This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json) Hash identifier: eXMFTn02XY3HLdySG8SfFOuxo87rLyKkc2xboByLzXw= Subject key identifier: E5:60:BB:B1:66:75:F2:DE:04:61:2A:00:80:23:7D:DC:DE:2D:DD:CD Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Certificate serial: 019B6C20B3DE3228C9FA9572AD2C338273F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft Manifest number: 14AE Signing time: Mon 29 Dec 2025 22:00:41 +0000 Manifest this update: Mon 29 Dec 2025 22:00:41 +0000 Manifest next update: Tue 30 Dec 2025 22:00:41 +0000 Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=) 2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: GHOiAKouiUhOVhLzEOiUewTcCw0j0Z4AYQ7BdL5S+Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:b3:de:32:28:c9:fa:95:72:ad:2c:33:82:73:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Validity Not Before: Dec 29 22:00:41 2025 GMT Not After : Dec 30 22:00:41 2025 GMT Subject: CN=e560bbb16675f2de04612a0080237ddcde2dddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:cb:3b:68:75:c0:1a:8b:d3:8b:af:4a:13: da:5d:93:2e:aa:86:47:8e:56:a6:ae:2f:cb:fc:d6: 60:7b:76:70:de:2e:1e:6d:e5:02:7a:25:88:4d:bb: df:80:07:1e:45:0f:b9:ad:d9:e2:5a:67:bc:0b:10: 3b:2b:23:e0:50:d2:f6:d3:68:d3:72:00:64:f3:44: a2:08:81:4d:a1:05:8c:3d:77:20:c5:87:3c:a4:41: 96:7d:7c:ef:ff:12:0b:97:10:80:dd:16:e7:21:f6: 35:9a:2f:60:78:73:43:75:0d:90:a3:8f:89:e1:a0: 2a:d2:4c:bf:54:a2:10:e2:ee:0d:0b:f2:43:07:b0: 4c:53:20:d7:34:89:7d:08:69:ea:ff:df:b9:bf:39: 19:c2:9f:dd:62:51:41:fa:36:5c:a8:2c:8f:28:d0: 6c:e8:08:65:b0:4b:e7:d7:26:c7:71:37:4c:b4:06: e5:c1:9c:59:7f:c8:f9:12:11:9d:51:dc:b9:cf:80: 15:b0:8b:38:77:bf:60:49:ae:86:2e:6a:0c:34:5d: ca:f1:b4:af:87:d8:2c:48:5f:e1:ca:32:26:21:7b: c1:52:16:6f:08:8c:c4:2b:c0:37:6b:38:00:48:8d: e2:b3:1e:4e:77:4c:1e:73:7a:ad:18:7c:7b:80:84: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:BB:B1:66:75:F2:DE:04:61:2A:00:80:23:7D:DC:DE:2D:DD:CD X509v3 Authority Key Identifier: keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:39:35:7b:ec:8b:6d:b7:b7:62:4b:a1:07:64:45:2b:20:09: 7a:ea:8c:43:44:12:60:94:aa:05:68:37:13:3b:a9:c0:17:90: 30:87:8a:2a:16:fa:55:18:84:e1:bf:64:5d:28:0c:fa:c0:ca: e2:fd:b9:bf:a4:67:2e:ba:54:18:08:c2:5d:b1:49:e8:3c:cb: b0:89:cf:e2:81:eb:20:6a:4b:3f:41:9a:df:e0:77:22:44:94: e5:3e:80:8c:4d:79:de:29:ac:9e:85:9d:59:e4:c7:32:67:4a: aa:91:7a:19:cd:38:5e:09:5f:89:69:7a:cc:dd:22:2a:7f:87: 4e:64:27:09:6c:5e:b7:3b:48:45:2a:51:b9:a1:ec:54:36:dc: 3f:10:a2:f2:d9:52:76:4c:34:b4:57:0f:25:78:95:bb:1a:01: 1a:94:48:0b:3e:80:fa:89:28:6b:85:88:48:31:51:c6:a2:f2: 4f:72:d2:45:29:bc:ee:b0:02:d8:65:ff:5b:a6:01:2a:5d:b3: 10:b6:b8:3a:05:67:c1:eb:13:10:b6:8d:28:8a:96:43:7a:72: e7:aa:c7:1a:4c:e8:30:bb:12:34:31:24:9e:2a:c4:d1:7a:bc: 50:ba:b7:5f:67:ec:ee:8b:63:46:d5:ff:92:61:18:9e:76:af: 8b:1a:10:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsILPeMijJ+pVyrSwzgnP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh N2MzZDMwHhcNMjUxMjI5MjIwMDQxWhcNMjUxMjMwMjIwMDQxWjAzMTEwLwYDVQQD EyhlNTYwYmJiMTY2NzVmMmRlMDQ2MTJhMDA4MDIzN2RkY2RlMmRkZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztnLO2h1wBqL04uvShPaXZMuqoZH jlamri/L/NZge3Zw3i4ebeUCeiWITbvfgAceRQ+5rdniWme8CxA7KyPgUNL202jT cgBk80SiCIFNoQWMPXcgxYc8pEGWfXzv/xILlxCA3RbnIfY1mi9geHNDdQ2Qo4+J 4aAq0ky/VKIQ4u4NC/JDB7BMUyDXNIl9CGnq/9+5vzkZwp/dYlFB+jZcqCyPKNBs 6AhlsEvn1ybHcTdMtAblwZxZf8j5EhGdUdy5z4AVsIs4d79gSa6GLmoMNF3K8bSv h9gsSF/hyjImIXvBUhZvCIzEK8A3azgASI3isx5Od0wec3qtGHx7gISrNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVgu7FmdfLeBGEqAIAjfdzeLd3NMB8GA1UdIwQY MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt NGZkMGUxYjljMTJmLzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDk1e+yL bbe3YkuhB2RFKyAJeuqMQ0QSYJSqBWg3EzupwBeQMIeKKhb6VRiE4b9kXSgM+sDK 4v25v6RnLrpUGAjCXbFJ6DzLsInP4oHrIGpLP0Ga3+B3IkSU5T6AjE153imsnoWd WeTHMmdKqpF6Gc04XglfiWl6zN0iKn+HTmQnCWxetztIRSpRuaHsVDbcPxCi8tlS dkw0tFcPJXiVuxoBGpRICz6A+okoa4WISDFRxqLyT3LSRSm87rAC2GX/W6YBKl2z ELa4OgVnwesTELaNKIqWQ3py56rHGkzoMLsSNDEknirE0Xq8ULq3X2fs7otjRtX/ kmEYnnavixoQyA== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:51 2025 by rpki-client