This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json) Hash identifier: 3fmR/QYpzzOIWXZ/lmN1qo8+Ucb6ridsUHtHYX/sMZI= Subject key identifier: E8:51:B7:64:E1:A2:43:25:17:32:85:E9:5D:6D:41:1C:E8:B3:6E:4C Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790 Certificate serial: 019B27ADA37F35B9C019358E5A6FAD27654A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft Manifest number: 1364 Signing time: Tue 16 Dec 2025 15:00:49 +0000 Manifest this update: Tue 16 Dec 2025 15:00:49 +0000 Manifest next update: Wed 17 Dec 2025 15:00:49 +0000 Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=) 2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: Vn8ic+ucIN9VeMsO0Cxsod5Z9YptbKQ3O7Ilj9fXl9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:a3:7f:35:b9:c0:19:35:8e:5a:6f:ad:27:65:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790 Validity Not Before: Dec 16 15:00:49 2025 GMT Not After : Dec 17 15:00:49 2025 GMT Subject: CN=e851b764e1a24325173285e95d6d411ce8b36e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:24:44:9e:8f:e3:3e:fa:46:90:5a:07:12: 11:a2:23:27:3f:eb:d4:3d:d1:37:1a:f5:7a:7b:ab: b3:99:58:18:92:9a:03:85:d5:66:c4:32:f7:d4:74: bc:e7:bd:c4:5c:ad:84:80:2e:b4:44:1e:d3:e4:b7: 81:4e:10:cb:0a:de:63:a2:5d:ce:df:07:d8:ba:e3: b5:1c:a4:23:76:41:6d:ca:39:d1:ef:64:7d:16:67: 99:84:a4:03:91:03:d3:02:10:5d:5a:46:11:8d:17: ee:f9:2b:14:a3:a2:74:34:4e:74:36:1c:6a:6c:46: 1b:05:22:0a:cc:56:e8:ac:11:80:e7:15:11:7e:74: 80:08:32:68:b8:ed:f6:62:be:9c:50:e0:08:86:9d: bf:fd:1f:e4:5a:de:41:8d:c8:4c:2a:4c:94:4f:ff: 9e:de:e3:18:25:63:d7:ed:7e:e5:e6:07:22:fe:c6: 2b:50:23:5a:68:5b:b4:15:8c:ae:11:0c:f4:32:a5: 8a:58:f6:dd:d8:bf:a2:f9:1f:ca:af:c3:a4:99:c6: 74:3a:50:de:ba:48:65:e9:bb:25:aa:1e:c0:7b:47: ac:87:c7:67:fc:7c:e7:6c:a9:9a:aa:2c:3c:15:e0: fa:02:93:b4:c7:e9:bb:1e:16:14:56:cb:4c:b7:48: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:51:B7:64:E1:A2:43:25:17:32:85:E9:5D:6D:41:1C:E8:B3:6E:4C X509v3 Authority Key Identifier: keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1b:fc:7e:e8:d4:b4:b4:ea:76:4b:6a:b5:71:42:8e:58:cc: e5:5c:24:d1:02:c0:c0:9f:04:46:3f:60:e1:db:ab:5c:de:80: f4:29:d9:7e:64:13:00:5e:51:30:fb:3b:15:78:25:36:d9:27: 73:30:31:1d:8f:c1:86:80:bb:a5:d7:d4:a8:6d:cd:bd:46:9f: e7:e9:7f:14:af:0a:28:6f:82:25:af:90:97:ad:85:33:2a:4b: 76:37:4d:65:d4:e2:8a:a0:7f:d1:5d:d8:9d:1d:0f:29:60:f3: 91:13:bf:5f:10:55:01:fe:44:ec:e7:36:7e:56:39:a9:f5:51: 68:55:15:3a:0f:f2:4c:6a:4b:94:52:36:e1:da:94:03:5a:d9: 66:35:83:3b:c2:e0:5f:ca:7c:43:6c:94:e5:80:18:90:bf:37: ef:4c:97:1a:ca:db:37:1d:b7:1e:6b:76:b9:d9:ca:82:59:6c: 7f:97:9e:66:65:f9:1f:08:09:90:8c:77:7b:4c:01:0d:a5:f8: 48:ba:86:1b:41:3e:e1:12:ef:42:52:2f:ab:aa:bf:f3:32:4c: 53:7e:1a:85:af:e9:06:12:d1:bc:45:cb:7b:5f:fa:90:fa:51: f5:d4:86:6e:a1:8d:82:4a:aa:c3:e0:a5:23:ef:86:93:ca:23: 3f:56:5a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnraN/NbnAGTWOWm+tJ2VKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm ZjM3OTAwHhcNMjUxMjE2MTUwMDQ5WhcNMjUxMjE3MTUwMDQ5WjAzMTEwLwYDVQQD EyhlODUxYjc2NGUxYTI0MzI1MTczMjg1ZTk1ZDZkNDExY2U4YjM2ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4YkRJ6P4z76RpBaBxIRoiMnP+vU PdE3GvV6e6uzmVgYkpoDhdVmxDL31HS8573EXK2EgC60RB7T5LeBThDLCt5jol3O 3wfYuuO1HKQjdkFtyjnR72R9FmeZhKQDkQPTAhBdWkYRjRfu+SsUo6J0NE50Nhxq bEYbBSIKzFborBGA5xURfnSACDJouO32Yr6cUOAIhp2//R/kWt5BjchMKkyUT/+e 3uMYJWPX7X7l5gci/sYrUCNaaFu0FYyuEQz0MqWKWPbd2L+i+R/Kr8OkmcZ0OlDe ukhl6bslqh7Ae0esh8dn/HznbKmaqiw8FeD6ApO0x+m7HhYUVstMt0hT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhRt2ThokMlFzKF6V1tQRzos25MMB8GA1UdIwQY MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChv8fujU tLTqdktqtXFCjljM5Vwk0QLAwJ8ERj9g4durXN6A9CnZfmQTAF5RMPs7FXglNtkn czAxHY/BhoC7pdfUqG3NvUaf5+l/FK8KKG+CJa+Ql62FMypLdjdNZdTiiqB/0V3Y nR0PKWDzkRO/XxBVAf5E7Oc2flY5qfVRaFUVOg/yTGpLlFI24dqUA1rZZjWDO8Lg X8p8Q2yU5YAYkL8370yXGsrbNx23Hmt2udnKgllsf5eeZmX5HwgJkIx3e0wBDaX4 SLqGG0E+4RLvQlIvq6q/8zJMU34aha/pBhLRvEXLe1/6kPpR9dSGbqGNgkqqw+Cl I++Gk8ojP1ZaiQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:30:51 2025 by rpki-client