This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json) Hash identifier: mgP7CzNPYdrL/EEwy+rwRVIy5Kg8iB/jmGxPN/4EarM= Subject key identifier: 22:29:EC:AB:C5:6B:94:A7:24:A7:60:95:38:2E:D5:AF:EA:5F:4F:E8 Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Certificate serial: 019B44A59B7636542A01A4F3E41799902B96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft Manifest number: 0ACF Signing time: Mon 22 Dec 2025 06:01:02 +0000 Manifest this update: Mon 22 Dec 2025 06:01:02 +0000 Manifest next update: Tue 23 Dec 2025 06:01:02 +0000 Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: h3B1IehwCIMbd+oALkxQ5DUbrvMjXRnaNUgiHT7g1iM=) 2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:9b:76:36:54:2a:01:a4:f3:e4:17:99:90:2b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Validity Not Before: Dec 22 06:01:02 2025 GMT Not After : Dec 23 06:01:02 2025 GMT Subject: CN=2229ecabc56b94a724a76095382ed5afea5f4fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:56:07:87:11:6b:09:0f:1a:05:e9:1f:91: 54:f1:85:15:60:33:12:f9:39:07:cb:0e:2a:f6:cb: 29:cf:98:81:ec:d3:89:b9:27:c0:0a:39:36:38:09: 54:42:3d:e3:61:11:f3:4d:a3:41:43:7e:fa:d4:ef: 92:7f:74:6f:74:ab:89:9a:43:ae:a7:8a:47:38:9b: df:8c:f4:e7:2c:4e:f8:5b:f6:34:9e:37:08:1a:bf: ae:2c:d5:93:b0:6a:cc:2c:70:3e:46:68:bc:5a:54: ac:01:65:1c:9d:a5:1f:30:28:db:b8:ec:24:67:2e: 5f:48:56:32:be:bf:79:36:e0:94:9f:0c:44:ca:e3: 46:ce:fb:46:85:11:0a:42:c9:ad:5e:78:02:15:67: c8:1d:3c:ae:d7:60:b2:7a:ee:b1:db:33:a0:c8:21: 31:4d:03:38:a1:4d:9c:7f:ab:02:91:77:26:23:d6: be:28:55:de:4a:5d:0e:47:47:5f:66:74:44:7f:ed: 52:58:dc:a6:8d:85:b3:77:70:f7:57:c9:0d:68:d5: 36:9b:12:a1:f4:5a:af:4c:41:07:50:e8:85:d5:21: aa:65:b9:f1:29:02:00:25:61:db:e0:1c:af:18:bb: 8b:b8:d8:36:e9:67:b8:06:67:18:9c:23:06:e4:74: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:EC:AB:C5:6B:94:A7:24:A7:60:95:38:2E:D5:AF:EA:5F:4F:E8 X509v3 Authority Key Identifier: keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:53:2e:57:fe:32:cf:d7:bb:6d:95:b0:2d:37:48:1b:e0: 29:b6:45:3f:4d:79:2b:aa:92:31:c7:07:40:f4:0e:02:02:e7: d7:73:e8:f2:ad:d1:d2:55:eb:c6:ad:da:65:e9:5b:01:f9:21: 8e:f1:51:70:66:e3:52:19:3a:75:a0:8a:3f:2f:4c:ad:ee:8c: 6e:ee:7c:8d:9a:83:4c:28:75:80:fe:a8:18:65:dd:e2:dd:1e: d4:ff:a9:93:14:9e:ff:7c:71:74:05:93:57:30:a7:48:b8:02: bf:53:90:53:12:02:63:0e:c4:37:ee:e1:0d:d3:60:47:1f:48: 13:85:a6:10:00:a5:ea:ed:16:c0:25:1b:a6:70:4a:5f:3c:6f: 70:fc:17:c3:08:aa:e1:ca:1c:33:0e:91:66:b8:a7:f9:48:8a: 3d:c8:a5:08:f4:c1:2a:1f:20:c8:03:a8:9c:dc:06:22:df:c2: b6:35:f1:43:9c:55:60:6c:5b:52:39:5a:30:38:fc:0d:1f:43: 08:fd:01:d3:45:a9:3d:ad:01:a4:05:95:8d:27:69:6a:98:1b: b8:ec:a1:96:94:0a:34:e5:58:a3:18:4d:08:1a:0d:aa:11:89: 4c:52:8a:bf:4b:09:8e:be:af:11:ec:29:37:46:29:36:4f:a1: 28:22:9e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpZt2NlQqAaTz5BeZkCuWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2 MDM4Y2MwHhcNMjUxMjIyMDYwMTAyWhcNMjUxMjIzMDYwMTAyWjAzMTEwLwYDVQQD EygyMjI5ZWNhYmM1NmI5NGE3MjRhNzYwOTUzODJlZDVhZmVhNWY0ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXFWB4cRawkPGgXpH5FU8YUVYDMS +TkHyw4q9sspz5iB7NOJuSfACjk2OAlUQj3jYRHzTaNBQ3761O+Sf3RvdKuJmkOu p4pHOJvfjPTnLE74W/Y0njcIGr+uLNWTsGrMLHA+Rmi8WlSsAWUcnaUfMCjbuOwk Zy5fSFYyvr95NuCUnwxEyuNGzvtGhREKQsmtXngCFWfIHTyu12Cyeu6x2zOgyCEx TQM4oU2cf6sCkXcmI9a+KFXeSl0OR0dfZnREf+1SWNymjYWzd3D3V8kNaNU2mxKh 9FqvTEEHUOiF1SGqZbnxKQIAJWHb4ByvGLuLuNg26We4BmcYnCMG5HRokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIp7KvFa5SnJKdglTgu1a/qX0/oMB8GA1UdIwQY MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2 LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMRTLlf+ Ms/Xu22VsC03SBvgKbZFP015K6qSMccHQPQOAgLn13Po8q3R0lXrxq3aZelbAfkh jvFRcGbjUhk6daCKPy9Mre6Mbu58jZqDTCh1gP6oGGXd4t0e1P+pkxSe/3xxdAWT VzCnSLgCv1OQUxICYw7EN+7hDdNgRx9IE4WmEACl6u0WwCUbpnBKXzxvcPwXwwiq 4cocMw6RZrin+UiKPcilCPTBKh8gyAOonNwGIt/CtjXxQ5xVYGxbUjlaMDj8DR9D CP0B00WpPa0BpAWVjSdpapgbuOyhlpQKNOVYoxhNCBoNqhGJTFKKv0sJjr6vEewp N0YpNk+hKCKeJA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:18 2025 by rpki-client