This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json) Hash identifier: n+JVALStFxw7NMG2hT4ad+hkjf81U1DkwYSManw7SzM= Subject key identifier: 8E:B2:68:CB:F3:9B:5C:7E:1C:2D:8B:AF:03:E1:56:08:C0:09:3C:BA Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Certificate serial: 019B3A220C7C760C44AB223C5FF364C64CF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: RH4UoDGXQndu6n3ILxQd0SgeSzpCD1YUqdxyJsiBJ2M=) 2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=) 3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0c:7c:76:0c:44:ab:22:3c:5f:f3:64:c6:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=8eb268cbf39b5c7e1c2d8baf03e15608c0093cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:24:6b:96:17:fe:ea:15:2e:24:b9:58:1c: 91:8a:d7:3f:de:00:35:12:71:8a:ed:7c:2d:14:46: 2a:91:89:7f:4f:e4:5d:30:82:70:c5:b4:36:ac:0f: 29:6e:5a:3d:1c:84:60:82:c0:f4:1f:3c:5d:7b:19: 01:74:0d:00:fd:41:48:fb:9b:49:13:cd:4f:ab:8d: ef:bc:84:68:30:ba:e1:eb:07:d7:90:24:e9:a4:ad: 21:8e:50:fe:81:2a:99:e5:81:7b:09:a1:eb:04:b3: 37:52:f1:5f:f1:54:55:84:d1:f4:ca:74:05:13:5f: 3d:a5:2e:19:be:37:3c:db:e1:ba:1c:d3:96:4f:99: f0:1f:4b:1b:e8:6f:65:b1:fe:5a:9a:bf:40:20:52: 92:6d:6b:ce:ed:e5:ad:65:3d:4b:3b:58:40:27:90: 26:59:34:5e:5a:64:23:a9:58:35:17:1c:de:fa:ca: 21:66:52:0f:14:f2:54:61:e0:45:3a:31:8b:32:87: 9a:87:67:ba:e8:ff:9a:4d:a0:d3:34:bb:8f:57:44: c1:05:cc:6b:1b:c2:84:f9:70:a3:1c:55:8d:46:0e: 7f:33:63:e1:07:88:17:e6:e2:8a:15:75:af:03:6b: 31:6f:c9:2f:fc:40:29:e2:90:b5:0c:c9:0e:3f:f6: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:68:CB:F3:9B:5C:7E:1C:2D:8B:AF:03:E1:56:08:C0:09:3C:BA X509v3 Authority Key Identifier: keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:58:a3:63:15:d9:16:62:b3:3b:8c:9f:16:44:02:7f:da:5b: 6c:d8:33:4e:d7:c5:ca:e8:40:54:68:89:5e:11:83:27:0e:96: 17:91:f1:03:f9:d6:03:4f:5b:ce:0d:80:da:82:04:5a:74:24: 97:dd:35:9d:29:97:4a:40:e7:30:35:e8:d8:0d:7c:df:f5:69: 75:84:81:dc:fe:50:77:e9:10:28:05:ce:1d:39:3b:07:6d:0a: 27:8a:1f:b4:40:dc:01:5b:ab:c8:08:47:c2:17:f8:9f:e6:b1: e0:5b:a1:fe:5a:b6:be:da:f3:a3:77:3f:83:e6:8b:05:24:a3: bc:eb:fc:7f:71:82:5f:de:a0:5b:10:4c:0c:ac:35:e3:16:a3: 5d:40:08:a7:c2:ce:59:d8:b0:d5:0f:ea:4e:14:30:80:d6:bd: 7d:78:07:9f:cd:7c:9d:5c:ac:b3:75:b4:8f:90:a6:ce:21:ef: 88:39:ad:3e:27:7a:2d:c6:ce:cd:22:13:8b:4e:de:fa:72:be: 33:58:3e:1f:09:21:9f:79:18:92:19:e2:21:bd:f3:7a:06:28: 8b:cd:f9:01:2a:49:b5:5a:71:d8:fc:f9:32:ef:f8:20:6e:02: 2a:9b:e1:95:95:0b:c7:0e:95:7e:d8:af:f2:0c:91:22:09:2f: 63:b2:72:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Igx8dgxEqyI8X/NkxkzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3 NDU4NDEwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD Eyg4ZWIyNjhjYmYzOWI1YzdlMWMyZDhiYWYwM2UxNTYwOGMwMDkzY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfAka5YX/uoVLiS5WByRitc/3gA1 EnGK7XwtFEYqkYl/T+RdMIJwxbQ2rA8pblo9HIRggsD0HzxdexkBdA0A/UFI+5tJ E81Pq43vvIRoMLrh6wfXkCTppK0hjlD+gSqZ5YF7CaHrBLM3UvFf8VRVhNH0ynQF E189pS4Zvjc82+G6HNOWT5nwH0sb6G9lsf5amr9AIFKSbWvO7eWtZT1LO1hAJ5Am WTReWmQjqVg1Fxze+sohZlIPFPJUYeBFOjGLMoeah2e66P+aTaDTNLuPV0TBBcxr G8KE+XCjHFWNRg5/M2PhB4gX5uKKFXWvA2sxb8kv/EAp4pC1DMkOP/b9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6yaMvzm1x+HC2LrwPhVgjACTy6MB8GA1UdIwQY MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglijYxXZ FmKzO4yfFkQCf9pbbNgzTtfFyuhAVGiJXhGDJw6WF5HxA/nWA09bzg2A2oIEWnQk l901nSmXSkDnMDXo2A183/VpdYSB3P5Qd+kQKAXOHTk7B20KJ4oftEDcAVuryAhH whf4n+ax4Fuh/lq2vtrzo3c/g+aLBSSjvOv8f3GCX96gWxBMDKw14xajXUAIp8LO Wdiw1Q/qThQwgNa9fXgHn818nVyss3W0j5CmziHviDmtPid6LcbOzSITi07e+nK+ M1g+Hwkhn3kYkhniIb3zegYoi835ASpJtVpx2Pz5Mu/4IG4CKpvhlZULxw6Vftiv 8gyRIgkvY7JywQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:48:51 2025 by rpki-client