This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json) Hash identifier: 8r0er6UvDjXxwrPa3ToIztEIq8ONnHRDP5wbE+ME3+g= Subject key identifier: 5F:E7:14:A4:6E:B6:43:24:2C:B7:19:A1:A2:E9:4C:3B:60:D9:20:F7 Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Certificate serial: 019B2C66122FFF2162E639A336EDAEDEC7C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft Manifest number: 05A8 Signing time: Wed 17 Dec 2025 13:00:45 +0000 Manifest this update: Wed 17 Dec 2025 13:00:45 +0000 Manifest next update: Thu 18 Dec 2025 13:00:45 +0000 Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=) 2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: 9RXm4q8OrzeHpLZYuWyXHUbHdVnvrhIgVXCD7cTVSYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:12:2f:ff:21:62:e6:39:a3:36:ed:ae:de:c7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Validity Not Before: Dec 17 13:00:45 2025 GMT Not After : Dec 18 13:00:45 2025 GMT Subject: CN=5fe714a46eb643242cb719a1a2e94c3b60d920f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:fc:2f:d7:e5:56:0b:55:ba:17:fc:33:ce: 30:69:1d:8d:80:f9:60:53:b5:c2:79:96:d6:50:f7: 2a:71:bd:5f:fe:35:14:36:0a:02:eb:21:5c:f2:a4: c2:38:b6:0a:24:54:6f:7a:73:a0:f8:a0:e1:20:c9: bb:32:aa:6c:4c:3d:70:52:08:51:77:42:e0:38:85: 1b:e9:9b:a8:f7:8b:1f:f5:a5:5e:85:b1:e6:b6:bf: a2:3a:95:c4:14:a0:6c:a4:27:7d:6e:7a:42:7c:c0: d9:ad:d1:48:b1:67:9d:1b:aa:1c:af:4a:6e:c7:70: 5f:75:13:f2:51:6c:85:e5:2c:cd:33:32:ef:78:ee: d2:9e:be:11:59:cf:d8:d4:8e:a0:6e:88:45:92:dd: 1c:1f:af:d9:bc:0b:31:3c:58:ec:24:0c:2a:24:33: ad:d3:8e:dd:93:a6:05:4b:a9:06:57:4f:45:58:e6: da:95:cc:26:bf:c5:8f:a2:32:d3:8d:8a:9c:9f:a0: b3:77:1b:a0:dc:86:eb:db:b3:0a:98:3d:ce:c0:ff: 69:59:ab:99:fa:e9:d6:46:57:93:29:c2:ae:03:a1: 89:6b:e4:a1:6d:36:d2:20:77:90:9a:05:b1:f3:b1: b7:ac:2f:44:53:ed:8c:d4:8b:55:44:c3:a4:82:d0: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E7:14:A4:6E:B6:43:24:2C:B7:19:A1:A2:E9:4C:3B:60:D9:20:F7 X509v3 Authority Key Identifier: keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a1:dd:95:59:29:76:53:38:e2:e8:fb:1f:49:5b:59:22:ab: cb:94:09:f1:26:43:09:1e:cf:71:50:fe:db:72:7e:b8:ae:36: fd:07:75:6c:89:bc:d6:a5:a1:fb:19:19:66:91:2f:5f:f3:8f: 55:f3:2c:cd:f5:b8:93:3c:cb:6f:03:b7:a3:8e:2c:2d:65:87: d5:ef:e3:8e:ff:5d:c0:ed:bd:bb:36:87:fa:69:f8:37:50:82: 37:a7:42:30:70:86:a8:76:bf:68:c7:d7:75:6c:bb:f0:46:4a: 36:c8:0c:63:02:e4:50:ce:d0:14:92:4f:62:89:bc:2c:29:a6: f6:e1:97:b8:07:bb:50:1a:a9:44:cf:f1:03:a6:41:9d:a1:24: 3d:c9:c6:ca:09:c5:c5:c6:da:50:9b:40:8b:c8:72:d5:f6:6c: a4:24:dd:b6:48:fa:e7:f6:ec:30:20:6b:32:13:00:b5:21:68: 82:df:b0:7d:9a:43:46:0f:b7:6d:cb:18:b1:b7:82:d4:65:d6: 19:b1:7c:f2:c7:f8:35:21:e4:ea:35:37:9a:f9:28:09:70:12: 90:2d:d4:07:b4:12:aa:d3:d4:56:ba:1a:16:17:84:11:1a:96: 41:cf:c6:b3:30:cd:35:c9:df:01:57:6c:e2:9e:c5:51:2b:3b: 3b:84:b6:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZhIv/yFi5jmjNu2u3sfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNGIyOGExOWRiZjUzNGFkNjFjYjA0OTk4NmU1NDI0YzMy ODRkZTIwHhcNMjUxMjE3MTMwMDQ1WhcNMjUxMjE4MTMwMDQ1WjAzMTEwLwYDVQQD Eyg1ZmU3MTRhNDZlYjY0MzI0MmNiNzE5YTFhMmU5NGMzYjYwZDkyMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7db8L9flVgtVuhf8M84waR2NgPlg U7XCeZbWUPcqcb1f/jUUNgoC6yFc8qTCOLYKJFRvenOg+KDhIMm7MqpsTD1wUghR d0LgOIUb6Zuo94sf9aVehbHmtr+iOpXEFKBspCd9bnpCfMDZrdFIsWedG6ocr0pu x3BfdRPyUWyF5SzNMzLveO7Snr4RWc/Y1I6gbohFkt0cH6/ZvAsxPFjsJAwqJDOt 047dk6YFS6kGV09FWObalcwmv8WPojLTjYqcn6Czdxug3Ibr27MKmD3OwP9pWauZ +unWRleTKcKuA6GJa+ShbTbSIHeQmgWx87G3rC9EU+2M1ItVRMOkgtAJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/nFKRutkMkLLcZoaLpTDtg2SD3MB8GA1UdIwQY MBaAFOBLKKGdv1NK1hywSZhuVCTDKE3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYt YWNmMDQ0ODEwNjRkLzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYtYWNmMDQ0ODEwNjRk LzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaHdlVkp dlM44uj7H0lbWSKry5QJ8SZDCR7PcVD+23J+uK42/Qd1bIm81qWh+xkZZpEvX/OP VfMszfW4kzzLbwO3o44sLWWH1e/jjv9dwO29uzaH+mn4N1CCN6dCMHCGqHa/aMfX dWy78EZKNsgMYwLkUM7QFJJPYom8LCmm9uGXuAe7UBqpRM/xA6ZBnaEkPcnGygnF xcbaUJtAi8hy1fZspCTdtkj65/bsMCBrMhMAtSFogt+wfZpDRg+3bcsYsbeC1GXW GbF88sf4NSHk6jU3mvkoCXASkC3UB7QSqtPUVroaFheEERqWQc/GszDNNcnfAVds 4p7FUSs7O4S2Hg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:24:18 2025 by rpki-client