This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft File: e4JUJT3AIT_linr_S4JGPkeXgGM.mft (raw, json) Hash identifier: 21N3eYqER5SWdQ/tyYULSmjf4vP4fOb6CHF34YbecJ4= Subject key identifier: 8E:2A:48:CC:51:D5:C8:03:24:23:9C:83:6A:F5:AD:D3:85:2E:DC:F9 Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63 Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063 Certificate serial: 019B28C09ADE230E5D68B7DDF5740082E552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft Manifest number: 0FDB Signing time: Tue 16 Dec 2025 20:01:09 +0000 Manifest this update: Tue 16 Dec 2025 20:01:09 +0000 Manifest next update: Wed 17 Dec 2025 20:01:09 +0000 Files and hashes: 1: e4JUJT3AIT_linr_S4JGPkeXgGM.crl (hash: ujq/aHtX52sPBzfC83WFz+tR47fAg9KxrGNJGhWxxso=) 2: odZuXI3wehfozSyLDOqLNH6peX4.roa (hash: /6STeiwL1qKoicoiRYzDSMOTgxmTXXJ8g/uFwFCldMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:9a:de:23:0e:5d:68:b7:dd:f5:74:00:82:e5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063 Validity Not Before: Dec 16 20:01:09 2025 GMT Not After : Dec 17 20:01:09 2025 GMT Subject: CN=8e2a48cc51d5c80324239c836af5add3852edcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:ae:85:1e:a2:c8:73:f3:20:7f:67:b7:74: 22:b9:d2:92:b0:71:f0:fd:90:59:60:d7:7d:22:3a: 2b:47:d7:0c:70:a9:71:45:5c:24:84:ac:e6:75:34: 29:40:f1:42:80:6b:e6:11:59:d2:c8:9b:20:0b:55: e4:21:66:97:6b:56:65:b8:15:ca:75:c9:43:9a:a9: 47:df:b2:39:0c:cf:54:62:84:50:bc:98:58:e6:d1: 13:6b:b8:bd:fb:e8:ed:8a:5b:cd:a7:1a:55:3a:8c: 73:9c:d2:92:7f:42:81:54:83:dc:66:92:df:c5:c6: 43:bd:46:34:65:d1:37:59:08:ec:37:e3:a3:ff:12: e9:7f:46:1c:ec:f1:7e:ae:05:46:7d:61:a7:cd:45: 71:af:b0:d9:b4:02:00:37:34:27:9a:70:28:f8:8c: da:73:b9:77:e0:46:78:94:5d:a2:67:d4:4b:29:c7: 1e:f9:cb:03:bf:35:4a:cd:e6:67:46:85:19:0b:06: 20:d2:6c:52:e0:75:72:b6:f0:a9:e1:5b:0a:ca:fe: a9:a2:85:eb:43:4e:61:3f:4e:b4:fb:b7:b6:1d:d0: c5:21:01:03:85:75:69:f9:ac:1b:d8:93:9d:04:57: c0:b9:26:80:b3:81:68:b5:25:dc:d4:b1:0d:10:70: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:48:CC:51:D5:C8:03:24:23:9C:83:6A:F5:AD:D3:85:2E:DC:F9 X509v3 Authority Key Identifier: keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:dc:1a:ea:83:c0:d8:8c:c9:90:6e:a5:a8:ff:3e:04:cc: 1c:95:cb:be:2f:96:31:f6:4c:39:d2:38:1e:76:68:70:70:c7: fe:3d:ff:3d:15:47:2a:9d:03:00:04:27:c3:d8:41:24:be:11: 2a:96:99:06:5c:36:df:f0:bc:9a:19:e7:02:65:cf:e5:6f:38: 5d:16:2e:80:5d:d8:01:b5:a8:85:ce:6b:a7:aa:9c:3c:90:0a: c0:fc:98:77:c6:0d:c5:04:31:f1:95:75:89:0a:8a:b8:78:25: a0:5d:69:42:65:2a:48:a5:66:b3:2c:97:cb:64:ca:33:8c:32: 90:6e:e1:2a:ee:8d:63:ae:fe:08:c5:b7:7e:c0:6c:fc:71:a7: f0:4d:b1:e4:22:e0:d0:8a:db:43:f1:6e:13:60:dd:8d:37:9f: 48:85:9d:11:c5:3b:d7:42:39:d1:3a:3b:7d:0a:0c:81:4f:1d: 9e:ac:1b:79:e2:e3:99:23:e7:ab:07:0a:30:3e:1c:dc:22:a4: d6:98:1c:33:74:f6:a9:31:df:b8:15:f9:dc:eb:2f:c5:6f:cc: 2d:c5:c7:2f:b7:4a:a6:1a:0c:dd:3e:8d:f8:84:15:cc:e1:43: d0:22:cc:59:f4:37:68:d2:cd:7a:8f:67:76:24:83:e8:b5:5a: a8:ee:32:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowJreIw5daLfd9XQAguVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODI1NDI1M2RjMDIxM2ZlNThhN2FmZjRiODI0NjNlNDc5 NzgwNjMwHhcNMjUxMjE2MjAwMTA5WhcNMjUxMjE3MjAwMTA5WjAzMTEwLwYDVQQD Eyg4ZTJhNDhjYzUxZDVjODAzMjQyMzljODM2YWY1YWRkMzg1MmVkY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oSuhR6iyHPzIH9nt3QiudKSsHHw /ZBZYNd9IjorR9cMcKlxRVwkhKzmdTQpQPFCgGvmEVnSyJsgC1XkIWaXa1ZluBXK dclDmqlH37I5DM9UYoRQvJhY5tETa7i9++jtilvNpxpVOoxznNKSf0KBVIPcZpLf xcZDvUY0ZdE3WQjsN+Oj/xLpf0Yc7PF+rgVGfWGnzUVxr7DZtAIANzQnmnAo+Iza c7l34EZ4lF2iZ9RLKcce+csDvzVKzeZnRoUZCwYg0mxS4HVytvCp4VsKyv6pooXr Q05hP060+7e2HdDFIQEDhXVp+awb2JOdBFfAuSaAs4FotSXc1LENEHAyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4qSMxR1cgDJCOcg2r1rdOFLtz5MB8GA1UdIwQY MBaAFHuCVCU9wCE/5Yp6/0uCRj5Hl4BjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRKVUpUM0FJVF9saW5yX1M0SkdQa2VYZ0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYjdhMDQtZmZlMS00YTA1LWE1ZWYt OGY1MzliNjRiOGRiLzEvZTRKVUpUM0FJVF9saW5yX1M0SkdQa2VYZ0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hYjdhMDQtZmZlMS00YTA1LWE1ZWYtOGY1MzliNjRiOGRi LzEvZTRKVUpUM0FJVF9saW5yX1M0SkdQa2VYZ0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBLcGuqD wNiMyZBupaj/PgTMHJXLvi+WMfZMOdI4HnZocHDH/j3/PRVHKp0DAAQnw9hBJL4R KpaZBlw23/C8mhnnAmXP5W84XRYugF3YAbWohc5rp6qcPJAKwPyYd8YNxQQx8ZV1 iQqKuHgloF1pQmUqSKVmsyyXy2TKM4wykG7hKu6NY67+CMW3fsBs/HGn8E2x5CLg 0IrbQ/FuE2DdjTefSIWdEcU710I50To7fQoMgU8dnqwbeeLjmSPnqwcKMD4c3CKk 1pgcM3T2qTHfuBX53OsvxW/MLcXHL7dKphoM3T6N+IQVzOFD0CLMWfQ3aNLNeo9n diSD6LVaqO4y2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:35:54 2025 by rpki-client