This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json) Hash identifier: vSctJVfEIO6rsOWt7dbSZB6HyipKdD8Hj7fZC4g5qvo= Subject key identifier: 9E:E5:D0:CD:6D:07:32:EB:C8:F4:5C:2A:8B:11:02:BC:48:83:FE:9A Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Certificate serial: 019AF3896C95F9AFE4DB8C8E6003BE318AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft Manifest number: 0AA5 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: 5zOsl8WgOGJxO5tHEh+y1lHrKizoEujFIlpXBK+s2Vg=) 2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:6c:95:f9:af:e4:db:8c:8e:60:03:be:31:8a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=9ee5d0cd6d0732ebc8f45c2a8b1102bc4883fe9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:15:69:19:94:60:17:8f:c6:0f:2a:8a:37: af:6f:63:a2:24:4b:8a:fd:48:e7:d0:39:6d:76:53: b1:fc:7a:67:c9:2f:4c:83:41:40:b9:f5:b8:ee:1a: f6:14:44:a8:9c:d9:f8:d1:27:03:9e:53:fc:c3:dd: b9:e0:8c:be:eb:97:eb:67:f5:5c:f8:99:f4:e9:18: 47:24:7b:9a:ab:0f:92:b3:b6:a9:2a:56:59:01:56: f0:71:e7:1f:6b:74:d7:1b:3c:a6:4e:88:69:30:09: 9f:e9:36:b0:75:8a:e8:70:0f:bb:9c:67:06:ca:18: 65:ae:c7:db:80:fb:3e:39:6d:6c:54:13:11:70:ec: 86:db:35:3d:14:da:ad:bb:eb:05:f8:dc:0d:90:ac: 52:a1:8e:f6:6d:64:66:a8:af:43:08:cb:40:66:fb: 9b:23:e3:91:19:01:10:e2:12:7c:b7:67:6c:3b:d3: ad:c9:3b:5e:61:07:e2:18:85:44:7a:e1:6d:66:96: 74:1e:2b:b3:88:8c:51:17:2b:6f:fb:a5:f6:4e:c5: e6:4b:ae:60:88:c8:ef:82:02:15:ec:92:d1:d8:e7: c8:50:e1:6a:34:de:28:23:a0:4d:28:ef:84:2a:b7: 29:91:f6:d5:40:fa:d9:fd:be:6b:b4:da:35:63:2d: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E5:D0:CD:6D:07:32:EB:C8:F4:5C:2A:8B:11:02:BC:48:83:FE:9A X509v3 Authority Key Identifier: keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:92:ca:32:d4:7c:92:bc:40:dc:50:4a:21:24:cd:c2:7d: 41:9c:a7:04:82:90:17:ec:21:66:ed:bb:e9:28:92:2c:ba:07: b6:02:68:30:6d:2e:07:df:dd:10:80:5e:fb:e9:80:a5:6e:83: f6:6f:72:76:6f:19:49:29:ca:ed:44:d2:cd:63:1b:b9:c0:2e: e9:1c:86:06:24:f4:8d:c3:8b:ec:08:b5:67:65:87:ec:14:ef: 3f:35:c3:10:88:67:5b:17:a1:8f:75:e6:44:0d:e4:8a:e8:29: 49:c1:75:aa:0c:1d:79:95:af:ed:53:1b:cd:13:f5:5f:09:1c: 8a:19:94:81:d4:52:f8:e6:4a:61:13:2d:fe:c0:e5:25:b1:53: 60:ab:e3:47:2e:d7:e5:5f:f8:d8:e2:af:07:06:cb:e3:2b:78: a8:4a:05:f3:1d:70:58:b8:76:b7:77:bb:94:9e:dc:f4:cf:63: 75:b4:30:19:3b:d1:73:9d:be:51:7c:63:16:d3:84:92:d9:61: 8d:2a:bf:f3:bb:79:c0:8a:58:81:84:4c:2d:12:c5:45:dc:6d: ee:f8:b9:77:80:3f:c5:db:d4:2b:88:83:4b:7f:27:98:c4:55: 06:b6:61:ed:3e:59:f3:69:b9:4b:f4:1d:bb:cc:30:6c:9f:77: 86:0b:74:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWyV+a/k24yOYAO+MYrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2 MDM4Y2MwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg5ZWU1ZDBjZDZkMDczMmViYzhmNDVjMmE4YjExMDJiYzQ4ODNmZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2UVaRmUYBePxg8qijevb2OiJEuK /Ujn0DltdlOx/HpnyS9Mg0FAufW47hr2FESonNn40ScDnlP8w9254Iy+65frZ/Vc +Jn06RhHJHuaqw+Ss7apKlZZAVbwcecfa3TXGzymTohpMAmf6TawdYrocA+7nGcG yhhlrsfbgPs+OW1sVBMRcOyG2zU9FNqtu+sF+NwNkKxSoY72bWRmqK9DCMtAZvub I+ORGQEQ4hJ8t2dsO9OtyTteYQfiGIVEeuFtZpZ0HiuziIxRFytv+6X2TsXmS65g iMjvggIV7JLR2OfIUOFqNN4oI6BNKO+EKrcpkfbVQPrZ/b5rtNo1Yy0H8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7l0M1tBzLryPRcKosRArxIg/6aMB8GA1UdIwQY MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2 LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpWSyjLU fJK8QNxQSiEkzcJ9QZynBIKQF+whZu276SiSLLoHtgJoMG0uB9/dEIBe++mApW6D 9m9ydm8ZSSnK7UTSzWMbucAu6RyGBiT0jcOL7Ai1Z2WH7BTvPzXDEIhnWxehj3Xm RA3kiugpScF1qgwdeZWv7VMbzRP1XwkcihmUgdRS+OZKYRMt/sDlJbFTYKvjRy7X 5V/42OKvBwbL4yt4qEoF8x1wWLh2t3e7lJ7c9M9jdbQwGTvRc52+UXxjFtOEktlh jSq/87t5wIpYgYRMLRLFRdxt7vi5d4A/xdvUK4iDS38nmMRVBrZh7T5Z82m5S/Qd u8wwbJ93hgt0dg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:53 2025 by rpki-client