This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json) Hash identifier: z09CKTRuba0fEc6qrryx1zXtEaWcnqXWdb0kXfPjqS8= Subject key identifier: 67:26:19:F5:D3:3A:8E:8E:BF:F3:AF:34:9F:31:56:61:42:5D:5D:19 Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Certificate serial: 019AF61C8B5B5E7D0835764D6001A07191C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft Manifest number: 135C Signing time: Sun 07 Dec 2025 00:00:56 +0000 Manifest this update: Sun 07 Dec 2025 00:00:56 +0000 Manifest next update: Mon 08 Dec 2025 00:00:56 +0000 Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: Pq5nw1Lk93gsRa2YXr1j/6vx22LRsxRb1kj6bVWYOIc=) 2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:8b:5b:5e:7d:08:35:76:4d:60:01:a0:71:91:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Validity Not Before: Dec 7 00:00:56 2025 GMT Not After : Dec 8 00:00:56 2025 GMT Subject: CN=672619f5d33a8e8ebff3af349f315661425d5d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:b2:b0:18:f5:ca:1b:f9:32:8f:54:67:31: 52:d1:f5:5a:f2:ef:6f:f3:f8:a9:ba:5a:d8:bd:b2: 57:07:fa:c6:59:bd:09:6e:d3:d0:9c:53:76:e2:d3: 75:74:08:c1:b5:1f:f4:ba:21:b8:e6:80:4a:86:db: 3b:33:8f:a5:62:3d:a4:be:17:fc:03:90:05:01:20: ed:fb:57:94:c4:56:b9:f7:0b:6d:c0:1a:55:68:af: ba:d0:ed:26:cb:ed:98:a4:7d:21:ae:d7:34:29:92: 6c:5c:4b:65:61:2c:f2:4a:62:15:56:c7:6c:a3:31: 0a:bd:6f:9f:bc:16:d7:7f:29:1f:e8:5a:de:19:22: 84:35:7c:5e:cb:2c:d9:cb:6e:02:6b:d8:a5:e0:91: 85:da:89:54:fa:e5:39:f1:30:be:4d:a0:71:57:f3: 84:4d:08:84:0d:dd:7e:87:ce:0f:8f:9b:41:6e:1d: 65:a4:18:58:ff:fe:fa:e3:db:31:76:56:55:61:46: b9:c5:fe:b8:19:c2:f6:b4:e1:a6:73:24:f9:34:63: bd:a1:32:f5:3d:fe:95:d1:12:b1:dd:b3:d7:66:76: 01:ac:55:68:d5:24:ca:80:af:a4:ef:d4:d4:8b:fe: 8e:a2:5d:d7:8c:77:5a:35:06:6d:38:4c:5b:c5:e1: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:26:19:F5:D3:3A:8E:8E:BF:F3:AF:34:9F:31:56:61:42:5D:5D:19 X509v3 Authority Key Identifier: keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f6:97:ee:41:28:69:3b:bc:65:a1:03:90:a6:45:9f:f1:98: 3c:14:df:d9:9a:a9:9c:41:13:f7:37:00:04:af:91:de:d9:f7: 09:58:c8:9b:f1:db:10:09:55:d0:da:8c:c2:79:fa:e5:f2:6e: ce:e9:31:53:d7:04:d4:b6:4d:2a:61:df:46:9b:61:19:86:fa: 91:14:ba:61:92:c4:d4:ae:22:61:9f:af:9b:cc:77:7e:cc:8f: f9:41:f4:8f:ae:a9:5b:c0:40:9c:73:a2:9a:4a:8a:57:d7:c3: 24:24:32:e5:7a:a6:1a:10:ff:ec:ae:26:44:20:9e:8e:58:24: 17:63:e1:78:b9:91:ea:c0:b6:30:aa:1c:2e:d1:f6:02:07:6c: dd:86:cd:75:86:de:06:28:86:14:f0:8c:8f:70:0e:9a:2d:c5: 59:3e:dc:85:82:34:52:20:98:0a:2d:a7:4c:53:97:f7:26:4e: cc:f7:b3:80:93:4f:de:1f:21:c9:e6:99:40:16:de:fa:45:4f: 46:4f:6a:f1:0a:8b:42:fd:b8:1b:77:44:f6:14:90:5d:65:8e: 7d:8a:00:d4:25:9d:52:3a:1f:7e:53:cb:93:df:80:9f:5b:e7: e8:28:b7:f3:5a:d2:4d:a3:1f:ed:09:97:76:44:c1:73:c4:58: 5d:e1:97:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HItbXn0INXZNYAGgcZHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0 NWRlZWYwHhcNMjUxMjA3MDAwMDU2WhcNMjUxMjA4MDAwMDU2WjAzMTEwLwYDVQQD Eyg2NzI2MTlmNWQzM2E4ZThlYmZmM2FmMzQ5ZjMxNTY2MTQyNWQ1ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJKysBj1yhv5Mo9UZzFS0fVa8u9v 8/ipulrYvbJXB/rGWb0JbtPQnFN24tN1dAjBtR/0uiG45oBKhts7M4+lYj2kvhf8 A5AFASDt+1eUxFa59wttwBpVaK+60O0my+2YpH0hrtc0KZJsXEtlYSzySmIVVsds ozEKvW+fvBbXfykf6FreGSKENXxeyyzZy24Ca9il4JGF2olU+uU58TC+TaBxV/OE TQiEDd1+h84Pj5tBbh1lpBhY//7649sxdlZVYUa5xf64GcL2tOGmcyT5NGO9oTL1 Pf6V0RKx3bPXZnYBrFVo1STKgK+k79TUi/6Ool3XjHdaNQZtOExbxeF7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcmGfXTOo6Ov/OvNJ8xVmFCXV0ZMB8GA1UdIwQY MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt ODJjNmNmMTRkZmUyLzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPaX7kEo aTu8ZaEDkKZFn/GYPBTf2ZqpnEET9zcABK+R3tn3CVjIm/HbEAlV0NqMwnn65fJu zukxU9cE1LZNKmHfRpthGYb6kRS6YZLE1K4iYZ+vm8x3fsyP+UH0j66pW8BAnHOi mkqKV9fDJCQy5XqmGhD/7K4mRCCejlgkF2PheLmR6sC2MKocLtH2Agds3YbNdYbe BiiGFPCMj3AOmi3FWT7chYI0UiCYCi2nTFOX9yZOzPezgJNP3h8hyeaZQBbe+kVP Rk9q8QqLQv24G3dE9hSQXWWOfYoA1CWdUjofflPLk9+An1vn6Ci381rSTaMf7QmX dkTBc8RYXeGXug== -----END CERTIFICATE-----Generated at Sun Dec 7 05:24:46 2025 by rpki-client