This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json) Hash identifier: MSTTZPmMJ6vVp3izkskSDb52Y3QeLcGcCAVi7PYSJbI= Subject key identifier: 42:13:C6:5A:53:C5:B4:14:0B:66:43:90:9E:EE:80:CF:6A:D1:5D:D4 Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019B5863515555B05582B92EE56E4B61FCED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft Manifest number: 0A4C Signing time: Fri 26 Dec 2025 02:01:02 +0000 Manifest this update: Fri 26 Dec 2025 02:01:02 +0000 Manifest next update: Sat 27 Dec 2025 02:01:02 +0000 Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: RNM/p7dpl2iUFeoayeUWaQS7li+imBp8hLFTxheRDkk=) 2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:51:55:55:b0:55:82:b9:2e:e5:6e:4b:61:fc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Dec 26 02:01:02 2025 GMT Not After : Dec 27 02:01:02 2025 GMT Subject: CN=4213c65a53c5b4140b6643909eee80cf6ad15dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:f6:b2:5e:1b:b2:dc:99:54:76:a1:d0:bc: b3:5b:30:c5:bb:ae:79:c5:a3:c0:b6:6c:39:68:55: d5:da:a2:7c:67:e4:3e:3e:14:6c:7b:8f:2d:be:a3: e7:8e:32:09:79:07:ac:5e:7f:7d:3e:32:f9:06:50: 2f:ed:37:c6:3c:ed:d2:ab:a4:a6:42:bf:b0:bc:21: 65:55:35:86:58:38:e2:1f:8a:39:9b:5a:d8:c1:43: 80:4e:be:4a:e0:17:4c:7b:1f:3a:36:4c:74:4f:93: ba:c3:6c:7c:8d:9b:ab:21:07:b9:f2:6a:73:8c:67: 2e:4c:33:fd:6e:cf:f9:7d:f9:b4:07:87:b5:8f:5d: 2c:0e:08:aa:7c:31:c8:dc:04:f1:74:c0:1d:74:a6: 92:bb:a6:dd:14:3d:3c:c3:2a:d9:49:cf:28:6b:2c: 6c:2a:80:ae:4d:e5:73:ec:df:a2:37:e0:62:f2:5f: 05:24:fb:07:fa:e8:0f:d8:45:66:d1:37:20:16:4b: 78:b4:f6:a1:59:38:ed:c4:c3:15:ad:58:4b:f7:9d: bb:db:64:bc:d4:a1:af:b2:c5:ba:75:d8:d6:f8:b3: ca:50:de:c3:bc:fd:2e:6b:a6:91:42:b4:b1:55:b3: 7e:98:8e:f7:01:a7:bd:28:2f:41:05:65:37:1c:6e: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:13:C6:5A:53:C5:B4:14:0B:66:43:90:9E:EE:80:CF:6A:D1:5D:D4 X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:61:85:d3:c1:59:71:2c:82:49:c7:be:75:f3:8b:d8:47:67: e4:c0:8d:5d:10:b7:f2:5c:fb:a8:0b:64:90:e2:b0:66:bf:07: 6f:f1:42:fd:95:cf:cc:18:d2:67:7d:5d:ff:d3:94:9e:54:d9: 36:a4:83:b4:a3:d1:87:7f:83:dd:c9:8d:91:8e:ac:b0:19:6e: df:df:17:f9:5b:a4:03:c5:5f:35:44:18:98:8f:30:43:d7:28: 69:e3:a3:e6:b6:c8:3e:5b:ff:61:1f:97:62:0c:1b:29:4b:a1: 64:e1:4b:84:0d:ac:ff:f9:2e:e7:52:39:c5:e8:7b:2c:fa:a8: c1:ec:e2:ea:3d:8f:ea:8d:a5:1f:02:1c:11:be:d8:bd:73:18: 86:83:71:9f:05:35:d0:9a:6c:67:42:99:b4:b5:7d:ec:2b:6f: a9:46:3b:17:1c:6e:70:73:ad:21:ec:d1:97:9f:71:1d:68:53: c0:40:3c:b0:d2:a1:74:98:60:c8:10:e3:ac:bf:17:b6:fa:1c: c7:63:5d:39:d6:f9:84:3d:8f:df:12:70:89:5c:e1:1f:3b:4b: 60:9b:d7:9c:33:fd:c8:f6:f1:a9:fd:44:84:dc:49:f8:02:0d: 01:3b:4f:cf:ba:87:f9:1b:5e:1e:55:3b:1d:b4:a4:84:89:df: 46:dd:bc:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYY1FVVbBVgrku5W5LYfztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjUxMjI2MDIwMTAyWhcNMjUxMjI3MDIwMTAyWjAzMTEwLwYDVQQD Eyg0MjEzYzY1YTUzYzViNDE0MGI2NjQzOTA5ZWVlODBjZjZhZDE1ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKj2sl4bstyZVHah0LyzWzDFu655 xaPAtmw5aFXV2qJ8Z+Q+PhRse48tvqPnjjIJeQesXn99PjL5BlAv7TfGPO3Sq6Sm Qr+wvCFlVTWGWDjiH4o5m1rYwUOATr5K4BdMex86Nkx0T5O6w2x8jZurIQe58mpz jGcuTDP9bs/5ffm0B4e1j10sDgiqfDHI3ATxdMAddKaSu6bdFD08wyrZSc8oayxs KoCuTeVz7N+iN+Bi8l8FJPsH+ugP2EVm0TcgFkt4tPahWTjtxMMVrVhL952722S8 1KGvssW6ddjW+LPKUN7DvP0ua6aRQrSxVbN+mI73Aae9KC9BBWU3HG6BNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEITxlpTxbQUC2ZDkJ7ugM9q0V3UMB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmGF08FZ cSyCSce+dfOL2Edn5MCNXRC38lz7qAtkkOKwZr8Hb/FC/ZXPzBjSZ31d/9OUnlTZ NqSDtKPRh3+D3cmNkY6ssBlu398X+VukA8VfNUQYmI8wQ9coaeOj5rbIPlv/YR+X YgwbKUuhZOFLhA2s//ku51I5xeh7LPqowezi6j2P6o2lHwIcEb7YvXMYhoNxnwU1 0JpsZ0KZtLV97CtvqUY7FxxucHOtIezRl59xHWhTwEA8sNKhdJhgyBDjrL8Xtvoc x2NdOdb5hD2P3xJwiVzhHztLYJvXnDP9yPbxqf1EhNxJ+AINATtPz7qH+RteHlU7 HbSkhInfRt287A== -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:39 2025 by rpki-client