This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json) Hash identifier: Gf/69/yw8ZYjgHXJ65vf0Cap7l9H7/IPmxmRkl/PiRw= Subject key identifier: 0E:AC:5A:47:67:67:9A:89:DA:A8:2D:C6:47:8D:F7:F0:45:63:75:CB Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff Certificate serial: 019B337B04D7B563728A829F3ED28F37F613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft Manifest number: 03DE Signing time: Thu 18 Dec 2025 22:00:58 +0000 Manifest this update: Thu 18 Dec 2025 22:00:58 +0000 Manifest next update: Fri 19 Dec 2025 22:00:58 +0000 Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: QdLLyHQPV6/OucIqGVQRsgNrBpxCRV0uR/+ymj2gtFo=) 2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:04:d7:b5:63:72:8a:82:9f:3e:d2:8f:37:f6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff Validity Not Before: Dec 18 22:00:58 2025 GMT Not After : Dec 19 22:00:58 2025 GMT Subject: CN=0eac5a4767679a89daa82dc6478df7f0456375cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:5c:bb:a8:af:4f:8b:75:d7:0a:f3:dc:3e: e6:35:ef:dc:a7:fc:84:9f:b8:f2:ad:4d:f0:66:37: b8:23:84:99:e5:a9:93:52:a5:8d:3c:d2:f4:54:bc: c5:6e:a0:47:56:da:41:4c:75:1c:44:a0:88:1f:35: bb:98:fb:97:18:ec:52:2d:eb:56:d9:a9:4c:50:75: 2e:2d:ec:9b:49:36:36:2d:39:92:d9:34:82:50:dd: 81:bc:ae:e5:c2:0c:b4:d1:58:a6:96:48:8e:74:9b: fc:76:ea:13:85:9d:c3:63:1c:79:23:18:71:6a:52: 24:3a:88:14:4d:f7:e7:84:00:d5:42:b2:74:bf:ee: 8d:d2:ec:24:76:d2:89:88:ea:94:26:07:0b:5f:c1: ac:4f:79:9b:76:0c:e9:9a:b3:67:38:1a:d9:43:a6: 0f:f7:4b:67:cc:3c:2e:9a:c2:f6:8e:b7:85:ac:69: 0a:41:a9:60:0c:ad:99:e8:84:fb:4b:0a:1b:f2:18: 29:60:0b:66:0c:f6:a3:70:a7:94:1f:d5:cf:0e:85: c3:ce:22:36:95:c8:c8:90:e2:f7:ae:be:8a:07:b7: 9c:ad:50:c2:85:ca:d3:2f:a7:aa:32:df:a2:c4:d3: 82:a4:23:4f:ba:a9:dd:84:0c:be:ba:04:74:ed:84: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AC:5A:47:67:67:9A:89:DA:A8:2D:C6:47:8D:F7:F0:45:63:75:CB X509v3 Authority Key Identifier: keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:21:f9:57:98:f1:39:fd:14:46:f4:d0:34:8e:c2:96:f5: 8f:58:8f:b2:bb:9c:fb:a0:0f:e6:4a:95:08:77:b7:d2:7a:85: 2c:97:18:ca:35:1f:72:b2:63:26:b6:1a:15:01:89:cd:d9:5e: ad:58:ae:33:85:5c:1c:ad:cd:18:48:78:7f:11:5c:6f:81:82: 9b:59:1a:f5:97:b2:11:97:83:55:79:f3:cb:9f:80:c9:05:04: c3:02:b4:d5:00:58:8b:e8:d3:77:4e:74:46:17:32:48:66:33: 16:c0:76:68:29:e7:0e:ee:ec:f9:c9:d6:d1:a1:38:c3:da:df: 33:65:37:eb:8f:3a:ce:c4:95:c2:2e:c7:77:e5:cf:7a:c4:04: 27:0b:6f:87:ed:a5:54:e3:91:02:79:4b:c1:fd:ff:f4:bc:39: 37:e0:f9:15:3b:51:99:87:5a:5f:76:51:a9:88:7c:cd:66:41: f8:3a:f1:90:2e:59:e2:7c:72:d6:c3:f9:d2:75:85:81:3f:f5: f6:c7:19:78:7d:22:5d:1a:df:a8:ed:15:6c:74:65:6b:59:4a: 97:18:6b:e5:cf:24:61:58:87:d0:f6:2a:16:bd:f7:db:1f:ab: fe:98:9a:b8:65:ae:5b:4f:70:99:72:4b:ba:67:28:d8:f6:49: e6:f8:31:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszewTXtWNyioKfPtKPN/YTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5 N2M0ZmYwHhcNMjUxMjE4MjIwMDU4WhcNMjUxMjE5MjIwMDU4WjAzMTEwLwYDVQQD EygwZWFjNWE0NzY3Njc5YTg5ZGFhODJkYzY0NzhkZjdmMDQ1NjM3NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Rcu6ivT4t11wrz3D7mNe/cp/yE n7jyrU3wZje4I4SZ5amTUqWNPNL0VLzFbqBHVtpBTHUcRKCIHzW7mPuXGOxSLetW 2alMUHUuLeybSTY2LTmS2TSCUN2BvK7lwgy00VimlkiOdJv8duoThZ3DYxx5Ixhx alIkOogUTffnhADVQrJ0v+6N0uwkdtKJiOqUJgcLX8GsT3mbdgzpmrNnOBrZQ6YP 90tnzDwumsL2jreFrGkKQalgDK2Z6IT7Swob8hgpYAtmDPajcKeUH9XPDoXDziI2 lcjIkOL3rr6KB7ecrVDChcrTL6eqMt+ixNOCpCNPuqndhAy+ugR07YTKJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6sWkdnZ5qJ2qgtxkeN9/BFY3XLMB8GA1UdIwQY MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiMh+VeY 8Tn9FEb00DSOwpb1j1iPsruc+6AP5kqVCHe30nqFLJcYyjUfcrJjJrYaFQGJzdle rViuM4VcHK3NGEh4fxFcb4GCm1ka9ZeyEZeDVXnzy5+AyQUEwwK01QBYi+jTd050 RhcySGYzFsB2aCnnDu7s+cnW0aE4w9rfM2U36486zsSVwi7Hd+XPesQEJwtvh+2l VOORAnlLwf3/9Lw5N+D5FTtRmYdaX3ZRqYh8zWZB+DrxkC5Z4nxy1sP50nWFgT/1 9scZeH0iXRrfqO0VbHRla1lKlxhr5c8kYViH0PYqFr332x+r/piauGWuW09wmXJL umco2PZJ5vgxtA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:16:09 2025 by rpki-client