This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json) Hash identifier: 4wlBTtncbeHYV9Jh+g19VFM7LdJsgNo5588MhY7SX4w= Subject key identifier: 8E:B0:47:28:55:6B:96:34:C3:5A:F1:5B:4B:8A:98:32:4B:A1:0E:96 Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019B0F00AC80A55A97D97BC399ACDD95A8D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft Manifest number: 0A26 Signing time: Thu 11 Dec 2025 20:01:00 +0000 Manifest this update: Thu 11 Dec 2025 20:01:00 +0000 Manifest next update: Fri 12 Dec 2025 20:01:00 +0000 Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: BlNxqvs89dL0lWA/DO42EOMXbgsP6xJrLLkza4sJGK4=) 2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ac:80:a5:5a:97:d9:7b:c3:99:ac:dd:95:a8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Dec 11 20:01:00 2025 GMT Not After : Dec 12 20:01:00 2025 GMT Subject: CN=8eb04728556b9634c35af15b4b8a98324ba10e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:46:73:6c:8a:96:22:f9:ed:26:23:e2:b2: f9:4d:7e:17:4c:6e:ae:24:f3:12:78:a8:af:85:37: 79:3b:8c:8b:c2:d7:e9:cb:66:00:50:23:08:45:ff: e3:84:94:dd:5a:e9:e6:f6:f6:94:f6:ea:96:c3:33: a1:22:fd:05:bd:00:4c:61:03:48:eb:f8:2a:7c:65: f9:d8:54:af:d8:17:c6:cb:e6:be:0c:a9:fd:fa:21: 0d:55:40:95:55:c0:37:e8:9c:ad:73:73:1a:69:89: ec:54:99:11:54:e5:31:e6:59:9b:d9:4b:f8:45:f0: 0d:c6:7a:6a:ed:93:25:d0:03:66:2c:1e:91:38:35: 36:66:c4:a0:21:8a:af:34:f3:8a:bc:04:04:ab:3a: b0:ab:b6:f5:bb:69:8b:a3:ba:0e:31:48:fb:ce:a3: 13:8b:cd:3b:a9:4f:94:02:11:c7:52:8c:1f:5c:9d: 6b:d2:38:6c:79:59:55:e0:a8:9a:c8:b3:3b:71:e7: 87:89:08:c0:ee:d0:9a:cf:c1:db:4d:8f:c4:1d:8e: 57:57:0d:6e:30:e2:3f:ad:01:0e:c3:c4:5f:17:02: 25:9a:51:5f:bd:8f:91:be:f8:c6:dd:e3:c7:71:90: d5:d5:b7:a4:c8:52:a0:9e:aa:73:2a:f6:e2:77:dc: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B0:47:28:55:6B:96:34:C3:5A:F1:5B:4B:8A:98:32:4B:A1:0E:96 X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:41:fc:4a:ad:cc:f2:fa:18:cc:9a:6f:39:77:7c:80:05:7c: 51:1d:a4:df:d5:62:c2:be:c4:fd:6d:8a:51:f0:c1:ac:be:79: 2a:b4:a4:e2:b9:6c:e2:81:db:f8:c7:0f:1f:04:0c:9d:f5:c9: 3f:dc:80:4e:d3:57:98:b1:95:02:7e:42:d9:3d:44:8f:8d:aa: df:1d:8a:9f:0a:99:17:05:44:34:e9:85:61:d2:ac:37:15:94: 91:af:a5:dc:49:68:e5:16:f5:15:bd:ea:86:4e:c6:9d:3e:19: bf:74:85:fc:2e:51:6a:a1:c7:6e:40:70:4b:ca:c6:9e:71:19: ba:ba:45:b4:81:12:e0:a6:c0:ac:6c:a0:e8:24:c7:72:96:b7: 8f:4f:75:3d:e4:26:58:40:39:ca:5c:61:32:0f:82:cf:d9:2e: 7b:78:c9:a1:64:13:f4:de:d6:21:88:7a:93:d9:fc:fe:08:ee: 8a:e0:94:a1:7d:08:68:a1:da:8e:ba:78:31:6b:a1:82:15:65: 80:1c:fc:93:b7:45:2d:8a:c5:e8:e4:f9:a6:92:6a:36:3e:07: 7f:e2:e9:44:38:8f:72:40:33:30:96:bf:c2:e1:32:a4:05:d0: f6:23:37:c5:4b:5c:d1:07:56:91:60:f3:11:b2:d8:77:a0:af: fa:3f:a1:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKyApVqX2XvDmazdlajWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjUxMjExMjAwMTAwWhcNMjUxMjEyMjAwMTAwWjAzMTEwLwYDVQQD Eyg4ZWIwNDcyODU1NmI5NjM0YzM1YWYxNWI0YjhhOTgzMjRiYTEwZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G5Gc2yKliL57SYj4rL5TX4XTG6u JPMSeKivhTd5O4yLwtfpy2YAUCMIRf/jhJTdWunm9vaU9uqWwzOhIv0FvQBMYQNI 6/gqfGX52FSv2BfGy+a+DKn9+iENVUCVVcA36Jytc3MaaYnsVJkRVOUx5lmb2Uv4 RfANxnpq7ZMl0ANmLB6RODU2ZsSgIYqvNPOKvAQEqzqwq7b1u2mLo7oOMUj7zqMT i807qU+UAhHHUowfXJ1r0jhseVlV4KiayLM7ceeHiQjA7tCaz8HbTY/EHY5XVw1u MOI/rQEOw8RfFwIlmlFfvY+RvvjG3ePHcZDV1bekyFKgnqpzKvbid9xcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6wRyhVa5Y0w1rxW0uKmDJLoQ6WMB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUH8Sq3M 8voYzJpvOXd8gAV8UR2k39Viwr7E/W2KUfDBrL55KrSk4rls4oHb+McPHwQMnfXJ P9yATtNXmLGVAn5C2T1Ej42q3x2KnwqZFwVENOmFYdKsNxWUka+l3Elo5Rb1Fb3q hk7GnT4Zv3SF/C5RaqHHbkBwS8rGnnEZurpFtIES4KbArGyg6CTHcpa3j091PeQm WEA5ylxhMg+Cz9kue3jJoWQT9N7WIYh6k9n8/gjuiuCUoX0IaKHajrp4MWuhghVl gBz8k7dFLYrF6OT5ppJqNj4Hf+LpRDiPckAzMJa/wuEypAXQ9iM3xUtc0QdWkWDz EbLYd6Cv+j+hBw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:52 2025 by rpki-client