This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json) Hash identifier: JdcymePxBO6ce9vpTh378NvODf8tH7pQhEbS/P7G1GM= Subject key identifier: 40:B4:32:D4:4A:40:2D:8C:83:A7:E1:54:8B:70:E2:80:B2:97:3B:E5 Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288 Certificate serial: 019B3CB4DB0E1A77B683998895C887130B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft Manifest number: 15A3 Signing time: Sat 20 Dec 2025 17:00:44 +0000 Manifest this update: Sat 20 Dec 2025 17:00:44 +0000 Manifest next update: Sun 21 Dec 2025 17:00:44 +0000 Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: pnQ+72FqDGepDSAlZuzYs7sV9yRobtdX9zlb2nzm3w4=) 2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:db:0e:1a:77:b6:83:99:88:95:c8:87:13:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2922520b67b1abf7c403afa2235534326272288 Validity Not Before: Dec 20 17:00:44 2025 GMT Not After : Dec 21 17:00:44 2025 GMT Subject: CN=40b432d44a402d8c83a7e1548b70e280b2973be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:23:a0:3e:9a:86:c6:b3:91:e9:7f:31:92: e5:a9:d2:2d:61:27:03:11:c3:50:68:18:cd:44:0a: ce:39:88:0f:b2:ee:8a:14:ae:77:30:1a:43:47:fe: c8:4c:75:c8:f5:42:c1:23:f3:53:a2:33:b4:e8:dd: 3e:c7:de:60:d4:0b:4e:10:e0:5e:ea:d3:df:ef:31: fc:6c:25:02:dc:ba:19:72:c4:1b:98:7d:f6:0b:4a: 71:f4:bf:a5:c2:b6:60:40:a8:17:c6:5b:fb:08:72: 7f:91:97:f2:00:b1:96:8e:a8:3f:83:37:12:59:a9: e9:20:21:a3:5c:15:21:3b:de:1c:70:23:56:97:94: 16:d3:4e:52:cd:96:88:0d:5c:d2:11:bf:af:2d:ea: 00:5e:f7:5d:ee:01:14:0d:94:e0:a3:f7:fd:ea:7a: 7f:29:69:73:d4:6c:a6:b1:c6:6a:76:d6:76:dc:d6: 79:ec:ed:20:cf:f2:c8:4c:fd:c3:ce:1b:30:43:dd: 6e:d5:93:80:ee:c3:4a:81:67:db:d2:76:b3:21:33: 6e:f0:39:1b:ee:b2:79:d1:52:9c:26:29:48:da:75: 65:9b:6c:69:2a:a2:bd:3f:c0:28:a7:16:9f:58:7b: 0b:c0:d0:bf:0c:9c:a2:a7:3f:6b:d2:58:b3:5b:96: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:32:D4:4A:40:2D:8C:83:A7:E1:54:8B:70:E2:80:B2:97:3B:E5 X509v3 Authority Key Identifier: keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:43:b8:47:69:7b:bb:63:e4:59:df:92:21:73:c4:9c:6d:4b: ce:bd:e6:8c:23:e0:29:1f:65:b9:98:df:e9:4e:c2:77:cc:ef: d2:5d:3f:22:45:53:ea:f2:50:14:10:d2:27:5c:51:34:83:92: 71:65:27:02:09:85:03:92:11:59:aa:29:d2:91:a5:b1:75:e2: 69:7e:5f:31:f0:87:d7:81:a0:68:96:ed:38:10:21:68:b0:d8: e5:2c:92:70:f5:4e:af:b5:49:b6:0c:65:ca:7c:d1:b6:13:8b: 41:35:60:d4:67:e0:19:48:ae:00:f9:f8:d4:7d:cb:59:50:df: 1d:28:c2:52:56:41:57:5a:83:3f:f2:dc:ea:32:50:f8:61:f1: 62:91:04:e0:2e:a1:53:17:1a:8c:72:2c:34:fd:a1:e0:08:c1: 7f:0f:a4:0f:57:80:e7:ae:f5:5d:df:39:44:ec:15:bb:84:37: be:4f:6f:2e:8a:bb:8e:52:e8:5b:92:d9:9e:de:79:09:c2:2f: 3c:ac:64:25:5d:12:9e:f6:1c:8b:ed:c2:f1:06:6c:af:3a:ad: ad:b5:bc:c1:d4:dc:c4:c4:a0:11:64:30:61:61:44:a1:5b:a1: 11:ef:d6:3d:29:72:41:8f:06:47:74:18:07:1b:3f:80:3f:67: e3:d8:b6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNsOGne2g5mIlciHEwtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy NzIyODgwHhcNMjUxMjIwMTcwMDQ0WhcNMjUxMjIxMTcwMDQ0WjAzMTEwLwYDVQQD Eyg0MGI0MzJkNDRhNDAyZDhjODNhN2UxNTQ4YjcwZTI4MGIyOTczYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX0joD6ahsazkel/MZLlqdItYScD EcNQaBjNRArOOYgPsu6KFK53MBpDR/7ITHXI9ULBI/NTojO06N0+x95g1AtOEOBe 6tPf7zH8bCUC3LoZcsQbmH32C0px9L+lwrZgQKgXxlv7CHJ/kZfyALGWjqg/gzcS WanpICGjXBUhO94ccCNWl5QW005SzZaIDVzSEb+vLeoAXvdd7gEUDZTgo/f96np/ KWlz1GymscZqdtZ23NZ57O0gz/LITP3DzhswQ91u1ZOA7sNKgWfb0nazITNu8Dkb 7rJ50VKcJilI2nVlm2xpKqK9P8AopxafWHsLwNC/DJyipz9r0lizW5bH4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC0MtRKQC2Mg6fhVItw4oCylzvlMB8GA1UdIwQY MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0 LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkO4R2l7 u2PkWd+SIXPEnG1Lzr3mjCPgKR9luZjf6U7Cd8zv0l0/IkVT6vJQFBDSJ1xRNIOS cWUnAgmFA5IRWaop0pGlsXXiaX5fMfCH14GgaJbtOBAhaLDY5SyScPVOr7VJtgxl ynzRthOLQTVg1GfgGUiuAPn41H3LWVDfHSjCUlZBV1qDP/Lc6jJQ+GHxYpEE4C6h UxcajHIsNP2h4AjBfw+kD1eA5671Xd85ROwVu4Q3vk9vLoq7jlLoW5LZnt55CcIv PKxkJV0SnvYci+3C8QZsrzqtrbW8wdTcxMSgEWQwYWFEoVuhEe/WPSlyQY8GR3QY Bxs/gD9n49i2xA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:03 2025 by rpki-client