This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json) Hash identifier: 0ARNa7jIUQrn+gAkbQ9RlaFPwOwxPwEWmlOar/a6J98= Subject key identifier: E1:F3:32:39:F0:B9:01:EE:3D:4D:6F:FF:EB:BE:1E:F2:CD:0A:4A:69 Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019AF209336AE1F3C32C94B4E874DC939A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft Manifest number: 0A17 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: 3uWncW3du6oIwL852jWJYxLIekI7NMShn8HgM0SS764=) 2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:33:6a:e1:f3:c3:2c:94:b4:e8:74:dc:93:9a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=e1f33239f0b901ee3d4d6fffebbe1ef2cd0a4a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:cb:21:c1:b2:68:87:b9:70:1c:46:fc:e7: f0:70:7f:5f:df:da:ee:79:ca:7e:31:5d:a4:42:c4: 88:ce:67:91:30:88:7a:bd:23:58:e6:9c:e6:bb:ad: 33:e8:35:f2:81:84:00:3c:5c:aa:a4:17:7d:ed:84: 52:a9:6c:6f:dd:e0:d4:b4:5c:12:55:22:cd:26:0e: 5f:5a:9f:d9:b0:f4:68:64:52:c6:08:6a:35:25:30: 87:f6:e1:43:50:2b:ff:4f:92:6b:fe:f5:72:11:65: 89:fb:d8:9f:b4:4f:83:60:35:47:0e:16:f6:cf:a9: 09:87:7e:e5:66:c9:46:62:4b:9e:0a:2b:85:e2:78: f5:e4:3c:ae:66:b1:bf:72:f9:cf:24:60:5b:9b:52: 78:a5:46:29:f5:4c:ec:23:70:74:04:d9:be:68:c5: b0:0c:2a:98:9b:f5:e1:42:9c:e6:e4:af:b1:87:18: b8:98:b2:f8:e8:f0:af:b0:63:04:ff:da:2b:22:e1: 69:18:5b:65:df:b4:3d:33:9e:93:e4:83:db:02:23: a6:db:85:8a:a5:da:0f:4a:17:44:0f:f2:05:46:1b: 86:4a:f4:ea:b4:49:0f:b8:1a:d6:2c:c8:50:2d:ca: 04:2a:d8:27:8d:23:b8:06:6c:f6:7c:df:37:b2:6e: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:32:39:F0:B9:01:EE:3D:4D:6F:FF:EB:BE:1E:F2:CD:0A:4A:69 X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:76:4a:50:78:42:26:0c:17:58:e5:5e:ab:a8:50:59:7e:74: ab:35:37:16:ec:30:df:e1:fd:77:80:57:de:fe:3a:70:94:28: 6b:c5:35:06:2f:d9:16:69:6a:27:14:7a:16:39:8e:26:e7:81: e2:d6:e4:7e:6c:7d:0e:16:b3:d2:ae:28:48:f8:8f:06:b8:16: 82:64:40:18:74:7d:cd:71:a5:1c:14:d6:24:70:5e:66:a9:f0: ff:a8:cf:38:93:d5:55:c7:6c:38:37:9c:44:e3:79:e3:3a:d7: eb:a2:44:0f:d1:99:a3:c1:b0:7f:f6:e1:d3:8f:cd:e5:20:eb: e8:50:45:9a:72:e9:c1:df:74:ff:7c:b5:bd:30:72:b8:12:a6: e5:4f:87:b2:66:21:28:46:3e:c1:7a:a6:87:a1:4a:41:6d:a9: 08:c0:db:6e:f9:76:35:ce:62:f0:1d:55:e6:0d:3b:1d:29:d2: 43:3a:e4:92:31:8a:76:1f:ff:bc:02:e1:b9:f1:84:f4:73:47: d4:fe:7b:86:bd:f6:2f:ec:18:7e:a5:11:b0:49:83:95:d4:a1: 24:34:29:fb:f3:95:ef:05:7d:9f:8f:17:48:31:37:b9:b1:b6: e5:a6:f1:0e:56:41:20:80:bc:65:43:48:fe:ef:c0:8f:e9:b5: 11:0c:85:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTNq4fPDLJS06HTck5pxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EyhlMWYzMzIzOWYwYjkwMWVlM2Q0ZDZmZmZlYmJlMWVmMmNkMGE0YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XLIcGyaIe5cBxG/OfwcH9f39ru ecp+MV2kQsSIzmeRMIh6vSNY5pzmu60z6DXygYQAPFyqpBd97YRSqWxv3eDUtFwS VSLNJg5fWp/ZsPRoZFLGCGo1JTCH9uFDUCv/T5Jr/vVyEWWJ+9iftE+DYDVHDhb2 z6kJh37lZslGYkueCiuF4nj15DyuZrG/cvnPJGBbm1J4pUYp9UzsI3B0BNm+aMWw DCqYm/XhQpzm5K+xhxi4mLL46PCvsGME/9orIuFpGFtl37Q9M56T5IPbAiOm24WK pdoPShdED/IFRhuGSvTqtEkPuBrWLMhQLcoEKtgnjSO4Bmz2fN83sm55zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHzMjnwuQHuPU1v/+u+HvLNCkppMB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXZKUHhC JgwXWOVeq6hQWX50qzU3Fuww3+H9d4BX3v46cJQoa8U1Bi/ZFmlqJxR6FjmOJueB 4tbkfmx9Dhaz0q4oSPiPBrgWgmRAGHR9zXGlHBTWJHBeZqnw/6jPOJPVVcdsODec RON54zrX66JED9GZo8Gwf/bh04/N5SDr6FBFmnLpwd90/3y1vTByuBKm5U+HsmYh KEY+wXqmh6FKQW2pCMDbbvl2Nc5i8B1V5g07HSnSQzrkkjGKdh//vALhufGE9HNH 1P57hr32L+wYfqURsEmDldShJDQp+/OV7wV9n48XSDE3ubG25abxDlZBIIC8ZUNI /u/Aj+m1EQyFLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:35 2025 by rpki-client