This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json) Hash identifier: 7+jq/zwia902apwj6sYVYAzmsyhEGVxuKXq9sWt79jc= Subject key identifier: 4D:36:CA:09:C2:63:B0:EC:9F:38:CE:C9:A5:BC:0F:F2:42:5E:CB:0E Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56 Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56 Certificate serial: 019B1E3D026718D930CC226300E6FB796505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft Manifest number: 0B3A Signing time: Sun 14 Dec 2025 19:01:13 +0000 Manifest this update: Sun 14 Dec 2025 19:01:13 +0000 Manifest next update: Mon 15 Dec 2025 19:01:13 +0000 Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: MWcdrLu5Y4ZUO4ckAvQ8YdphpbN4KmAXUlCvA6dwlTU=) 2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:02:67:18:d9:30:cc:22:63:00:e6:fb:79:65:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56 Validity Not Before: Dec 14 19:01:13 2025 GMT Not After : Dec 15 19:01:13 2025 GMT Subject: CN=4d36ca09c263b0ec9f38cec9a5bc0ff2425ecb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:3f:40:aa:65:64:2a:38:ae:ad:58:62:a3: b5:d4:81:37:3a:aa:a5:a6:e9:49:12:d1:72:89:96: 72:d6:34:4c:5b:74:3c:b4:32:be:ed:8a:24:49:17: e5:1e:f3:15:66:2a:1d:d3:c2:8d:c8:fe:a9:3d:18: 6b:b3:3f:22:f1:2c:85:b7:44:05:e0:44:c8:58:23: 9f:f2:99:56:e8:e2:63:c8:6e:51:1a:e8:e0:1e:0c: c7:ad:d3:82:df:b8:f0:aa:68:15:5a:a0:c9:01:84: 58:5b:fd:69:60:92:82:42:ac:f2:87:5f:b0:1e:ff: 41:53:3a:cb:27:e5:f1:52:d2:00:52:cf:56:17:d4: c9:12:0f:6f:93:21:0a:65:7d:ac:c1:19:93:b2:68: 42:50:55:f1:15:ed:e8:57:2b:67:b2:ea:74:f3:03: 23:12:97:86:bd:8a:3c:f8:1e:b9:67:42:b4:1b:d3: 3f:89:3d:0b:5d:f8:06:05:ec:23:40:e7:04:4d:53: 3c:7e:f0:fc:26:0c:5f:2f:1d:ca:6b:0c:db:72:f8: 42:e8:ee:bb:18:13:af:77:c6:25:bb:25:8b:47:b3: 3b:57:7b:5e:96:b4:d5:61:89:ea:01:d7:98:df:eb: 18:36:9a:fc:50:f8:c4:34:d8:b4:61:c8:21:1e:60: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:36:CA:09:C2:63:B0:EC:9F:38:CE:C9:A5:BC:0F:F2:42:5E:CB:0E X509v3 Authority Key Identifier: keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6f:85:6a:0f:eb:f3:25:77:04:23:e8:c2:0d:b1:08:30:0b: 2c:f8:17:be:e6:a0:53:b9:ef:74:f5:05:62:e4:83:a3:ff:b5: 0f:4d:f4:81:86:02:03:f8:ab:7f:60:a9:99:12:f6:2a:fd:af: 38:ef:10:98:3e:0f:ea:e3:bc:0b:c9:09:17:1e:a9:84:ca:7a: a4:ce:05:8f:74:ac:46:30:fc:58:88:b2:ca:00:cf:29:fd:c9: d4:3a:b1:c5:29:b1:d4:33:49:c0:fe:ae:a4:7a:88:41:01:d1: 51:07:c7:f8:3f:61:8d:f9:da:c3:08:27:20:86:bc:d3:bb:93: c8:42:da:45:7d:57:aa:1e:fe:73:ba:fe:0b:de:72:25:e6:6c: d7:18:64:22:81:d7:6c:01:2e:e3:38:22:4a:b3:26:4b:03:63: 1e:16:42:b0:0b:e2:57:20:85:e3:a0:08:db:c5:89:a6:9f:71: 3a:3f:f9:e7:78:bf:65:8f:c3:d0:2d:01:c9:5d:3e:5d:31:ba: 7e:25:33:30:a0:3d:9e:be:c8:d4:35:0d:b0:ed:1c:da:0c:a5: b2:b0:98:98:41:9a:14:fe:11:2f:bc:2c:88:d9:b3:f7:c2:3d: 60:91:b1:fe:82:47:b1:5f:89:26:87:73:c6:8d:f8:7c:4b:d8: 1b:26:79:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePQJnGNkwzCJjAOb7eWUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj N2FlNTYwHhcNMjUxMjE0MTkwMTEzWhcNMjUxMjE1MTkwMTEzWjAzMTEwLwYDVQQD Eyg0ZDM2Y2EwOWMyNjNiMGVjOWYzOGNlYzlhNWJjMGZmMjQyNWVjYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/4/QKplZCo4rq1YYqO11IE3Oqql pulJEtFyiZZy1jRMW3Q8tDK+7YokSRflHvMVZiod08KNyP6pPRhrsz8i8SyFt0QF 4ETIWCOf8plW6OJjyG5RGujgHgzHrdOC37jwqmgVWqDJAYRYW/1pYJKCQqzyh1+w Hv9BUzrLJ+XxUtIAUs9WF9TJEg9vkyEKZX2swRmTsmhCUFXxFe3oVytnsup08wMj EpeGvYo8+B65Z0K0G9M/iT0LXfgGBewjQOcETVM8fvD8JgxfLx3KawzbcvhC6O67 GBOvd8YluyWLR7M7V3telrTVYYnqAdeY3+sYNpr8UPjENNi0YcghHmDDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE02ygnCY7DsnzjOyaW8D/JCXssOMB8GA1UdIwQY MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG+Fag/r 8yV3BCPowg2xCDALLPgXvuagU7nvdPUFYuSDo/+1D030gYYCA/irf2CpmRL2Kv2v OO8QmD4P6uO8C8kJFx6phMp6pM4Fj3SsRjD8WIiyygDPKf3J1DqxxSmx1DNJwP6u pHqIQQHRUQfH+D9hjfnawwgnIIa807uTyELaRX1Xqh7+c7r+C95yJeZs1xhkIoHX bAEu4zgiSrMmSwNjHhZCsAviVyCF46AI28WJpp9xOj/553i/ZY/D0C0ByV0+XTG6 fiUzMKA9nr7I1DUNsO0c2gylsrCYmEGaFP4RL7wsiNmz98I9YJGx/oJHsV+JJodz xo34fEvYGyZ5gQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:31 2025 by rpki-client