This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json) Hash identifier: Y6mDz37J08P0/DrRJPjvZ+2UkXcob3P98VTK9/+2ZhI= Subject key identifier: 29:25:10:A8:40:FF:77:F2:AF:75:11:61:66:9F:E0:70:3F:44:EA:9A Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Certificate serial: 019B5305B2A098C8A12224BD9F8976951E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft Manifest number: 05BC Signing time: Thu 25 Dec 2025 01:00:40 +0000 Manifest this update: Thu 25 Dec 2025 01:00:40 +0000 Manifest next update: Fri 26 Dec 2025 01:00:40 +0000 Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=) 2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: 2GxhhSAHUQULbc/1yf6qjVPYInD9LPANd0Z9Se2YUNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:b2:a0:98:c8:a1:22:24:bd:9f:89:76:95:1e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Validity Not Before: Dec 25 01:00:40 2025 GMT Not After : Dec 26 01:00:40 2025 GMT Subject: CN=292510a840ff77f2af751161669fe0703f44ea9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:b2:bc:06:8a:88:4a:c7:e7:55:77:2c:d7: a2:d1:fa:2f:06:d2:35:9b:1d:b9:55:ce:86:b4:26: 37:08:32:18:a2:d2:a8:14:49:7e:c1:49:b6:de:96: 6d:a6:eb:32:34:43:7c:ad:ab:a2:6f:e1:52:71:44: 11:14:29:38:b9:1d:86:c7:b3:9c:fc:ba:ce:de:dc: 92:c5:84:67:16:55:57:51:08:68:1a:a9:12:90:f3: 67:bc:d1:0e:fe:17:2c:d9:8c:99:d0:e6:5b:d6:83: 72:65:77:02:f6:4d:25:7e:1f:4d:9b:2c:d7:a0:9d: f0:49:a3:4d:7f:0d:04:ff:53:85:0d:fb:26:3a:8b: bb:3d:da:d6:a3:80:bb:af:58:60:ea:fc:0c:3a:4f: ee:8e:44:c8:7d:ff:9a:dd:0d:c4:71:24:6a:6a:a0: 61:f5:41:6d:66:b9:93:87:fd:25:c2:58:04:ad:f2: 09:e9:2d:29:da:97:9e:3e:43:4f:f5:02:77:78:7f: 7c:33:8c:17:ab:39:5a:b0:75:d0:d4:1d:2b:a7:a0: e7:c6:5b:7c:da:5a:2a:00:76:e0:34:fb:fb:2b:d0: dd:66:ec:bc:73:9e:be:33:57:aa:d4:30:a7:b0:a0: 1d:f4:81:02:65:2a:a0:db:57:b3:7e:11:8a:47:f9: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:10:A8:40:FF:77:F2:AF:75:11:61:66:9F:E0:70:3F:44:EA:9A X509v3 Authority Key Identifier: keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d0:b9:c3:4e:a9:6b:7a:01:4a:69:fa:c1:24:07:fd:35:37: 02:47:f6:6c:2f:03:0b:b8:19:b3:9f:f4:89:94:cd:a5:c8:ac: 75:ff:40:e9:ff:55:8c:8a:9f:c7:33:06:9b:b4:3c:89:f2:c3: b0:a7:ff:78:cf:8e:81:62:6a:ae:97:22:10:33:da:f7:2c:de: 0a:66:b6:fa:a7:a0:4c:cc:0d:72:24:9f:96:d0:c3:49:12:6f: d0:9a:21:5d:51:15:e3:9c:b7:e7:a4:b9:20:1e:c6:bd:5e:60: 2b:39:a4:68:f5:05:c0:e9:7f:88:b8:1f:c5:6d:7f:c5:10:a3: 1c:98:b5:44:1c:75:f9:15:4f:31:ae:34:01:d1:74:e6:36:8f: 13:9a:94:4b:7b:fe:a0:b4:eb:6c:44:ab:2a:b6:f5:59:ef:b6: 52:6b:0f:64:4a:7b:dc:74:c6:a7:7f:9f:a9:81:9a:ab:d6:ae: 33:60:d7:5c:68:38:de:ff:a9:4c:b5:b7:3f:1f:b4:1e:63:6a: 55:d7:9f:7f:65:99:f7:31:96:67:15:95:ac:f0:46:7a:76:05: 5b:eb:24:cc:61:18:fc:79:45:f9:34:b2:e4:32:cf:62:5e:24: 7a:55:70:70:1f:06:24:8b:dd:5f:12:95:d2:08:d1:86:30:9f: d2:63:5e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBbKgmMihIiS9n4l2lR4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNGIyOGExOWRiZjUzNGFkNjFjYjA0OTk4NmU1NDI0YzMy ODRkZTIwHhcNMjUxMjI1MDEwMDQwWhcNMjUxMjI2MDEwMDQwWjAzMTEwLwYDVQQD EygyOTI1MTBhODQwZmY3N2YyYWY3NTExNjE2NjlmZTA3MDNmNDRlYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg6yvAaKiErH51V3LNei0fovBtI1 mx25Vc6GtCY3CDIYotKoFEl+wUm23pZtpusyNEN8rauib+FScUQRFCk4uR2Gx7Oc /LrO3tySxYRnFlVXUQhoGqkSkPNnvNEO/hcs2YyZ0OZb1oNyZXcC9k0lfh9NmyzX oJ3wSaNNfw0E/1OFDfsmOou7PdrWo4C7r1hg6vwMOk/ujkTIff+a3Q3EcSRqaqBh 9UFtZrmTh/0lwlgErfIJ6S0p2peePkNP9QJ3eH98M4wXqzlasHXQ1B0rp6Dnxlt8 2loqAHbgNPv7K9DdZuy8c56+M1eq1DCnsKAd9IECZSqg21ezfhGKR/kAuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCklEKhA/3fyr3URYWaf4HA/ROqaMB8GA1UdIwQY MBaAFOBLKKGdv1NK1hywSZhuVCTDKE3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYt YWNmMDQ0ODEwNjRkLzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYtYWNmMDQ0ODEwNjRk LzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdC5w06p a3oBSmn6wSQH/TU3Akf2bC8DC7gZs5/0iZTNpcisdf9A6f9VjIqfxzMGm7Q8ifLD sKf/eM+OgWJqrpciEDPa9yzeCma2+qegTMwNciSfltDDSRJv0JohXVEV45y356S5 IB7GvV5gKzmkaPUFwOl/iLgfxW1/xRCjHJi1RBx1+RVPMa40AdF05jaPE5qUS3v+ oLTrbESrKrb1We+2UmsPZEp73HTGp3+fqYGaq9auM2DXXGg43v+pTLW3Px+0HmNq Vdeff2WZ9zGWZxWVrPBGenYFW+skzGEY/HlF+TSy5DLPYl4kelVwcB8GJIvdXxKV 0gjRhjCf0mNebg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:51 2025 by rpki-client