This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json) Hash identifier: qrpXLZREMTCCXIjrOIEXPJNdYqWTN4hSkG2uZe8lClU= Subject key identifier: 03:A0:10:B0:B1:2B:A1:32:0A:CC:88:31:DB:AB:07:64:7C:EC:0B:D7 Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Certificate serial: 019B43C9E6FEC7E8E3B1C51690FA468A7AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft Manifest number: 109C Signing time: Mon 22 Dec 2025 02:01:03 +0000 Manifest this update: Mon 22 Dec 2025 02:01:03 +0000 Manifest next update: Tue 23 Dec 2025 02:01:03 +0000 Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: 9U2W4rGk7pF3xHxlOJeJxH+NzUmk6oAMCy41SAId3C8=) 2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:e6:fe:c7:e8:e3:b1:c5:16:90:fa:46:8a:7a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Validity Not Before: Dec 22 02:01:03 2025 GMT Not After : Dec 23 02:01:03 2025 GMT Subject: CN=03a010b0b12ba1320acc8831dbab07647cec0bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:ff:ca:8a:9c:1a:09:cb:7f:e0:d5:5a:57: 27:c4:f3:b3:b2:83:28:ea:46:af:a9:e2:7a:63:7f: c2:31:81:2c:cf:71:66:89:19:ca:0a:33:ca:1c:e8: dc:f2:3a:60:46:b4:72:bd:c5:11:3e:c1:3e:bd:a3: dd:39:34:53:cd:86:3d:9c:3e:d4:12:44:f4:ba:84: 47:f5:6a:d7:09:91:97:eb:9e:72:95:fb:6e:fb:e3: dd:d6:23:44:79:cb:5f:5a:53:49:aa:69:24:bd:73: af:3e:b0:58:83:00:31:ea:ac:b8:48:18:77:0e:14: db:15:6c:3a:c5:fc:91:0f:c7:ff:4e:c9:26:a9:c1: f5:ac:e5:1c:3b:ad:5a:38:38:78:12:33:38:92:44: 88:35:3e:df:78:d8:83:d8:76:9e:93:3f:5d:c5:de: 30:2b:b7:20:98:06:70:91:68:d7:07:5a:01:ca:38: 25:be:8c:06:ba:4b:80:ff:bd:d8:37:0c:aa:79:b1: 88:ab:a9:34:1d:e3:37:49:3c:a6:dc:7e:41:66:50: 08:9e:43:6a:40:55:fe:1e:af:5d:a1:a8:9f:86:de: 2b:18:ac:ac:cc:e9:cd:84:63:41:fa:43:74:76:c8: ca:78:68:fb:b0:73:77:a3:30:27:40:a9:04:79:cd: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A0:10:B0:B1:2B:A1:32:0A:CC:88:31:DB:AB:07:64:7C:EC:0B:D7 X509v3 Authority Key Identifier: keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:16:03:78:7a:8f:a2:1f:da:a5:5d:33:44:d7:64:c3:8b:97: 33:b5:a3:0a:e6:b1:c8:ca:24:cf:ad:c9:37:0f:eb:70:7b:3d: 4f:ff:6e:7c:cd:e1:e2:99:01:64:a7:c8:3d:42:6c:1f:82:5e: ec:fa:2f:fc:c8:36:27:98:88:20:59:26:9b:6a:cb:44:a6:ce: c4:9e:52:67:c4:91:7a:b3:60:a6:d6:d7:8b:b8:6c:42:7e:06: f5:43:fb:e3:0d:ef:ea:d0:40:1e:a0:be:b7:45:c3:b6:df:f8: a1:8e:6d:12:5e:d1:24:73:d7:53:2c:6f:b3:87:95:b7:e2:12: 7c:5e:67:98:43:9a:2c:59:c4:61:89:04:a7:39:4f:54:27:cb: 39:7c:24:fd:f1:39:51:b7:ed:9c:47:6c:5a:a5:ca:36:09:10: c4:ac:e2:47:a5:9e:97:15:17:08:95:c2:ae:a6:af:56:3f:32: 48:c2:55:99:2b:fa:f5:f9:a1:cb:9b:22:e3:9d:fd:41:06:b7: 9e:f8:92:84:9b:33:c0:ce:68:f5:a8:6d:5b:7f:44:08:61:a1: ff:33:02:66:7f:8b:cd:5d:32:ec:2d:bb:33:65:55:cf:f1:6b: 06:95:94:cd:a6:20:77:98:79:1f:48:75:21:46:d8:b4:6c:ed: 2c:36:5f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyeb+x+jjscUWkPpGinqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk NmMxZjAwHhcNMjUxMjIyMDIwMTAzWhcNMjUxMjIzMDIwMTAzWjAzMTEwLwYDVQQD EygwM2EwMTBiMGIxMmJhMTMyMGFjYzg4MzFkYmFiMDc2NDdjZWMwYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAH/yoqcGgnLf+DVWlcnxPOzsoMo 6kavqeJ6Y3/CMYEsz3FmiRnKCjPKHOjc8jpgRrRyvcURPsE+vaPdOTRTzYY9nD7U EkT0uoRH9WrXCZGX655ylftu++Pd1iNEectfWlNJqmkkvXOvPrBYgwAx6qy4SBh3 DhTbFWw6xfyRD8f/TskmqcH1rOUcO61aODh4EjM4kkSINT7feNiD2Haekz9dxd4w K7cgmAZwkWjXB1oByjglvowGukuA/73YNwyqebGIq6k0HeM3STym3H5BZlAInkNq QFX+Hq9doaifht4rGKyszOnNhGNB+kN0dsjKeGj7sHN3ozAnQKkEec03FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOgELCxK6EyCsyIMdurB2R87AvXMB8GA1UdIwQY MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRYDeHqP oh/apV0zRNdkw4uXM7WjCuaxyMokz63JNw/rcHs9T/9ufM3h4pkBZKfIPUJsH4Je 7Pov/Mg2J5iIIFkmm2rLRKbOxJ5SZ8SRerNgptbXi7hsQn4G9UP74w3v6tBAHqC+ t0XDtt/4oY5tEl7RJHPXUyxvs4eVt+ISfF5nmEOaLFnEYYkEpzlPVCfLOXwk/fE5 UbftnEdsWqXKNgkQxKziR6WelxUXCJXCrqavVj8ySMJVmSv69fmhy5si4539QQa3 nviShJszwM5o9ahtW39ECGGh/zMCZn+LzV0y7C27M2VVz/FrBpWUzaYgd5h5H0h1 IUbYtGztLDZfWQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:41:40 2025 by rpki-client