This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json) Hash identifier: RKJv8tNB58jK3IiGANU+IzJ5NyfhhdlLu3xcIyHzNEU= Subject key identifier: 70:95:0A:9A:BF:B2:A3:9A:9E:6B:6E:13:32:D2:63:5C:AD:DA:22:68 Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7 Certificate serial: 019B5D8946DAA566D4BA11999130EC6D5820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft Manifest number: 1377 Signing time: Sat 27 Dec 2025 02:00:36 +0000 Manifest this update: Sat 27 Dec 2025 02:00:36 +0000 Manifest next update: Sun 28 Dec 2025 02:00:36 +0000 Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: AAhn0vs+hrAVLXUhH4FWhJaLRM4zcE9Qy3R/e++UD0g=) 2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:46:da:a5:66:d4:ba:11:99:91:30:ec:6d:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7 Validity Not Before: Dec 27 02:00:36 2025 GMT Not After : Dec 28 02:00:36 2025 GMT Subject: CN=70950a9abfb2a39a9e6b6e1332d2635cadda2268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:7c:c0:fa:2f:db:b9:e5:dc:40:fb:a1:d6: e6:60:57:0f:1b:8c:2e:80:99:53:70:4c:e2:e5:b0: 61:70:a1:c4:b8:65:66:0c:f4:4d:0b:31:3b:06:38: 57:32:b2:cb:72:ff:77:32:69:09:46:21:b4:f2:d6: ab:9f:e9:6d:2e:37:c4:da:05:e4:5e:81:28:f9:58: 5c:87:78:06:72:1b:3e:e0:14:5a:95:a1:6e:7f:f3: ea:57:42:f0:d9:bf:9c:35:85:bb:57:d3:90:79:fe: f7:fb:40:2c:db:4e:df:ba:00:74:a2:51:42:71:78: 77:b1:eb:b0:93:7f:c8:14:cd:18:28:d0:83:66:6f: 88:c6:69:99:37:c3:ef:d6:a2:15:01:09:26:f1:8b: 9f:57:4c:88:74:e4:df:7c:1d:8f:aa:cf:1e:c3:4f: 8d:1f:05:d2:0e:92:67:c7:05:50:6e:6f:6b:35:f1: 69:a4:b8:46:22:15:70:a7:bc:6e:68:12:0d:40:6e: 5f:2c:b2:62:ff:72:c5:8c:bd:f2:95:8d:31:08:a1: 80:81:c4:15:17:97:8c:cc:87:23:a6:d2:dc:27:12: 40:7f:9b:8a:49:8c:ae:de:51:86:d8:7b:63:63:8b: 47:72:ac:91:69:c2:3e:3d:ed:1c:ff:5d:76:45:8e: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:0A:9A:BF:B2:A3:9A:9E:6B:6E:13:32:D2:63:5C:AD:DA:22:68 X509v3 Authority Key Identifier: keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0e:e2:dc:36:4e:e3:31:42:88:9a:f1:a4:42:e9:7e:57:11: 45:24:30:27:52:11:dc:5c:65:be:37:1e:59:7e:81:18:7e:8a: 43:af:8d:db:23:76:c9:d4:7f:a2:d5:b1:1c:81:b5:95:1d:fa: 46:5b:08:9a:63:a4:d4:2c:a5:87:ca:4b:88:50:f6:f4:66:99: 8d:c3:71:c8:0c:9f:11:5b:d8:af:78:cf:3b:b7:be:81:80:62: 96:37:c7:2e:76:5b:2c:7e:db:ef:d3:06:65:c5:01:57:41:c8: cf:4a:f8:1c:ac:9b:71:7a:76:fa:ba:3a:20:21:42:5c:34:30: 26:6a:59:e6:38:44:05:19:3a:80:ea:2c:d5:03:c6:0e:a5:04: 2c:18:b0:29:2f:47:6d:18:f6:2a:31:32:0b:18:99:70:be:e5: 7a:bf:96:8e:fb:0a:4b:ec:df:f4:ff:98:b4:e9:4b:27:58:46: 1f:05:90:72:64:88:b1:eb:e0:3d:02:8d:0c:70:76:20:78:0e: 1d:17:bf:df:6b:05:17:a1:da:b6:f0:37:a5:14:17:b1:f2:bf: 5a:2b:5a:91:85:ca:38:d0:42:e5:c0:bf:f7:7f:94:9a:47:03: 68:10:10:1c:e4:57:bd:6e:b8:cc:ca:3e:bb:80:4c:ff:6a:60: 9e:68:44:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiUbapWbUuhGZkTDsbVggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjJlMmI1ODIzM2ExOTNkMWY3Mjc3ODU2NWQ2Yzk4ZDc2 MTYzYTcwHhcNMjUxMjI3MDIwMDM2WhcNMjUxMjI4MDIwMDM2WjAzMTEwLwYDVQQD Eyg3MDk1MGE5YWJmYjJhMzlhOWU2YjZlMTMzMmQyNjM1Y2FkZGEyMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5x8wPov27nl3ED7odbmYFcPG4wu gJlTcEzi5bBhcKHEuGVmDPRNCzE7BjhXMrLLcv93MmkJRiG08tarn+ltLjfE2gXk XoEo+Vhch3gGchs+4BRalaFuf/PqV0Lw2b+cNYW7V9OQef73+0As207fugB0olFC cXh3seuwk3/IFM0YKNCDZm+IxmmZN8Pv1qIVAQkm8YufV0yIdOTffB2Pqs8ew0+N HwXSDpJnxwVQbm9rNfFppLhGIhVwp7xuaBINQG5fLLJi/3LFjL3ylY0xCKGAgcQV F5eMzIcjptLcJxJAf5uKSYyu3lGG2HtjY4tHcqyRacI+Pe0c/112RY6TGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCVCpq/sqOanmtuEzLSY1yt2iJoMB8GA1UdIwQY MBaAFOEi4rWCM6GT0fcneFZdbJjXYWOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUt NDE2NmI3NWIwOGFmLzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUtNDE2NmI3NWIwOGFm LzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA7i3DZO 4zFCiJrxpELpflcRRSQwJ1IR3FxlvjceWX6BGH6KQ6+N2yN2ydR/otWxHIG1lR36 RlsImmOk1Cylh8pLiFD29GaZjcNxyAyfEVvYr3jPO7e+gYBiljfHLnZbLH7b79MG ZcUBV0HIz0r4HKybcXp2+ro6ICFCXDQwJmpZ5jhEBRk6gOos1QPGDqUELBiwKS9H bRj2KjEyCxiZcL7ler+WjvsKS+zf9P+YtOlLJ1hGHwWQcmSIsevgPQKNDHB2IHgO HRe/32sFF6HatvA3pRQXsfK/WitakYXKONBC5cC/93+UmkcDaBAQHORXvW64zMo+ u4BM/2pgnmhE6A== -----END CERTIFICATE-----Generated at Sat Dec 27 08:08:40 2025 by rpki-client