This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft File: 4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json) Hash identifier: uCYlSzUAz61qFFrJULX4vtIcqniA2n3pykHvbAPqMt8= Subject key identifier: 13:DE:54:C5:75:3C:95:3D:2B:AD:55:A5:95:D6:7C:13:6D:54:50:8E Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9 Certificate issuer: /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9 Certificate serial: 019B2B1C79BAD9F0976007081C89A0582BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft Manifest number: 170E Signing time: Wed 17 Dec 2025 07:00:44 +0000 Manifest this update: Wed 17 Dec 2025 07:00:44 +0000 Manifest next update: Thu 18 Dec 2025 07:00:44 +0000 Files and hashes: 1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: DchfbAtsc3UjHvMMwxHrCp3RQbxck8Q1izAnGvVMIQc=) 2: T7HJ2-tjdriOGAxfth6N3m1dxyY.roa (hash: llPCQsjAeQDplZsfiLoaF630T6RziIZ2ZPKVofqV5Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:79:ba:d9:f0:97:60:07:08:1c:89:a0:58:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9 Validity Not Before: Dec 17 07:00:44 2025 GMT Not After : Dec 18 07:00:44 2025 GMT Subject: CN=13de54c5753c953d2bad55a595d67c136d54508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:66:ce:33:96:b3:87:54:23:84:b2:90:64: 09:0e:dc:bf:7a:ae:b9:25:2f:35:94:eb:80:a7:20: 9a:a4:73:53:5d:4e:47:cf:fd:6b:e0:57:10:c2:05: f1:45:f8:24:33:38:10:52:4c:21:71:a1:aa:e8:4c: 57:9e:12:22:14:6b:4d:8e:b7:56:8c:ac:fa:05:e3: e4:35:93:aa:67:61:f9:e7:6d:eb:69:38:7a:bc:11: fb:8a:f7:df:07:aa:c6:f2:8c:a0:23:86:d8:23:78: f0:95:9e:fd:7b:b5:35:ef:b1:60:e3:37:39:27:14: c9:6a:9d:15:35:c3:21:fd:36:6c:fe:8c:05:e6:20: 32:86:f8:a6:d9:89:bc:68:c0:b6:21:48:c4:7c:7a: a4:14:2e:88:d3:65:bb:ac:3e:67:15:e3:6f:fb:27: 2b:10:d7:b5:33:5a:6d:13:f2:59:00:c4:bc:9b:6a: 61:1a:e2:56:02:29:8e:6b:ae:aa:bb:81:29:06:74: 8a:f7:2c:09:80:75:1d:ea:e3:92:f5:98:1c:84:46: e8:f0:b1:b1:80:2d:47:49:35:9b:70:d6:5a:66:09: fa:3e:7c:55:89:02:a3:d5:b4:9b:36:62:21:4e:fc: 1d:db:ef:0b:28:d7:62:9f:5d:72:92:eb:73:5a:16: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:54:C5:75:3C:95:3D:2B:AD:55:A5:95:D6:7C:13:6D:54:50:8E X509v3 Authority Key Identifier: keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:08:53:ac:7a:72:0d:95:c9:31:46:d9:82:51:7d:6e:16:13: b2:0d:7a:91:a1:5a:94:b8:37:50:9b:d6:8a:e5:ee:06:15:3e: ca:34:63:11:e0:bd:c3:43:57:1d:8a:75:f4:eb:d4:56:b1:46: c7:43:8c:4d:74:68:cb:30:24:c1:79:52:90:d7:b3:9d:1c:0d: d0:4a:e2:4b:e3:d7:32:49:bb:d2:38:3c:f0:5e:cf:46:95:af: f0:3a:fb:08:57:f5:78:d4:b7:86:7a:d7:f9:aa:76:d9:ab:3f: db:5e:4e:c2:6a:49:91:f9:98:13:d6:b7:25:15:4f:c3:ad:cf: bc:33:14:c8:c4:d2:2d:0c:f1:0b:20:5f:f5:60:54:b4:53:67: bd:ce:0a:05:97:6b:09:44:86:9f:e8:97:09:34:66:47:07:12: bb:c5:62:ac:87:c8:b8:cd:4c:50:78:0a:37:44:49:a4:0f:57: f8:c7:9f:09:92:18:04:48:03:fd:18:a9:33:42:f9:89:2d:27: 57:24:a8:e2:f4:50:7c:c0:25:16:a1:94:16:5c:35:ea:07:9e: bf:2d:92:97:db:fb:ff:54:a3:e3:6a:75:ff:b4:29:ef:a8:37: e0:53:ad:07:43:1c:93:07:3b:ff:8a:fc:79:fb:53:41:5d:63: 1c:39:72:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHHm62fCXYAcIHImgWCvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDdiN2ViOGY0N2U1Mjc3OTEyZmYwNThjZmVkN2Q4OTlm YzY5YjkwHhcNMjUxMjE3MDcwMDQ0WhcNMjUxMjE4MDcwMDQ0WjAzMTEwLwYDVQQD EygxM2RlNTRjNTc1M2M5NTNkMmJhZDU1YTU5NWQ2N2MxMzZkNTQ1MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMdmzjOWs4dUI4SykGQJDty/eq65 JS81lOuApyCapHNTXU5Hz/1r4FcQwgXxRfgkMzgQUkwhcaGq6ExXnhIiFGtNjrdW jKz6BePkNZOqZ2H5523raTh6vBH7ivffB6rG8oygI4bYI3jwlZ79e7U177Fg4zc5 JxTJap0VNcMh/TZs/owF5iAyhvim2Ym8aMC2IUjEfHqkFC6I02W7rD5nFeNv+ycr ENe1M1ptE/JZAMS8m2phGuJWAimOa66qu4EpBnSK9ywJgHUd6uOS9ZgchEbo8LGx gC1HSTWbcNZaZgn6PnxViQKj1bSbNmIhTvwd2+8LKNdin11ykutzWhZu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPeVMV1PJU9K61VpZXWfBNtVFCOMB8GA1UdIwQY MBaAFOLXt+uPR+UneRL/BYz+19iZ/Gm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1Zjct N2IwNDFjNTQ1NzZhLzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1ZjctN2IwNDFjNTQ1NzZh LzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQhTrHpy DZXJMUbZglF9bhYTsg16kaFalLg3UJvWiuXuBhU+yjRjEeC9w0NXHYp19OvUVrFG x0OMTXRoyzAkwXlSkNeznRwN0EriS+PXMkm70jg88F7PRpWv8Dr7CFf1eNS3hnrX +ap22as/215OwmpJkfmYE9a3JRVPw63PvDMUyMTSLQzxCyBf9WBUtFNnvc4KBZdr CUSGn+iXCTRmRwcSu8VirIfIuM1MUHgKN0RJpA9X+MefCZIYBEgD/RipM0L5iS0n VySo4vRQfMAlFqGUFlw16geevy2Sl9v7/1Sj42p1/7Qp76g34FOtB0Mckwc7/4r8 eftTQV1jHDlyJw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:17 2025 by rpki-client