This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json) Hash identifier: 3S4ahx/1bgdcsrpprxc/1IZWN4SiiX1v7Dfpwh8y0Cs= Subject key identifier: F1:38:27:4C:85:50:C5:3C:83:61:66:99:A6:1B:65:24:FC:23:5F:48 Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43 Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43 Certificate serial: 019B2B5429CDEC7B3E328F64420BC9623207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 08:01:34 +0000 Manifest this update: Wed 17 Dec 2025 08:01:34 +0000 Manifest next update: Thu 18 Dec 2025 08:01:34 +0000 Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=) 2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: RDiB5GCOuuiguogGAJbcWVQ2oF2gJFemm1YfipBYCyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:29:cd:ec:7b:3e:32:8f:64:42:0b:c9:62:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43 Validity Not Before: Dec 17 08:01:34 2025 GMT Not After : Dec 18 08:01:34 2025 GMT Subject: CN=f138274c8550c53c83616699a61b6524fc235f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:4e:34:16:f7:01:63:0d:66:ef:34:4f:24: 49:85:e4:ef:e2:62:a9:a6:a8:63:44:1f:a9:7f:8b: c1:5a:de:1b:1d:9e:5d:6a:90:f8:7e:4d:a6:7b:ec: c8:c2:1b:fe:01:a6:8b:1c:75:23:99:83:33:6a:91: c5:9b:2b:9e:89:67:10:3b:19:2f:d9:ac:68:56:a3: 70:d0:1d:8c:fd:24:a1:af:b4:fd:9d:f3:44:b5:31: 28:1d:f0:b8:8d:aa:78:1c:79:4e:ef:2a:b5:f3:89: f1:c0:c5:08:53:35:e4:a8:aa:11:d1:90:f2:25:8e: 5b:05:6a:f4:01:03:f6:14:2c:b2:e8:10:92:c5:e5: 6d:54:7f:b1:19:ff:b9:a9:46:80:2e:06:d8:82:59: 27:f6:ef:61:a6:48:bc:3c:d2:5d:79:f7:27:80:7b: e0:52:62:2b:8f:7d:b9:c6:99:0e:3d:e3:71:e8:e8: 10:72:91:5c:6b:60:7c:5c:f9:fe:83:5e:dd:40:42: a8:67:77:3e:6a:c7:e3:2e:ac:73:c5:f3:c0:6c:f6: 21:aa:b3:28:2d:cf:c8:ea:4b:fd:ee:87:4b:48:d1: 5d:a0:e3:54:c5:b5:9b:98:f7:e8:a0:21:de:e2:a0: aa:d7:20:33:4c:7c:9e:d2:01:ae:62:d8:ab:e6:f8: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:27:4C:85:50:C5:3C:83:61:66:99:A6:1B:65:24:FC:23:5F:48 X509v3 Authority Key Identifier: keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1a:a5:46:88:88:77:3c:18:2d:35:b0:28:46:99:55:fa:7c: e6:4e:b1:9c:e0:89:e3:4e:e8:5b:6a:8a:2e:c1:83:01:1a:db: 38:f5:5f:c4:cc:4f:b5:eb:15:2d:e7:26:22:5f:15:73:b3:ce: 51:fc:b5:3f:44:f8:4e:bc:ef:9f:2c:27:2f:e7:d7:2b:37:11: ac:bd:07:d0:63:19:d4:2d:aa:6b:06:76:e2:f8:cc:cd:d0:27: f5:b3:3e:71:02:25:04:cb:23:89:eb:a8:4e:68:60:cb:2f:0c: 94:6a:1c:63:51:26:83:70:75:1c:a2:7d:98:a6:60:c5:67:ec: c4:b8:aa:4f:67:0e:72:1d:8b:fb:07:48:fd:72:8e:ce:fa:17: 6c:ec:40:35:10:7d:6b:b9:ed:a1:f1:66:c1:17:09:cf:a7:b0: 77:60:70:e9:36:fe:2a:8f:6a:3e:70:16:d9:81:6c:51:d4:31: 03:2e:b8:f8:29:92:41:fb:b0:6d:77:c0:08:97:39:68:09:85: 23:2d:79:0f:2d:b6:a3:19:c1:8f:40:b2:69:e6:57:ca:71:a3: a0:d1:76:4c:f7:ab:84:cf:67:d8:6e:0a:fc:a8:08:d8:91:72: ed:de:60:33:60:f4:d6:2e:fd:6b:86:29:32:4d:98:3e:d5:a6: 1d:f0:d8:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVCnN7Hs+Mo9kQgvJYjIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1 NWZiNDMwHhcNMjUxMjE3MDgwMTM0WhcNMjUxMjE4MDgwMTM0WjAzMTEwLwYDVQQD EyhmMTM4Mjc0Yzg1NTBjNTNjODM2MTY2OTlhNjFiNjUyNGZjMjM1ZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYZONBb3AWMNZu80TyRJheTv4mKp pqhjRB+pf4vBWt4bHZ5dapD4fk2me+zIwhv+AaaLHHUjmYMzapHFmyueiWcQOxkv 2axoVqNw0B2M/SShr7T9nfNEtTEoHfC4jap4HHlO7yq184nxwMUIUzXkqKoR0ZDy JY5bBWr0AQP2FCyy6BCSxeVtVH+xGf+5qUaALgbYglkn9u9hpki8PNJdefcngHvg UmIrj325xpkOPeNx6OgQcpFca2B8XPn+g17dQEKoZ3c+asfjLqxzxfPAbPYhqrMo Lc/I6kv97odLSNFdoONUxbWbmPfooCHe4qCq1yAzTHye0gGuYtir5vhbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE4J0yFUMU8g2FmmaYbZST8I19IMB8GA1UdIwQY MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhqlRoiI dzwYLTWwKEaZVfp85k6xnOCJ407oW2qKLsGDARrbOPVfxMxPtesVLecmIl8Vc7PO Ufy1P0T4TrzvnywnL+fXKzcRrL0H0GMZ1C2qawZ24vjMzdAn9bM+cQIlBMsjieuo Tmhgyy8MlGocY1Emg3B1HKJ9mKZgxWfsxLiqT2cOch2L+wdI/XKOzvoXbOxANRB9 a7ntofFmwRcJz6ewd2Bw6Tb+Ko9qPnAW2YFsUdQxAy64+CmSQfuwbXfACJc5aAmF Iy15Dy22oxnBj0CyaeZXynGjoNF2TPerhM9n2G4K/KgI2JFy7d5gM2D01i79a4Yp Mk2YPtWmHfDY2g== -----END CERTIFICATE-----Generated at Wed Dec 17 15:28:08 2025 by rpki-client