This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json) Hash identifier: hbYBjtZ/iltjFqfrZXaSqCdnyEf1BiR8vsmsypRpgBk= Subject key identifier: 90:40:0F:60:FB:CE:B4:87:7C:A6:79:9E:20:F0:DE:F3:CE:DC:C2:56 Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B51BD671867CF46EDD7EB4B7BDC3F9CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft Manifest number: 0C5E Signing time: Wed 24 Dec 2025 19:02:05 +0000 Manifest this update: Wed 24 Dec 2025 19:02:05 +0000 Manifest next update: Thu 25 Dec 2025 19:02:05 +0000 Files and hashes: 1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: o/izqE0meyg+XbCj5GjT0aZKvEUBupb6nFC+iUgP7LY=) 2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=) 3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=) 4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=) 5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=) 6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:67:18:67:cf:46:ed:d7:eb:4b:7b:dc:3f:9c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Dec 24 19:02:05 2025 GMT Not After : Dec 25 19:02:05 2025 GMT Subject: CN=90400f60fbceb4877ca6799e20f0def3cedcc256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:a3:65:df:8a:ba:e2:c6:07:e5:2e:ec:ef: 43:2e:a0:be:79:4e:f7:6a:27:b4:33:e8:1a:04:21: 4c:52:03:d8:a9:c5:17:35:e2:cd:aa:6e:80:24:55: 71:99:e7:e4:ad:c2:35:c7:9f:44:71:02:a4:dc:02: 1d:8f:5b:81:c3:21:81:e5:8b:f6:98:74:69:de:ed: 0c:88:cf:9e:08:1f:01:27:d9:66:50:17:4f:0f:c4: a9:01:c4:33:a5:19:8d:98:d7:8e:03:f7:6a:96:94: 91:2b:04:32:4d:73:b0:30:a7:66:55:a1:cf:8e:2f: 7a:af:10:cc:e0:79:75:09:43:0d:ad:bd:78:fd:fe: 4c:5b:23:54:d9:94:22:d7:62:b7:26:cc:68:0b:98: b0:16:6c:43:2b:1e:e6:70:07:af:3f:62:b5:6b:e5: 0a:0d:eb:ad:c3:15:f3:bc:8a:0b:06:5e:71:96:6e: 4f:a4:cd:1b:92:00:1d:02:04:ae:f6:9c:4f:51:d4: db:86:7a:71:d0:63:c2:8a:c5:3a:d6:4e:30:71:bb: f2:83:ec:1f:11:f3:d0:fd:d8:4a:dc:50:dd:27:ee: 73:da:a2:85:4f:1e:0b:a7:51:c2:67:cd:19:7b:4c: 0a:fe:a5:06:a3:8e:f4:2e:16:61:51:cd:13:ad:10: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:0F:60:FB:CE:B4:87:7C:A6:79:9E:20:F0:DE:F3:CE:DC:C2:56 X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:41:45:dd:02:7c:3a:b8:dd:4b:73:2d:c7:1e:f0:d8:58:0f: f3:98:8a:34:24:a5:b4:25:18:bd:3a:eb:70:a6:41:e2:f1:c5: 6d:e5:f4:f7:9a:44:cc:78:47:1f:5c:c4:94:9e:dc:86:a5:6b: 75:0b:c4:f9:e9:60:16:4f:66:1a:cd:05:4a:ec:a5:e6:f8:5c: 63:3f:c0:93:67:2f:08:03:35:cb:8a:89:87:dc:5b:3e:bd:98: c9:40:54:fa:15:aa:f7:1b:1b:65:78:64:13:a9:34:31:58:c3: 08:37:dd:94:74:67:85:c8:e5:a1:2b:30:63:d3:f3:25:13:4d: 6b:a1:45:c4:a8:cb:58:78:1d:39:1b:81:d0:af:c7:a6:37:64: a9:27:0d:55:ac:52:60:b5:5c:d2:12:cd:55:2f:f1:25:b3:5a: 6b:dd:fc:6f:67:80:78:a7:b8:61:e3:ef:0e:b6:f0:09:08:4f: 7d:87:3f:b2:da:5f:ab:e7:dc:4c:93:62:9b:c9:0c:ad:bd:ab: cb:1d:d5:78:f8:04:0d:5a:cb:e5:25:c1:d1:95:ad:a0:7b:22: d6:66:d8:ed:7f:6b:38:bc:d8:d3:f3:5e:a0:54:b7:5c:af:c2: c4:b1:b8:82:1d:a3:f7:4c:68:d7:f1:fc:b8:00:90:07:8a:5c: 0e:b1:02:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvWcYZ89G7dfrS3vcP5zCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjUxMjI0MTkwMjA1WhcNMjUxMjI1MTkwMjA1WjAzMTEwLwYDVQQD Eyg5MDQwMGY2MGZiY2ViNDg3N2NhNjc5OWUyMGYwZGVmM2NlZGNjMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB2jZd+KuuLGB+Uu7O9DLqC+eU73 aie0M+gaBCFMUgPYqcUXNeLNqm6AJFVxmefkrcI1x59EcQKk3AIdj1uBwyGB5Yv2 mHRp3u0MiM+eCB8BJ9lmUBdPD8SpAcQzpRmNmNeOA/dqlpSRKwQyTXOwMKdmVaHP ji96rxDM4Hl1CUMNrb14/f5MWyNU2ZQi12K3JsxoC5iwFmxDKx7mcAevP2K1a+UK DeutwxXzvIoLBl5xlm5PpM0bkgAdAgSu9pxPUdTbhnpx0GPCisU61k4wcbvyg+wf EfPQ/dhK3FDdJ+5z2qKFTx4Lp1HCZ80Ze0wK/qUGo470LhZhUc0TrRDjiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBAD2D7zrSHfKZ5niDw3vPO3MJWMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUFF3QJ8 OrjdS3Mtxx7w2FgP85iKNCSltCUYvTrrcKZB4vHFbeX095pEzHhHH1zElJ7chqVr dQvE+elgFk9mGs0FSuyl5vhcYz/Ak2cvCAM1y4qJh9xbPr2YyUBU+hWq9xsbZXhk E6k0MVjDCDfdlHRnhcjloSswY9PzJRNNa6FFxKjLWHgdORuB0K/HpjdkqScNVaxS YLVc0hLNVS/xJbNaa938b2eAeKe4YePvDrbwCQhPfYc/stpfq+fcTJNim8kMrb2r yx3VePgEDVrL5SXB0ZWtoHsi1mbY7X9rOLzY0/NeoFS3XK/CxLG4gh2j90xo1/H8 uACQB4pcDrECog== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:11 2025 by rpki-client