This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json) Hash identifier: 5lpspZCC5lZDv3d9F3e0r7AjjsiCPcF87exa4+TkhRc= Subject key identifier: B1:26:09:A8:A4:CD:AD:A5:8E:6F:A4:3B:08:00:9D:61:78:F2:66:E2 Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18 Certificate serial: 019AF27737399AE61FBD683E5F24B816E8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft Manifest number: 104D Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: FrBr5Cxr+W9tZcfMQYMuuQBfLl9IN4PxXyM8MzsXd2s=) 2: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (hash: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:37:39:9a:e6:1f:bd:68:3e:5f:24:b8:16:e8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=b12609a8a4cdada58e6fa43b08009d6178f266e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:e0:ae:e4:59:90:a5:fc:ba:dc:94:6a:9e: 83:a6:dc:66:c4:d5:95:d5:04:36:41:5d:f2:3a:9a: 88:be:45:72:3e:6b:f4:c8:79:b7:1f:8f:04:90:88: ed:59:e8:a2:80:d9:44:8f:c7:3e:58:76:d8:3d:e4: 3f:37:2b:48:03:08:18:09:12:fb:c7:5b:03:b8:a2: 5d:91:4e:c6:74:db:1d:6e:87:8e:f2:3e:cb:73:59: 80:08:fe:9d:67:04:c3:41:16:79:76:d6:87:a5:2a: 13:0c:24:f1:0b:54:48:9b:19:bc:ac:87:50:1d:fc: 48:8a:2b:f9:0e:52:db:57:b7:e2:f4:f2:64:86:29: 75:f3:44:ed:0b:c0:4f:d3:73:c3:de:e6:f4:71:75: 49:d3:d0:d2:6d:f7:c7:22:fc:78:f9:7f:88:98:d8: 67:7d:b9:0e:a8:e0:ca:65:03:e6:06:5d:66:4b:f1: 87:bd:39:6d:a3:a8:d4:69:9b:3c:fb:96:fa:a9:34: 44:f7:b8:fd:3b:3b:ab:e6:37:2c:b1:79:b1:64:7d: 21:ba:aa:87:13:11:fb:86:85:3d:22:31:59:1a:ae: ec:bb:22:8f:51:a4:a2:c2:dd:67:a6:e7:22:19:a5: 28:67:23:9f:e8:be:5f:4b:9d:57:36:ab:c3:00:56: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:09:A8:A4:CD:AD:A5:8E:6F:A4:3B:08:00:9D:61:78:F2:66:E2 X509v3 Authority Key Identifier: keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:95:a2:47:51:52:ae:62:f1:7a:94:e2:1e:a0:02:fd:00:15: c1:7e:e4:fc:0b:cf:46:05:43:f0:12:b5:68:2f:5f:08:2c:f0: 26:0d:c5:e8:a1:d9:ee:56:f8:5f:51:10:3a:c9:ce:99:8e:da: a4:bb:62:95:56:95:04:8c:12:4f:e4:84:de:da:ae:13:0a:8c: 07:c6:2a:c8:1b:bb:eb:49:99:cf:41:48:05:70:0f:df:49:66: 4f:d0:6f:b0:5f:9d:a4:64:e5:9e:94:43:9c:f8:ab:39:f6:b8: a5:87:a5:d9:91:19:d6:a8:d1:28:25:0f:b3:39:ce:73:f2:e7: 1a:1f:3c:c3:14:46:c7:b1:95:c9:8a:2b:ea:a7:9c:22:39:6d: ac:d3:49:b6:ce:18:98:8a:8d:fd:ee:1f:80:42:91:31:ca:cb: 3e:d8:e6:2e:c0:e6:47:71:ba:35:4a:23:fa:7b:b9:12:29:ad: a9:03:42:02:ea:56:a1:51:51:7e:52:34:04:cd:ce:d5:4b:21: 3c:6a:13:46:a0:f2:aa:18:0f:9e:9b:25:f1:0e:06:bc:02:72: 17:0d:df:f5:43:bb:80:d6:d5:84:a0:ad:cd:1e:64:11:bc:70: ea:1d:a4:3c:d1:d8:1f:24:b8:91:13:41:7f:ca:7b:5a:23:0d: 29:c7:ad:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzc5muYfvWg+XyS4Fuj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj NDhjMTgwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhiMTI2MDlhOGE0Y2RhZGE1OGU2ZmE0M2IwODAwOWQ2MTc4ZjI2NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpPgruRZkKX8utyUap6DptxmxNWV 1QQ2QV3yOpqIvkVyPmv0yHm3H48EkIjtWeiigNlEj8c+WHbYPeQ/NytIAwgYCRL7 x1sDuKJdkU7GdNsdboeO8j7Lc1mACP6dZwTDQRZ5dtaHpSoTDCTxC1RImxm8rIdQ HfxIiiv5DlLbV7fi9PJkhil180TtC8BP03PD3ub0cXVJ09DSbffHIvx4+X+ImNhn fbkOqODKZQPmBl1mS/GHvTlto6jUaZs8+5b6qTRE97j9Ozur5jcssXmxZH0huqqH ExH7hoU9IjFZGq7suyKPUaSiwt1npuciGaUoZyOf6L5fS51XNqvDAFbDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEmCaikza2ljm+kOwgAnWF48mbiMB8GA1UdIwQY MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5WiR1FS rmLxepTiHqAC/QAVwX7k/AvPRgVD8BK1aC9fCCzwJg3F6KHZ7lb4X1EQOsnOmY7a pLtilVaVBIwST+SE3tquEwqMB8YqyBu760mZz0FIBXAP30lmT9BvsF+dpGTlnpRD nPirOfa4pYel2ZEZ1qjRKCUPsznOc/LnGh88wxRGx7GVyYor6qecIjltrNNJts4Y mIqN/e4fgEKRMcrLPtjmLsDmR3G6NUoj+nu5EimtqQNCAupWoVFRflI0BM3O1Ush PGoTRqDyqhgPnpsl8Q4GvAJyFw3f9UO7gNbVhKCtzR5kEbxw6h2kPNHYHyS4kRNB f8p7WiMNKcetQg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:07 2025 by rpki-client