This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json) Hash identifier: mjkhOYe5+QEMYRbSbXQ/B1wtZk14dDOQXOFDdlXKfR0= Subject key identifier: E4:B2:5B:B7:3A:2B:B8:57:D4:9D:BB:AA:BB:7A:23:25:E3:83:EA:A6 Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Certificate serial: 019B3BA22694E828D207204241EECAE3AB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft Manifest number: 04EE Signing time: Sat 20 Dec 2025 12:00:40 +0000 Manifest this update: Sat 20 Dec 2025 12:00:40 +0000 Manifest next update: Sun 21 Dec 2025 12:00:40 +0000 Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: PA7Yat8X/3pa8PP9sPtPh15RtIXzhphbVkZ48ugjpak=) 2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:26:94:e8:28:d2:07:20:42:41:ee:ca:e3:ab:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Validity Not Before: Dec 20 12:00:40 2025 GMT Not After : Dec 21 12:00:40 2025 GMT Subject: CN=e4b25bb73a2bb857d49dbbaabb7a2325e383eaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:48:cd:ad:30:3a:bf:73:06:53:10:1b:b3: 53:8a:45:c5:eb:4f:c9:d4:da:b5:ce:83:dc:1d:f6: 18:11:c5:3d:7f:5a:a0:aa:5b:db:86:94:0f:d0:6f: d7:4f:16:35:15:0f:0c:b9:76:99:c1:71:01:35:95: 6f:84:f7:0d:b9:a9:54:36:db:0c:40:fa:3b:a7:e6: 5b:a8:c3:42:5d:c3:17:26:ba:9b:4a:75:61:6b:1e: 71:33:40:3c:fb:19:e9:be:43:08:27:1a:8c:cc:77: 61:79:e5:22:94:9c:45:cc:57:04:5c:8f:21:16:02: b2:3d:2d:2b:e2:de:79:2e:6c:2d:9b:0d:d1:07:5f: b7:88:c9:fa:a5:16:b9:68:c2:84:2d:8f:41:dd:63: 60:dc:67:7b:01:f1:33:ae:0c:21:07:03:8f:78:40: c2:65:b4:b0:2c:28:a7:d3:8d:6b:a3:0a:3b:67:3c: 8d:b1:4b:6a:ca:2b:ba:7b:83:76:6d:c2:77:0c:63: 5a:40:c9:ee:d4:03:8a:f9:3b:97:13:4b:22:58:cb: 47:38:9e:b4:46:9c:e9:be:3f:9d:ea:9f:c2:03:8d: dd:30:b4:fe:69:80:15:c2:1d:ad:d9:37:f5:ee:b6: 7a:df:d9:25:ff:87:30:d9:7b:b2:c9:cc:7a:ee:c7: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B2:5B:B7:3A:2B:B8:57:D4:9D:BB:AA:BB:7A:23:25:E3:83:EA:A6 X509v3 Authority Key Identifier: keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:93:60:40:95:9d:53:e3:81:13:f5:cb:f5:9c:db:36:61:e1: 66:9a:c2:35:70:2a:1e:63:44:ee:49:28:43:ad:7c:18:9c:61: b9:3b:a3:a4:f2:45:98:28:32:a5:93:10:5a:fb:11:c6:79:77: e0:3c:37:64:50:30:54:fa:6f:6e:5c:c8:98:ba:cd:ad:8a:88: cb:83:79:4b:42:e7:11:5e:13:45:94:74:74:f7:54:65:3e:1c: 5d:23:24:94:3c:9b:b6:6a:27:22:a8:c3:91:4d:01:87:f8:8c: e0:ff:da:c9:8a:f0:97:e8:d3:57:2b:66:52:5e:23:92:cd:ca: 24:4f:b4:68:a2:d8:e1:66:b3:c1:b9:a4:04:72:79:3b:9a:22: 2e:75:5b:26:ea:f4:c4:bb:b0:34:2b:6f:a1:ff:ad:68:37:13: 83:db:81:e5:ac:d9:f2:cd:53:38:45:de:bf:7f:8b:44:4a:bd: 29:22:62:ac:93:34:fb:28:d9:b6:f2:26:e5:64:87:95:14:ac: 43:7b:cb:d0:52:d9:d2:d4:da:c1:82:d7:bf:0a:a8:77:d9:68: 9d:80:1d:4a:64:79:40:d8:1f:4c:80:f0:e5:b6:43:fe:9e:d9: eb:8f:80:ba:05:68:18:86:1f:1b:f8:e8:cb:19:d5:99:2d:fe: 11:dc:46:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oiaU6CjSByBCQe7K46uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz Mzg2YzAwHhcNMjUxMjIwMTIwMDQwWhcNMjUxMjIxMTIwMDQwWjAzMTEwLwYDVQQD EyhlNGIyNWJiNzNhMmJiODU3ZDQ5ZGJiYWFiYjdhMjMyNWUzODNlYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfRIza0wOr9zBlMQG7NTikXF60/J 1Nq1zoPcHfYYEcU9f1qgqlvbhpQP0G/XTxY1FQ8MuXaZwXEBNZVvhPcNualUNtsM QPo7p+ZbqMNCXcMXJrqbSnVhax5xM0A8+xnpvkMIJxqMzHdheeUilJxFzFcEXI8h FgKyPS0r4t55Lmwtmw3RB1+3iMn6pRa5aMKELY9B3WNg3Gd7AfEzrgwhBwOPeEDC ZbSwLCin041rowo7ZzyNsUtqyiu6e4N2bcJ3DGNaQMnu1AOK+TuXE0siWMtHOJ60 Rpzpvj+d6p/CA43dMLT+aYAVwh2t2Tf17rZ639kl/4cw2Xuyycx67seVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSyW7c6K7hX1J27qrt6IyXjg+qmMB8GA1UdIwQY MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpNgQJWd U+OBE/XL9ZzbNmHhZprCNXAqHmNE7kkoQ618GJxhuTujpPJFmCgypZMQWvsRxnl3 4Dw3ZFAwVPpvblzImLrNrYqIy4N5S0LnEV4TRZR0dPdUZT4cXSMklDybtmonIqjD kU0Bh/iM4P/ayYrwl+jTVytmUl4jks3KJE+0aKLY4WazwbmkBHJ5O5oiLnVbJur0 xLuwNCtvof+taDcTg9uB5azZ8s1TOEXev3+LREq9KSJirJM0+yjZtvIm5WSHlRSs Q3vL0FLZ0tTawYLXvwqod9lonYAdSmR5QNgfTIDw5bZD/p7Z64+AugVoGIYfG/jo yxnVmS3+EdxG/g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:08 2025 by rpki-client