This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json) Hash identifier: wXh0Z94AEVdUf42Um8lHmgE30yDOhfrgCMBdVHXap/g= Subject key identifier: 82:F2:C8:C3:BD:CD:10:9B:1B:E1:A7:9B:11:3E:61:76:17:F6:2C:88 Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Certificate serial: 019B2BF88C4235537463713B758C91DB1DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft Manifest number: 1438 Signing time: Wed 17 Dec 2025 11:01:07 +0000 Manifest this update: Wed 17 Dec 2025 11:01:07 +0000 Manifest next update: Thu 18 Dec 2025 11:01:07 +0000 Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: U5Al9XzyC7iDorf2DDpr/Lj0RkFp0bRECGlNk4O9C9g=) 2: i1C2_03VF6U3TLTnhfWa-hdk8nE.roa (hash: 4u0sP/VUO27djDGleUL6lxDzjUMPiLw8ur/+xoa5LIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:8c:42:35:53:74:63:71:3b:75:8c:91:db:1d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Validity Not Before: Dec 17 11:01:07 2025 GMT Not After : Dec 18 11:01:07 2025 GMT Subject: CN=82f2c8c3bdcd109b1be1a79b113e617617f62c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:54:fa:bd:c9:5c:59:80:9f:df:64:e2:9e: bc:c7:59:21:78:5c:ba:a3:11:b4:bb:7b:54:fb:ad: 1b:5c:ed:9c:62:4c:72:74:ee:91:f1:d6:27:6c:32: 78:1a:a3:13:e1:88:37:55:3d:6e:b4:7f:be:92:07: b9:da:6e:7a:41:9c:20:c7:3a:c8:19:8e:56:dd:c3: 7b:16:5c:0f:c7:4a:cf:42:2c:7d:ef:ab:4a:95:3f: 3b:bc:fd:47:ee:d6:66:ff:ff:b1:e1:54:4f:e2:39: c9:54:f2:cf:17:52:d0:64:a4:0f:0d:e3:cd:ad:47: 57:5d:85:92:8f:1d:03:be:8b:11:69:fe:5d:25:ce: 91:81:f5:2f:48:19:9c:a0:60:60:7f:e8:28:e8:99: d3:c3:b4:8a:3c:bc:e3:df:fc:2d:75:67:e5:b1:c8: 59:c2:42:23:2a:3c:32:9f:f2:89:ec:88:44:52:53: b5:a4:71:52:1f:15:ac:32:2c:51:fd:27:e7:39:8b: 70:11:43:2c:be:1d:41:e9:15:63:65:ad:43:6c:66: d8:9f:f0:da:eb:0e:87:b6:cc:d0:a4:17:3c:fc:07: 26:78:dd:76:4e:dd:ff:c6:2e:e9:27:8b:35:31:08: 7d:1b:8b:10:b5:9a:4a:aa:29:2f:6c:c6:b6:bc:03: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:C8:C3:BD:CD:10:9B:1B:E1:A7:9B:11:3E:61:76:17:F6:2C:88 X509v3 Authority Key Identifier: keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5b:fe:3c:a6:19:4f:d9:e6:e4:0b:a8:5e:0b:11:aa:36:85: 48:c5:ad:2b:fe:80:ab:3b:7e:ee:6d:65:5d:da:2a:55:c6:d3: c7:3a:5c:23:93:9a:5f:66:c4:e2:30:bd:9a:0e:19:2f:79:5a: c1:53:56:cb:d5:24:86:0f:29:27:ca:89:9f:9b:7c:31:8f:23: 6f:45:d3:93:aa:4c:25:3f:d2:9e:b1:56:26:09:fa:36:48:8d: b3:c3:e4:53:10:ea:d6:80:e1:10:90:18:0f:a5:54:42:f5:7e: cf:17:28:fd:d2:19:a9:d0:8c:54:6b:23:36:54:bf:9b:6e:00: 6c:83:bd:cc:a5:6a:e6:9a:26:cf:45:97:69:5d:87:dd:96:ce: 4b:24:19:84:db:eb:9e:c0:89:46:29:e0:e1:c9:0d:ae:35:cb: 8a:23:9a:6e:35:b6:84:04:5a:2c:e8:f0:c8:c9:a5:81:4a:2d: e6:c6:eb:12:eb:66:ea:1c:fa:e6:50:3b:b6:9a:21:6a:c9:2c: 69:85:eb:37:b0:2a:d9:ff:e6:44:a6:e4:66:a7:04:f2:b4:85: d0:4f:c0:44:82:a6:c4:89:47:fd:fc:59:c9:89:b9:1c:ad:f9: 8b:1f:77:67:06:b9:8c:f3:6f:e7:37:60:37:43:2e:29:90:21: 8c:24:41:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IxCNVN0Y3E7dYyR2x3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk YWU5ZDkwHhcNMjUxMjE3MTEwMTA3WhcNMjUxMjE4MTEwMTA3WjAzMTEwLwYDVQQD Eyg4MmYyYzhjM2JkY2QxMDliMWJlMWE3OWIxMTNlNjE3NjE3ZjYyYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9U+r3JXFmAn99k4p68x1kheFy6 oxG0u3tU+60bXO2cYkxydO6R8dYnbDJ4GqMT4Yg3VT1utH++kge52m56QZwgxzrI GY5W3cN7FlwPx0rPQix976tKlT87vP1H7tZm//+x4VRP4jnJVPLPF1LQZKQPDePN rUdXXYWSjx0DvosRaf5dJc6RgfUvSBmcoGBgf+go6JnTw7SKPLzj3/wtdWflschZ wkIjKjwyn/KJ7IhEUlO1pHFSHxWsMixR/SfnOYtwEUMsvh1B6RVjZa1DbGbYn/Da 6w6HtszQpBc8/AcmeN12Tt3/xi7pJ4s1MQh9G4sQtZpKqikvbMa2vAO2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILyyMO9zRCbG+GnmxE+YXYX9iyIMB8GA1UdIwQY MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5 LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclv+PKYZ T9nm5AuoXgsRqjaFSMWtK/6Aqzt+7m1lXdoqVcbTxzpcI5OaX2bE4jC9mg4ZL3la wVNWy9Ukhg8pJ8qJn5t8MY8jb0XTk6pMJT/SnrFWJgn6NkiNs8PkUxDq1oDhEJAY D6VUQvV+zxco/dIZqdCMVGsjNlS/m24AbIO9zKVq5pomz0WXaV2H3ZbOSyQZhNvr nsCJRing4ckNrjXLiiOabjW2hARaLOjwyMmlgUot5sbrEutm6hz65lA7tpohasks aYXrN7Aq2f/mRKbkZqcE8rSF0E/ARIKmxIlH/fxZyYm5HK35ix93Zwa5jPNv5zdg N0MuKZAhjCRBPA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:40:48 2025 by rpki-client