This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json) Hash identifier: eyHnm7FnxzjZTnCuiECKhq8f5Q5WR/Gjgsx0uEiRLCQ= Subject key identifier: A4:53:36:B5:E2:2C:06:DD:5E:85:01:BB:78:FA:FD:EB:FC:EB:52:A2 Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Certificate serial: 019B416D60EE29AB223C3AC76620931C2FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft Manifest number: 1383 Signing time: Sun 21 Dec 2025 15:00:45 +0000 Manifest this update: Sun 21 Dec 2025 15:00:45 +0000 Manifest next update: Mon 22 Dec 2025 15:00:45 +0000 Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: Qz6QJkRjURyBU1d24kwlSFlNCkaaKWLlCWP0E8cMH/I=) 2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:60:ee:29:ab:22:3c:3a:c7:66:20:93:1c:2f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Validity Not Before: Dec 21 15:00:45 2025 GMT Not After : Dec 22 15:00:45 2025 GMT Subject: CN=a45336b5e22c06dd5e8501bb78fafdebfceb52a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:77:d4:1d:c0:c9:17:4b:0c:c2:3c:37:21:07: f1:af:a9:50:7b:1a:e9:25:6a:d7:aa:db:32:9b:f4: 0e:3c:51:e6:0d:8a:c0:0e:ec:c4:28:ac:68:6b:b3: 68:9b:fd:db:c5:b4:79:b7:a7:0d:0e:e2:5b:61:e9: be:4f:59:8d:b4:ff:5f:fc:48:32:a8:ed:6b:5d:cd: e0:14:2c:ee:9a:2d:2d:7f:24:5b:b2:51:26:2d:3f: 29:ff:10:dc:ad:c1:50:7b:6d:eb:66:55:3a:ea:63: 13:44:82:fb:fa:00:20:1d:76:2f:ac:08:6b:ea:fb: a8:b4:3d:71:df:13:5c:9e:9e:ab:54:43:33:6f:a3: ac:9d:03:ef:03:0f:0b:bf:ff:2b:62:9d:11:bd:54: 64:ad:24:d6:d5:cd:48:f6:40:52:8d:1f:6b:c3:7a: 66:e7:f1:e5:e8:69:64:11:2c:85:0f:12:37:1c:6d: 08:a5:83:4e:bf:35:3c:09:2d:5c:04:06:5e:7b:e8: 76:d7:e9:d1:57:05:d0:92:45:2b:fe:a7:3c:4b:68: 52:6b:98:e3:56:c6:30:b6:a7:ad:5a:46:da:a0:09: 22:eb:c2:02:34:81:ec:61:b3:44:e5:39:b4:ff:61: ed:92:9e:63:bd:2d:85:64:fa:80:b0:9d:a9:82:86: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:36:B5:E2:2C:06:DD:5E:85:01:BB:78:FA:FD:EB:FC:EB:52:A2 X509v3 Authority Key Identifier: keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1f:2e:7a:00:2f:7d:27:67:ce:78:9f:5a:f6:37:61:ea:a6: c3:42:cc:af:65:81:53:1e:ae:14:e4:37:51:99:de:64:fe:a1: 36:92:f3:cf:06:cb:92:2e:84:b7:cf:af:72:6b:4e:f7:0e:55: ec:52:67:da:08:74:87:8e:d6:55:2b:47:61:25:00:b0:11:a6: 6a:f6:e6:16:99:37:b4:cb:9e:ab:4c:9c:c8:96:fa:06:b7:43: 2e:56:69:af:a4:83:76:df:56:5c:aa:8c:7a:d4:d6:67:b9:73: 20:1e:b2:ab:70:36:f9:4d:46:51:87:e8:79:45:33:fe:92:6f: 13:b5:22:f4:f6:10:a1:b9:d5:d8:70:8e:1b:dc:ae:75:02:f4: bf:d1:23:a5:48:e2:ae:b6:2f:47:52:ea:fe:1e:eb:c8:9b:2f: 61:db:30:aa:9d:28:a2:47:d2:2c:f7:14:23:2e:66:09:f3:d3: da:26:11:86:70:7c:81:ca:bc:78:bd:08:b9:a1:02:56:48:4f: c8:71:70:58:55:c3:54:91:a1:64:51:dc:f1:ff:7a:41:ee:45: a2:46:66:4c:1f:e1:cc:72:10:60:2f:e5:ef:d3:dd:09:8a:42: 62:91:1d:7b:8a:79:e6:8b:15:27:16:23:7c:06:12:86:14:68: 99:04:a4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbWDuKasiPDrHZiCTHC/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0 NWRlZWYwHhcNMjUxMjIxMTUwMDQ1WhcNMjUxMjIyMTUwMDQ1WjAzMTEwLwYDVQQD EyhhNDUzMzZiNWUyMmMwNmRkNWU4NTAxYmI3OGZhZmRlYmZjZWI1MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XfUHcDJF0sMwjw3IQfxr6lQexrp JWrXqtsym/QOPFHmDYrADuzEKKxoa7Nom/3bxbR5t6cNDuJbYem+T1mNtP9f/Egy qO1rXc3gFCzumi0tfyRbslEmLT8p/xDcrcFQe23rZlU66mMTRIL7+gAgHXYvrAhr 6vuotD1x3xNcnp6rVEMzb6OsnQPvAw8Lv/8rYp0RvVRkrSTW1c1I9kBSjR9rw3pm 5/Hl6GlkESyFDxI3HG0IpYNOvzU8CS1cBAZee+h21+nRVwXQkkUr/qc8S2hSa5jj VsYwtqetWkbaoAki68ICNIHsYbNE5Tm0/2Htkp5jvS2FZPqAsJ2pgoaolwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRTNrXiLAbdXoUBu3j6/ev861KiMB8GA1UdIwQY MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt ODJjNmNmMTRkZmUyLzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR8uegAv fSdnznifWvY3Yeqmw0LMr2WBUx6uFOQ3UZneZP6hNpLzzwbLki6Et8+vcmtO9w5V 7FJn2gh0h47WVStHYSUAsBGmavbmFpk3tMueq0ycyJb6BrdDLlZpr6SDdt9WXKqM etTWZ7lzIB6yq3A2+U1GUYfoeUUz/pJvE7Ui9PYQobnV2HCOG9yudQL0v9EjpUji rrYvR1Lq/h7ryJsvYdswqp0ookfSLPcUIy5mCfPT2iYRhnB8gcq8eL0IuaECVkhP yHFwWFXDVJGhZFHc8f96Qe5FokZmTB/hzHIQYC/l79PdCYpCYpEde4p55osVJxYj fAYShhRomQSk7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:34:02 2025 by rpki-client