This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json) Hash identifier: yt38cuayKIkThIfXLrIRL1NuHeQjVQ5RuD388fojYuU= Subject key identifier: 7E:FD:A3:6A:4C:4B:36:4D:E4:1A:7D:54:26:FE:FB:B7:E1:96:25:E1 Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965 Certificate serial: 019B5DC0D8080D279FAE3F2F7AEC10700328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft Manifest number: 081A Signing time: Sat 27 Dec 2025 03:01:17 +0000 Manifest this update: Sat 27 Dec 2025 03:01:17 +0000 Manifest next update: Sun 28 Dec 2025 03:01:17 +0000 Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: BVYinvYV11WzmILv7ssILbfhyB2UCTQXEmRt0xruJqs=) 2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:d8:08:0d:27:9f:ae:3f:2f:7a:ec:10:70:03:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965 Validity Not Before: Dec 27 03:01:17 2025 GMT Not After : Dec 28 03:01:17 2025 GMT Subject: CN=7efda36a4c4b364de41a7d5426fefbb7e19625e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:fb:9a:75:1a:3c:a7:67:68:d5:e4:f4:d6: 04:3b:7d:1a:16:c8:c5:f2:48:23:56:df:db:ae:79: 88:52:3d:67:ce:e4:28:3e:e1:43:12:81:bb:98:85: 16:63:8c:cb:df:97:b0:fc:ba:ef:03:bf:c9:d6:5d: 30:f2:1e:15:c5:02:fd:8a:3c:02:2e:83:bc:e5:90: b1:30:7b:d5:d6:e7:e9:b9:05:bf:7a:0d:4f:78:fd: 01:50:5c:2c:60:30:b2:d3:50:11:c0:a3:cd:62:ce: a4:ea:7f:81:61:a6:bc:7a:f5:59:c4:32:c7:69:4a: 15:a9:a1:86:c2:0b:bb:f7:fd:e0:94:05:70:c5:52: 8a:38:f0:b6:57:08:a7:ec:99:c4:fd:61:f9:c8:10: 04:3c:82:ed:18:82:85:a7:10:ca:41:54:f8:df:1d: a1:ab:80:6b:f2:91:99:77:0c:c6:7e:a2:8c:96:73: 6e:7f:f9:b9:64:a3:15:01:b6:11:bb:9a:8d:5e:87: 50:5e:58:58:73:df:26:2b:ea:dd:69:39:7a:d7:06: 85:eb:8e:bf:7f:53:ae:f4:1f:c7:4e:30:1f:15:f8: a9:50:18:6c:57:ba:ca:97:17:c8:fd:74:59:71:27: 6a:d0:c7:d0:c2:9a:d8:94:41:72:26:dc:6d:48:e9: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:A3:6A:4C:4B:36:4D:E4:1A:7D:54:26:FE:FB:B7:E1:96:25:E1 X509v3 Authority Key Identifier: keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fc:7f:e6:8b:e8:31:e7:81:f6:72:c4:06:d7:0a:16:61:b3: 25:f9:68:c2:e8:6e:5d:79:35:b8:13:70:f0:73:55:81:93:0c: 94:75:29:ad:23:26:7d:99:a5:d5:fc:79:e0:3e:16:e9:03:a3: 86:fc:1b:75:61:de:24:fa:a9:96:2c:46:e5:df:d6:c4:a4:36: e1:97:85:c3:eb:d0:26:ff:e0:72:54:96:fd:fa:98:e1:d7:41: 87:c9:e7:20:37:85:4b:9d:8b:e3:82:8c:89:68:99:a4:c8:ee: fd:cf:3d:17:e2:6f:dc:80:e1:76:27:2f:5a:59:87:3d:34:61: 82:0f:86:f3:0d:37:3e:bf:57:04:31:b5:12:93:19:9c:19:d0: 63:3e:0c:e7:8d:97:37:2e:22:b3:44:69:f1:14:11:e0:0f:6e: a1:72:df:5e:27:13:ec:fe:d4:31:9a:d5:ad:3f:c6:f6:ae:b2: a5:af:77:34:68:d5:5e:d0:62:66:eb:81:93:11:a3:50:d2:26: 62:91:81:9d:11:09:12:80:54:44:1b:38:4a:2b:67:bb:87:34: 8f:a1:aa:95:de:6f:fe:a1:3c:07:56:24:ea:5f:f4:36:64:35: 54:1f:56:cb:f7:70:35:5b:64:ac:7e:21:3d:97:0f:f2:de:45: 14:9a:64:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwNgIDSefrj8veuwQcAMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMDEyYmNiOWU2ZTc0NzIzNzcyNDc4MWE0YzkxOWZjNWM5 NDE5NjUwHhcNMjUxMjI3MDMwMTE3WhcNMjUxMjI4MDMwMTE3WjAzMTEwLwYDVQQD Eyg3ZWZkYTM2YTRjNGIzNjRkZTQxYTdkNTQyNmZlZmJiN2UxOTYyNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw/7mnUaPKdnaNXk9NYEO30aFsjF 8kgjVt/brnmIUj1nzuQoPuFDEoG7mIUWY4zL35ew/LrvA7/J1l0w8h4VxQL9ijwC LoO85ZCxMHvV1ufpuQW/eg1PeP0BUFwsYDCy01ARwKPNYs6k6n+BYaa8evVZxDLH aUoVqaGGwgu79/3glAVwxVKKOPC2Vwin7JnE/WH5yBAEPILtGIKFpxDKQVT43x2h q4Br8pGZdwzGfqKMlnNuf/m5ZKMVAbYRu5qNXodQXlhYc98mK+rdaTl61waF646/ f1Ou9B/HTjAfFfipUBhsV7rKlxfI/XRZcSdq0MfQwprYlEFyJtxtSOlpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH79o2pMSzZN5Bp9VCb++7fhliXhMB8GA1UdIwQY MBaAFOABK8uebnRyN3JHgaTJGfxclBllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMt MGRiODhlYzczNDJjLzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMtMGRiODhlYzczNDJj LzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPx/5ovo MeeB9nLEBtcKFmGzJflowuhuXXk1uBNw8HNVgZMMlHUprSMmfZml1fx54D4W6QOj hvwbdWHeJPqplixG5d/WxKQ24ZeFw+vQJv/gclSW/fqY4ddBh8nnIDeFS52L44KM iWiZpMju/c89F+Jv3IDhdicvWlmHPTRhgg+G8w03Pr9XBDG1EpMZnBnQYz4M542X Ny4is0Rp8RQR4A9uoXLfXicT7P7UMZrVrT/G9q6ypa93NGjVXtBiZuuBkxGjUNIm YpGBnREJEoBURBs4Sitnu4c0j6Gqld5v/qE8B1Yk6l/0NmQ1VB9Wy/dwNVtkrH4h PZcP8t5FFJpkAw== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:30 2025 by rpki-client