This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json) Hash identifier: PvkhJpjHcsrL5VIxrFaaUtIgR05zQJVVyYQzwIrB5fs= Subject key identifier: BE:D0:37:60:59:ED:AE:7C:F4:CE:8D:53:2C:1C:F5:CE:25:07:F9:5F Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56 Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56 Certificate serial: 019B2F9EC606D27113707B1E9820D6C753CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft Manifest number: 0B43 Signing time: Thu 18 Dec 2025 04:01:33 +0000 Manifest this update: Thu 18 Dec 2025 04:01:33 +0000 Manifest next update: Fri 19 Dec 2025 04:01:33 +0000 Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: 8ftxwHNkFwrz+opvRdtPyJvmpPDgJ0P2P8gtBYL+G0A=) 2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:c6:06:d2:71:13:70:7b:1e:98:20:d6:c7:53:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56 Validity Not Before: Dec 18 04:01:33 2025 GMT Not After : Dec 19 04:01:33 2025 GMT Subject: CN=bed0376059edae7cf4ce8d532c1cf5ce2507f95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:06:18:f9:ee:ab:da:a5:3a:a4:ed:3d:dc: a3:80:1f:71:be:54:62:0a:5f:db:ec:82:3e:e9:1e: cf:d9:84:e2:d8:26:8c:2d:d5:80:63:11:45:94:0c: 45:38:42:63:2c:04:ff:a5:7d:50:e9:23:73:7f:31: 3e:46:68:56:88:f1:3e:66:89:89:12:c4:8c:45:6a: c9:a0:16:7e:4b:e1:28:60:74:6c:81:82:bd:6e:8c: 81:c7:28:5e:13:b3:86:ad:73:84:06:eb:12:e7:54: be:70:88:bf:86:c0:9f:5e:e8:f6:47:4d:f4:03:8c: 18:dd:36:1c:87:cf:cb:84:16:42:5d:ac:62:5c:c6: 17:59:54:7b:5c:63:05:88:7b:5f:91:f2:f1:83:d5: c9:43:ab:41:f3:02:84:4f:4b:54:57:dc:4e:f4:b8: ec:e7:fc:db:4d:ed:bc:ca:4e:58:8c:05:90:e3:c8: ad:8a:60:5a:3e:c0:f9:b1:f8:63:a1:e6:5c:b2:77: a9:4e:9e:cb:f6:be:14:c6:85:d2:a6:ec:9d:36:ab: 08:81:60:0d:fe:0a:5f:d7:7b:cd:5a:72:11:e1:34: 47:61:b9:5a:f3:99:72:c5:25:f1:73:0e:b8:ca:c5: 03:28:35:4a:87:ba:87:1d:00:dc:86:f8:7f:dd:77: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D0:37:60:59:ED:AE:7C:F4:CE:8D:53:2C:1C:F5:CE:25:07:F9:5F X509v3 Authority Key Identifier: keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0b:77:41:f7:47:b5:e6:a2:69:74:f3:2b:a5:84:fe:e3:ef: a4:1c:3b:81:2a:3e:4c:0d:37:9e:00:88:23:95:62:f8:b9:8e: f4:10:09:0c:35:9c:16:0c:64:fb:27:04:81:b5:44:bc:04:bd: 2c:e1:77:d6:f3:e3:1c:e6:60:2d:d3:3c:b9:37:f5:6d:5c:12: 00:fa:61:f4:b7:7a:92:c7:0c:c5:15:0b:53:9e:15:7e:bd:56: 19:67:d4:b0:60:dc:9f:05:6d:71:54:da:2b:65:2d:a8:0a:0a: 75:d4:7a:0d:be:34:78:e3:7d:eb:34:2a:a4:a7:12:07:ac:4f: 2c:49:fe:e6:73:ce:de:60:ab:58:4a:b2:17:3e:9b:09:93:dd: fa:af:fc:10:c7:88:2f:aa:b1:d1:09:a0:15:36:6d:98:0b:56: da:8d:26:92:39:a3:a0:85:43:b6:df:94:04:56:bb:87:67:b9: 8b:42:47:32:9a:09:f2:fd:25:1d:fb:74:83:f3:83:6c:ab:6d: c4:9f:a8:ef:45:98:11:c6:69:76:eb:b5:17:37:59:c0:01:39: 1c:1f:44:5f:05:5d:e9:61:cf:ce:26:52:79:9b:11:d8:ca:41: a1:0a:29:86:83:97:17:7c:44:ae:63:66:f6:67:07:4b:30:3f: eb:c0:a0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnsYG0nETcHsemCDWx1PKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj N2FlNTYwHhcNMjUxMjE4MDQwMTMzWhcNMjUxMjE5MDQwMTMzWjAzMTEwLwYDVQQD EyhiZWQwMzc2MDU5ZWRhZTdjZjRjZThkNTMyYzFjZjVjZTI1MDdmOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4AGGPnuq9qlOqTtPdyjgB9xvlRi Cl/b7II+6R7P2YTi2CaMLdWAYxFFlAxFOEJjLAT/pX1Q6SNzfzE+RmhWiPE+ZomJ EsSMRWrJoBZ+S+EoYHRsgYK9boyBxyheE7OGrXOEBusS51S+cIi/hsCfXuj2R030 A4wY3TYch8/LhBZCXaxiXMYXWVR7XGMFiHtfkfLxg9XJQ6tB8wKET0tUV9xO9Ljs 5/zbTe28yk5YjAWQ48itimBaPsD5sfhjoeZcsnepTp7L9r4UxoXSpuydNqsIgWAN /gpf13vNWnIR4TRHYbla85lyxSXxcw64ysUDKDVKh7qHHQDchvh/3XcMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7QN2BZ7a589M6NUywc9c4lB/lfMB8GA1UdIwQY MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAt3QfdH teaiaXTzK6WE/uPvpBw7gSo+TA03ngCII5Vi+LmO9BAJDDWcFgxk+ycEgbVEvAS9 LOF31vPjHOZgLdM8uTf1bVwSAPph9Ld6kscMxRULU54Vfr1WGWfUsGDcnwVtcVTa K2UtqAoKddR6Db40eON96zQqpKcSB6xPLEn+5nPO3mCrWEqyFz6bCZPd+q/8EMeI L6qx0QmgFTZtmAtW2o0mkjmjoIVDtt+UBFa7h2e5i0JHMpoJ8v0lHft0g/ODbKtt xJ+o70WYEcZpduu1FzdZwAE5HB9EXwVd6WHPziZSeZsR2MpBoQophoOXF3xErmNm 9mcHSzA/68CguA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:06 2025 by rpki-client