This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft File: 4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json) Hash identifier: iaCYA8hIi0liNn2TAkwlgVnucNviPXnpatA56gHz700= Subject key identifier: AE:14:EF:49:65:18:A5:CF:B3:91:D9:19:CA:71:9A:BC:D0:4A:38:95 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B3CB50CADE967D8F4B028099CF0E2122A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft Manifest number: 0156 Signing time: Sat 20 Dec 2025 17:00:56 +0000 Manifest this update: Sat 20 Dec 2025 17:00:56 +0000 Manifest next update: Sun 21 Dec 2025 17:00:56 +0000 Files and hashes: 1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: K3sPp9bbYknvpMQi5X56bQ2HTud5q7m4n4EoFPTvImA=) 2: 9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa (hash: 8dva46ddaCVAVhuRS29XVF0xv3mbOQXR/o6u4dePeK4=) 3: DOzJON1bs3hiZ3VHnEmsvsi0zBQ.roa (hash: 0UphDOF22C9mcUTv3cPQJDc8LIXIF1k+LyuIOSGCS50=) 4: OSYxWvdp836ljzdJlZno6YzlpGY.roa (hash: /5wE/HFby5mcM6+MFX0ZUh7Bq6r/zEB35ZUNILuEf84=) 5: Pfa8J12SK6qYlpp-JCEIEXT9ItQ.roa (hash: m14RvIzc2rz/0aG6QUUC8I/FrsLRlE3a6BpD0Y3vDzU=) 6: svN3Ok6VL2a-EVdJe6UTIYjW6Ug.roa (hash: MGU8Tr1wY79f7aOOX/E7HRh3hZPVTx7pl2+ACWyvncY=) 7: vmS5BdN7qv6lm6TAxWJK3LZ33KQ.roa (hash: 15/dbHkyNejRc1b3Z2HNyUYHE9FyHjv1laHgorxIb9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:0c:ad:e9:67:d8:f4:b0:28:09:9c:f0:e2:12:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Dec 20 17:00:56 2025 GMT Not After : Dec 21 17:00:56 2025 GMT Subject: CN=ae14ef496518a5cfb391d919ca719abcd04a3895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:0a:47:82:4b:af:96:58:6a:24:2d:3b:cb: 26:6b:e9:65:ff:db:80:fb:40:5b:0b:a8:42:6c:ec: a4:f7:d9:c2:dc:42:e8:ef:49:b3:6a:0f:14:b5:38: 07:1c:64:0b:39:f6:b3:2d:41:0d:7c:1d:a3:d2:76: c6:3b:21:94:f3:dc:33:b3:79:bd:c1:f0:e2:b9:9c: c9:a0:d7:5e:bc:58:b3:42:66:7b:79:89:5c:85:66: bf:a1:f2:dd:cb:a5:1b:cb:09:98:6e:ef:9a:d2:79: 33:cc:c2:92:03:e7:5c:b6:b2:05:f2:f0:2a:38:27: 85:ff:9f:51:6d:48:11:57:8d:df:52:9c:55:e1:3a: c8:0c:45:c7:60:56:86:eb:7d:66:d4:64:45:bb:74: 2d:3b:a4:ec:a1:07:12:97:20:8b:73:72:40:65:b2: 21:6e:10:cc:61:5c:ae:f5:2f:28:f5:f9:26:59:6f: 64:6f:1a:3f:77:07:b1:bf:4d:52:b2:c7:8b:96:d0: ea:97:d0:c7:d8:6b:5a:6f:a6:c6:7c:3a:99:86:be: e1:2c:5a:75:4a:04:ee:94:81:7c:a9:1a:5e:ff:b1: 02:71:c4:cb:65:87:29:73:c6:fd:7d:e5:6b:c0:77: 16:ea:ed:e6:d1:f1:9e:f2:03:b0:55:ff:6d:b1:9a: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:EF:49:65:18:A5:CF:B3:91:D9:19:CA:71:9A:BC:D0:4A:38:95 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f0:b2:30:e9:56:13:20:e8:7e:bf:a2:97:29:e5:29:f4:90: 0e:bf:ae:20:c7:aa:21:a9:3f:a6:5e:5c:db:81:17:86:66:0b: 37:bd:73:d4:dc:04:a8:7a:5f:7e:8d:c6:a6:8e:2d:3b:e5:ef: 9a:47:f2:4f:38:56:d5:ca:f7:42:90:fa:93:3e:58:e3:2a:25: ae:23:7f:cf:fb:d5:65:e0:c0:f7:a5:a1:bc:fc:10:f7:0a:1b: ad:89:79:e5:2c:08:1c:09:f2:a0:6c:e5:a2:0e:11:94:31:8c: 91:14:9e:b7:e0:8c:b4:24:86:d3:4c:cc:91:0f:d4:bb:dd:09: 67:23:b0:42:2a:5a:40:8f:d3:f7:35:73:18:a4:6d:3a:16:2c: e5:ae:a8:3c:f8:46:9e:8e:77:f2:dc:a9:42:54:36:8a:f3:07: f6:ec:c2:d4:f1:60:43:b9:6c:3c:16:8e:67:d0:87:2a:3d:60: 6a:49:40:ec:c1:ad:54:aa:07:37:59:e5:25:6b:cf:53:23:de: 48:8a:c7:bf:f7:cf:71:30:97:11:bf:83:bc:d0:0a:b8:78:2a: 92:fe:44:e9:d2:ed:6b:46:f9:4e:c3:2b:b6:a0:c8:1a:10:bb: c3:49:85:e8:35:24:61:c9:0e:11:ae:16:21:c9:a5:3c:53:7e: 12:a5:bb:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQyt6WfY9LAoCZzw4hIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjUxMjIwMTcwMDU2WhcNMjUxMjIxMTcwMDU2WjAzMTEwLwYDVQQD EyhhZTE0ZWY0OTY1MThhNWNmYjM5MWQ5MTljYTcxOWFiY2QwNGEzODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph4KR4JLr5ZYaiQtO8sma+ll/9uA +0BbC6hCbOyk99nC3ELo70mzag8UtTgHHGQLOfazLUENfB2j0nbGOyGU89wzs3m9 wfDiuZzJoNdevFizQmZ7eYlchWa/ofLdy6UbywmYbu+a0nkzzMKSA+dctrIF8vAq OCeF/59RbUgRV43fUpxV4TrIDEXHYFaG631m1GRFu3QtO6TsoQcSlyCLc3JAZbIh bhDMYVyu9S8o9fkmWW9kbxo/dwexv01SsseLltDql9DH2Gtab6bGfDqZhr7hLFp1 SgTulIF8qRpe/7ECccTLZYcpc8b9feVrwHcW6u3m0fGe8gOwVf9tsZqohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4U70llGKXPs5HZGcpxmrzQSjiVMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/CyMOlW EyDofr+ilynlKfSQDr+uIMeqIak/pl5c24EXhmYLN71z1NwEqHpffo3Gpo4tO+Xv mkfyTzhW1cr3QpD6kz5Y4yolriN/z/vVZeDA96WhvPwQ9wobrYl55SwIHAnyoGzl og4RlDGMkRSet+CMtCSG00zMkQ/Uu90JZyOwQipaQI/T9zVzGKRtOhYs5a6oPPhG no538typQlQ2ivMH9uzC1PFgQ7lsPBaOZ9CHKj1gaklA7MGtVKoHN1nlJWvPUyPe SIrHv/fPcTCXEb+DvNAKuHgqkv5E6dLta0b5TsMrtqDIGhC7w0mF6DUkYckOEa4W IcmlPFN+EqW7zg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:38 2025 by rpki-client