This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json) Hash identifier: 5NCJ30J9Np5jjWFLQ6oQhWMhXC4f1wQnSpcgCPcqMY0= Subject key identifier: 4E:D3:75:ED:40:E3:2C:59:18:14:16:17:29:09:D6:E2:54:72:E8:01 Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Certificate serial: 019B19F202D27AC4430B3E77AF0BA6A7DA5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 23:00:49 +0000 Manifest this update: Sat 13 Dec 2025 23:00:49 +0000 Manifest next update: Sun 14 Dec 2025 23:00:49 +0000 Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 3/jTMcfvMyOd8PUDbMEs+dONNkDIBpqn9nPLFRVqMsY=) 2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=) 3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:02:d2:7a:c4:43:0b:3e:77:af:0b:a6:a7:da:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc Validity Not Before: Dec 13 23:00:49 2025 GMT Not After : Dec 14 23:00:49 2025 GMT Subject: CN=4ed375ed40e32c59181416172909d6e25472e801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ea:c9:7f:61:0c:e4:40:b3:ad:6d:38:3b:1d: 31:15:41:1b:63:f3:ca:16:3d:2f:cd:60:5b:9a:73: b6:1c:c9:66:cd:28:f0:77:6e:19:7c:75:03:49:9a: ee:21:94:ad:15:26:81:ed:17:01:79:02:9c:64:ab: 52:64:6a:d9:0e:e5:29:38:16:3a:45:28:40:db:4f: d7:ef:cc:08:c4:bb:94:75:3d:8f:f5:87:b2:4c:b3: 0b:f4:a6:26:9d:8d:32:f8:02:f2:54:33:58:4c:64: d3:c7:05:ec:c3:8b:b7:50:01:42:27:33:a2:aa:41: 2a:45:1a:f5:a1:10:23:dc:c6:90:75:99:01:20:91: 7a:d9:b4:ea:33:a3:0c:bb:38:96:6e:f3:e9:0d:80: bd:a3:64:49:10:1f:5f:35:5a:1d:aa:8d:7a:e2:c5: 42:48:aa:00:23:7f:ce:3e:e7:16:0b:a3:c1:32:78: f0:ed:f2:9a:5e:2b:bf:bf:d4:50:3d:0c:e3:1d:48: 02:d8:b5:a8:fc:4b:fc:7c:0e:bc:fc:24:e0:88:fc: 92:64:da:c7:3b:9e:c0:1f:35:96:0d:cc:64:87:60: f2:ce:c6:d9:52:bc:cd:19:c3:7d:c1:18:a4:83:93: 27:67:6d:b9:c2:11:bc:f1:18:cd:31:d4:14:2d:4d: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D3:75:ED:40:E3:2C:59:18:14:16:17:29:09:D6:E2:54:72:E8:01 X509v3 Authority Key Identifier: keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:32:ce:dd:36:af:e3:32:35:65:c8:fb:03:44:cf:d3:a9:7a: b2:20:d3:c9:db:b2:c2:45:76:c9:52:93:47:69:88:24:28:6d: 53:71:4b:64:44:ae:13:c0:ce:73:d8:38:6a:7b:20:ff:1d:f9: c8:64:9f:7d:f8:f1:e7:b7:0a:a4:ef:7c:ab:66:2b:e4:7e:8c: 1e:4d:70:11:04:2b:f2:a4:2c:00:15:61:72:a3:68:5b:d2:02: c0:de:d3:bf:10:c7:65:b7:02:e8:14:24:75:c8:34:bb:7a:58: 8c:f7:e2:aa:c0:0c:41:49:62:56:f6:be:0d:ab:57:47:1c:a3: 21:94:b4:94:9b:56:63:05:37:f8:90:c8:be:78:f1:fb:73:55: 77:58:d4:01:e6:85:22:ef:b3:e3:22:e6:70:fc:9d:18:bf:d9: c6:1e:fa:bc:d6:31:d2:dc:e8:3a:37:9c:e6:cb:d5:cc:1a:f8: 89:67:b0:56:56:4a:b2:a7:25:cd:2b:3c:8e:74:af:6a:f1:99: 06:a0:92:0a:81:22:50:bd:fa:58:97:cf:b5:cb:6e:18:ce:83: 0c:4e:c4:96:6f:86:16:75:42:65:5b:4d:62:bf:7e:c9:5e:fc: 58:84:81:3c:6e:f2:d4:05:bb:d2:4f:8e:15:7b:15:b1:8b:d9: ef:e6:35:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8gLSesRDCz53rwump9pdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU4NjEyMTBkYzM4YmRiYWViNDc3ZDZkYTcxOTY2NGE4 NGE2YmMwHhcNMjUxMjEzMjMwMDQ5WhcNMjUxMjE0MjMwMDQ5WjAzMTEwLwYDVQQD Eyg0ZWQzNzVlZDQwZTMyYzU5MTgxNDE2MTcyOTA5ZDZlMjU0NzJlODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8erJf2EM5ECzrW04Ox0xFUEbY/PK Fj0vzWBbmnO2HMlmzSjwd24ZfHUDSZruIZStFSaB7RcBeQKcZKtSZGrZDuUpOBY6 RShA20/X78wIxLuUdT2P9YeyTLML9KYmnY0y+ALyVDNYTGTTxwXsw4u3UAFCJzOi qkEqRRr1oRAj3MaQdZkBIJF62bTqM6MMuziWbvPpDYC9o2RJEB9fNVodqo164sVC SKoAI3/OPucWC6PBMnjw7fKaXiu/v9RQPQzjHUgC2LWo/Ev8fA68/CTgiPySZNrH O57AHzWWDcxkh2DyzsbZUrzNGcN9wRikg5MnZ225whG88RjNMdQULU06lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7Tde1A4yxZGBQWFykJ1uJUcugBMB8GA1UdIwQY MBaAFOLFhhIQ3Di9uutHfW2nGWZKhKa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEt MzM3NTYxN2Q0ZWZkLzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEtMzM3NTYxN2Q0ZWZk LzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazLO3Tav 4zI1Zcj7A0TP06l6siDTyduywkV2yVKTR2mIJChtU3FLZESuE8DOc9g4ansg/x35 yGSfffjx57cKpO98q2Yr5H6MHk1wEQQr8qQsABVhcqNoW9ICwN7TvxDHZbcC6BQk dcg0u3pYjPfiqsAMQUliVva+DatXRxyjIZS0lJtWYwU3+JDIvnjx+3NVd1jUAeaF Iu+z4yLmcPydGL/Zxh76vNYx0tzoOjec5svVzBr4iWewVlZKsqclzSs8jnSvavGZ BqCSCoEiUL36WJfPtctuGM6DDE7Elm+GFnVCZVtNYr9+yV78WISBPG7y1AW70k+O FXsVsYvZ7+Y1Pg== -----END CERTIFICATE-----Generated at Sun Dec 14 05:14:33 2025 by rpki-client