This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json) Hash identifier: vmVr0A1abRqoeGE629+9KxeYhFEFHfZkfNXuPfqvaOw= Subject key identifier: 26:8B:92:75:BB:98:21:62:22:54:F2:A1:40:31:8F:AB:9C:92:BC:EC Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Certificate serial: 019B101300E727F8BB38DB03ABC694051ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft Manifest number: 05EB Signing time: Fri 12 Dec 2025 01:00:39 +0000 Manifest this update: Fri 12 Dec 2025 01:00:39 +0000 Manifest next update: Sat 13 Dec 2025 01:00:39 +0000 Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: AuwTeP/KIOFiLsVo+pgC4vu3W4LLIoafkvBSa+GHU9c=) 2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:00:e7:27:f8:bb:38:db:03:ab:c6:94:05:1e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Validity Not Before: Dec 12 01:00:39 2025 GMT Not After : Dec 13 01:00:39 2025 GMT Subject: CN=268b9275bb9821622254f2a140318fab9c92bcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:b7:b5:c6:d5:15:96:66:b4:77:b9:e7:a0: 0b:af:f2:3e:49:56:fe:3e:11:38:71:b5:c7:15:e8: b1:64:b1:2a:02:0a:52:25:b4:41:18:12:5f:31:79: 5b:27:cc:cf:79:6c:1c:75:76:f1:fc:0d:81:3e:09: ca:13:3e:f5:ab:d8:f5:d0:0c:28:2a:07:fd:df:8b: 7e:ee:0a:ba:f4:01:b5:be:d2:88:1b:ba:e5:23:2f: 82:0e:56:4b:b7:64:cf:67:c5:c3:1d:28:95:e1:94: 01:7b:3d:6d:e0:1c:af:e5:8c:c5:4e:bc:3b:55:28: 97:0c:0e:f5:dd:47:93:0e:44:2e:d3:cb:2f:aa:c5: 85:b5:a0:25:2c:43:65:0b:35:82:d2:ba:be:30:8e: 6a:64:09:1e:9f:67:8b:16:6f:64:4a:00:a5:44:6f: 99:23:6d:4e:15:24:44:17:ce:6f:d4:d1:9d:aa:bc: 17:5c:1c:44:54:8b:22:f5:44:26:27:23:91:69:f6: 4a:d2:b0:41:7c:d4:6f:91:76:a7:5a:54:4a:1f:45: e2:ee:01:a7:7e:35:82:c3:a1:26:da:36:f2:65:41: 3d:93:9e:a3:30:3c:b7:b4:f2:36:bf:48:6b:5d:d6: 09:5b:28:0c:54:9b:94:87:7a:69:c3:dd:7e:b5:6b: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:92:75:BB:98:21:62:22:54:F2:A1:40:31:8F:AB:9C:92:BC:EC X509v3 Authority Key Identifier: keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:90:d2:cb:d1:e7:ec:34:4d:83:1b:c3:d6:93:29:e8:24: 4a:c3:45:c1:30:f5:d1:dd:7f:f3:2c:ff:db:bb:8b:b4:ac:82: 49:2e:c1:ed:ee:74:4d:2b:46:94:02:48:56:b4:bb:07:db:86: 1b:56:ce:6b:e3:30:cc:a5:40:26:0d:33:0a:70:02:fd:24:bd: 5c:08:de:fb:3f:4f:75:06:49:35:81:dd:fc:6b:d6:9f:25:7a: d1:3d:27:92:78:23:fc:e3:36:c0:72:f8:93:d2:42:ff:85:a9: d9:34:83:84:35:bc:d5:40:51:8b:fe:b1:b8:be:2e:09:ef:64: 2f:1a:b3:fc:5b:d4:6b:3d:d1:da:78:f3:50:53:43:cd:e8:10: 1e:a8:05:e8:52:86:0c:30:5c:39:56:b4:27:b0:12:46:7c:d9: f1:f4:86:ad:5c:66:36:16:68:15:b5:51:ee:c6:70:38:ba:d6: ec:00:de:a6:2f:a2:88:42:d7:a1:26:9e:e5:3a:25:d9:05:a8: fa:21:ab:23:49:ce:f3:3d:2c:39:cf:72:2a:4b:1e:48:19:0c: d7:34:7a:b6:00:e0:f0:8b:39:5b:1b:51:c5:ef:04:2a:a0:1a: 12:8e:b3:b0:e3:73:b0:33:23:be:81:53:33:a2:fa:0f:09:11: c7:d3:1c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEwDnJ/i7ONsDq8aUBR7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk Y2M3OWUwHhcNMjUxMjEyMDEwMDM5WhcNMjUxMjEzMDEwMDM5WjAzMTEwLwYDVQQD EygyNjhiOTI3NWJiOTgyMTYyMjI1NGYyYTE0MDMxOGZhYjljOTJiY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS23tcbVFZZmtHe556ALr/I+SVb+ PhE4cbXHFeixZLEqAgpSJbRBGBJfMXlbJ8zPeWwcdXbx/A2BPgnKEz71q9j10Awo Kgf934t+7gq69AG1vtKIG7rlIy+CDlZLt2TPZ8XDHSiV4ZQBez1t4Byv5YzFTrw7 VSiXDA713UeTDkQu08svqsWFtaAlLENlCzWC0rq+MI5qZAken2eLFm9kSgClRG+Z I21OFSREF85v1NGdqrwXXBxEVIsi9UQmJyORafZK0rBBfNRvkXanWlRKH0Xi7gGn fjWCw6Em2jbyZUE9k56jMDy3tPI2v0hrXdYJWygMVJuUh3ppw91+tWt6tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaLknW7mCFiIlTyoUAxj6uckrzsMB8GA1UdIwQY MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt OTEzNTc1YzU4ZjRhLzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORGQ0svR 5+w0TYMbw9aTKegkSsNFwTD10d1/8yz/27uLtKyCSS7B7e50TStGlAJIVrS7B9uG G1bOa+MwzKVAJg0zCnAC/SS9XAje+z9PdQZJNYHd/GvWnyV60T0nkngj/OM2wHL4 k9JC/4Wp2TSDhDW81UBRi/6xuL4uCe9kLxqz/FvUaz3R2njzUFNDzegQHqgF6FKG DDBcOVa0J7ASRnzZ8fSGrVxmNhZoFbVR7sZwOLrW7ADepi+iiELXoSae5Tol2QWo +iGrI0nO8z0sOc9yKkseSBkM1zR6tgDg8Is5WxtRxe8EKqAaEo6zsONzsDMjvoFT M6L6DwkRx9MccA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:39 2025 by rpki-client