This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json) Hash identifier: /2PaxhbwtrqCAjhZBwDG/mgM3NC+DOYvgYZZx8bYEKA= Subject key identifier: C7:EA:BE:CD:7F:A0:90:12:0B:E5:57:DB:41:54:DB:80:A3:58:69:2C Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Certificate serial: 019B4A03359C52F008680EC901DCE0D621A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft Manifest number: 099E Signing time: Tue 23 Dec 2025 07:01:22 +0000 Manifest this update: Tue 23 Dec 2025 07:01:22 +0000 Manifest next update: Wed 24 Dec 2025 07:01:22 +0000 Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: fJ1YimkjSgeSJs7wUdoTYfY4252ZwOZIiZD9qghqNIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:35:9c:52:f0:08:68:0e:c9:01:dc:e0:d6:21:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26 Validity Not Before: Dec 23 07:01:22 2025 GMT Not After : Dec 24 07:01:22 2025 GMT Subject: CN=c7eabecd7fa090120be557db4154db80a358692c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:04:50:1d:70:a9:e2:6c:4e:30:b1:68:d5:40: 3c:33:a3:eb:07:93:e1:24:60:14:df:2a:f1:e0:6c: c7:62:86:49:20:67:03:a1:dc:05:d2:a3:60:5f:b7: d5:c4:c3:ad:7f:da:3c:1f:b3:e7:c1:84:97:2b:90: ce:46:2f:3f:0a:8a:95:df:88:65:d3:af:48:8e:eb: 39:4c:5e:cb:5e:b7:56:d3:e2:1b:de:80:9d:4f:7c: da:b0:b1:4a:4b:eb:cd:04:d7:ec:61:86:3d:4e:63: 3a:63:da:3b:a4:da:55:cd:62:b3:fc:a8:26:40:d4: e3:b1:bb:a4:4a:c3:bb:81:46:ac:de:2d:25:e0:53: ed:0c:43:62:f3:b3:e0:78:29:5a:33:73:5c:ab:90: 94:d8:3e:54:f4:28:d1:ff:9a:54:7b:a2:96:50:62: 01:dc:a9:43:25:d9:1c:9e:e2:83:09:c6:e3:d7:a8: ca:5c:56:ce:3e:1c:7f:ce:06:38:9f:71:ad:cf:19: 73:d0:70:d4:99:47:79:04:19:2a:13:2e:52:06:07: 14:7b:23:f5:5d:57:13:d7:9a:29:9a:60:5d:81:be: 18:2b:b9:fb:1d:3c:0c:66:7d:02:bf:af:e8:09:39: 3b:8f:5e:66:5c:28:e5:6e:c2:e0:9c:52:e4:bc:56: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:BE:CD:7F:A0:90:12:0B:E5:57:DB:41:54:DB:80:A3:58:69:2C X509v3 Authority Key Identifier: keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:86:1e:60:49:32:34:25:88:bd:9a:9e:f7:2b:70:51:e5:af: 2c:57:e5:15:15:4d:cd:c4:4d:fc:a4:b3:81:9d:d4:a4:1f:47: 3a:48:8c:d5:19:a1:43:79:7b:f1:6a:22:38:31:2e:ad:d5:7f: eb:39:29:83:7f:2d:18:64:60:e1:61:c2:7d:84:b1:9f:f1:33: c8:b5:3d:da:f5:28:50:2d:c9:bf:0d:d5:b3:26:87:86:8c:2b: eb:48:d2:ae:5d:fe:d7:f8:28:18:9f:c0:47:20:99:1e:36:4b: 05:08:a5:be:66:c3:d3:e0:63:b4:b0:91:6c:06:aa:ee:3b:b2: a1:37:ab:20:01:93:25:0c:29:1e:c0:9b:3d:de:70:ba:f2:d2: f4:7e:da:44:3c:a0:69:a0:f4:27:35:7d:2a:dd:d9:49:ef:0e: 73:0d:81:83:0b:f4:27:c0:36:2a:b6:6e:f2:43:22:f9:cd:1f: 87:21:ed:49:78:cf:4f:fd:a8:43:e2:0d:b5:f5:9f:69:0d:e1: 2e:ca:15:23:42:d5:38:60:1c:82:77:1a:49:ae:5c:3a:bb:7b: b0:93:e4:1e:e5:0f:89:f1:34:06:e3:e0:d9:33:43:53:5f:ce: 22:a6:ce:3f:cf:48:45:80:ca:11:11:3d:82:87:2e:5e:16:5f: 5e:23:c8:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAzWcUvAIaA7JAdzg1iGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx N2FmMjYwHhcNMjUxMjIzMDcwMTIyWhcNMjUxMjI0MDcwMTIyWjAzMTEwLwYDVQQD EyhjN2VhYmVjZDdmYTA5MDEyMGJlNTU3ZGI0MTU0ZGI4MGEzNTg2OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ARQHXCp4mxOMLFo1UA8M6PrB5Ph JGAU3yrx4GzHYoZJIGcDodwF0qNgX7fVxMOtf9o8H7PnwYSXK5DORi8/CoqV34hl 069Ijus5TF7LXrdW0+Ib3oCdT3zasLFKS+vNBNfsYYY9TmM6Y9o7pNpVzWKz/Kgm QNTjsbukSsO7gUas3i0l4FPtDENi87PgeClaM3Ncq5CU2D5U9CjR/5pUe6KWUGIB 3KlDJdkcnuKDCcbj16jKXFbOPhx/zgY4n3Gtzxlz0HDUmUd5BBkqEy5SBgcUeyP1 XVcT15opmmBdgb4YK7n7HTwMZn0Cv6/oCTk7j15mXCjlbsLgnFLkvFZXOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfqvs1/oJASC+VX20FU24CjWGksMB8GA1UdIwQY MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0 LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYYeYEky NCWIvZqe9ytwUeWvLFflFRVNzcRN/KSzgZ3UpB9HOkiM1RmhQ3l78WoiODEurdV/ 6zkpg38tGGRg4WHCfYSxn/EzyLU92vUoUC3Jvw3VsyaHhowr60jSrl3+1/goGJ/A RyCZHjZLBQilvmbD0+BjtLCRbAaq7juyoTerIAGTJQwpHsCbPd5wuvLS9H7aRDyg aaD0JzV9Kt3ZSe8Ocw2Bgwv0J8A2KrZu8kMi+c0fhyHtSXjPT/2oQ+INtfWfaQ3h LsoVI0LVOGAcgncaSa5cOrt7sJPkHuUPifE0BuPg2TNDU1/OIqbOP89IRYDKERE9 gocuXhZfXiPIQQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:24:07 2025 by rpki-client