This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json) Hash identifier: eCqspxetwGUY2KkLpkU1UWeWdUgll3aRlOCSKG+5yZ4= Subject key identifier: ED:72:BD:4A:DF:E7:E0:E2:CC:CF:E9:BB:40:81:CA:87:DA:6E:90:B4 Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a Certificate serial: 019B3E6E1039EAE5D5D54431B35E92986534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft Manifest number: 14D1 Signing time: Sun 21 Dec 2025 01:02:38 +0000 Manifest this update: Sun 21 Dec 2025 01:02:38 +0000 Manifest next update: Mon 22 Dec 2025 01:02:38 +0000 Files and hashes: 1: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: tgd+GaAS+L6D2VGld/RfDE2KsyMf3g7Ds4ufKzuBAqA=) 2: EMEQainrdjhvrSxfRt2EdTwfFho.roa (hash: MgfrBxxTqDVEh7a/Ypney2yykLPSmFU/4+sRkVkl74s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:10:39:ea:e5:d5:d5:44:31:b3:5e:92:98:65:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a Validity Not Before: Dec 21 01:02:38 2025 GMT Not After : Dec 22 01:02:38 2025 GMT Subject: CN=ed72bd4adfe7e0e2cccfe9bb4081ca87da6e90b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:1b:0e:5d:b8:e3:39:a2:2d:de:cb:d7:62: 49:74:66:4f:dd:e9:05:39:90:8f:fd:8b:8c:16:47: a5:11:7a:80:f6:39:db:41:50:03:a3:55:93:33:20: 14:1d:14:5b:ef:01:48:39:44:ab:97:9b:29:d0:34: a4:84:72:55:76:50:c8:79:e8:e4:9d:ee:7d:45:c8: c1:07:62:62:45:97:67:1d:15:07:bb:b1:c9:f8:2d: 02:72:81:ad:ca:2c:f2:48:18:0e:d4:35:6a:8d:c4: 7e:82:49:94:2b:9d:88:a2:47:d9:e2:e7:56:15:68: 3e:a8:b4:5a:d1:2e:f9:99:f1:10:3f:23:15:88:91: eb:15:f2:dc:04:83:04:ae:c0:10:03:94:d9:27:9c: d8:b7:d5:d9:c1:6d:44:bd:5f:4a:cb:57:b4:ba:2d: d1:35:e4:7c:52:33:f2:47:fd:cb:ed:74:11:1a:58: 29:b8:76:41:49:3a:f1:d6:e2:5c:44:f6:5c:eb:b3: 46:a7:ad:a5:35:1c:e3:50:61:aa:b6:4f:6e:4d:48: 74:1b:8c:a2:70:e4:dd:ab:6d:42:6e:d0:7f:9f:68: 44:18:0e:e1:33:49:17:60:cb:59:bd:10:bd:70:92: 2e:a4:73:69:c4:8c:f6:d9:5c:4d:e3:cd:90:7e:b4: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:72:BD:4A:DF:E7:E0:E2:CC:CF:E9:BB:40:81:CA:87:DA:6E:90:B4 X509v3 Authority Key Identifier: keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:53:22:d8:4a:95:8b:95:08:58:11:87:fc:c1:38:04:e8: 51:90:92:80:55:93:9a:4f:47:47:29:b9:d2:e4:b4:b0:14:06: 86:5b:ac:19:ec:04:02:d2:67:fd:a9:82:fd:c5:c3:07:e1:93: 54:5d:86:0b:92:90:88:f3:65:8f:96:5e:64:b3:86:2e:c4:ed: 5e:a1:e4:d8:b6:ec:57:79:e7:45:8e:4b:1d:41:34:e1:c5:e3: a3:f7:11:52:61:ea:6c:aa:2f:66:df:bc:89:ac:d5:c9:e7:ae: 1e:03:73:f2:9b:8b:23:9c:a0:0c:07:4f:0f:7f:5e:5d:30:df: bc:59:9a:9a:fa:9a:8b:e1:93:cc:9c:85:6c:d3:f6:0b:99:43: be:b0:4b:93:03:6a:b9:67:24:e4:75:2a:8b:2c:99:1d:a9:04: 5d:46:49:5d:2d:3c:30:53:10:41:92:c5:0a:20:86:e5:7e:5d: 8e:94:98:e3:9a:fd:7c:96:ed:b0:ec:cc:63:e4:30:5b:c6:0d: 00:1b:31:d5:5b:d7:10:6b:b1:f3:f3:18:67:8f:d6:5c:48:37: f9:c6:44:1e:92:28:01:d4:0c:6f:e6:05:67:db:26:e9:b2:d6: 49:e2:f4:b5:80:8d:c6:a0:d1:0f:d5:99:3b:04:36:fe:07:f8: 93:b0:01:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bhA56uXV1UQxs16SmGU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTEwZGU2ZmZhZTU5MDQyNzI0NGEwMzM0M2RiNjZhYzU2 NDI3NWEwHhcNMjUxMjIxMDEwMjM4WhcNMjUxMjIyMDEwMjM4WjAzMTEwLwYDVQQD EyhlZDcyYmQ0YWRmZTdlMGUyY2NjZmU5YmI0MDgxY2E4N2RhNmU5MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/sbDl244zmiLd7L12JJdGZP3ekF OZCP/YuMFkelEXqA9jnbQVADo1WTMyAUHRRb7wFIOUSrl5sp0DSkhHJVdlDIeejk ne59RcjBB2JiRZdnHRUHu7HJ+C0CcoGtyizySBgO1DVqjcR+gkmUK52IokfZ4udW FWg+qLRa0S75mfEQPyMViJHrFfLcBIMErsAQA5TZJ5zYt9XZwW1EvV9Ky1e0ui3R NeR8UjPyR/3L7XQRGlgpuHZBSTrx1uJcRPZc67NGp62lNRzjUGGqtk9uTUh0G4yi cOTdq21CbtB/n2hEGA7hM0kXYMtZvRC9cJIupHNpxIz22VxN482QfrS1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1yvUrf5+DizM/pu0CByofabpC0MB8GA1UdIwQY MBaAFOKhDeb/rlkEJyRKAzQ9tmrFZCdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTct NTc1NTQwNTg2MjBiLzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTctNTc1NTQwNTg2MjBi LzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYZTIthK lYuVCFgRh/zBOAToUZCSgFWTmk9HRym50uS0sBQGhlusGewEAtJn/amC/cXDB+GT VF2GC5KQiPNlj5ZeZLOGLsTtXqHk2LbsV3nnRY5LHUE04cXjo/cRUmHqbKovZt+8 iazVyeeuHgNz8puLI5ygDAdPD39eXTDfvFmamvqai+GTzJyFbNP2C5lDvrBLkwNq uWck5HUqiyyZHakEXUZJXS08MFMQQZLFCiCG5X5djpSY45r9fJbtsOzMY+QwW8YN ABsx1VvXEGux8/MYZ4/WXEg3+cZEHpIoAdQMb+YFZ9sm6bLWSeL0tYCNxqDRD9WZ OwQ2/gf4k7ABSA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:38 2025 by rpki-client