This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json) Hash identifier: OgU4HgmuSwwKUaGsaBVwWmuMqn/wMiqTLShkrdocfuo= Subject key identifier: 2A:0D:71:A7:2C:E7:AA:4A:A0:4E:44:6A:FE:57:EE:56:05:19:18:F9 Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a Certificate serial: 019AF50AA565ABD0EEEBC4E00D768CA8C59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft Manifest number: 14AB Signing time: Sat 06 Dec 2025 19:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:01:46 +0000 Manifest next update: Sun 07 Dec 2025 19:01:46 +0000 Files and hashes: 1: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: GMeyrkIA0AD/eOM3UoNVqHbucCn8Wd7E/wSp6ZhZwQs=) 2: EMEQainrdjhvrSxfRt2EdTwfFho.roa (hash: MgfrBxxTqDVEh7a/Ypney2yykLPSmFU/4+sRkVkl74s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a5:65:ab:d0:ee:eb:c4:e0:0d:76:8c:a8:c5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a Validity Not Before: Dec 6 19:01:46 2025 GMT Not After : Dec 7 19:01:46 2025 GMT Subject: CN=2a0d71a72ce7aa4aa04e446afe57ee56051918f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:72:99:3a:96:0c:a8:fb:cc:b6:ef:86:af: ca:d5:dd:ae:9a:da:52:21:fa:29:60:92:63:9f:fd: a3:7a:5b:d7:70:d4:51:e7:c5:05:37:51:48:c8:08: e4:46:0e:f4:82:67:aa:d7:68:b6:bd:11:12:5e:bb: be:ad:90:02:07:b6:e6:8c:9c:ce:5c:35:9a:c5:fb: 9d:91:ef:53:ab:1a:89:f1:f3:01:25:11:ab:6d:e7: 3a:af:f3:c9:8a:57:51:ea:c4:cf:e5:9e:53:92:8d: 4b:c5:09:b9:09:81:ac:14:7c:e8:14:2c:73:ef:5f: 34:a3:d6:d3:0e:bd:95:0c:ae:5a:21:c1:46:b1:1d: 2a:5d:1f:78:5e:ad:23:42:1f:80:5c:d7:48:06:37: 7e:e4:48:33:83:b2:05:d4:24:99:e5:c7:6f:51:19: 8e:57:0b:c9:1f:fe:de:53:f7:9f:55:21:85:37:d6: 0b:1a:19:4a:bd:fb:98:1a:9e:99:7b:16:7f:09:ff: 42:c6:a2:17:44:e6:83:97:b3:09:40:93:2d:26:b6: d9:d1:2d:3e:9a:f5:05:cf:49:58:5c:8f:80:ef:2a: b2:4b:71:69:35:e2:67:cb:dd:6d:38:19:33:4a:12: df:3e:80:64:8f:8f:29:15:0d:eb:3f:f4:ef:cc:01: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:71:A7:2C:E7:AA:4A:A0:4E:44:6A:FE:57:EE:56:05:19:18:F9 X509v3 Authority Key Identifier: keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7b:63:b1:3c:9c:78:d4:02:53:d9:01:d7:f1:76:89:0d:2a: 86:1e:2e:35:fe:32:a2:68:29:37:94:5e:db:04:25:f9:6b:a2: 6b:9e:1f:14:ff:81:04:60:d4:05:30:47:78:ee:07:e7:bb:da: 6e:dc:c4:f1:a8:9d:6e:75:ad:e1:2c:4e:00:9c:f5:80:5b:f6: 50:a3:88:39:ff:b4:03:fe:b7:33:45:2b:85:e4:dd:37:53:7d: bb:ea:5e:c5:4a:94:e3:23:18:fe:45:ae:c2:cf:8d:76:b5:20: f0:8b:3c:ea:b3:ec:d0:37:39:b9:79:5a:09:c6:71:98:6b:a0: d9:bf:62:c5:53:68:26:88:17:12:bf:9f:93:3e:77:dc:0d:56: a2:b0:1e:76:40:9a:dc:0b:84:8a:29:18:e3:b2:53:27:17:71: 69:a5:cc:62:72:29:23:56:e8:6c:4d:81:19:0e:8a:4a:ad:07: 24:31:09:9a:a5:10:c0:76:fc:ed:c7:ed:a1:ca:71:1d:aa:2e: e9:52:30:89:26:e8:68:f3:3c:73:b4:d6:2a:9f:55:14:3c:36: e3:e5:b7:33:aa:60:c3:5a:c4:29:5d:48:04:6b:05:27:f6:fa: bc:4f:96:05:09:88:b7:40:1d:80:b8:30:26:8e:e8:0a:22:e1: 49:fb:56:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqVlq9Du68TgDXaMqMWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTEwZGU2ZmZhZTU5MDQyNzI0NGEwMzM0M2RiNjZhYzU2 NDI3NWEwHhcNMjUxMjA2MTkwMTQ2WhcNMjUxMjA3MTkwMTQ2WjAzMTEwLwYDVQQD EygyYTBkNzFhNzJjZTdhYTRhYTA0ZTQ0NmFmZTU3ZWU1NjA1MTkxOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIFymTqWDKj7zLbvhq/K1d2umtpS IfopYJJjn/2jelvXcNRR58UFN1FIyAjkRg70gmeq12i2vRESXru+rZACB7bmjJzO XDWaxfudke9TqxqJ8fMBJRGrbec6r/PJildR6sTP5Z5Tko1LxQm5CYGsFHzoFCxz 7180o9bTDr2VDK5aIcFGsR0qXR94Xq0jQh+AXNdIBjd+5Egzg7IF1CSZ5cdvURmO VwvJH/7eU/efVSGFN9YLGhlKvfuYGp6ZexZ/Cf9CxqIXROaDl7MJQJMtJrbZ0S0+ mvUFz0lYXI+A7yqyS3FpNeJny91tOBkzShLfPoBkj48pFQ3rP/TvzAGUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoNcacs56pKoE5Eav5X7lYFGRj5MB8GA1UdIwQY MBaAFOKhDeb/rlkEJyRKAzQ9tmrFZCdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTct NTc1NTQwNTg2MjBiLzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTctNTc1NTQwNTg2MjBi LzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3tjsTyc eNQCU9kB1/F2iQ0qhh4uNf4yomgpN5Re2wQl+Wuia54fFP+BBGDUBTBHeO4H57va btzE8aidbnWt4SxOAJz1gFv2UKOIOf+0A/63M0UrheTdN1N9u+pexUqU4yMY/kWu ws+NdrUg8Is86rPs0Dc5uXlaCcZxmGug2b9ixVNoJogXEr+fkz533A1WorAedkCa 3AuEiikY47JTJxdxaaXMYnIpI1bobE2BGQ6KSq0HJDEJmqUQwHb87cftocpxHaou 6VIwiSboaPM8c7TWKp9VFDw24+W3M6pgw1rEKV1IBGsFJ/b6vE+WBQmIt0AdgLgw Jo7oCiLhSftWFg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:36:26 2025 by rpki-client