This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft File: 4JnuB4Iu8qzpw1b3tCyur_JclpI.mft (raw, json) Hash identifier: uzle+KlEnOxzpUihjx2LbMM+n+GLk9G0J3XbBORXDg4= Subject key identifier: 4B:63:D0:D2:C3:F1:66:85:A6:46:A8:07:BA:28:44:9F:25:FD:00:ED Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Certificate serial: 019B4882B149809439CC1F87DDF2082D2A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft Manifest number: 0500 Signing time: Tue 23 Dec 2025 00:01:23 +0000 Manifest this update: Tue 23 Dec 2025 00:01:23 +0000 Manifest next update: Wed 24 Dec 2025 00:01:23 +0000 Files and hashes: 1: 1iS_m3lD3dXmwGgBO22atH55ZJQ.roa (hash: dudlGcQ03vBBCIjSveQDl5YeTGubffbp9QB39KgS7sA=) 2: 4JnuB4Iu8qzpw1b3tCyur_JclpI.crl (hash: RksHHcwEw10fyIMV+9X73Z3rk1BoqSm3y2R3NkGIBwc=) 3: XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa (hash: ZDVLnDp+CjsJYq9nGB8Fx25sme4loxzKQeCqC4xcibs=) 4: nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa (hash: G5UWZxYAvoCWsXhSSwnd86ky6SZpPBzCIKBhsZP0lcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:b1:49:80:94:39:cc:1f:87:dd:f2:08:2d:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692 Validity Not Before: Dec 23 00:01:23 2025 GMT Not After : Dec 24 00:01:23 2025 GMT Subject: CN=4b63d0d2c3f16685a646a807ba28449f25fd00ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:11:3d:78:7f:fb:2e:d2:b8:df:c3:92:bb: c8:cc:a3:90:44:92:22:da:ee:11:b7:c1:32:bc:59: 4a:3a:1e:08:fd:23:33:0b:52:38:da:be:3b:f2:bf: 9e:d1:c6:ce:0b:3a:6f:ea:66:12:4b:55:c8:2d:ac: fe:4a:6a:83:b2:a8:17:42:5a:f6:cd:32:ac:3d:dc: 52:12:86:a4:f0:37:56:9a:d8:91:33:ab:1f:29:12: f5:fb:db:86:b6:08:84:57:e5:f1:ee:b2:2a:17:e3: 65:c8:dd:f7:1b:bc:ce:a7:a0:6b:ed:12:12:01:dc: cf:06:3b:92:f2:b1:b9:99:76:3a:e7:60:f4:cf:e9: 04:d0:fc:66:a4:20:e1:70:ce:35:d2:da:75:21:5f: a6:ea:c9:9d:6a:07:e0:95:35:e8:2e:6f:5d:85:0a: 11:42:2f:35:99:8c:e2:ea:b2:f1:64:d3:61:43:c3: 8a:48:ea:10:62:26:0f:54:00:8a:48:7b:80:63:2f: 89:e0:f1:c5:ce:f8:0f:0f:a6:62:9f:78:f6:54:6b: 18:af:87:4b:ae:de:46:8e:dc:af:d0:49:11:1a:42: 17:6a:37:6a:48:01:4e:b6:5f:46:be:4f:3b:9f:19: c6:c7:bd:87:26:6b:ba:61:20:3d:ff:f0:28:ab:46: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:D0:D2:C3:F1:66:85:A6:46:A8:07:BA:28:44:9F:25:FD:00:ED X509v3 Authority Key Identifier: keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:64:9b:73:33:21:1a:57:16:dc:e1:32:9c:2c:3e:7d:4a:b3: 13:a1:0b:19:e2:76:47:bf:b7:ae:92:4e:b3:be:6f:3e:7b:65: 81:a3:10:89:39:f5:43:96:95:a7:5a:59:f6:52:fd:a5:26:10: 3c:11:81:e0:98:ce:4f:b3:86:7c:4d:06:aa:ae:15:f1:c6:72: ad:28:5a:9b:b2:2a:62:61:4b:0c:60:c1:fc:d0:a7:12:1d:bc: 10:f7:51:d5:84:7c:33:02:fb:d7:05:3a:2c:5d:96:16:ea:2e: db:f4:b0:e9:5b:a7:76:5b:1e:3d:c3:5e:6a:93:ea:09:9f:d1: 1e:1b:80:58:02:5d:f4:31:c3:9f:86:5c:71:75:d0:41:74:b2: e1:51:b7:b0:54:bd:9d:4a:7c:d5:b4:19:23:a7:4b:3d:62:46: 52:67:9a:b5:a1:49:f5:a6:17:f0:eb:4e:89:e9:60:11:92:00: 42:3c:14:31:c3:15:ab:60:eb:2b:42:13:04:51:67:fc:42:78: ee:e7:a5:8e:d8:31:ec:b9:75:01:53:95:19:ee:65:e0:1f:db: a2:62:3b:ee:ef:96:0d:73:2d:85:2e:0e:f1:33:a5:8d:ba:d2: 4a:79:aa:6a:1b:1f:6f:88:12:07:ca:6f:a6:8e:40:73:2b:24: 11:67:b9:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgrFJgJQ5zB+H3fIILSp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTllZTA3ODIyZWYyYWNlOWMzNTZmN2I0MmNhZWFmZjI1 Yzk2OTIwHhcNMjUxMjIzMDAwMTIzWhcNMjUxMjI0MDAwMTIzWjAzMTEwLwYDVQQD Eyg0YjYzZDBkMmMzZjE2Njg1YTY0NmE4MDdiYTI4NDQ5ZjI1ZmQwMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4RPXh/+y7SuN/DkrvIzKOQRJIi 2u4Rt8EyvFlKOh4I/SMzC1I42r478r+e0cbOCzpv6mYSS1XILaz+SmqDsqgXQlr2 zTKsPdxSEoak8DdWmtiRM6sfKRL1+9uGtgiEV+Xx7rIqF+NlyN33G7zOp6Br7RIS AdzPBjuS8rG5mXY652D0z+kE0PxmpCDhcM410tp1IV+m6smdagfglTXoLm9dhQoR Qi81mYzi6rLxZNNhQ8OKSOoQYiYPVACKSHuAYy+J4PHFzvgPD6Zin3j2VGsYr4dL rt5Gjtyv0EkRGkIXajdqSAFOtl9Gvk87nxnGx72HJmu6YSA9//Aoq0Y8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtj0NLD8WaFpkaoB7ooRJ8l/QDtMB8GA1UdIwQY MBaAFOCZ7geCLvKs6cNW97Qsrq/yXJaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUt ZDA2OWYxNzYwMmI2LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NzMyYmItZjU5MC00MTk0LTg1YmUtZDA2OWYxNzYwMmI2 LzEvNEpudUI0SXU4cXpwdzFiM3RDeXVyX0pjbHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmSbczMh GlcW3OEynCw+fUqzE6ELGeJ2R7+3rpJOs75vPntlgaMQiTn1Q5aVp1pZ9lL9pSYQ PBGB4JjOT7OGfE0Gqq4V8cZyrSham7IqYmFLDGDB/NCnEh28EPdR1YR8MwL71wU6 LF2WFuou2/Sw6VundlsePcNeapPqCZ/RHhuAWAJd9DHDn4ZccXXQQXSy4VG3sFS9 nUp81bQZI6dLPWJGUmeataFJ9aYX8OtOielgEZIAQjwUMcMVq2DrK0ITBFFn/EJ4 7ueljtgx7Ll1AVOVGe5l4B/bomI77u+WDXMthS4O8TOljbrSSnmqahsfb4gSB8pv po5AcyskEWe5tg== -----END CERTIFICATE-----Generated at Tue Dec 23 08:25:23 2025 by rpki-client