This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json) Hash identifier: XuglMuCmcXbrZgYxV7Z4YrmqFDGjw0e+qEh2hcK+IDI= Subject key identifier: 02:4B:4A:D6:EE:EF:A4:3B:10:E2:D0:BD:B3:AD:53:3A:7E:7B:D5:8B Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019B32D7658460B779D25B34C5F6497B0D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:02:15 +0000 Manifest this update: Thu 18 Dec 2025 19:02:15 +0000 Manifest next update: Fri 19 Dec 2025 19:02:15 +0000 Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=) 2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: ymGaH9kIJWewjRm+59aMpLARStj9H//DaarJWbQXhow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:65:84:60:b7:79:d2:5b:34:c5:f6:49:7b:0d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Dec 18 19:02:15 2025 GMT Not After : Dec 19 19:02:15 2025 GMT Subject: CN=024b4ad6eeefa43b10e2d0bdb3ad533a7e7bd58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:8e:cd:f2:5b:f4:cb:6f:38:93:4f:3b:2c: 6f:f2:45:84:48:31:0e:21:79:dd:d8:20:6e:67:92: 0f:7e:e3:33:ea:91:cf:f2:c4:b6:e7:8e:67:5a:0d: 9a:c0:49:38:16:9a:c8:a2:7c:cd:2e:ad:e5:3b:62: 71:e8:b7:9a:4c:4a:2f:14:77:95:39:e5:1a:d6:5d: c5:d4:64:30:59:10:c0:84:9e:01:81:03:e6:eb:2c: 40:67:48:25:27:ef:86:11:19:2a:4d:14:6b:40:08: 43:32:6d:1f:0d:fa:be:bc:3d:dd:09:70:a6:fa:88: 82:a8:1a:58:22:b4:f0:50:e7:07:aa:00:12:36:f0: e4:eb:80:06:6c:b5:35:42:08:54:fc:47:d3:19:fd: b4:cd:f0:b7:b6:4d:38:6a:24:83:0d:4d:8e:ac:64: d1:c1:f3:25:f1:fe:60:55:7f:83:c8:53:92:3e:d0: 37:90:b9:87:c6:dc:ba:ad:f8:8a:77:60:9c:a8:ff: 13:f5:b3:d0:60:43:b2:21:33:87:82:d0:a5:32:f4: 27:be:6b:2b:35:e3:de:33:dd:9e:49:30:fd:7d:27: 5f:48:ad:6e:46:94:1b:12:1f:21:27:0b:ad:a4:e7: 5d:c9:4a:3f:af:35:63:52:65:a7:c1:ee:d3:12:6a: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:4A:D6:EE:EF:A4:3B:10:E2:D0:BD:B3:AD:53:3A:7E:7B:D5:8B X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:59:0e:d5:8f:b0:0c:f1:04:ab:a2:db:58:5f:a1:cd:9e:93: 51:4a:df:0e:e2:be:d5:7c:5e:53:75:51:d2:cc:7a:49:4d:0b: 32:f9:0e:50:50:c0:0f:7b:2a:78:a5:c1:b5:a2:8a:ca:65:40: f3:40:82:74:79:e0:4b:f3:cb:ac:d8:bf:b8:f6:2a:f4:72:0d: 22:51:a0:05:0c:77:41:8e:1a:13:29:49:6d:39:0f:32:de:ce: c0:56:64:fa:d7:44:a8:59:03:18:fd:4a:a4:99:49:23:16:94: b4:83:6e:c5:29:db:04:0f:6c:95:7c:3e:58:ce:fe:ed:c3:03: bc:03:7c:b0:f2:04:f2:7b:3c:7f:92:69:1e:bc:f1:3d:fb:02: c9:94:a6:7f:2d:a6:ef:59:c9:36:47:98:8b:73:27:b5:fc:e0: c3:a5:24:7b:bf:1c:be:b2:c5:ae:28:11:c6:76:a5:51:82:2f: 68:c8:e4:99:1a:87:ce:29:50:6a:bd:0f:41:c5:f0:cc:ec:af: e0:36:72:72:c5:fa:44:a2:76:5c:81:c5:0f:27:84:4e:be:b6: 95:b5:6c:0a:f8:7a:5e:88:14:59:c0:53:38:67:72:d7:45:be: bb:7d:66:2d:b2:72:18:59:4c:1d:ba:25:68:98:60:d2:0a:c0: 08:97:ab:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy12WEYLd50ls0xfZJew0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjUxMjE4MTkwMjE1WhcNMjUxMjE5MTkwMjE1WjAzMTEwLwYDVQQD EygwMjRiNGFkNmVlZWZhNDNiMTBlMmQwYmRiM2FkNTMzYTdlN2JkNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvqOzfJb9MtvOJNPOyxv8kWESDEO IXnd2CBuZ5IPfuMz6pHP8sS2545nWg2awEk4FprIonzNLq3lO2Jx6LeaTEovFHeV OeUa1l3F1GQwWRDAhJ4BgQPm6yxAZ0glJ++GERkqTRRrQAhDMm0fDfq+vD3dCXCm +oiCqBpYIrTwUOcHqgASNvDk64AGbLU1QghU/EfTGf20zfC3tk04aiSDDU2OrGTR wfMl8f5gVX+DyFOSPtA3kLmHxty6rfiKd2CcqP8T9bPQYEOyITOHgtClMvQnvmsr NePeM92eSTD9fSdfSK1uRpQbEh8hJwutpOddyUo/rzVjUmWnwe7TEmor7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJLStbu76Q7EOLQvbOtUzp+e9WLMB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1kO1Y+w DPEEq6LbWF+hzZ6TUUrfDuK+1XxeU3VR0sx6SU0LMvkOUFDAD3sqeKXBtaKKymVA 80CCdHngS/PLrNi/uPYq9HINIlGgBQx3QY4aEylJbTkPMt7OwFZk+tdEqFkDGP1K pJlJIxaUtINuxSnbBA9slXw+WM7+7cMDvAN8sPIE8ns8f5JpHrzxPfsCyZSmfy2m 71nJNkeYi3Mntfzgw6Uke78cvrLFrigRxnalUYIvaMjkmRqHzilQar0PQcXwzOyv 4DZycsX6RKJ2XIHFDyeETr62lbVsCvh6XogUWcBTOGdy10W+u31mLbJyGFlMHbol aJhg0grACJerKg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:32 2025 by rpki-client