This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json) Hash identifier: scjngcgC832Wz3Je803L9vt7rXA5/Fa+wgH3AIHMgJA= Subject key identifier: 15:C1:08:5F:59:D7:33:B0:B1:F7:1B:39:55:24:5F:0E:2F:D6:EC:B6 Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Certificate serial: 019B3F1139648DD7F01E9C69453BEB5A101E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft Manifest number: 0E41 Signing time: Sun 21 Dec 2025 04:00:51 +0000 Manifest this update: Sun 21 Dec 2025 04:00:51 +0000 Manifest next update: Mon 22 Dec 2025 04:00:51 +0000 Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: RSMBQiQEhdUy1dTAKt0Yu1uOGA1lvP2p/eiKndADzjg=) 2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:39:64:8d:d7:f0:1e:9c:69:45:3b:eb:5a:10:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Validity Not Before: Dec 21 04:00:51 2025 GMT Not After : Dec 22 04:00:51 2025 GMT Subject: CN=15c1085f59d733b0b1f71b3955245f0e2fd6ecb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:45:78:0f:60:8f:9d:1a:1c:4c:92:60:c1: 21:c0:a7:50:5c:a4:05:7d:b3:9d:41:7d:99:59:72: 16:5a:8f:6c:74:fd:56:b3:30:06:9b:e6:10:3c:bd: a5:dc:29:e4:cb:25:d6:36:0b:d9:d9:14:46:74:3e: 01:0d:ee:d9:8c:9c:d2:0b:a2:75:00:d5:cd:6e:36: 76:9c:b1:3f:72:8d:3c:9b:17:67:f5:f7:bd:4f:99: 0a:cf:6f:31:e8:9a:d1:c9:1d:30:71:b0:cf:a3:7e: ed:c4:3c:fa:44:89:bc:7a:42:7d:0c:e3:bc:c9:9e: 6e:47:22:99:49:3b:96:a4:6b:c9:9a:42:d8:fa:27: 13:f1:5c:a4:a9:32:65:b2:1a:3b:7d:c9:49:59:63: 17:00:c4:a4:51:09:ec:ef:cd:b5:e4:03:fc:6d:d2: f0:a2:fe:23:cd:53:a3:cb:6f:fe:2c:09:2a:d1:e9: b7:4b:3b:d8:b8:f5:44:03:47:18:e5:c8:d0:4e:8b: cf:81:87:d8:2f:13:aa:ef:d4:f8:33:4c:10:df:f2: b4:ea:2f:ab:57:29:16:ca:be:67:92:f2:6d:b5:2e: 7c:78:2c:47:b9:5e:c1:bc:d6:36:bd:05:04:61:a0: 5c:4c:95:23:5d:a7:52:5e:b0:14:a5:30:46:a7:67: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C1:08:5F:59:D7:33:B0:B1:F7:1B:39:55:24:5F:0E:2F:D6:EC:B6 X509v3 Authority Key Identifier: keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7c:ca:8e:d5:b9:8b:77:a1:f9:a0:14:07:be:41:e8:e9:5e: 78:4e:bf:26:14:5e:e3:8f:f2:c9:17:52:bd:68:84:12:16:94: 4d:c4:4e:14:be:38:2a:44:d2:07:23:e2:c4:6f:f5:51:55:7d: b7:9d:82:eb:70:b8:55:99:1e:e2:10:11:c4:45:94:99:68:31: 8c:09:85:25:79:b5:af:3d:3a:a7:dc:59:41:bf:7a:2e:32:07: 97:77:0f:7d:5f:87:d7:b0:d5:e0:c0:00:8f:d1:29:a8:8a:cf: 7a:7f:4a:07:f9:32:57:96:97:86:ee:4b:48:ac:e5:29:0f:fd: cc:1c:cd:40:c7:b3:36:70:24:48:65:e5:82:75:25:1b:86:89: a8:6e:a2:26:d8:04:a6:79:e5:57:3d:3e:9a:7a:4a:04:a1:8b: d8:79:3a:77:cf:f4:df:df:f2:cd:fe:15:8c:19:4e:5e:93:ec: 07:ad:12:b0:15:4a:85:93:69:59:81:ae:e9:4c:1d:82:34:d4: 88:68:fd:11:7d:cd:ce:e3:30:74:c0:d0:ae:f5:f4:e1:7b:95: e0:c5:c9:78:c5:25:f1:43:c9:bc:b8:92:dd:50:70:7e:b0:d2: 3c:8b:40:f5:91:ab:ae:02:58:16:e1:f3:1c:30:64:e6:6b:8f: 78:51:64:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETlkjdfwHpxpRTvrWhAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh OGFlMzYwHhcNMjUxMjIxMDQwMDUxWhcNMjUxMjIyMDQwMDUxWjAzMTEwLwYDVQQD EygxNWMxMDg1ZjU5ZDczM2IwYjFmNzFiMzk1NTI0NWYwZTJmZDZlY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJFeA9gj50aHEySYMEhwKdQXKQF fbOdQX2ZWXIWWo9sdP1WszAGm+YQPL2l3CnkyyXWNgvZ2RRGdD4BDe7ZjJzSC6J1 ANXNbjZ2nLE/co08mxdn9fe9T5kKz28x6JrRyR0wcbDPo37txDz6RIm8ekJ9DOO8 yZ5uRyKZSTuWpGvJmkLY+icT8VykqTJlsho7fclJWWMXAMSkUQns78215AP8bdLw ov4jzVOjy2/+LAkq0em3SzvYuPVEA0cY5cjQTovPgYfYLxOq79T4M0wQ3/K06i+r VykWyr5nkvJttS58eCxHuV7BvNY2vQUEYaBcTJUjXadSXrAUpTBGp2eg6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXBCF9Z1zOwsfcbOVUkXw4v1uy2MB8GA1UdIwQY MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHzKjtW5 i3eh+aAUB75B6OleeE6/JhRe44/yyRdSvWiEEhaUTcROFL44KkTSByPixG/1UVV9 t52C63C4VZke4hARxEWUmWgxjAmFJXm1rz06p9xZQb96LjIHl3cPfV+H17DV4MAA j9EpqIrPen9KB/kyV5aXhu5LSKzlKQ/9zBzNQMezNnAkSGXlgnUlG4aJqG6iJtgE pnnlVz0+mnpKBKGL2Hk6d8/039/yzf4VjBlOXpPsB60SsBVKhZNpWYGu6UwdgjTU iGj9EX3NzuMwdMDQrvX04XuV4MXJeMUl8UPJvLiS3VBwfrDSPItA9ZGrrgJYFuHz HDBk5muPeFFkxw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:00 2025 by rpki-client