This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json) Hash identifier: ox2tj7UMsPZIEk6myrcwaePXC9/RtpJdNqlDwGJu6GI= Subject key identifier: 90:C4:75:FB:30:14:7A:0D:75:DB:66:70:D3:1E:40:0B:DB:0F:B7:2A Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Certificate serial: 019B25BF8A80A28062E2BB3834806659F23B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft Manifest number: 5C Signing time: Tue 16 Dec 2025 06:01:08 +0000 Manifest this update: Tue 16 Dec 2025 06:01:08 +0000 Manifest next update: Wed 17 Dec 2025 06:01:08 +0000 Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: XNOuu2zBr7mmprlU3l9cWkgmkxVJ5LrN3ALxuEN33RA=) 2: qkFhtaRNkFQe2FJdCI5qu6080QY.roa (hash: xC3MFctLYU5Sqy4pPIgPdmj9SR/syFEI+jQKydbsJRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:8a:80:a2:80:62:e2:bb:38:34:80:66:59:f2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Validity Not Before: Dec 16 06:01:08 2025 GMT Not After : Dec 17 06:01:08 2025 GMT Subject: CN=90c475fb30147a0d75db6670d31e400bdb0fb72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8d:ab:b0:82:19:6c:2f:a6:e2:48:ba:ee:d5: ae:a3:52:bc:d8:d1:8a:d3:19:7a:cd:74:ee:8b:82: 68:62:12:5a:2a:a3:38:63:68:23:28:f8:d9:f1:8b: 09:f7:31:b5:34:b2:00:dd:5b:76:af:d1:2f:15:56: 7f:76:60:3a:c6:b1:f4:c4:57:b2:da:74:78:40:de: d1:7b:72:d4:e2:41:83:e5:78:71:61:26:50:62:a7: 49:97:30:88:da:22:24:ad:d6:ee:00:77:23:0d:ab: 84:a1:55:06:e2:84:fe:07:2b:18:27:84:4e:f5:64: 5a:9c:8b:e0:2d:2a:33:e9:a0:dc:e5:07:aa:11:3a: 09:aa:2d:97:3e:44:7f:00:b3:d1:42:41:8b:6e:e4: 66:f3:cf:bc:91:e0:ab:81:75:70:51:4d:47:0e:b5: 52:b7:50:d4:de:3f:07:58:d4:94:14:72:10:27:40: b0:9e:e1:55:a4:fe:8d:b9:09:13:09:6f:a1:04:b5: 96:2b:b0:92:6c:43:4a:81:f2:94:49:75:a7:d0:1f: 0a:1c:17:a6:a8:dd:d7:43:65:e4:31:d8:3c:55:54: 03:5a:fd:b7:48:45:b4:a6:8e:17:91:8d:ed:28:0f: a9:85:3f:9d:4b:2b:d2:37:8d:f7:23:ec:4d:cd:be: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:75:FB:30:14:7A:0D:75:DB:66:70:D3:1E:40:0B:DB:0F:B7:2A X509v3 Authority Key Identifier: keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e0:ee:a1:dc:2d:91:d3:42:29:26:4e:19:6e:67:75:e6:0e: d4:16:8d:af:b1:41:21:1e:be:4a:16:e8:73:48:a4:e1:48:4b: 18:2f:aa:2b:a4:75:5e:19:92:97:1b:0f:6b:98:cc:47:1c:42: 91:6a:ca:c6:39:a9:81:43:55:c6:58:e0:82:e9:6f:ab:31:cd: 6b:3c:4b:7c:e3:77:bb:78:82:f6:72:ce:e6:a6:59:89:97:2b: 1e:69:7d:97:bb:39:da:22:a9:0b:49:6d:76:5f:85:b4:33:3b: 82:4d:64:c9:f0:88:65:cc:b6:f7:a0:40:b1:84:bd:d7:d9:e1: 59:d2:0c:56:d8:fb:7f:b5:8a:05:29:34:73:55:25:d8:94:9a: dc:d1:d6:2b:a3:44:7f:cb:24:49:6e:ed:3a:47:fc:64:bf:87: c6:59:f6:95:57:9a:7d:7f:7b:3d:ae:3c:1b:5b:6c:04:60:ef: 87:21:5e:a5:72:e4:df:db:86:2e:92:d6:63:ca:06:d9:80:25: 9e:e5:fb:b3:8c:23:03:29:ae:b5:f9:0b:85:4f:10:bc:0c:4e: d2:64:ad:8c:22:8b:82:42:81:55:e7:27:c3:35:ff:7a:34:a9: 7f:0b:bd:88:9a:df:41:a9:d0:55:a4:9e:0d:8b:9d:11:b9:d7: 17:56:87:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv4qAooBi4rs4NIBmWfI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy YTE5ZjgwHhcNMjUxMjE2MDYwMTA4WhcNMjUxMjE3MDYwMTA4WjAzMTEwLwYDVQQD Eyg5MGM0NzVmYjMwMTQ3YTBkNzVkYjY2NzBkMzFlNDAwYmRiMGZiNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o2rsIIZbC+m4ki67tWuo1K82NGK 0xl6zXTui4JoYhJaKqM4Y2gjKPjZ8YsJ9zG1NLIA3Vt2r9EvFVZ/dmA6xrH0xFey 2nR4QN7Re3LU4kGD5XhxYSZQYqdJlzCI2iIkrdbuAHcjDauEoVUG4oT+BysYJ4RO 9WRanIvgLSoz6aDc5QeqEToJqi2XPkR/ALPRQkGLbuRm88+8keCrgXVwUU1HDrVS t1DU3j8HWNSUFHIQJ0CwnuFVpP6NuQkTCW+hBLWWK7CSbENKgfKUSXWn0B8KHBem qN3XQ2XkMdg8VVQDWv23SEW0po4XkY3tKA+phT+dSyvSN433I+xNzb6baQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDEdfswFHoNddtmcNMeQAvbD7cqMB8GA1UdIwQY MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3 LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeDuodwt kdNCKSZOGW5ndeYO1BaNr7FBIR6+Shboc0ik4UhLGC+qK6R1XhmSlxsPa5jMRxxC kWrKxjmpgUNVxljggulvqzHNazxLfON3u3iC9nLO5qZZiZcrHml9l7s52iKpC0lt dl+FtDM7gk1kyfCIZcy296BAsYS919nhWdIMVtj7f7WKBSk0c1Ul2JSa3NHWK6NE f8skSW7tOkf8ZL+Hxln2lVeafX97Pa48G1tsBGDvhyFepXLk39uGLpLWY8oG2YAl nuX7s4wjAymutfkLhU8QvAxO0mStjCKLgkKBVecnwzX/ejSpfwu9iJrfQanQVaSe DYudEbnXF1aHTg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:01 2025 by rpki-client