This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json) Hash identifier: +mucxoQlO/fKUY8k4xEWYc1bxGiZBefodxWuo2nh8vM= Subject key identifier: 96:7A:FA:1B:4B:44:4C:46:34:70:AA:89:A3:47:1F:0E:48:16:AF:0F Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Certificate serial: 019B307A4B1E1770C3623CDAC80CCA3C4935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 08:01:19 +0000 Manifest this update: Thu 18 Dec 2025 08:01:19 +0000 Manifest next update: Fri 19 Dec 2025 08:01:19 +0000 Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: /zNUAwy3MjDfS7uLDAgbs7KHxxGq+dQsLOGblMK54Jw=) 2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:4b:1e:17:70:c3:62:3c:da:c8:0c:ca:3c:49:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Validity Not Before: Dec 18 08:01:19 2025 GMT Not After : Dec 19 08:01:19 2025 GMT Subject: CN=967afa1b4b444c463470aa89a3471f0e4816af0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:04:c9:aa:c2:45:eb:43:42:27:53:4a:c7: 90:37:e2:ec:82:fd:d1:7e:0d:15:12:b4:85:80:58: a6:ce:6f:21:9f:77:d7:dd:07:0e:a1:b2:c9:51:99: bc:95:4a:40:28:56:38:08:0a:27:61:55:71:4b:7f: d0:bc:47:57:fd:75:fa:b1:73:a1:25:74:97:9b:ec: 7e:82:52:c9:5f:0e:1a:20:fd:ff:64:6c:3f:51:3d: 8a:a6:9d:49:5a:9a:e3:11:1b:33:82:ae:6f:6d:a1: 4d:c1:29:17:eb:46:26:5f:2f:e3:59:43:ff:1d:f4: 39:a4:d8:e0:54:b9:a7:5b:bd:23:0b:b5:2d:40:35: f8:8b:d2:ca:99:11:e6:b3:b5:f5:43:ed:15:f2:26: 97:8e:68:e5:6d:5f:55:32:e4:9d:88:46:37:bc:fe: 9d:9b:ed:8e:f9:a2:24:a4:f7:28:32:63:13:08:6d: fe:72:32:11:71:37:fb:b7:c8:01:04:e3:3d:41:1e: 8b:18:e4:4a:8c:b2:dc:c6:05:de:82:9c:7f:8c:c0: 92:89:aa:54:2d:63:80:64:96:1c:fa:80:16:ad:25: 48:cf:56:21:8b:7a:37:43:97:9c:95:07:15:38:9f: bd:5b:59:70:61:34:c8:eb:ac:ce:35:98:ee:70:d9: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7A:FA:1B:4B:44:4C:46:34:70:AA:89:A3:47:1F:0E:48:16:AF:0F X509v3 Authority Key Identifier: keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2f:1b:14:46:56:d3:fa:c4:a3:e0:42:39:5d:8c:90:b1:44: f2:de:b7:a9:c1:5f:18:50:c7:a7:e9:47:85:a9:51:04:76:a5: 24:24:cd:a7:8b:2a:4b:a6:d6:db:8b:84:f3:b4:75:f9:03:55: 62:4b:38:91:2f:d1:a3:8a:4f:70:40:08:23:d5:46:df:53:c5: 29:31:19:49:7a:d3:b8:42:fb:b6:15:d9:81:81:f6:ce:e2:84: 65:b9:98:57:df:a6:9b:fe:1e:be:b6:94:80:bb:9f:23:86:45: f4:df:44:50:a3:aa:e8:3f:f7:3b:4d:0d:ee:54:75:24:91:c8: 30:17:a6:47:ce:70:df:e0:11:7e:2c:c0:0c:b1:df:be:3d:ac: 30:b2:76:e7:41:8c:43:ce:62:d5:b9:be:bf:05:d2:e3:b4:c0: e8:c7:85:5c:19:40:65:a7:b6:fb:7e:0d:52:09:23:ba:5f:9f: 02:c9:d0:98:71:70:a8:d6:df:84:ca:c6:fa:0c:af:c6:ad:c9: 57:75:32:b9:58:a1:cd:48:bf:7f:2e:0c:ad:fc:10:32:62:f1: b8:4d:ac:a2:03:70:4a:a0:67:f3:79:a6:46:c8:fb:aa:86:03: b6:da:39:49:ae:04:b5:26:e7:ca:db:a4:6f:16:1c:8a:80:ce: 92:a0:dc:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswekseF3DDYjzayAzKPEk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDhkNWJmMDFiMGUyOTViZDA4ODVmYzVjNGRmODI3NTQz ODIyZWQwHhcNMjUxMjE4MDgwMTE5WhcNMjUxMjE5MDgwMTE5WjAzMTEwLwYDVQQD Eyg5NjdhZmExYjRiNDQ0YzQ2MzQ3MGFhODlhMzQ3MWYwZTQ4MTZhZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEIEyarCRetDQidTSseQN+Lsgv3R fg0VErSFgFimzm8hn3fX3QcOobLJUZm8lUpAKFY4CAonYVVxS3/QvEdX/XX6sXOh JXSXm+x+glLJXw4aIP3/ZGw/UT2Kpp1JWprjERszgq5vbaFNwSkX60YmXy/jWUP/ HfQ5pNjgVLmnW70jC7UtQDX4i9LKmRHms7X1Q+0V8iaXjmjlbV9VMuSdiEY3vP6d m+2O+aIkpPcoMmMTCG3+cjIRcTf7t8gBBOM9QR6LGORKjLLcxgXegpx/jMCSiapU LWOAZJYc+oAWrSVIz1Yhi3o3Q5eclQcVOJ+9W1lwYTTI66zONZjucNkodwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ6+htLRExGNHCqiaNHHw5IFq8PMB8GA1UdIwQY MBaAFOJI1b8BsOKVvQiF/FxN+CdUOCLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMt YTAwYjU3MTNjNmFhLzEvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMtYTAwYjU3MTNjNmFh LzEvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS8bFEZW 0/rEo+BCOV2MkLFE8t63qcFfGFDHp+lHhalRBHalJCTNp4sqS6bW24uE87R1+QNV Yks4kS/Ro4pPcEAII9VG31PFKTEZSXrTuEL7thXZgYH2zuKEZbmYV9+mm/4evraU gLufI4ZF9N9EUKOq6D/3O00N7lR1JJHIMBemR85w3+ARfizADLHfvj2sMLJ250GM Q85i1bm+vwXS47TA6MeFXBlAZae2+34NUgkjul+fAsnQmHFwqNbfhMrG+gyvxq3J V3UyuVihzUi/fy4MrfwQMmLxuE2sogNwSqBn83mmRsj7qoYDtto5Sa4EtSbnytuk bxYcioDOkqDcnQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:05 2025 by rpki-client