This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json) Hash identifier: PvNJMiZimTiFJURIoFA4yeh7N2ewrmMY069Ic8lnGu4= Subject key identifier: 85:79:79:7D:78:13:AF:B5:DD:50:68:E6:6B:98:0D:5E:D7:6B:D6:91 Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0 Certificate serial: 019B2FD55CAD88FD5241E1517F0A01B07E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 05:01:10 +0000 Manifest this update: Thu 18 Dec 2025 05:01:10 +0000 Manifest next update: Fri 19 Dec 2025 05:01:10 +0000 Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: 7m44r590hM6JKcNPgFUjC1lkQ7OYHqAK9dozLjZdWl4=) 2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:5c:ad:88:fd:52:41:e1:51:7f:0a:01:b0:7e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0 Validity Not Before: Dec 18 05:01:10 2025 GMT Not After : Dec 19 05:01:10 2025 GMT Subject: CN=8579797d7813afb5dd5068e66b980d5ed76bd691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:00:a8:11:5d:5f:54:95:d0:44:5b:42:97: 48:e6:b9:6d:07:2e:5d:4b:63:f7:7c:4a:41:5d:83: e8:8f:4a:ce:4a:90:e4:1b:b4:06:94:58:71:26:ad: 0a:f0:ad:75:7a:f5:ce:65:bd:ff:04:c2:1a:0b:11: 2a:83:d5:33:9b:d0:41:09:5f:6f:41:2c:6d:e5:d6: 09:37:f3:4a:63:6b:9a:20:72:73:45:10:95:dc:32: ad:04:bc:f2:c2:b5:06:34:fe:1d:b8:8a:f8:95:16: 76:35:09:77:7c:a0:c7:44:a5:35:b5:89:86:6c:2e: 2b:b7:65:01:86:f2:c4:97:ee:e5:0a:3d:9c:2f:79: 25:59:0a:cb:ba:09:77:2f:71:75:68:32:03:4f:24: e5:5f:10:c7:7f:13:41:47:a0:6f:17:4f:f4:c8:16: a6:31:12:ad:4e:d7:79:b4:7f:23:9c:6d:25:f0:45: 66:4e:79:5f:9f:80:bb:3f:42:eb:df:85:a4:95:42: f3:21:38:c1:6e:09:52:bd:ae:6c:85:df:04:ff:55: 1e:79:a6:71:7f:05:8b:28:57:eb:75:0b:50:b5:22: 9c:4b:e8:aa:d4:95:b7:e3:78:2d:4a:8f:9a:88:00: f7:da:86:2d:6d:e2:65:9b:34:5b:55:29:14:3e:9f: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:79:79:7D:78:13:AF:B5:DD:50:68:E6:6B:98:0D:5E:D7:6B:D6:91 X509v3 Authority Key Identifier: keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1e:e9:b6:12:b1:32:55:88:6a:11:bf:59:9e:1b:44:75:f6: 88:b5:2b:19:9f:7a:ec:40:0b:2e:51:22:e5:4a:7c:22:73:ac: e0:9b:b3:97:e5:0a:03:3d:52:40:6f:03:1b:f8:ac:95:76:29: 55:48:3f:f8:1a:01:fb:78:14:6c:d2:0e:ad:b2:0d:56:73:b6: 3c:a5:08:d7:a8:76:fa:c0:1d:78:ad:cc:6f:21:fc:c7:67:94: 7c:e0:e8:eb:e5:48:27:85:51:72:20:5c:a0:e3:59:de:1e:4d: 4f:26:ef:35:64:28:bb:38:22:3f:bf:6b:f5:a4:e5:fe:e7:38: 11:d8:2a:9f:fc:53:d8:45:3d:84:f2:3c:43:1b:c0:eb:9e:3c: c4:ab:b1:01:5f:ab:1c:5b:d4:25:98:33:58:14:22:81:90:af: 47:97:b6:ab:b9:46:aa:ba:a7:36:6d:4e:5c:b7:32:5d:b5:b1: 83:d0:d6:32:3f:6e:9f:c8:0f:08:7c:11:4e:fc:bb:dc:53:08: 12:7b:08:ce:19:53:02:a5:bf:df:e5:ee:49:84:bd:5a:06:18: df:0f:e2:0f:c4:d7:68:d9:73:dc:f1:07:a9:86:34:7f:f9:8e: fd:bb:17:f6:86:34:ce:b3:d3:03:5a:b7:b7:64:06:fb:83:0c: e1:16:2c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1VytiP1SQeFRfwoBsH6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy OTk4ZjAwHhcNMjUxMjE4MDUwMTEwWhcNMjUxMjE5MDUwMTEwWjAzMTEwLwYDVQQD Eyg4NTc5Nzk3ZDc4MTNhZmI1ZGQ1MDY4ZTY2Yjk4MGQ1ZWQ3NmJkNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVoAqBFdX1SV0ERbQpdI5rltBy5d S2P3fEpBXYPoj0rOSpDkG7QGlFhxJq0K8K11evXOZb3/BMIaCxEqg9Uzm9BBCV9v QSxt5dYJN/NKY2uaIHJzRRCV3DKtBLzywrUGNP4duIr4lRZ2NQl3fKDHRKU1tYmG bC4rt2UBhvLEl+7lCj2cL3klWQrLugl3L3F1aDIDTyTlXxDHfxNBR6BvF0/0yBam MRKtTtd5tH8jnG0l8EVmTnlfn4C7P0Lr34WklULzITjBbglSva5shd8E/1UeeaZx fwWLKFfrdQtQtSKcS+iq1JW343gtSo+aiAD32oYtbeJlmzRbVSkUPp+W8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV5eX14E6+13VBo5muYDV7Xa9aRMB8GA1UdIwQY MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0 LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR7pthKx MlWIahG/WZ4bRHX2iLUrGZ967EALLlEi5Up8InOs4Juzl+UKAz1SQG8DG/islXYp VUg/+BoB+3gUbNIOrbINVnO2PKUI16h2+sAdeK3MbyH8x2eUfODo6+VIJ4VRciBc oONZ3h5NTybvNWQouzgiP79r9aTl/uc4Edgqn/xT2EU9hPI8QxvA6548xKuxAV+r HFvUJZgzWBQigZCvR5e2q7lGqrqnNm1OXLcyXbWxg9DWMj9un8gPCHwRTvy73FMI EnsIzhlTAqW/3+XuSYS9WgYY3w/iD8TXaNlz3PEHqYY0f/mO/bsX9oY0zrPTA1q3 t2QG+4MM4RYsTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:59:54 2025 by rpki-client