This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json) Hash identifier: WJ9p4ZdubLZ5iae5FxKx1qrk8E2KgvMgi1eptKG0eW4= Subject key identifier: E5:88:5D:4E:C3:6C:7C:0A:4B:C9:6C:1E:4E:0F:F2:1C:2C:66:45:13 Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4 Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4 Certificate serial: 019B3D59C411F34EE4538BAB0E2D81CEE43E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:00:51 +0000 Manifest this update: Sat 20 Dec 2025 20:00:51 +0000 Manifest next update: Sun 21 Dec 2025 20:00:51 +0000 Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: 1YKIBYANTDu/+3oIXJHvOh01SAXvmtDrxeiHDERWaq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c4:11:f3:4e:e4:53:8b:ab:0e:2d:81:ce:e4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0b867131100c15de890110063e638a5f02367c4 Validity Not Before: Dec 20 20:00:51 2025 GMT Not After : Dec 21 20:00:51 2025 GMT Subject: CN=e5885d4ec36c7c0a4bc96c1e4e0ff21c2c664513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:e0:a1:b7:6c:e6:35:85:ee:78:88:af:40: 32:63:33:10:7f:a9:8d:ae:30:7f:ea:db:9e:35:56: 59:1a:f6:dc:8a:c6:3d:ed:e0:85:9a:52:f7:4d:af: 52:67:8d:52:66:14:e5:4e:08:db:d8:6d:6f:1b:74: f2:c9:75:5b:21:78:16:58:f0:a1:60:53:b4:e3:e6: 41:48:59:91:b6:d7:07:39:81:e3:68:52:23:2d:42: 35:b9:07:98:fd:5b:62:35:42:d4:51:34:61:47:4b: 8d:01:58:f4:1d:44:7c:be:79:f8:19:ff:36:5a:c8: 69:3e:b2:57:c6:c0:6a:2d:f4:48:42:18:c2:c3:dd: 6a:7e:d4:8f:32:9d:d0:b8:0a:6d:a7:41:4e:91:00: a3:3c:93:01:23:21:c5:26:09:d1:56:f8:6c:e9:03: 2a:f4:a2:7d:95:c1:e4:95:c2:53:8e:f1:32:52:b8: 53:a1:0d:10:89:c4:66:d3:c3:f0:a5:44:31:0e:e8: 08:8f:62:af:c4:a4:f2:93:ae:8f:49:0b:68:ff:24: ac:e0:fe:a9:dd:3c:cb:42:23:07:b8:83:1d:47:3b: 53:71:97:95:bf:e6:84:bc:14:48:69:cf:c3:dc:99: a3:e3:d4:f1:8e:75:58:77:a8:a5:0b:ea:bf:d9:a7: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:5D:4E:C3:6C:7C:0A:4B:C9:6C:1E:4E:0F:F2:1C:2C:66:45:13 X509v3 Authority Key Identifier: keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1e:24:52:fe:b9:ab:ec:2a:9a:12:2d:d2:42:51:cc:b8:d4: 79:97:88:f0:a0:4c:62:11:9b:6b:69:33:8b:a6:88:bd:3a:10: ea:62:67:b3:ae:9e:9c:28:5f:6d:3e:27:a6:6d:33:da:5f:0f: 51:d7:e0:59:ff:6e:66:f4:ec:84:1d:44:fd:cd:8c:76:79:f9: 09:53:30:42:a9:2d:7e:6f:e3:e4:e2:a8:df:2b:15:27:90:3e: 4f:d5:6c:bd:97:49:ff:8a:9d:7f:87:19:51:5a:68:bc:77:c1: 9c:25:29:41:34:90:32:64:b3:2c:8c:de:1a:d5:e2:58:6c:2c: 44:0b:0a:66:28:fd:5b:6c:f4:08:87:05:42:26:fa:46:e0:ae: d2:c8:02:eb:60:e9:91:c9:ca:b6:66:e0:c1:e7:52:88:e1:64: df:8a:d9:c3:38:e3:28:46:8a:b7:70:28:d7:26:16:32:e9:41: 8f:58:de:90:20:0b:bb:34:b4:31:66:f4:b8:9b:f1:7f:54:c6: 6c:81:11:ae:d4:46:f9:f1:31:16:43:e5:2a:b5:16:a9:ec:92: 23:ae:89:f7:b0:f4:34:ca:78:36:67:15:ad:3b:42:4a:4c:3d: 75:f1:8e:9d:c4:a0:cd:dd:d5:21:93:09:0e:1b:a4:52:e9:18: 42:1a:bf:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcQR807kU4urDi2BzuQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYjg2NzEzMTEwMGMxNWRlODkwMTEwMDYzZTYzOGE1ZjAy MzY3YzQwHhcNMjUxMjIwMjAwMDUxWhcNMjUxMjIxMjAwMDUxWjAzMTEwLwYDVQQD EyhlNTg4NWQ0ZWMzNmM3YzBhNGJjOTZjMWU0ZTBmZjIxYzJjNjY0NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt7gobds5jWF7niIr0AyYzMQf6mN rjB/6tueNVZZGvbcisY97eCFmlL3Ta9SZ41SZhTlTgjb2G1vG3TyyXVbIXgWWPCh YFO04+ZBSFmRttcHOYHjaFIjLUI1uQeY/VtiNULUUTRhR0uNAVj0HUR8vnn4Gf82 WshpPrJXxsBqLfRIQhjCw91qftSPMp3QuAptp0FOkQCjPJMBIyHFJgnRVvhs6QMq 9KJ9lcHklcJTjvEyUrhToQ0QicRm08PwpUQxDugIj2KvxKTyk66PSQto/ySs4P6p 3TzLQiMHuIMdRztTcZeVv+aEvBRIac/D3Jmj49TxjnVYd6ilC+q/2afkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWIXU7DbHwKS8lsHk4P8hwsZkUTMB8GA1UdIwQY MBaAFOC4ZxMRAMFd6JARAGPmOKXwI2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEt MWUwNDQ4MTQ1MThmLzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEtMWUwNDQ4MTQ1MThm LzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh4kUv65 q+wqmhIt0kJRzLjUeZeI8KBMYhGba2kzi6aIvToQ6mJns66enChfbT4npm0z2l8P UdfgWf9uZvTshB1E/c2Mdnn5CVMwQqktfm/j5OKo3ysVJ5A+T9VsvZdJ/4qdf4cZ UVpovHfBnCUpQTSQMmSzLIzeGtXiWGwsRAsKZij9W2z0CIcFQib6RuCu0sgC62Dp kcnKtmbgwedSiOFk34rZwzjjKEaKt3Ao1yYWMulBj1jekCALuzS0MWb0uJvxf1TG bIERrtRG+fExFkPlKrUWqeySI66J97D0NMp4NmcVrTtCSkw9dfGOncSgzd3VIZMJ DhukUukYQhq/HA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:23 2025 by rpki-client