This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json) Hash identifier: 3xJK7dYkR5LZdI1K1mw2ljzxYUS7QpH7CAUukpP9+pQ= Subject key identifier: 9A:47:75:C1:C2:7F:53:6A:3D:56:00:8F:C1:32:33:95:A4:B4:04:AB Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Certificate serial: 019B53E14FC0978ADCCC28D3215EC591DB13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 05:00:33 +0000 Manifest this update: Thu 25 Dec 2025 05:00:33 +0000 Manifest next update: Fri 26 Dec 2025 05:00:33 +0000 Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 3J0vUM6pdU6OeCdDFNqVR6k7F2z10lFw6tLdWxOPSsY=) 2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=) 3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:4f:c0:97:8a:dc:cc:28:d3:21:5e:c5:91:db:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Validity Not Before: Dec 25 05:00:33 2025 GMT Not After : Dec 26 05:00:33 2025 GMT Subject: CN=9a4775c1c27f536a3d56008fc1323395a4b404ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:8b:cc:43:64:a4:f3:0b:9a:ab:70:78:1d: aa:a7:33:8e:3f:10:0d:f4:e7:49:6c:9b:79:5a:b2: fa:ab:25:2c:45:ba:3d:d6:bb:37:31:0c:9d:ca:c2: 93:c2:3a:a1:de:2d:d6:6b:9e:b3:88:ea:68:92:5f: a2:54:46:a2:9a:d6:dd:d3:1c:69:be:78:dd:2d:93: 14:54:09:0e:45:b3:f9:39:db:09:35:bb:35:72:8f: 71:b8:e8:38:30:8e:c7:8a:a2:59:81:3a:47:f8:58: c7:99:9c:3d:3f:95:fa:95:c7:c1:37:10:08:b0:e0: 1e:2f:cc:77:47:dd:91:58:48:05:0e:bf:f6:45:41: 97:8b:bf:27:af:c3:bf:ae:dd:43:c5:5a:32:51:29: 13:cd:89:b7:27:b8:25:a1:2b:27:14:09:aa:e8:39: 2b:c1:37:a4:c6:e6:b7:1e:af:0a:23:af:66:37:18: bb:6d:3c:f2:c5:ed:67:19:48:9d:93:cc:32:ed:3f: c6:34:72:6b:fb:d1:2f:4e:f1:ef:21:ef:9e:29:70: 9f:28:3e:16:b0:7a:57:b0:1c:2e:4a:ac:02:e3:82: 94:d7:14:d0:6a:cd:fd:66:02:cb:d3:20:cc:67:33: 77:3a:13:7c:74:80:72:ef:e1:71:3d:41:a0:07:1c: 3e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:75:C1:C2:7F:53:6A:3D:56:00:8F:C1:32:33:95:A4:B4:04:AB X509v3 Authority Key Identifier: keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:11:b7:6c:d3:34:09:2c:92:0b:6c:65:fa:bc:df:eb:d6:9a: 9b:5d:61:e0:6b:52:c2:e4:f9:bd:39:2c:c5:26:ac:f7:c6:21: 8a:40:d0:76:a6:b6:96:9e:d1:bb:05:ff:7b:f4:52:66:ec:34: 3b:ae:8c:07:91:3a:2f:9e:77:4f:03:0e:50:09:bf:4d:14:d8: 19:54:47:a1:25:2a:71:36:bc:83:4c:8b:9f:f4:27:be:73:7c: 1d:41:09:ad:0e:a4:c3:8e:85:13:9a:65:4a:07:cf:5e:dd:bf: b6:2f:9a:06:ad:68:e0:52:01:41:2b:d4:93:f3:78:47:53:ad: 76:cd:6a:87:66:96:ac:83:31:43:c7:20:9a:fe:fd:d4:a0:99: c2:47:ac:6f:82:27:c7:be:33:2b:e5:17:8e:31:de:dc:57:ba: d0:e5:a5:12:e5:c2:d3:93:4d:49:08:54:a7:9b:f2:19:64:ae: ca:3d:4c:ca:98:28:0b:03:97:5e:47:f2:b3:b1:30:65:2f:90: 75:ea:4f:d7:a5:51:b5:dc:6a:45:6d:a1:4c:af:3b:35:f5:2d: 5a:be:90:50:31:8e:45:68:8e:95:d7:41:b3:30:cb:0f:ff:9e: 20:de:80:0c:95:41:11:57:40:7a:3f:67:50:15:db:39:ca:36: 68:f8:2e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4U/Al4rczCjTIV7FkdsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU4NjEyMTBkYzM4YmRiYWViNDc3ZDZkYTcxOTY2NGE4 NGE2YmMwHhcNMjUxMjI1MDUwMDMzWhcNMjUxMjI2MDUwMDMzWjAzMTEwLwYDVQQD Eyg5YTQ3NzVjMWMyN2Y1MzZhM2Q1NjAwOGZjMTMyMzM5NWE0YjQwNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZSLzENkpPMLmqtweB2qpzOOPxAN 9OdJbJt5WrL6qyUsRbo91rs3MQydysKTwjqh3i3Wa56ziOpokl+iVEaimtbd0xxp vnjdLZMUVAkORbP5OdsJNbs1co9xuOg4MI7HiqJZgTpH+FjHmZw9P5X6lcfBNxAI sOAeL8x3R92RWEgFDr/2RUGXi78nr8O/rt1DxVoyUSkTzYm3J7gloSsnFAmq6Dkr wTekxua3Hq8KI69mNxi7bTzyxe1nGUidk8wy7T/GNHJr+9EvTvHvIe+eKXCfKD4W sHpXsBwuSqwC44KU1xTQas39ZgLL0yDMZzN3OhN8dIBy7+FxPUGgBxw+zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpHdcHCf1NqPVYAj8EyM5WktASrMB8GA1UdIwQY MBaAFOLFhhIQ3Di9uutHfW2nGWZKhKa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEt MzM3NTYxN2Q0ZWZkLzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEtMzM3NTYxN2Q0ZWZk LzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBG3bNM0 CSySC2xl+rzf69aam11h4GtSwuT5vTksxSas98YhikDQdqa2lp7RuwX/e/RSZuw0 O66MB5E6L553TwMOUAm/TRTYGVRHoSUqcTa8g0yLn/QnvnN8HUEJrQ6kw46FE5pl SgfPXt2/ti+aBq1o4FIBQSvUk/N4R1Otds1qh2aWrIMxQ8cgmv791KCZwkesb4In x74zK+UXjjHe3Fe60OWlEuXC05NNSQhUp5vyGWSuyj1MypgoCwOXXkfys7EwZS+Q depP16VRtdxqRW2hTK87NfUtWr6QUDGORWiOlddBszDLD/+eIN6ADJVBEVdAej9n UBXbOco2aPgunA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:50 2025 by rpki-client