This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json) Hash identifier: Jc45wk6vnPkzbUQoPHdq60/3O2bleg1s3k4BR+5qAqE= Subject key identifier: 15:4C:7D:4B:E1:D3:64:DC:C3:61:71:C1:87:72:72:5A:99:0E:C6:44 Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Certificate serial: 019B522A6D44B347758EDBB33323D694A2C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft Manifest number: 73 Signing time: Wed 24 Dec 2025 21:01:10 +0000 Manifest this update: Wed 24 Dec 2025 21:01:10 +0000 Manifest next update: Thu 25 Dec 2025 21:01:10 +0000 Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: st9fF3iH7KWZQV2vv80I4q0aCmGrdk57f8XtSZ2TBYQ=) 2: qkFhtaRNkFQe2FJdCI5qu6080QY.roa (hash: xC3MFctLYU5Sqy4pPIgPdmj9SR/syFEI+jQKydbsJRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:6d:44:b3:47:75:8e:db:b3:33:23:d6:94:a2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Validity Not Before: Dec 24 21:01:10 2025 GMT Not After : Dec 25 21:01:10 2025 GMT Subject: CN=154c7d4be1d364dcc36171c18772725a990ec644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:38:10:3c:51:cc:cc:72:99:bd:11:12:3a: fe:bd:ce:f3:8f:c7:a0:8f:88:ef:94:be:15:9b:90: 50:e8:8c:c6:fe:eb:9f:41:8b:9f:8b:f6:ca:a3:de: 7b:d5:6a:fd:ef:17:be:f9:42:6a:44:eb:91:e9:d6: a4:ff:3c:35:19:d8:09:7d:a4:06:df:c2:0f:15:55: 0b:b9:a4:04:7b:20:d8:8f:1a:f3:57:93:79:05:ca: 5d:be:a7:32:45:62:11:1d:74:28:2e:70:b5:a8:33: 7b:80:67:a9:84:69:72:ac:f6:2f:c8:ee:ba:be:54: 3e:c6:3b:a9:eb:30:6e:05:55:35:7c:6f:09:a9:5f: 61:90:26:25:44:be:b3:c3:f8:2f:26:9a:58:ca:ab: d6:46:61:fb:26:9f:a3:fc:af:22:e6:f9:6d:29:df: d6:05:2e:6e:28:ae:1a:94:37:81:d6:cd:c9:33:5a: ed:f8:15:83:f3:ba:18:39:5c:d2:88:83:98:32:b8: 8e:70:f8:45:e2:bd:94:76:6c:c3:bd:e9:52:20:76: 81:f4:2c:1e:cb:81:72:9e:13:7b:19:48:af:c2:f3: d2:1f:16:dd:14:79:f4:ba:ef:1e:f8:9f:cd:9a:ef: a4:82:69:7e:55:6e:ea:e9:94:b5:66:6c:f3:e1:e1: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4C:7D:4B:E1:D3:64:DC:C3:61:71:C1:87:72:72:5A:99:0E:C6:44 X509v3 Authority Key Identifier: keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ed:e0:05:b7:ba:bc:de:a9:47:16:45:a3:c9:1f:80:14:98: 4c:2b:12:91:d9:99:bc:c3:a9:fc:20:05:b7:d6:41:e5:ee:38: cb:f4:d3:90:7a:83:0b:aa:e7:75:3e:b0:36:e6:57:75:10:fe: 2c:be:2b:55:ec:d0:57:15:31:c5:08:20:8b:6a:7a:93:c7:86: 74:74:7f:bb:7b:6f:5c:4a:26:26:5c:71:0a:5d:c2:39:f9:d1: bb:12:95:62:70:b1:58:b6:d1:c6:e6:2f:a6:77:e4:b4:58:71: f5:a1:b5:30:a0:c6:5f:77:18:12:c0:d9:f0:17:be:f2:e6:d9: ab:fa:7e:8d:17:dd:29:a8:14:2e:ba:f1:96:54:f0:59:fc:5f: fc:73:f8:07:b7:b7:d3:c3:66:0a:95:3e:46:0b:3a:b4:c8:41: d3:29:89:57:9d:10:42:0d:a9:d2:5a:79:56:0c:65:9f:c5:71: 15:2c:c7:09:e6:36:1d:7f:6e:77:d2:d8:3e:de:40:18:dc:85: ed:f9:41:d2:ea:d9:ef:3a:41:c3:5b:2c:36:40:4f:a0:8e:d6: 8c:7d:ed:56:f8:81:23:c3:79:93:53:19:46:8c:59:4a:f6:0b: c3:93:39:b3:1e:a8:07:00:4f:31:ee:7b:4b:16:40:05:84:35: 77:37:8d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKm1Es0d1jtuzMyPWlKLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy YTE5ZjgwHhcNMjUxMjI0MjEwMTEwWhcNMjUxMjI1MjEwMTEwWjAzMTEwLwYDVQQD EygxNTRjN2Q0YmUxZDM2NGRjYzM2MTcxYzE4NzcyNzI1YTk5MGVjNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncg4EDxRzMxymb0REjr+vc7zj8eg j4jvlL4Vm5BQ6IzG/uufQYufi/bKo9571Wr97xe++UJqROuR6dak/zw1GdgJfaQG 38IPFVULuaQEeyDYjxrzV5N5BcpdvqcyRWIRHXQoLnC1qDN7gGephGlyrPYvyO66 vlQ+xjup6zBuBVU1fG8JqV9hkCYlRL6zw/gvJppYyqvWRmH7Jp+j/K8i5vltKd/W BS5uKK4alDeB1s3JM1rt+BWD87oYOVzSiIOYMriOcPhF4r2UdmzDvelSIHaB9Cwe y4FynhN7GUivwvPSHxbdFHn0uu8e+J/Nmu+kgml+VW7q6ZS1Zmzz4eF9eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVMfUvh02Tcw2FxwYdyclqZDsZEMB8GA1UdIwQY MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3 LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu3gBbe6 vN6pRxZFo8kfgBSYTCsSkdmZvMOp/CAFt9ZB5e44y/TTkHqDC6rndT6wNuZXdRD+ LL4rVezQVxUxxQggi2p6k8eGdHR/u3tvXEomJlxxCl3COfnRuxKVYnCxWLbRxuYv pnfktFhx9aG1MKDGX3cYEsDZ8Be+8ubZq/p+jRfdKagULrrxllTwWfxf/HP4B7e3 08NmCpU+Rgs6tMhB0ymJV50QQg2p0lp5Vgxln8VxFSzHCeY2HX9ud9LYPt5AGNyF 7flB0urZ7zpBw1ssNkBPoI7WjH3tVviBI8N5k1MZRoxZSvYLw5M5sx6oBwBPMe57 SxZABYQ1dzeNuA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:51:55 2025 by rpki-client