This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json) Hash identifier: rYoId0CYMwUtWeHIE3u/oFbKrea3+MVN360FBF79v2w= Subject key identifier: E6:C5:6E:FE:99:BE:2B:98:49:13:41:C1:F5:DA:1A:F4:60:2F:7B:0F Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019B3D59F2DC4FD85754FDC7AE33989DEBA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft Manifest number: 0A3E Signing time: Sat 20 Dec 2025 20:01:03 +0000 Manifest this update: Sat 20 Dec 2025 20:01:03 +0000 Manifest next update: Sun 21 Dec 2025 20:01:03 +0000 Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: bc3WzIL3jntQj2IcQcGQPg0R82OmGSaZa/rfSejxlJ0=) 2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f2:dc:4f:d8:57:54:fd:c7:ae:33:98:9d:eb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Dec 20 20:01:03 2025 GMT Not After : Dec 21 20:01:03 2025 GMT Subject: CN=e6c56efe99be2b98491341c1f5da1af4602f7b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:ad:04:62:84:70:ad:b3:f2:f9:61:ea:34: 43:8c:77:ef:17:bb:89:5d:3b:a3:8f:31:7f:83:eb: 81:66:43:63:37:7a:23:ed:4c:94:3c:ba:47:5a:c0: c9:db:05:04:bb:d3:f5:22:ee:db:01:d7:cc:8f:9d: b6:bb:d8:ea:62:2b:78:18:5e:29:6f:24:f1:55:f2: c9:f5:5f:81:39:06:76:78:5d:08:e2:72:a7:3e:6d: e9:cf:b3:4d:c9:62:58:d5:71:cd:0d:2b:7e:aa:d6: a7:64:cd:5e:64:33:19:0d:2b:16:1b:ca:d4:90:a1: 8f:93:24:1a:9b:6f:fe:eb:70:b3:f2:a7:cf:6e:bc: 62:f1:57:d6:7a:d5:44:5d:ae:6c:7d:97:7a:47:bb: e7:aa:15:1d:39:da:a8:6d:42:17:9d:42:82:ea:eb: 31:64:83:8c:26:1d:b0:32:33:87:ff:46:f5:93:03: 36:8a:4b:af:9e:f8:1e:e1:95:cf:46:d5:f1:15:75: 8b:e8:c8:b5:84:bd:58:f4:e2:13:14:22:03:8f:34: 07:60:3e:2a:0d:13:4b:30:af:b1:0c:ff:05:09:f7: f4:68:31:19:7a:51:d5:7a:ed:f3:80:d1:e2:42:16: fb:53:5a:01:b8:8e:f5:4e:58:bd:f1:a8:e7:ff:67: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C5:6E:FE:99:BE:2B:98:49:13:41:C1:F5:DA:1A:F4:60:2F:7B:0F X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:03:3b:3f:21:8c:9f:a1:59:e7:85:f3:5d:00:66:f2:0f:0d: 62:91:8a:61:dd:2e:f1:a8:55:27:c0:f7:9a:e3:b2:d5:d4:6f: 0e:af:81:c6:92:09:b1:3d:8a:f4:d1:4a:03:48:18:4f:2c:45: 76:a2:fd:9b:f5:25:c1:ff:00:96:e2:48:5e:bb:16:88:84:1a: 08:50:68:3a:b5:b4:dc:ac:87:37:64:8c:99:57:87:38:93:5f: 8c:76:08:9c:d2:15:cb:53:09:71:52:ec:d7:87:15:6a:de:46: 61:3d:8c:95:27:70:48:1f:55:b4:8b:7b:1a:91:47:8b:ee:7f: 09:df:c8:bb:f6:62:9d:69:d2:e3:8b:09:59:5a:b6:5f:26:0d: e8:70:6f:5b:da:30:b8:76:80:34:9b:b7:48:25:9a:72:bd:d3: 42:56:f8:70:bf:41:81:9c:b7:fc:c5:ee:9b:f3:6a:98:bd:f7: ad:48:43:44:96:21:f9:2e:6e:92:d0:78:ea:68:c7:ea:ca:3c: e8:c6:16:0c:cc:9d:3b:64:70:44:af:02:de:1d:06:50:2b:69: 2b:b6:7e:02:cb:ad:a6:bc:c8:0b:8e:85:1e:75:8a:88:9f:43: d2:08:e3:97:11:13:57:8a:6f:8e:0c:b4:03:c0:23:79:fb:5c: 73:35:a1:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfLcT9hXVP3HrjOYneumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjUxMjIwMjAwMTAzWhcNMjUxMjIxMjAwMTAzWjAzMTEwLwYDVQQD EyhlNmM1NmVmZTk5YmUyYjk4NDkxMzQxYzFmNWRhMWFmNDYwMmY3YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnStBGKEcK2z8vlh6jRDjHfvF7uJ XTujjzF/g+uBZkNjN3oj7UyUPLpHWsDJ2wUEu9P1Iu7bAdfMj522u9jqYit4GF4p byTxVfLJ9V+BOQZ2eF0I4nKnPm3pz7NNyWJY1XHNDSt+qtanZM1eZDMZDSsWG8rU kKGPkyQam2/+63Cz8qfPbrxi8VfWetVEXa5sfZd6R7vnqhUdOdqobUIXnUKC6usx ZIOMJh2wMjOH/0b1kwM2ikuvnvge4ZXPRtXxFXWL6Mi1hL1Y9OITFCIDjzQHYD4q DRNLMK+xDP8FCff0aDEZelHVeu3zgNHiQhb7U1oBuI71Tli98ajn/2ctuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObFbv6ZviuYSRNBwfXaGvRgL3sPMB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagM7PyGM n6FZ54XzXQBm8g8NYpGKYd0u8ahVJ8D3muOy1dRvDq+BxpIJsT2K9NFKA0gYTyxF dqL9m/Ulwf8AluJIXrsWiIQaCFBoOrW03KyHN2SMmVeHOJNfjHYInNIVy1MJcVLs 14cVat5GYT2MlSdwSB9VtIt7GpFHi+5/Cd/Iu/ZinWnS44sJWVq2XyYN6HBvW9ow uHaANJu3SCWacr3TQlb4cL9BgZy3/MXum/NqmL33rUhDRJYh+S5uktB46mjH6so8 6MYWDMydO2RwRK8C3h0GUCtpK7Z+AsutprzIC46FHnWKiJ9D0gjjlxETV4pvjgy0 A8AjeftcczWhIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:38 2025 by rpki-client