This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json) Hash identifier: cNBBs+vyyOOJNTu0Kvqb/yvpOVexRK7FOLeWOKkO9uM= Subject key identifier: 66:C2:DE:CA:F1:E5:41:AC:99:74:57:EC:0B:0E:8E:C8:8A:97:31:58 Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288 Certificate serial: 019B53E178E582758974CD576BE8D46AF68F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft Manifest number: 15AF Signing time: Thu 25 Dec 2025 05:00:43 +0000 Manifest this update: Thu 25 Dec 2025 05:00:43 +0000 Manifest next update: Fri 26 Dec 2025 05:00:43 +0000 Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: 7O9khr0fg2qTwV/79M4NwkM35UIggOBNUBlxJeizwW4=) 2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:78:e5:82:75:89:74:cd:57:6b:e8:d4:6a:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2922520b67b1abf7c403afa2235534326272288 Validity Not Before: Dec 25 05:00:43 2025 GMT Not After : Dec 26 05:00:43 2025 GMT Subject: CN=66c2decaf1e541ac997457ec0b0e8ec88a973158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:ac:6f:fb:cb:d5:67:8a:a7:98:ea:41:d5: 65:db:9c:09:89:44:cd:cf:f4:2e:16:24:58:09:2a: 4e:bb:45:14:77:72:32:7e:24:f2:cc:23:86:de:56: fe:b7:bc:83:92:cc:aa:33:bd:4b:0e:df:da:bf:88: 1a:42:5f:a5:d4:e6:dd:3f:6d:79:4c:e6:22:d7:98: 8c:82:4c:f8:6e:26:c4:d3:34:b6:db:0e:e9:02:30: 2f:dc:57:7e:17:74:cc:bd:f0:08:67:87:c6:4e:d0: b9:bb:b8:67:5c:ad:65:30:de:db:75:50:46:c5:fa: 7d:40:ac:8e:0b:22:94:23:bb:64:59:d4:ce:a4:c8: 5c:34:a6:d0:72:75:07:83:ee:b7:5f:e0:ad:2f:4f: f3:bf:5a:b2:60:1b:4d:39:27:63:d4:46:b1:0d:00: af:73:e2:12:d5:2b:68:e5:2b:8f:79:40:32:26:08: 85:e9:d3:81:67:ca:65:b4:71:08:db:fb:2d:49:b0: 61:38:e1:2f:bb:40:f2:f1:94:59:bf:01:c9:20:31: 4a:53:88:58:fb:17:d6:9f:38:a5:45:88:70:c7:0d: 0e:8a:bb:8f:06:fc:5d:df:07:7e:cf:64:1c:3a:00: 1e:cb:c2:ef:e2:7e:6a:46:45:32:6e:92:6f:0e:80: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:DE:CA:F1:E5:41:AC:99:74:57:EC:0B:0E:8E:C8:8A:97:31:58 X509v3 Authority Key Identifier: keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ec:33:b4:de:9c:37:bd:87:db:21:a6:1c:f5:e5:06:79:9c: 34:04:68:25:36:48:5a:b4:ac:ba:d7:0e:4d:1a:23:72:86:98: c5:b6:c4:1e:56:d5:8e:ad:bd:d7:9e:f4:b7:db:7b:38:98:b4: 8c:6e:da:59:02:f0:47:28:0e:97:82:8a:8e:ab:c5:90:2e:67: 2b:0e:03:d6:6c:8e:93:1e:0a:9f:7b:94:ec:0c:5e:be:48:eb: e4:a7:f6:4f:01:71:fd:50:95:54:c4:79:a7:dc:9b:e3:1e:63: 3e:dd:6f:5d:60:69:54:9b:2c:99:34:ca:e5:7b:34:22:33:4b: 42:e7:53:f0:a0:d3:76:75:d3:67:98:f8:4c:3f:ea:c8:e0:d4: 8f:8a:2f:a8:dc:84:57:fe:6f:b1:2a:9d:f9:76:9c:52:50:ed: d0:47:f5:cb:03:47:29:19:fa:14:2b:45:6c:20:da:82:44:f5: 5d:17:2d:81:f0:de:f5:a4:35:f5:f8:cc:ac:20:8c:67:1d:35: f7:ee:61:9f:9f:2c:a6:2d:5e:25:77:67:cf:33:07:2e:5b:c1: de:2d:8d:a0:24:17:be:e5:9c:e2:54:b6:ff:84:57:fc:07:10: 87:97:43:01:b3:2f:0e:55:85:d4:a2:9e:de:52:14:7b:3b:5e: 63:3f:80:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4XjlgnWJdM1Xa+jUavaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy NzIyODgwHhcNMjUxMjI1MDUwMDQzWhcNMjUxMjI2MDUwMDQzWjAzMTEwLwYDVQQD Eyg2NmMyZGVjYWYxZTU0MWFjOTk3NDU3ZWMwYjBlOGVjODhhOTczMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs2sb/vL1WeKp5jqQdVl25wJiUTN z/QuFiRYCSpOu0UUd3IyfiTyzCOG3lb+t7yDksyqM71LDt/av4gaQl+l1ObdP215 TOYi15iMgkz4bibE0zS22w7pAjAv3Fd+F3TMvfAIZ4fGTtC5u7hnXK1lMN7bdVBG xfp9QKyOCyKUI7tkWdTOpMhcNKbQcnUHg+63X+CtL0/zv1qyYBtNOSdj1EaxDQCv c+IS1Sto5SuPeUAyJgiF6dOBZ8pltHEI2/stSbBhOOEvu0Dy8ZRZvwHJIDFKU4hY +xfWnzilRYhwxw0OiruPBvxd3wd+z2QcOgAey8Lv4n5qRkUybpJvDoB5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbC3srx5UGsmXRX7AsOjsiKlzFYMB8GA1UdIwQY MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0 LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+wztN6c N72H2yGmHPXlBnmcNARoJTZIWrSsutcOTRojcoaYxbbEHlbVjq291570t9t7OJi0 jG7aWQLwRygOl4KKjqvFkC5nKw4D1myOkx4Kn3uU7Axevkjr5Kf2TwFx/VCVVMR5 p9yb4x5jPt1vXWBpVJssmTTK5Xs0IjNLQudT8KDTdnXTZ5j4TD/qyODUj4ovqNyE V/5vsSqd+XacUlDt0Ef1ywNHKRn6FCtFbCDagkT1XRctgfDe9aQ19fjMrCCMZx01 9+5hn58spi1eJXdnzzMHLlvB3i2NoCQXvuWc4lS2/4RX/AcQh5dDAbMvDlWF1KKe 3lIUezteYz+Akw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:11:22 2025 by rpki-client