:6e: 8d:f3:fb:7e:e9:37:ab:59:ac:26:79:6f:56:d1:45:17:9d:6e: 87:d3:8a:1b:bc:7d:9d:02:87:ce:bf:81:f8:27:9b:5f:e1:9b: e9:2a:7c:ce:0e:26:98:a9:a5:6c:61:4f:45:02:ad:02:bf:06: fa:f3:74:10:82:e7:9b:5c:7e:02:e1:a6:02:a2:58:3f:73:67: fe:cc:fa:9a:dc:fa:98:9a:ec:fa:90:26:21:b8:47:7c:b8:01: 91:72:83:15:d5:8b:46:bd:36:fa:0c:7a:87:a1:76:9c:60:25: e6:19:a7:57:af:cb:75:3c:91:5d:8f:9d:09:82:3f:02:d6:04: ef:b6:5d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMfzVs3YdiI3srjMcVmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTE5ODBlNDNhMTYwMGE5NzY1NjdkYjA2YTM0YTAxMTQ1 ZmQ3OGEwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD EyhlNGZjZjhiNmE4ZGE1MGQ4MTc0MWNlNTA5ZGVlZGM0OGIzMjMzNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66+Og8+ShHIXIwsiKLKOuErrYZFS nJA3x3G4uRrdoOIcad7KF1WSobf+ZuigQqAoxu866GBYzNAKw0BzqrkA1uvcnc9E RxAB+TlSHAQsWReafV6CpklyxC5idt4DQW23hIcSj4bun3SpL+4DBU+M+yueCxWp QDs9ndRno5JIgcxXrlXLtu/w0Rh4QtDq9sRrEbo5wDnQUVYembktuNqaM5wPGeYL Ey6X4Ipa07Xzgx1g8pZlvwyh2EE451aTN0k1yCVDxKtQn9Qe7VdcVXU/JRDvmIH5 SHJ40mQTQs2Mm5Tr0a70721YgsUz6KICpl2N7R7tuPKUBRFd2u/hm25vqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT8+Lao2lDYF0HOUJ3u3EizIzQ9MB8GA1UdIwQY MBaAFOARmA5DoWAKl2Vn2wajSgEUX9eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJHWURrT2hZQXFYWldmYkJxTktBUlJmMTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80ZmIxODQtMWQyNC00MTUxLTgxNDAt ZDJkYTU4NDEzNTRiLzEvNEJHWURrT2hZQXFYWldmYkJxTktBUlJmMTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80ZmIxODQtMWQyNC00MTUxLTgxNDAtZDJkYTU4NDEzNTRi LzEvNEJHWURrT2hZQXFYWldmYkJxTktBUlJmMTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRBWMd+u UAZE2PVn3L1Lsbk/aJBhx5l8W0tSfSYjaQiw7F8yvfNPjXntrZ8A+S6Y0Fv5mmLZ Jmm8giES0HNv4oQOEoPKCvk6dIqdToZMcOIc0ebMSr5UhB2wMYQN4x0Dxx5S0dAw S3HEZUCDWogxgwIZLaEAepbep5RfKSFujfP7fuk3q1msJnlvVtFFF51uh9OKG7x9 nQKHzr+B+CebX+Gb6Sp8zg4mmKmlbGFPRQKtAr8G+vN0EILnm1x+AuGmAqJYP3Nn /sz6mtz6mJrs+pAmIbhHfLgBkXKDFdWLRr02+gx6h6F2nGAl5hmnV6/LdTyRXY+d CYI/AtYE77ZdyQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client