This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft File: 4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json) Hash identifier: bTfhELO7d5lWZPKLCfJDGD66db69KqKxfJK3ewXGt8E= Subject key identifier: B7:F7:72:6F:C7:DE:3D:9B:BB:0E:26:7C:0B:B6:80:A5:91:45:7A:44 Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Certificate serial: 019B3A21FF4C0EFDE46B6838C6DE28A9A3F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft Manifest number: 0C1B Signing time: Sat 20 Dec 2025 05:01:05 +0000 Manifest this update: Sat 20 Dec 2025 05:01:05 +0000 Manifest next update: Sun 21 Dec 2025 05:01:05 +0000 Files and hashes: 1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: xMdMd8qw+KCI6UULG8YiuN3Am/PyVaKqUrogsEE7OOc=) 2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=) 3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=) 4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=) 5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:ff:4c:0e:fd:e4:6b:68:38:c6:de:28:a9:a3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Validity Not Before: Dec 20 05:01:05 2025 GMT Not After : Dec 21 05:01:05 2025 GMT Subject: CN=b7f7726fc7de3d9bbb0e267c0bb680a591457a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:0b:f1:d9:c0:d8:45:b3:ed:a5:96:50:59: ab:24:8f:e9:6f:16:a9:f0:4b:64:91:9d:17:da:3f: 14:b9:9f:12:df:94:a7:f6:48:b9:98:79:05:46:fe: 2f:c6:bb:b7:96:21:48:f5:c1:21:89:42:03:f7:f0: 9c:68:7a:68:39:0a:0a:62:f7:2f:1f:30:c2:d7:8e: ff:02:21:cd:67:58:9c:a7:e4:6a:9d:0a:b9:8b:f3: 8d:e6:40:4a:63:73:fb:da:2f:5c:d7:59:7e:44:1b: 6e:4e:07:d1:cc:1a:54:85:ee:b9:bb:21:0a:87:7d: 65:97:0f:b8:4c:85:57:31:c4:11:4f:5a:90:62:6d: 54:e4:d4:68:37:18:5c:4f:c1:9c:af:49:88:e6:7a: 25:93:ef:8d:af:ca:ed:5f:2b:28:8f:86:a6:ff:49: 33:df:f1:42:2e:8c:78:ed:b4:d9:e9:df:d2:0e:6c: 23:14:40:d4:40:a5:82:58:64:7e:4a:6e:31:c7:54: 89:11:06:95:09:5d:ed:ec:e3:b6:a9:9b:51:0a:2f: d0:2c:7d:59:2a:09:65:b3:15:91:3c:35:5d:b2:7e: bb:80:ff:ee:c8:b0:c5:0b:3a:a6:d8:a1:28:68:00: 81:68:1e:b3:17:f4:4b:02:d9:15:2b:98:7a:fc:ea: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:72:6F:C7:DE:3D:9B:BB:0E:26:7C:0B:B6:80:A5:91:45:7A:44 X509v3 Authority Key Identifier: keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:00:1e:46:b4:37:4e:f4:ff:64:d8:c5:7e:17:2d:0c:c8: a6:e6:29:2f:86:ea:54:6e:f0:fc:ea:3a:6d:a5:25:d9:8b:e2: 49:d2:cc:67:29:94:86:bc:01:cc:15:11:e6:95:45:18:06:1a: a7:8f:3a:27:28:c9:b8:83:38:2d:84:48:af:98:d8:7b:98:58: 02:55:5b:72:4e:62:4e:31:25:b1:b9:95:e9:91:61:5b:6a:62: 24:8f:52:7e:d4:8b:b3:76:5d:1a:b4:c5:df:48:3e:1e:93:b6: ab:81:80:7e:48:5c:cf:39:cb:d7:c3:44:8d:09:fe:e3:99:b0: 3b:ef:80:d5:ac:f1:54:bc:08:19:b0:49:95:bf:ff:93:0d:a5: 87:36:b2:41:95:d9:8e:cd:7d:77:9d:d2:ea:56:37:3e:9e:51: f5:4c:8c:b3:74:d6:10:15:c3:0f:dc:97:44:eb:d2:b1:40:7e: 1b:05:b4:dc:50:e2:bb:f1:84:1a:9c:e4:89:ea:97:73:53:1b: 8c:83:ee:e3:10:e4:14:1f:3c:55:df:81:0a:1b:b3:1e:f5:5e: b8:b6:01:27:23:d0:99:24:26:4a:05:f2:72:65:82:9f:9c:65: 08:76:e8:39:c8:28:1f:d1:6f:3b:65:30:51:6e:ff:d0:e2:4d: fe:c5:fb:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6If9MDv3ka2g4xt4oqaP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz OGI0ZDAwHhcNMjUxMjIwMDUwMTA1WhcNMjUxMjIxMDUwMTA1WjAzMTEwLwYDVQQD EyhiN2Y3NzI2ZmM3ZGUzZDliYmIwZTI2N2MwYmI2ODBhNTkxNDU3YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GcL8dnA2EWz7aWWUFmrJI/pbxap 8EtkkZ0X2j8UuZ8S35Sn9ki5mHkFRv4vxru3liFI9cEhiUID9/CcaHpoOQoKYvcv HzDC147/AiHNZ1icp+RqnQq5i/ON5kBKY3P72i9c11l+RBtuTgfRzBpUhe65uyEK h31llw+4TIVXMcQRT1qQYm1U5NRoNxhcT8Gcr0mI5nolk++Nr8rtXysoj4am/0kz 3/FCLox47bTZ6d/SDmwjFEDUQKWCWGR+Sm4xx1SJEQaVCV3t7OO2qZtRCi/QLH1Z KgllsxWRPDVdsn67gP/uyLDFCzqm2KEoaACBaB6zF/RLAtkVK5h6/Oqc9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf3cm/H3j2buw4mfAu2gKWRRXpEMB8GA1UdIwQY MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt OGVhYTZiZjQwMzU3LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3 LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUIAHka0 N070/2TYxX4XLQzIpuYpL4bqVG7w/Oo6baUl2YviSdLMZymUhrwBzBUR5pVFGAYa p486JyjJuIM4LYRIr5jYe5hYAlVbck5iTjElsbmV6ZFhW2piJI9SftSLs3ZdGrTF 30g+HpO2q4GAfkhczznL18NEjQn+45mwO++A1azxVLwIGbBJlb//kw2lhzayQZXZ js19d53S6lY3Pp5R9UyMs3TWEBXDD9yXROvSsUB+GwW03FDiu/GEGpzkieqXc1Mb jIPu4xDkFB88Vd+BChuzHvVeuLYBJyPQmSQmSgXycmWCn5xlCHboOcgoH9FvO2Uw UW7/0OJN/sX7lg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:26:58 2025 by rpki-client