This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft File: 4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json) Hash identifier: LD7GtoLWZe38urYlhElUrkYAy9D4Z5pf/1kP6NqqoXk= Subject key identifier: F1:DA:07:A1:8F:2D:9E:42:01:28:AD:97:42:9F:1F:74:42:B2:4B:EA Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Certificate serial: 019B2B542C394AA43187DCEF6A0D14EA931A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft Manifest number: 0E70 Signing time: Wed 17 Dec 2025 08:01:35 +0000 Manifest this update: Wed 17 Dec 2025 08:01:35 +0000 Manifest next update: Thu 18 Dec 2025 08:01:35 +0000 Files and hashes: 1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: k6KyNDt78Gkv/aCsK0ZULR/tMtI996Rkk/oGPl7mo4M=) 2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=) 3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=) 4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=) 5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=) 6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:2c:39:4a:a4:31:87:dc:ef:6a:0d:14:ea:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Validity Not Before: Dec 17 08:01:35 2025 GMT Not After : Dec 18 08:01:35 2025 GMT Subject: CN=f1da07a18f2d9e420128ad97429f1f7442b24bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:37:93:86:83:89:23:b2:d7:37:5f:cd:81: 05:f4:0c:f3:37:88:d6:10:a3:c5:82:b9:dd:86:a4: 77:74:51:d7:72:38:0b:8d:89:3f:ab:82:56:a6:1b: fe:9b:e7:9f:17:60:ef:82:06:20:61:59:04:92:e5: 13:04:5f:29:2d:f5:6f:04:a0:e2:58:6a:9c:8d:10: 4d:57:6d:1e:34:9f:8d:5b:80:33:eb:42:2e:03:16: a3:1b:e4:74:51:52:0a:2f:38:fb:0e:45:5f:7a:5b: f0:20:76:87:f7:c8:b9:eb:3a:8f:9f:93:24:2b:35: 49:a7:48:86:93:ae:4e:d1:c9:71:2c:3c:3e:9b:95: 06:ba:6a:09:d7:b5:78:2e:ad:e9:4e:b0:67:01:28: 61:b3:76:62:af:6d:f9:71:34:a8:41:dd:08:b5:de: 0a:f1:43:bb:5e:67:50:d9:99:a4:0b:7f:ab:ac:a1: 2c:cb:68:c9:99:b8:29:5e:b8:44:fd:1a:bc:b8:d4: fc:43:e8:ec:6b:23:52:e0:28:82:2b:06:97:f3:19: 54:3a:8a:67:78:a7:2b:ab:bb:59:e0:24:21:bf:64: db:e5:4a:89:26:85:e4:84:cd:86:10:31:6f:b0:06: 1f:2a:ac:2f:91:2a:d2:e6:05:ea:e7:93:36:10:03: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DA:07:A1:8F:2D:9E:42:01:28:AD:97:42:9F:1F:74:42:B2:4B:EA X509v3 Authority Key Identifier: keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7c:aa:aa:b7:82:67:b7:55:2b:93:e4:79:56:4a:ca:e8:d0: 61:e0:4a:c5:95:33:73:a4:37:d8:a7:fc:91:9f:28:ee:9e:24: 7c:ba:ac:de:56:d1:70:cb:0c:d4:71:71:32:5a:1a:0b:87:4c: f2:eb:18:66:bc:35:8e:a8:e9:02:8c:f9:e8:a2:d3:53:0d:78: f0:31:ce:2b:e1:f0:00:d8:1a:8b:04:7f:02:03:cd:11:ec:2e: 3e:73:ee:4a:06:15:4d:76:0e:85:fd:ad:c9:60:36:b0:3b:a1: 77:94:7e:69:f7:61:cc:67:20:d1:13:85:89:a0:7d:a2:48:3b: e5:3a:42:a6:b7:f9:b7:dc:0a:41:34:62:68:b9:28:e7:57:35: 7a:09:d4:e7:e7:df:cc:0d:15:17:3a:3b:d5:c0:fa:79:0c:d8: 9c:79:4b:25:50:59:83:dd:2e:55:8c:bd:1a:68:56:52:05:ff: 56:53:8e:29:86:13:3e:9e:66:b1:f4:55:63:8f:05:07:dd:9d: d4:ee:a7:bf:f2:14:bf:a3:ed:ce:b9:a1:b6:55:fc:e9:99:ba: a4:01:b2:78:51:92:98:5e:e2:74:56:5d:5e:00:f4:58:dd:79: e6:e9:68:78:fa:c8:f7:15:c6:d7:9e:db:1b:8c:e6:8e:df:e5: 20:a9:50:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVCw5SqQxh9zvag0U6pMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2 ZWM2ZTYwHhcNMjUxMjE3MDgwMTM1WhcNMjUxMjE4MDgwMTM1WjAzMTEwLwYDVQQD EyhmMWRhMDdhMThmMmQ5ZTQyMDEyOGFkOTc0MjlmMWY3NDQyYjI0YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L03k4aDiSOy1zdfzYEF9AzzN4jW EKPFgrndhqR3dFHXcjgLjYk/q4JWphv+m+efF2DvggYgYVkEkuUTBF8pLfVvBKDi WGqcjRBNV20eNJ+NW4Az60IuAxajG+R0UVIKLzj7DkVfelvwIHaH98i56zqPn5Mk KzVJp0iGk65O0clxLDw+m5UGumoJ17V4Lq3pTrBnAShhs3Zir235cTSoQd0Itd4K 8UO7XmdQ2ZmkC3+rrKEsy2jJmbgpXrhE/Rq8uNT8Q+jsayNS4CiCKwaX8xlUOopn eKcrq7tZ4CQhv2Tb5UqJJoXkhM2GEDFvsAYfKqwvkSrS5gXq55M2EAMfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHaB6GPLZ5CASitl0KfH3RCskvqMB8GA1UdIwQY MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt OTE2NGUzNTJhODNjLzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3yqqreC Z7dVK5PkeVZKyujQYeBKxZUzc6Q32Kf8kZ8o7p4kfLqs3lbRcMsM1HFxMloaC4dM 8usYZrw1jqjpAoz56KLTUw148DHOK+HwANgaiwR/AgPNEewuPnPuSgYVTXYOhf2t yWA2sDuhd5R+afdhzGcg0ROFiaB9okg75TpCprf5t9wKQTRiaLko51c1egnU5+ff zA0VFzo71cD6eQzYnHlLJVBZg90uVYy9GmhWUgX/VlOOKYYTPp5msfRVY48FB92d 1O6nv/IUv6PtzrmhtlX86Zm6pAGyeFGSmF7idFZdXgD0WN155uloePrI9xXG157b G4zmjt/lIKlQ2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:35 2025 by rpki-client