This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json) Hash identifier: j54TMg8D9m1UJZD1lvdMWBIrjgIuZEd2Eb/FmWysHBI= Subject key identifier: E2:DD:8B:8C:91:06:31:87:5A:EC:85:A5:11:0B:9E:3A:02:F3:3F:A6 Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288 Certificate serial: 019AF1640E35553C9C75E665058EEBAC531E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft Manifest number: 157C Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: GBidD7gw3JGfGWwA5YsqbQmU4vGwoPpnWAaAUXqVVBw=) 2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0e:35:55:3c:9c:75:e6:65:05:8e:eb:ac:53:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2922520b67b1abf7c403afa2235534326272288 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=e2dd8b8c910631875aec85a5110b9e3a02f33fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:23:ec:9a:2d:e8:33:36:a7:16:0b:df:67: f5:45:54:f1:b3:a9:fc:7c:4d:18:27:27:fd:04:dc: 02:46:36:ed:24:7f:6d:39:00:69:b2:b1:5d:13:18: d9:6f:90:dd:be:65:9c:e4:1b:73:8c:59:32:2c:43: 1f:f9:89:97:57:14:c9:67:38:54:4c:15:b9:87:b0: fe:24:d7:8e:d3:bb:41:90:0f:0d:03:22:f7:fb:19: 31:04:7c:b0:d1:c5:32:b3:65:d4:e6:9a:a7:f6:b8: b5:ae:01:e9:5d:7a:3d:1c:45:a3:ac:25:c5:70:23: 76:b9:58:f6:3f:6f:63:3c:d2:9b:5e:cc:25:c9:db: cd:45:d3:ec:a6:31:ed:a4:3c:d6:4c:a1:09:9e:85: 6c:24:ca:37:64:3c:c9:aa:bc:29:e6:6e:f3:2c:82: 4d:fe:09:5f:5d:2e:24:36:93:ec:d2:dd:de:25:98: d3:2c:8a:0b:c8:ec:f1:c5:a4:27:4e:02:96:34:6c: 9c:7f:d0:bd:cc:87:b6:c5:79:52:f8:5a:92:11:6c: c0:df:34:45:38:33:4d:52:da:c9:4d:38:17:ca:79: 46:f8:86:b5:6a:06:30:71:63:73:a2:3c:88:21:e4: a3:c0:f5:4e:0e:27:a2:f0:1d:02:54:4c:4c:70:df: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:8B:8C:91:06:31:87:5A:EC:85:A5:11:0B:9E:3A:02:F3:3F:A6 X509v3 Authority Key Identifier: keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ff:8c:d5:09:dc:ad:9a:57:04:4d:c5:91:93:16:24:f6:f3: c9:36:27:f5:b9:3a:db:29:c9:d2:ab:60:8c:cd:f5:60:46:22: 77:29:1a:3b:a8:81:4f:24:8e:ee:ca:d8:ef:a5:2a:a6:bd:d7: f2:5f:04:41:46:94:7d:fb:aa:13:59:28:6b:47:ff:d2:73:70: 9a:0c:33:75:51:f6:5f:16:7b:96:71:18:2e:bf:19:05:9d:40: b4:ff:a3:bf:1e:24:f7:b1:c6:ff:37:5c:ec:e7:20:28:a4:a6: f1:dd:fb:63:33:4f:96:17:c6:8c:9c:26:36:42:f9:ea:86:7e: ca:6e:3c:03:95:13:c0:9c:44:17:13:73:e9:41:1d:b7:67:f8: b5:ba:2d:84:b3:ed:ec:ca:92:6b:6b:1d:30:2c:e1:11:dc:d4: 21:a4:e4:ff:41:fe:05:0c:52:29:96:ff:0d:4c:7e:ce:c3:a8: 31:b5:1d:5f:d7:5e:0b:63:7f:70:4d:1d:65:21:2a:c4:53:55: 4e:1c:84:bf:f9:74:c8:9d:d9:41:06:31:60:a5:5e:98:08:81: fb:01:c4:f9:18:fe:38:b5:42:21:b2:c3:b0:4c:4b:a8:5d:3e: 19:48:03:89:58:b3:a4:f7:f8:b9:f9:56:df:1a:57:9c:bc:65: b1:fc:8d:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA41VTycdeZlBY7rrFMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy NzIyODgwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EyhlMmRkOGI4YzkxMDYzMTg3NWFlYzg1YTUxMTBiOWUzYTAyZjMzZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZkj7Jot6DM2pxYL32f1RVTxs6n8 fE0YJyf9BNwCRjbtJH9tOQBpsrFdExjZb5DdvmWc5BtzjFkyLEMf+YmXVxTJZzhU TBW5h7D+JNeO07tBkA8NAyL3+xkxBHyw0cUys2XU5pqn9ri1rgHpXXo9HEWjrCXF cCN2uVj2P29jPNKbXswlydvNRdPspjHtpDzWTKEJnoVsJMo3ZDzJqrwp5m7zLIJN /glfXS4kNpPs0t3eJZjTLIoLyOzxxaQnTgKWNGycf9C9zIe2xXlS+FqSEWzA3zRF ODNNUtrJTTgXynlG+Ia1agYwcWNzojyIIeSjwPVODiei8B0CVExMcN+5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLdi4yRBjGHWuyFpRELnjoC8z+mMB8GA1UdIwQY MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0 LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/+M1Qnc rZpXBE3FkZMWJPbzyTYn9bk62ynJ0qtgjM31YEYidykaO6iBTySO7srY76Uqpr3X 8l8EQUaUffuqE1koa0f/0nNwmgwzdVH2XxZ7lnEYLr8ZBZ1AtP+jvx4k97HG/zdc 7OcgKKSm8d37YzNPlhfGjJwmNkL56oZ+ym48A5UTwJxEFxNz6UEdt2f4tbothLPt 7MqSa2sdMCzhEdzUIaTk/0H+BQxSKZb/DUx+zsOoMbUdX9deC2N/cE0dZSEqxFNV ThyEv/l0yJ3ZQQYxYKVemAiB+wHE+Rj+OLVCIbLDsExLqF0+GUgDiVizpPf4uflW 3xpXnLxlsfyNcA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:14 2025 by rpki-client