This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json) Hash identifier: VRFkMa7PpV8sIEqf+pFGs99fAolGVYX+nnS4whXm+7g= Subject key identifier: C4:CB:81:D2:92:B0:73:57:85:14:87:82:9D:59:BD:EE:91:45:9B:7F Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Certificate serial: 019B315657850F6C33A7FDF81929F6D40E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 12:01:40 +0000 Manifest this update: Thu 18 Dec 2025 12:01:40 +0000 Manifest next update: Fri 19 Dec 2025 12:01:40 +0000 Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=) 2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: LAsY2oZMM6C6yTmYEGfpkrkeWOqXHOZuc98vDjOlucg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:57:85:0f:6c:33:a7:fd:f8:19:29:f6:d4:0e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Validity Not Before: Dec 18 12:01:40 2025 GMT Not After : Dec 19 12:01:40 2025 GMT Subject: CN=c4cb81d292b07357851487829d59bdee91459b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:1a:20:2f:0a:92:f5:4c:41:56:1a:d0:e7: 6a:43:cb:7f:98:da:35:ae:79:1d:6c:e6:5b:b3:e9: bd:c3:e9:ec:7b:b9:e2:38:1d:85:77:ce:0c:84:02: 34:d8:91:46:24:a8:09:54:75:a4:dc:d2:2a:b5:16: a2:6a:46:79:48:0e:1c:1c:25:a9:ce:81:cd:de:a2: a4:7e:e4:fc:de:79:34:60:87:6a:ed:03:3d:bd:c6: cf:7e:c7:f7:f5:1d:25:aa:1e:c5:01:c2:77:b8:cf: 8f:7d:dd:ad:a6:33:a6:b9:17:90:66:e2:9a:c7:83: 78:1b:b5:68:9c:77:94:77:45:ac:d3:23:2f:c1:61: a3:33:c6:b5:45:c3:0b:a5:5f:69:90:16:b6:9c:3c: 90:c4:08:da:16:36:db:ef:c1:bc:ad:89:8c:82:49: 85:f2:ca:68:ee:dc:4e:06:89:c1:f6:32:23:b5:be: b3:e9:ab:ee:ce:7f:e0:87:4e:8f:19:02:a4:7a:2f: 96:e0:43:59:cd:e4:be:c7:fa:94:bd:20:b0:dd:70: c7:2f:ca:62:48:df:26:9d:a9:fd:32:de:a8:dd:68: cf:4f:a8:6f:97:d0:a6:2f:df:cd:bd:0b:5f:2d:62: 60:1c:0d:1c:28:fd:b6:77:e2:1d:d5:d8:cb:88:70: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:81:D2:92:B0:73:57:85:14:87:82:9D:59:BD:EE:91:45:9B:7F X509v3 Authority Key Identifier: keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:53:d6:fa:a5:e2:a1:20:17:56:6e:8a:d6:09:01:62:8e:6d: 32:7d:17:c0:21:0b:82:fa:38:81:59:28:dc:42:e8:88:4a:6e: a2:b8:09:25:c6:0b:29:02:0b:f2:10:b9:94:84:30:3e:e5:50: 0c:f0:5a:97:a0:2a:3e:e4:b9:a3:ea:c7:b1:f6:b3:5a:7a:6e: c9:b3:3a:c2:98:29:ae:e3:30:8b:bc:b9:4d:e5:19:5b:7a:49: dd:23:d6:e0:ce:2e:3e:a8:20:74:76:11:c6:e7:c4:27:32:7b: e4:50:09:27:44:d8:01:5f:e1:14:82:92:d6:39:3f:c9:40:4d: cc:37:57:62:f8:6e:43:91:0d:75:5d:a9:ee:a5:99:a7:39:72: bd:81:c1:27:b6:6c:1a:d4:41:fc:95:d6:62:5d:cc:77:aa:1e: 7e:a6:22:1f:1d:2e:19:dd:3a:e1:a7:19:d6:e8:b1:25:21:1f: af:16:73:14:72:07:f8:c2:73:3f:54:fc:12:a7:27:b7:55:91: 36:c7:56:59:ff:92:3f:55:ae:d8:ee:a3:cf:8b:50:72:aa:12: 3e:87:68:86:33:6c:10:81:b3:00:3c:b6:fb:f8:8e:19:51:8a: 12:81:3b:ba:a4:f7:c4:6a:e4:fb:c0:d7:65:c0:8c:04:ca:74: 77:a2:b6:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVleFD2wzp/34GSn21A4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODJiZGZjOWIxYjI1MDAyMDM5MTIzNzc5ZmZhZjI0NzNm ODUxYjcwHhcNMjUxMjE4MTIwMTQwWhcNMjUxMjE5MTIwMTQwWjAzMTEwLwYDVQQD EyhjNGNiODFkMjkyYjA3MzU3ODUxNDg3ODI5ZDU5YmRlZTkxNDU5YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+4aIC8KkvVMQVYa0OdqQ8t/mNo1 rnkdbOZbs+m9w+nse7niOB2Fd84MhAI02JFGJKgJVHWk3NIqtRaiakZ5SA4cHCWp zoHN3qKkfuT83nk0YIdq7QM9vcbPfsf39R0lqh7FAcJ3uM+Pfd2tpjOmuReQZuKa x4N4G7VonHeUd0Ws0yMvwWGjM8a1RcMLpV9pkBa2nDyQxAjaFjbb78G8rYmMgkmF 8spo7txOBonB9jIjtb6z6avuzn/gh06PGQKkei+W4ENZzeS+x/qUvSCw3XDHL8pi SN8mnan9Mt6o3WjPT6hvl9CmL9/NvQtfLWJgHA0cKP22d+Id1djLiHCrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTLgdKSsHNXhRSHgp1Zve6RRZt/MB8GA1UdIwQY MBaAFJOCvfybGyUAIDkSN3n/ryRz+FG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYt MjRiZjQwYzEzMDhmLzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYtMjRiZjQwYzEzMDhm LzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVPW+qXi oSAXVm6K1gkBYo5tMn0XwCELgvo4gVko3ELoiEpuorgJJcYLKQIL8hC5lIQwPuVQ DPBal6AqPuS5o+rHsfazWnpuybM6wpgpruMwi7y5TeUZW3pJ3SPW4M4uPqggdHYR xufEJzJ75FAJJ0TYAV/hFIKS1jk/yUBNzDdXYvhuQ5ENdV2p7qWZpzlyvYHBJ7Zs GtRB/JXWYl3Md6oefqYiHx0uGd064acZ1uixJSEfrxZzFHIH+MJzP1T8Eqcnt1WR NsdWWf+SP1Wu2O6jz4tQcqoSPodohjNsEIGzADy2+/iOGVGKEoE7uqT3xGrk+8DX ZcCMBMp0d6K2Gw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:25 2025 by rpki-client