This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json) Hash identifier: 4Ge5TPOoU7us9skDttje3FY2OV2regS9nmeuk+5XdTE= Subject key identifier: 5C:5B:D2:33:1C:78:1E:73:C6:71:3A:B1:22:85:54:8E:BA:D1:E4:75 Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7 Certificate serial: 019AF163E68032285B38FB2541AAD072C111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft Manifest number: 133F Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: P3JIwX7TVs2IcMYdNoJcGiNihfxcku779PHri/mAjnY=) 2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e6:80:32:28:5b:38:fb:25:41:aa:d0:72:c1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=5c5bd2331c781e73c6713ab12285548ebad1e475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:58:a0:e9:ae:cc:44:9d:f8:40:3c:7f:69: 00:aa:f7:eb:77:c7:35:61:1a:4b:39:ad:c3:67:c4: 3b:8c:02:40:2d:74:94:6f:73:3c:5d:75:1f:81:57: c9:6e:2f:85:46:ab:2f:06:97:aa:d5:57:2d:91:1f: 45:b0:96:6d:35:ef:f2:4d:53:ee:03:73:c8:6a:39: ed:9d:ed:b9:06:e3:aa:c1:23:78:45:a0:3a:fc:92: 90:4a:b8:73:33:2e:8b:0a:9c:ca:36:f5:78:7e:2e: 47:91:0d:b0:be:eb:96:10:de:11:24:8a:cf:f8:65: 65:46:0d:27:7b:2c:f1:3e:77:65:cf:bf:a8:d1:44: c9:db:9f:fb:06:62:d4:1e:42:db:14:63:55:18:f8: d0:12:69:ea:05:2d:d2:f1:de:c6:8e:96:c2:4b:1e: e6:6b:e6:6f:a2:80:1e:51:dc:9e:fc:d2:99:95:2b: 5b:64:77:6f:4a:0d:a8:5f:e2:0c:9a:99:25:8a:2c: 19:35:16:43:1e:42:db:06:5b:66:b8:99:cc:70:46: 45:28:af:8c:4e:42:1b:69:91:f6:8e:27:6a:05:61: 3d:3f:4e:ee:1a:4d:e7:51:a6:93:0c:08:42:84:88: 84:16:b3:79:76:db:c9:cb:5d:c3:68:cf:ea:3c:3b: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:D2:33:1C:78:1E:73:C6:71:3A:B1:22:85:54:8E:BA:D1:E4:75 X509v3 Authority Key Identifier: keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1a:d4:a2:1f:3c:a6:8d:49:77:d8:70:47:d2:7b:99:74:a2: c3:82:00:fe:b5:b1:1a:05:50:ab:ea:60:c3:9e:ac:2e:1d:0c: 85:6a:16:cc:e6:af:95:af:00:26:10:2c:a1:e2:06:46:8e:7d: 8d:db:90:62:dc:01:6d:b9:ba:88:e0:7e:e0:81:29:03:0e:22: 2e:fe:eb:a1:a7:07:1f:46:3f:4e:d7:95:c3:57:e9:d4:23:69: 0e:c5:0b:d4:4b:38:49:c8:9f:ff:bc:9e:a9:73:10:f4:ee:00: 45:84:e1:58:2e:d5:f4:d1:0c:ab:dc:38:90:7a:68:24:63:d5: dc:12:d4:e6:bd:10:8c:5a:3c:fc:5d:e0:a5:38:34:f5:30:ff: 5c:12:2c:01:08:50:5d:ca:d7:a5:ff:25:ed:42:b3:0a:6f:37: 9d:a7:86:b7:e1:17:7b:a6:c2:b4:24:65:7f:78:c5:d2:a4:a3: 0e:67:0a:61:2d:06:b1:11:4c:74:00:a6:58:df:81:e3:7f:83: 62:47:42:03:ad:b2:a6:ba:a3:4a:88:16:8f:b7:b4:59:e1:0c: eb:a1:e2:ff:f9:4c:9e:63:0f:de:5b:2c:b5:4e:d4:3a:b8:b0: 2a:81:09:54:55:dd:91:6e:b1:00:ad:ac:50:c9:fd:86:52:7d: c5:e1:42:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+aAMihbOPslQarQcsERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjJlMmI1ODIzM2ExOTNkMWY3Mjc3ODU2NWQ2Yzk4ZDc2 MTYzYTcwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg1YzViZDIzMzFjNzgxZTczYzY3MTNhYjEyMjg1NTQ4ZWJhZDFlNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CNYoOmuzESd+EA8f2kAqvfrd8c1 YRpLOa3DZ8Q7jAJALXSUb3M8XXUfgVfJbi+FRqsvBpeq1VctkR9FsJZtNe/yTVPu A3PIajntne25BuOqwSN4RaA6/JKQSrhzMy6LCpzKNvV4fi5HkQ2wvuuWEN4RJIrP +GVlRg0neyzxPndlz7+o0UTJ25/7BmLUHkLbFGNVGPjQEmnqBS3S8d7GjpbCSx7m a+ZvooAeUdye/NKZlStbZHdvSg2oX+IMmpkliiwZNRZDHkLbBltmuJnMcEZFKK+M TkIbaZH2jidqBWE9P07uGk3nUaaTDAhChIiEFrN5dtvJy13DaM/qPDt+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxb0jMceB5zxnE6sSKFVI660eR1MB8GA1UdIwQY MBaAFOEi4rWCM6GT0fcneFZdbJjXYWOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUt NDE2NmI3NWIwOGFmLzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUtNDE2NmI3NWIwOGFm LzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBrUoh88 po1Jd9hwR9J7mXSiw4IA/rWxGgVQq+pgw56sLh0MhWoWzOavla8AJhAsoeIGRo59 jduQYtwBbbm6iOB+4IEpAw4iLv7roacHH0Y/TteVw1fp1CNpDsUL1Es4Scif/7ye qXMQ9O4ARYThWC7V9NEMq9w4kHpoJGPV3BLU5r0QjFo8/F3gpTg09TD/XBIsAQhQ XcrXpf8l7UKzCm83naeGt+EXe6bCtCRlf3jF0qSjDmcKYS0GsRFMdACmWN+B43+D YkdCA62yprqjSogWj7e0WeEM66Hi//lMnmMP3lsstU7UOriwKoEJVFXdkW6xAK2s UMn9hlJ9xeFCUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:15 2025 by rpki-client