This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json) Hash identifier: J5/Z7okTfVDl59gT96M5y2lYmLkb93bSdsbCNTMadto= Subject key identifier: D5:43:A2:D3:A1:CC:28:7D:C7:AB:94:25:0C:CC:83:1B:B3:8F:DF:AC Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Certificate serial: 019B33447A9A6B1E7D08B4A878AFDB00A990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 21:01:24 +0000 Manifest this update: Thu 18 Dec 2025 21:01:24 +0000 Manifest next update: Fri 19 Dec 2025 21:01:24 +0000 Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: t44wNbL/+MkkuruAmRWUyy74WwMYCrDS7AnjXngp4Co=) 2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:7a:9a:6b:1e:7d:08:b4:a8:78:af:db:00:a9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b Validity Not Before: Dec 18 21:01:24 2025 GMT Not After : Dec 19 21:01:24 2025 GMT Subject: CN=d543a2d3a1cc287dc7ab94250ccc831bb38fdfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:33:bd:36:a3:27:81:24:2c:27:b9:23:03: 24:87:4c:44:0c:c7:48:4f:52:d7:2b:5e:0d:6d:18: ea:39:c9:3d:d3:8d:d0:9c:e7:1e:2c:6e:c0:cb:f0: a8:b0:90:7e:26:4a:43:f5:6d:8a:ea:c7:3b:0a:f1: ee:ba:47:b8:f0:ec:eb:e6:17:65:b4:dc:4c:fe:9e: 0a:b6:bc:f5:d1:8a:3d:57:27:fb:2a:a7:42:cb:74: 99:be:c4:f0:3d:75:da:88:12:08:ff:49:62:99:7c: cc:3b:7b:38:5d:4f:4e:ea:cc:e3:2f:ea:76:0b:93: 26:44:84:e5:42:66:fc:40:cf:78:4a:97:fa:c5:13: 65:c9:6c:78:7b:88:d9:f4:da:ef:83:82:05:8a:6e: c3:e0:06:8c:9c:f7:ba:b0:5c:21:ff:3c:ed:2f:85: 8c:0c:74:74:c4:3f:45:a1:e4:65:2e:20:b0:c9:e4: d0:f1:3b:db:b5:18:41:5c:c9:59:93:d0:55:b0:76: 8a:b3:6b:46:40:4a:4b:f0:d6:05:cb:a1:5e:4f:8b: 16:82:ef:db:ee:8f:13:70:3c:27:9d:a3:af:50:2f: 74:f4:04:d1:dc:ef:a2:15:6d:a6:3c:06:73:89:77: 1e:0d:76:2d:58:6d:16:f0:04:26:6b:86:b3:b4:6a: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:A2:D3:A1:CC:28:7D:C7:AB:94:25:0C:CC:83:1B:B3:8F:DF:AC X509v3 Authority Key Identifier: keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a6:43:2f:52:32:45:5c:d3:9a:69:bd:bc:fc:23:6a:b3:76: ef:c6:80:d9:ed:c0:35:ec:ba:cd:b4:01:35:7a:3c:93:d0:7e: 33:50:9f:9a:4b:14:ae:2f:b8:35:f7:e2:2a:32:4c:8b:89:3e: 74:d2:23:11:8c:21:92:a1:0d:7f:50:05:e5:91:b4:06:8c:43: 83:67:0f:e3:66:54:9e:0b:7a:ba:3b:32:ca:a3:41:1a:d6:ef: 3d:be:65:79:d7:85:41:7d:c5:eb:92:6f:9a:b7:b0:4f:3e:f7: be:9f:1a:10:8b:e3:1a:3e:a7:6d:a3:d4:0a:e6:fd:54:00:19: 45:b2:d3:55:84:50:28:23:82:44:41:3d:81:9f:68:11:08:d4: 4a:6a:30:04:19:3c:84:d2:f4:a4:01:19:11:42:26:c0:4f:46: 84:de:17:fe:3d:0d:31:d7:e3:50:9a:41:45:11:36:56:28:e9: 85:96:a3:03:59:98:24:73:40:f7:6f:1a:87:22:12:3a:19:fa: cb:d7:a6:c6:90:8b:0d:e1:99:09:c0:4a:5d:58:06:1a:99:36: 49:49:35:6a:c1:58:e0:f6:ba:23:0b:9a:5b:21:1d:fc:83:14: 4d:05:0e:e5:c7:63:f4:fe:93:e9:24:be:37:07:f7:bd:da:22: 10:76:81:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHqaax59CLSoeK/bAKmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi ODliMmIwHhcNMjUxMjE4MjEwMTI0WhcNMjUxMjE5MjEwMTI0WjAzMTEwLwYDVQQD EyhkNTQzYTJkM2ExY2MyODdkYzdhYjk0MjUwY2NjODMxYmIzOGZkZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXozvTajJ4EkLCe5IwMkh0xEDMdI T1LXK14NbRjqOck9043QnOceLG7Ay/CosJB+JkpD9W2K6sc7CvHuuke48Ozr5hdl tNxM/p4Ktrz10Yo9Vyf7KqdCy3SZvsTwPXXaiBII/0limXzMO3s4XU9O6szjL+p2 C5MmRITlQmb8QM94Spf6xRNlyWx4e4jZ9Nrvg4IFim7D4AaMnPe6sFwh/zztL4WM DHR0xD9FoeRlLiCwyeTQ8TvbtRhBXMlZk9BVsHaKs2tGQEpL8NYFy6FeT4sWgu/b 7o8TcDwnnaOvUC909ATR3O+iFW2mPAZziXceDXYtWG0W8AQma4aztGpKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVDotOhzCh9x6uUJQzMgxuzj9+sMB8GA1UdIwQY MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt OWE3MmQ5OTAzZWI4LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4 LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKZDL1Iy RVzTmmm9vPwjarN278aA2e3ANey6zbQBNXo8k9B+M1CfmksUri+4NffiKjJMi4k+ dNIjEYwhkqENf1AF5ZG0BoxDg2cP42ZUngt6ujsyyqNBGtbvPb5ledeFQX3F65Jv mrewTz73vp8aEIvjGj6nbaPUCub9VAAZRbLTVYRQKCOCREE9gZ9oEQjUSmowBBk8 hNL0pAEZEUImwE9GhN4X/j0NMdfjUJpBRRE2VijphZajA1mYJHNA928ahyISOhn6 y9emxpCLDeGZCcBKXVgGGpk2SUk1asFY4Pa6IwuaWyEd/IMUTQUO5cdj9P6T6SS+ Nwf3vdoiEHaB9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:19:44 2025 by rpki-client