This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json) Hash identifier: rzOJgtktN8qbByaGSVkdPNL0KfWQEhrmPM5qC8ILiYc= Subject key identifier: 0C:AD:2E:93:BC:21:6D:18:81:D2:55:CD:38:B1:EF:31:86:8C:70:73 Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4 Certificate serial: 019B5A884958F50F7A152002741C500729D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft Manifest number: 71 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: zMHWphVBV6feJcR+eVz3iCsogfHQtafXLmEfunqNQqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:49:58:f5:0f:7a:15:20:02:74:1c:50:07:29:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=0cad2e93bc216d1881d255cd38b1ef31868c7073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:c4:16:cc:ff:0d:ab:8a:60:7b:0f:6e:1b: b9:79:ea:4a:8a:1f:90:ae:57:1f:9d:6f:fe:28:7b: 75:fb:55:0a:f2:17:1c:54:b9:a3:54:f0:af:4c:20: ec:87:0c:3a:ae:af:b1:9f:24:af:7c:76:76:4c:9b: 95:25:f6:f9:d7:84:d6:59:ff:5c:c2:e2:54:90:39: bb:f3:61:96:cf:d3:1a:d7:92:0d:a9:5c:53:97:be: 51:ef:80:7c:42:1c:95:26:4f:6d:89:7a:d1:06:95: 31:72:b5:6d:c6:2e:9d:6e:9f:9d:bf:43:88:cb:b6: 5b:5c:bb:13:f5:52:9f:e7:97:b1:89:13:f5:30:ff: 61:f8:1c:6f:4e:32:68:3e:c9:a0:5b:b7:17:29:ca: e3:37:dd:a3:03:83:46:9e:13:0f:6d:1d:5e:03:40: 27:ba:f6:64:03:2f:18:c3:f7:88:f8:6d:ac:5c:5a: 26:8f:dd:22:6d:2f:ca:68:0a:b3:ee:4b:56:15:fa: 62:64:73:b7:02:03:46:88:ee:48:48:49:2d:39:d0: c9:11:67:80:6f:f8:fd:a1:41:8a:f4:db:54:02:14: 8e:a4:f5:d6:49:4e:3f:77:ad:d4:8f:26:5a:40:13: 55:60:2a:cb:ba:95:10:f7:a0:8a:af:6d:1f:9b:65: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:2E:93:BC:21:6D:18:81:D2:55:CD:38:B1:EF:31:86:8C:70:73 X509v3 Authority Key Identifier: keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:48:cf:e0:b6:0a:73:2e:cf:15:c9:ba:54:aa:18:e8:bc: 4d:ee:a4:22:d0:d8:73:77:aa:1b:90:7f:5d:89:9c:e4:34:9f: 9d:1b:80:c1:c5:c9:9c:67:51:41:dc:31:12:84:bb:e9:c9:89: 6c:ec:c3:32:4f:2a:4b:6c:75:fa:55:2d:f7:7b:13:7d:a8:81: 5c:cc:ac:51:c4:2e:36:99:18:c2:ee:91:0c:f8:86:2f:af:31: e9:86:ca:31:69:51:9f:cc:28:3f:48:1d:2d:93:a9:4b:06:20: fb:6b:0f:c2:00:ef:b2:98:8d:8e:1e:dc:86:99:88:9d:b9:6f: c4:30:b8:be:fa:ef:cc:4f:fe:46:f5:72:1c:28:df:76:f1:57: 5f:be:30:eb:86:de:44:13:9f:a1:90:3c:f2:02:f4:8b:0d:aa: af:44:bb:f6:8a:fe:a8:0d:23:bf:a7:ea:e2:86:c6:38:3c:d3: fd:4e:7d:05:3d:80:6a:99:7a:0e:a4:85:29:79:07:d9:7c:88: 13:8c:cd:38:04:6a:f4:f2:01:89:97:ac:c7:e2:b9:76:99:bd: ee:97:67:b1:69:a5:45:52:24:9f:3d:81:f2:0f:bb:d3:05:26: a7:5a:45:68:64:39:df:30:44:c0:20:fe:26:07:7c:c7:a7:46: a5:77:df:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiElY9Q96FSACdBxQBynYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYjBlYzk5MjY4OTZiYTEyNWJlOGZhNGFlYmVlYThmZDMw OWI4YjQwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD EygwY2FkMmU5M2JjMjE2ZDE4ODFkMjU1Y2QzOGIxZWYzMTg2OGM3MDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszPEFsz/DauKYHsPbhu5eepKih+Q rlcfnW/+KHt1+1UK8hccVLmjVPCvTCDshww6rq+xnySvfHZ2TJuVJfb514TWWf9c wuJUkDm782GWz9Ma15INqVxTl75R74B8QhyVJk9tiXrRBpUxcrVtxi6dbp+dv0OI y7ZbXLsT9VKf55exiRP1MP9h+BxvTjJoPsmgW7cXKcrjN92jA4NGnhMPbR1eA0An uvZkAy8Yw/eI+G2sXFomj90ibS/KaAqz7ktWFfpiZHO3AgNGiO5ISEktOdDJEWeA b/j9oUGK9NtUAhSOpPXWSU4/d63UjyZaQBNVYCrLupUQ96CKr20fm2UIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAytLpO8IW0YgdJVzTix7zGGjHBzMB8GA1UdIwQY MBaAFOCw7JkmiWuhJb6PpK6+6o/TCbi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGIt YjA3MDdhN2Q2MWExLzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGItYjA3MDdhN2Q2MWEx LzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbJIz+C2 CnMuzxXJulSqGOi8Te6kItDYc3eqG5B/XYmc5DSfnRuAwcXJnGdRQdwxEoS76cmJ bOzDMk8qS2x1+lUt93sTfaiBXMysUcQuNpkYwu6RDPiGL68x6YbKMWlRn8woP0gd LZOpSwYg+2sPwgDvspiNjh7chpmInblvxDC4vvrvzE/+RvVyHCjfdvFXX74w64be RBOfoZA88gL0iw2qr0S79or+qA0jv6fq4obGODzT/U59BT2Aapl6DqSFKXkH2XyI E4zNOARq9PIBiZesx+K5dpm97pdnsWmlRVIknz2B8g+70wUmp1pFaGQ53zBEwCD+ Jgd8x6dGpXffGA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client