This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json) Hash identifier: qHUvlbjbnpmoZUbybE7QhzhMn2AcJLlwQQEIOBsOFqQ= Subject key identifier: F6:FF:2A:B6:F4:0A:2E:32:98:74:32:99:C5:32:EE:C4:26:7C:14:33 Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Certificate serial: 019B3CB4D362280C4765B2BB729D8339AF12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: ocO6L6GwAp0pZHPCydA9/9T88NZ4aCNzGDCQ0+k/1F0=) 2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=) 3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d3:62:28:0c:47:65:b2:bb:72:9d:83:39:af:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=f6ff2ab6f40a2e3298743299c532eec4267c1433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:8b:b3:4c:44:f3:e6:bb:99:a0:b2:95:3a: 31:37:98:06:da:00:39:42:67:f0:b9:8f:c4:9f:77: fc:ce:6d:9c:74:c3:7e:44:df:dd:0b:40:b8:10:4f: 3f:53:c4:c3:26:40:c5:89:7d:7c:a5:62:28:c7:d5: 1d:d3:3f:59:76:51:f8:34:f2:7d:91:a8:d7:7e:90: f2:84:26:f9:ec:99:be:68:5f:d9:9f:dd:10:14:6f: 20:79:05:8f:64:58:f0:f4:08:35:53:7d:22:da:26: 5e:b5:b8:40:c7:54:1b:73:50:b8:0e:37:85:c4:eb: d2:70:73:95:bf:9a:dc:5a:4a:d7:da:3d:fc:31:c5: 6b:66:59:80:67:78:a5:3a:26:29:a7:ca:3d:c0:4d: 22:85:fc:27:6f:77:f6:c0:d0:05:a4:87:40:3f:ab: 0d:5d:ae:db:cb:8a:78:55:58:c2:9f:8f:ff:4d:7c: 37:7b:6a:24:62:2e:c3:fa:80:4e:08:30:33:da:b8: 27:2a:54:1b:35:51:9c:8f:ea:35:af:ed:b5:e3:d7: a1:88:21:06:1a:e9:a6:bb:4e:fb:38:e5:9a:d3:34: e9:c2:87:2c:0a:76:78:a9:c0:6a:c7:54:e4:62:8d: 08:c4:83:60:df:95:8d:de:79:c1:6d:bc:64:43:87: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:2A:B6:F4:0A:2E:32:98:74:32:99:C5:32:EE:C4:26:7C:14:33 X509v3 Authority Key Identifier: keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fb:87:63:fc:9e:cd:0d:d5:95:c8:54:72:47:4b:30:19:36: b9:4f:44:d4:b4:68:d0:f7:9f:db:99:84:52:1f:ea:10:85:6f: a4:3c:fc:5a:95:02:7a:22:7a:c7:59:c0:8b:d1:d6:14:b9:c1: d1:4f:3c:af:1b:95:5e:87:d2:b7:66:b4:79:4c:17:68:2a:a4: 54:31:01:d2:b9:18:55:4d:d7:b9:05:9f:f2:58:63:80:75:1e: 34:13:b2:51:24:60:62:13:3e:62:3e:8f:38:cd:f4:ca:a8:3d: 08:0d:1f:a7:fb:92:99:83:d6:ff:6e:63:87:d5:84:55:15:dd: 7d:1c:09:44:87:19:39:69:75:fb:bf:20:ff:25:15:66:95:14: 35:ba:70:9a:88:1d:c1:d7:d6:b9:ac:39:15:b8:23:a4:10:9b: 96:e7:ff:e7:34:81:ee:d8:bd:00:61:22:d4:86:f0:56:cf:d2: cc:6a:06:ad:61:54:49:d8:96:f7:86:63:a8:5e:3e:a5:f5:20: c7:5a:58:fc:a3:22:49:c7:35:21:96:e8:59:4b:9c:b8:33:1b: 50:f7:11:6e:1a:32:44:7b:13:ee:b9:04:40:6a:36:6c:cd:4c: c0:c1:ef:bb:9b:74:22:4e:a1:2d:21:6f:55:88:3e:c0:62:cc: d2:4e:73:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNNiKAxHZbK7cp2DOa8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU4NjEyMTBkYzM4YmRiYWViNDc3ZDZkYTcxOTY2NGE4 NGE2YmMwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD EyhmNmZmMmFiNmY0MGEyZTMyOTg3NDMyOTljNTMyZWVjNDI2N2MxNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6Ls0xE8+a7maCylToxN5gG2gA5 QmfwuY/En3f8zm2cdMN+RN/dC0C4EE8/U8TDJkDFiX18pWIox9Ud0z9ZdlH4NPJ9 kajXfpDyhCb57Jm+aF/Zn90QFG8geQWPZFjw9Ag1U30i2iZetbhAx1Qbc1C4DjeF xOvScHOVv5rcWkrX2j38McVrZlmAZ3ilOiYpp8o9wE0ihfwnb3f2wNAFpIdAP6sN Xa7by4p4VVjCn4//TXw3e2okYi7D+oBOCDAz2rgnKlQbNVGcj+o1r+2149ehiCEG Gummu077OOWa0zTpwocsCnZ4qcBqx1TkYo0IxINg35WN3nnBbbxkQ4e5GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb/Krb0Ci4ymHQymcUy7sQmfBQzMB8GA1UdIwQY MBaAFOLFhhIQ3Di9uutHfW2nGWZKhKa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEt MzM3NTYxN2Q0ZWZkLzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEtMzM3NTYxN2Q0ZWZk LzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPuHY/ye zQ3VlchUckdLMBk2uU9E1LRo0Pef25mEUh/qEIVvpDz8WpUCeiJ6x1nAi9HWFLnB 0U88rxuVXofSt2a0eUwXaCqkVDEB0rkYVU3XuQWf8lhjgHUeNBOyUSRgYhM+Yj6P OM30yqg9CA0fp/uSmYPW/25jh9WEVRXdfRwJRIcZOWl1+78g/yUVZpUUNbpwmogd wdfWuaw5FbgjpBCbluf/5zSB7ti9AGEi1IbwVs/SzGoGrWFUSdiW94ZjqF4+pfUg x1pY/KMiScc1IZboWUucuDMbUPcRbhoyRHsT7rkEQGo2bM1MwMHvu5t0Ik6hLSFv VYg+wGLM0k5zhw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:41 2025 by rpki-client