This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json) Hash identifier: BA1GWEmGCW3JaPGL7j3hcMNpyuhwkj9zpCvsQGkMGYM= Subject key identifier: 2C:20:68:8F:EB:9F:D8:EB:57:51:A1:9F:01:44:C6:9B:32:04:A9:4B Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026 Certificate serial: 019B34C5F56A0274D360F9A43B037EF9562E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft Manifest number: 12DF Signing time: Fri 19 Dec 2025 04:02:26 +0000 Manifest this update: Fri 19 Dec 2025 04:02:26 +0000 Manifest next update: Sat 20 Dec 2025 04:02:26 +0000 Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: XBSQZKhMSLEUHJtuE/s2lpRFFVmcOGtEGh6t4MWjZlU=) 2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:f5:6a:02:74:d3:60:f9:a4:3b:03:7e:f9:56:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026 Validity Not Before: Dec 19 04:02:26 2025 GMT Not After : Dec 20 04:02:26 2025 GMT Subject: CN=2c20688feb9fd8eb5751a19f0144c69b3204a94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:3c:7a:2b:cb:8b:68:51:ab:02:44:ea:09: 91:b4:fd:ec:b8:b3:6c:7c:58:01:41:e5:56:ae:a0: da:09:4d:4c:0d:28:c9:0c:b5:1f:ac:49:02:3a:d6: 68:2e:07:0b:e4:af:e6:90:48:fc:f6:fd:33:1d:43: 63:a7:e9:85:0c:bd:1d:3b:c7:76:c6:94:8b:19:d6: a9:4e:dd:dc:74:1e:d1:1c:6d:49:55:2c:a0:ef:d4: 7e:8b:98:2f:0c:bd:7d:de:a9:5d:10:1b:17:27:cc: 59:c0:bf:42:84:7b:63:43:99:81:3d:9a:86:24:7e: 3e:91:14:51:db:f3:01:ff:7b:7a:78:f6:10:83:eb: eb:ca:27:c5:dc:bc:bb:0b:73:11:65:cd:6e:ca:be: e3:b7:ff:40:bc:c3:5f:24:2f:85:9a:93:1d:a8:db: 97:63:11:cd:ad:8c:e4:c6:88:ac:80:93:cd:52:bb: 31:0e:e7:a0:3b:26:1b:1a:ea:19:6c:72:de:49:8e: e6:30:99:71:9c:4f:6a:e6:f7:bf:23:c0:05:cc:33: de:1f:19:0e:de:7c:7e:6e:93:14:76:0e:bc:e2:ca: 5e:e3:d2:71:03:1a:e5:61:80:f5:f5:87:e4:89:a3: fa:36:4d:c4:05:68:cf:a7:2b:60:e6:7c:ab:42:65: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:20:68:8F:EB:9F:D8:EB:57:51:A1:9F:01:44:C6:9B:32:04:A9:4B X509v3 Authority Key Identifier: keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:03:18:11:b3:ab:ac:57:e4:e8:ae:f0:e6:8d:90:cc:e6:7d: 38:0c:fa:3a:e8:25:3a:73:f5:1d:fa:19:56:6d:46:62:f7:7c: 26:2f:29:23:fa:0e:6b:d8:b9:14:33:48:ae:ef:11:bb:df:7d: 71:80:26:ad:9e:6e:03:4a:fa:87:76:99:48:4b:6a:32:ac:40: d1:60:75:28:2f:e2:a1:0b:04:a2:45:32:c6:c8:a3:6e:fd:c5: 7e:5b:3e:9e:72:0d:ca:17:98:f8:a0:f5:7f:f4:0b:86:4a:16: 8b:de:96:cd:05:f0:bd:74:1e:cf:fe:ec:f7:65:c9:31:ef:5e: 05:f9:5b:2c:4a:8e:7b:fc:f9:1d:25:5f:d9:c7:b1:39:bd:8b: 71:e7:bc:05:08:aa:c1:5f:12:de:04:55:65:39:95:17:d1:65: 2e:a7:37:5c:a0:a2:21:8e:ba:70:34:71:94:ee:97:22:3f:88: 82:e4:16:5c:64:9b:4f:78:30:05:10:11:65:18:10:40:9c:63: 28:5a:11:6d:dd:c5:fd:1a:4c:8c:69:e5:fe:cd:a1:24:32:93: 08:d0:d8:ea:68:16:36:a8:9a:af:21:95:f8:a9:96:7a:10:87: c9:1b:18:9f:b8:69:33:bc:57:26:fd:96:b2:66:5b:b1:74:ee: 4d:50:67:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xfVqAnTTYPmkOwN++VYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm ZDIwMjYwHhcNMjUxMjE5MDQwMjI2WhcNMjUxMjIwMDQwMjI2WjAzMTEwLwYDVQQD EygyYzIwNjg4ZmViOWZkOGViNTc1MWExOWYwMTQ0YzY5YjMyMDRhOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyo8eivLi2hRqwJE6gmRtP3suLNs fFgBQeVWrqDaCU1MDSjJDLUfrEkCOtZoLgcL5K/mkEj89v0zHUNjp+mFDL0dO8d2 xpSLGdapTt3cdB7RHG1JVSyg79R+i5gvDL193qldEBsXJ8xZwL9ChHtjQ5mBPZqG JH4+kRRR2/MB/3t6ePYQg+vryifF3Ly7C3MRZc1uyr7jt/9AvMNfJC+FmpMdqNuX YxHNrYzkxoisgJPNUrsxDuegOyYbGuoZbHLeSY7mMJlxnE9q5ve/I8AFzDPeHxkO 3nx+bpMUdg684spe49JxAxrlYYD19YfkiaP6Nk3EBWjPpytg5nyrQmUOJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwgaI/rn9jrV1GhnwFExpsyBKlLMB8GA1UdIwQY MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5 LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwMYEbOr rFfk6K7w5o2QzOZ9OAz6OuglOnP1HfoZVm1GYvd8Ji8pI/oOa9i5FDNIru8Ru999 cYAmrZ5uA0r6h3aZSEtqMqxA0WB1KC/ioQsEokUyxsijbv3Ffls+nnINyheY+KD1 f/QLhkoWi96WzQXwvXQez/7s92XJMe9eBflbLEqOe/z5HSVf2cexOb2Lcee8BQiq wV8S3gRVZTmVF9FlLqc3XKCiIY66cDRxlO6XIj+IguQWXGSbT3gwBRARZRgQQJxj KFoRbd3F/RpMjGnl/s2hJDKTCNDY6mgWNqiaryGV+KmWehCHyRsYn7hpM7xXJv2W smZbsXTuTVBn6w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:46:09 2025 by rpki-client