This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json) Hash identifier: 2/JshuTLz+n3pxTCghmcNbA24wVNx9eJSikXXR5AZHE= Subject key identifier: 02:BF:4D:B1:16:F3:5B:61:23:49:13:68:D8:C7:45:98:FC:74:E3:95 Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288 Certificate serial: 019B34FB507CE5E6537FE7C41B91E7BFD50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft Manifest number: 159F Signing time: Fri 19 Dec 2025 05:00:43 +0000 Manifest this update: Fri 19 Dec 2025 05:00:43 +0000 Manifest next update: Sat 20 Dec 2025 05:00:43 +0000 Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: 7HZHoWOLofINHcwui+0R5Tv8TjBBUkCw5J86fUJ5Y6I=) 2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:50:7c:e5:e6:53:7f:e7:c4:1b:91:e7:bf:d5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2922520b67b1abf7c403afa2235534326272288 Validity Not Before: Dec 19 05:00:43 2025 GMT Not After : Dec 20 05:00:43 2025 GMT Subject: CN=02bf4db116f35b6123491368d8c74598fc74e395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:d5:95:a0:a9:1d:44:09:85:59:f9:bc:f9: f2:d1:8c:93:0d:6b:2e:f1:53:92:5e:2c:59:89:86: f6:63:ed:dc:21:33:c4:c6:39:7d:5a:9c:49:00:d4: ec:a7:d7:07:c5:95:0a:00:ba:cb:82:70:31:59:06: b3:88:e9:37:d4:d0:a5:ff:2e:77:0e:80:4e:ea:30: 60:7d:ff:c3:9f:2d:68:72:e3:67:4d:1e:e6:4f:41: f8:c3:40:ec:b8:18:91:2e:78:8c:ba:36:9b:8a:1f: b1:8f:e9:e0:d5:9f:71:15:c7:cd:c6:18:ed:9d:5e: 65:f4:79:f9:5e:c7:82:65:e4:f2:ec:f1:40:21:cc: 9f:d4:2f:e5:d1:92:96:dc:3e:62:f9:ae:b1:87:49: 05:92:f4:f4:b9:bf:00:a6:7d:b4:76:a5:f9:8f:03: bd:59:b0:fe:b0:5a:e0:2e:a2:18:d5:bc:7e:0b:29: 92:38:d4:52:ef:79:49:62:d7:72:47:af:15:f7:5b: a3:41:5e:d2:d7:f1:1e:94:56:72:c4:15:2b:e3:20: 45:c3:36:cc:29:d9:49:70:56:21:63:7b:7a:c1:09: 7b:74:c2:f4:8e:58:a0:99:21:5a:a0:98:fb:d0:55: 49:8a:8d:e8:e8:e0:18:95:3d:cf:3a:22:f3:2b:c9: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BF:4D:B1:16:F3:5B:61:23:49:13:68:D8:C7:45:98:FC:74:E3:95 X509v3 Authority Key Identifier: keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:33:b7:9b:1e:2a:96:66:8a:cc:c6:d4:13:45:94:bc:5e:bc: 80:cd:fc:2f:8f:c6:80:5a:16:5e:db:09:f6:3a:d7:b3:69:90: c0:22:f5:d2:0f:d4:e4:17:d2:42:22:45:9a:63:69:a8:57:cb: 99:c4:8d:28:43:0b:1e:5b:1f:97:0f:7f:16:f7:f6:37:0e:7c: c3:2b:62:60:db:b9:bb:5b:5b:d6:f4:11:9b:43:c0:90:1a:c2: 07:e5:18:11:ad:94:16:53:85:e8:4f:99:7a:bd:75:a1:c9:39: b5:7b:1b:f8:a5:eb:42:59:6f:05:d5:91:87:65:80:2a:9b:46: 65:b7:18:53:58:ed:e3:98:13:2b:62:0d:e9:bd:66:bf:8d:d3: 3c:28:78:7e:fb:67:4b:d7:44:78:d3:95:4e:a8:e4:b2:a1:a4: da:c2:e3:5f:17:0f:c5:4f:48:2a:9d:0d:dd:56:51:e8:99:98: 0c:b4:39:50:0c:bd:ce:c4:12:b3:ea:71:47:50:d7:ce:2a:0c: d2:52:5f:49:c6:29:7d:f6:ff:04:47:59:9a:61:af:a0:04:34: de:66:e6:fe:6b:04:95:20:15:c9:d0:7e:0f:cb:77:c4:78:f9: 86:a2:c6:b0:b5:76:8c:f0:87:b9:7a:8c:a8:28:ab:4d:cb:6c: 12:b4:14:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1B85eZTf+fEG5Hnv9UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy NzIyODgwHhcNMjUxMjE5MDUwMDQzWhcNMjUxMjIwMDUwMDQzWjAzMTEwLwYDVQQD EygwMmJmNGRiMTE2ZjM1YjYxMjM0OTEzNjhkOGM3NDU5OGZjNzRlMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsnVlaCpHUQJhVn5vPny0YyTDWsu 8VOSXixZiYb2Y+3cITPExjl9WpxJANTsp9cHxZUKALrLgnAxWQaziOk31NCl/y53 DoBO6jBgff/Dny1ocuNnTR7mT0H4w0DsuBiRLniMujabih+xj+ng1Z9xFcfNxhjt nV5l9Hn5XseCZeTy7PFAIcyf1C/l0ZKW3D5i+a6xh0kFkvT0ub8Apn20dqX5jwO9 WbD+sFrgLqIY1bx+CymSONRS73lJYtdyR68V91ujQV7S1/EelFZyxBUr4yBFwzbM KdlJcFYhY3t6wQl7dML0jligmSFaoJj70FVJio3o6OAYlT3POiLzK8krUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK/TbEW81thI0kTaNjHRZj8dOOVMB8GA1UdIwQY MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0 LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjO3mx4q lmaKzMbUE0WUvF68gM38L4/GgFoWXtsJ9jrXs2mQwCL10g/U5BfSQiJFmmNpqFfL mcSNKEMLHlsflw9/Fvf2Nw58wytiYNu5u1tb1vQRm0PAkBrCB+UYEa2UFlOF6E+Z er11ock5tXsb+KXrQllvBdWRh2WAKptGZbcYU1jt45gTK2IN6b1mv43TPCh4fvtn S9dEeNOVTqjksqGk2sLjXxcPxU9IKp0N3VZR6JmYDLQ5UAy9zsQSs+pxR1DXzioM 0lJfScYpffb/BEdZmmGvoAQ03mbm/msElSAVydB+D8t3xHj5hqLGsLV2jPCHuXqM qCirTctsErQUjA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:09:08 2025 by rpki-client