This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json) Hash identifier: 8SgjLJ91mWYotkVZmMF1XEAE46CIVzAswSHwrkeifyc= Subject key identifier: B1:02:47:74:44:81:4F:9B:45:A7:FE:DC:F5:E1:A7:24:B3:40:B1:44 Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18 Certificate serial: 019B58D1C4622A7163A99BD9A0D2B2FCC504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft Manifest number: 1082 Signing time: Fri 26 Dec 2025 04:01:40 +0000 Manifest this update: Fri 26 Dec 2025 04:01:40 +0000 Manifest next update: Sat 27 Dec 2025 04:01:40 +0000 Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: DIWfRfhlGkvWHUdILCaH0D49GWNRgFWml+QALoap5Tc=) 2: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (hash: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:c4:62:2a:71:63:a9:9b:d9:a0:d2:b2:fc:c5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18 Validity Not Before: Dec 26 04:01:40 2025 GMT Not After : Dec 27 04:01:40 2025 GMT Subject: CN=b102477444814f9b45a7fedcf5e1a724b340b144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:02:2e:4d:2b:b1:e2:f7:08:43:e4:15:11: cb:78:ab:76:24:d5:a9:e5:23:05:95:31:48:20:79: c4:09:cd:b5:3e:33:3f:8e:7b:83:6a:58:aa:47:f3: f5:e8:0c:7b:68:76:08:e0:ff:b1:ca:1a:0c:5f:0a: 67:9d:8f:8f:d0:d9:1c:89:a8:6a:a2:42:96:6a:ef: 48:9e:5a:e8:6b:22:dc:fc:2b:ea:ef:75:1f:36:5c: 38:02:f6:e1:7e:46:30:f8:d8:04:17:32:3c:83:37: 10:b4:03:02:51:4b:25:d6:a1:5f:17:64:07:1a:09: 2d:90:fb:dc:61:66:4a:01:e8:71:3b:f2:57:09:82: 91:9f:68:21:3a:0e:17:e1:21:44:c9:65:ac:3b:ce: de:71:ec:b9:1a:b5:70:71:77:a8:93:af:4f:b0:85: 1f:19:71:78:f8:ac:7f:c4:31:70:f3:cd:38:01:10: ae:57:88:cb:5a:18:32:bd:04:63:75:13:42:e6:75: 72:95:e5:c8:cd:1c:b4:be:fa:31:f7:6b:62:29:7d: 61:57:45:6d:55:ab:e2:0d:ec:24:9c:a1:ed:f5:33: 15:52:58:44:ba:98:2c:94:ce:04:51:e7:ac:86:51: 0d:62:47:6d:8d:e3:cd:7e:03:d4:9f:b0:98:8b:46: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:47:74:44:81:4F:9B:45:A7:FE:DC:F5:E1:A7:24:B3:40:B1:44 X509v3 Authority Key Identifier: keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:df:15:0d:45:b8:46:f5:6b:09:6e:58:1c:ba:c1:47:3a:92: 8f:37:d8:0b:c6:95:ac:71:42:ed:36:30:71:42:50:f2:d8:d7: 34:a3:9b:1a:db:da:80:78:6e:85:c0:8c:e6:28:3c:37:c1:f3: 25:6f:0a:66:de:48:ed:1c:88:e0:89:9c:1d:67:bb:f2:6f:fb: 1e:d2:58:7b:b4:9b:82:c2:cf:d0:ae:ca:3c:4d:9e:f3:a9:4f: 7c:10:78:bc:08:f2:e4:85:22:fe:05:d9:40:90:85:c3:2c:96: 96:f8:d6:92:af:b0:91:ca:13:6a:a1:37:e7:90:b7:2b:2c:6d: fb:bb:fa:2a:0c:13:dc:2a:93:a1:09:7f:5e:c7:47:a1:01:ad: 66:86:94:49:fe:f4:f8:12:67:1a:e7:a6:18:d6:50:64:b9:83: c4:77:14:33:47:b2:c6:c1:e5:a0:5f:88:a5:c0:73:b1:6c:df: 58:d6:56:d0:9e:ef:94:25:08:07:c6:e4:d1:2a:34:4b:12:df: 10:ab:aa:48:39:69:11:86:8a:a6:05:ad:5a:80:87:48:17:bf: f1:93:64:d5:4e:fd:45:46:a3:99:e5:c4:9b:7a:24:07:5c:5a: bd:25:2c:87:49:d1:af:e2:b4:12:b8:79:b4:ec:40:07:d7:e4: 75:7c:82:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0cRiKnFjqZvZoNKy/MUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj NDhjMTgwHhcNMjUxMjI2MDQwMTQwWhcNMjUxMjI3MDQwMTQwWjAzMTEwLwYDVQQD EyhiMTAyNDc3NDQ0ODE0ZjliNDVhN2ZlZGNmNWUxYTcyNGIzNDBiMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/8CLk0rseL3CEPkFRHLeKt2JNWp 5SMFlTFIIHnECc21PjM/jnuDaliqR/P16Ax7aHYI4P+xyhoMXwpnnY+P0Nkciahq okKWau9InlroayLc/Cvq73UfNlw4AvbhfkYw+NgEFzI8gzcQtAMCUUsl1qFfF2QH GgktkPvcYWZKAehxO/JXCYKRn2ghOg4X4SFEyWWsO87ecey5GrVwcXeok69PsIUf GXF4+Kx/xDFw8804ARCuV4jLWhgyvQRjdRNC5nVyleXIzRy0vvox92tiKX1hV0Vt VaviDewknKHt9TMVUlhEupgslM4EUeeshlENYkdtjePNfgPUn7CYi0a/LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLECR3REgU+bRaf+3PXhpySzQLFEMB8GA1UdIwQY MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf98VDUW4 RvVrCW5YHLrBRzqSjzfYC8aVrHFC7TYwcUJQ8tjXNKObGtvagHhuhcCM5ig8N8Hz JW8KZt5I7RyI4ImcHWe78m/7HtJYe7SbgsLP0K7KPE2e86lPfBB4vAjy5IUi/gXZ QJCFwyyWlvjWkq+wkcoTaqE355C3Kyxt+7v6KgwT3CqToQl/XsdHoQGtZoaUSf70 +BJnGuemGNZQZLmDxHcUM0eyxsHloF+IpcBzsWzfWNZW0J7vlCUIB8bk0So0SxLf EKuqSDlpEYaKpgWtWoCHSBe/8ZNk1U79RUajmeXEm3okB1xavSUsh0nRr+K0Erh5 tOxAB9fkdXyC9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:26 2025 by rpki-client