This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json) Hash identifier: Euj9D70j5VrQhpLLHZAPFSxxhhdf5NhvNmNHKwG579U= Subject key identifier: 52:CB:28:89:74:80:2D:BC:02:F7:16:E4:E1:96:1E:93:95:7F:B3:A0 Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057 Certificate serial: 019B462623F9F174897220FAC561F49575D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 13:01:03 +0000 Manifest this update: Mon 22 Dec 2025 13:01:03 +0000 Manifest next update: Tue 23 Dec 2025 13:01:03 +0000 Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: iOw4rlmHMpw482d3KjixxNc1s2zEvxmEs0uBZYbvL7o=) 2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:23:f9:f1:74:89:72:20:fa:c5:61:f4:95:75:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ea593464858e293952345cf4e97792c8811057 Validity Not Before: Dec 22 13:01:03 2025 GMT Not After : Dec 23 13:01:03 2025 GMT Subject: CN=52cb288974802dbc02f716e4e1961e93957fb3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:97:c2:b3:de:d7:ea:79:0c:8e:cf:b8:ab:ed: c1:d3:0d:e5:1d:6c:c7:de:b0:9a:cc:46:7a:da:40: ce:87:da:69:7b:9b:39:c3:3d:08:ef:56:8b:82:8f: 74:a1:f7:2e:d8:59:65:d9:16:cb:9f:29:39:2c:98: 08:f5:ad:ca:01:e5:b0:63:09:af:3b:53:00:b2:9e: 93:8e:de:0b:77:09:51:bc:c6:20:66:27:75:66:03: 46:b2:94:87:ff:25:b7:62:41:1b:67:5f:4a:47:3b: 0a:d1:17:d3:21:c4:2f:ee:27:fb:c7:f8:b9:71:71: eb:8f:02:d9:9d:61:e0:82:75:14:64:a2:42:93:10: 10:8f:43:07:3c:8f:1d:5f:e7:32:99:1b:8c:6c:19: b3:9c:3b:d4:01:82:e5:49:da:32:ef:ad:23:e7:e9: 8c:8b:02:e4:2d:de:95:91:ff:02:f7:1e:d3:d6:36: 61:2b:46:2b:11:07:c7:cd:1c:c6:a7:5f:cd:83:a0: 3a:bc:fd:ce:20:39:61:0b:28:d2:df:f3:bf:6a:bc: 9a:56:b0:4d:61:ca:12:a0:48:3a:39:e6:c9:91:0e: cf:47:e8:91:79:64:d5:5d:62:33:a6:f6:4c:01:55: 75:b4:39:25:e7:2b:9a:fc:99:74:80:72:72:2b:a4: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CB:28:89:74:80:2D:BC:02:F7:16:E4:E1:96:1E:93:95:7F:B3:A0 X509v3 Authority Key Identifier: keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5c:fe:d8:7d:35:42:13:e4:6d:a7:14:7b:b1:4d:5e:cf:b0: 9d:fd:e6:b1:d8:d0:37:a1:80:5f:da:57:f3:30:c2:b2:dd:37: f8:86:32:03:2e:1a:61:f7:e3:df:83:97:bd:f1:ca:e4:6c:a0: b5:a0:97:27:2b:e0:36:de:3f:b8:c0:9b:6c:67:e4:ba:38:ff: 43:53:7b:92:19:dc:8a:38:ab:34:4d:20:8c:e2:62:0f:82:87: a8:90:33:6d:b1:47:3b:23:67:15:81:9e:24:73:44:17:72:72: c4:a7:73:3b:2f:8b:7f:11:67:dc:48:ea:59:4c:5d:51:b2:37: db:0e:13:9b:57:f9:d7:97:82:30:5a:9b:17:ef:36:63:32:69: c4:cc:7b:58:86:29:75:fd:84:ee:25:29:80:fc:8f:e0:71:96: b3:df:52:63:6a:c2:e2:18:e0:fc:08:52:06:2a:6f:73:aa:47: 63:c9:e2:b2:e9:fd:ca:2e:3a:43:14:c9:1b:69:bf:58:c9:9e: 3d:de:1d:a5:42:75:8d:a9:6c:73:6a:dd:45:53:29:e5:09:6c: 31:88:a8:31:3a:ba:52:57:7e:d1:14:44:2a:4b:27:df:4f:ad: 1a:df:66:c2:02:f2:e4:35:63:b0:7e:1a:01:b2:2f:a2:fe:c7: 2e:6c:f7:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJiP58XSJciD6xWH0lXXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4 MTEwNTcwHhcNMjUxMjIyMTMwMTAzWhcNMjUxMjIzMTMwMTAzWjAzMTEwLwYDVQQD Eyg1MmNiMjg4OTc0ODAyZGJjMDJmNzE2ZTRlMTk2MWU5Mzk1N2ZiM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pfCs97X6nkMjs+4q+3B0w3lHWzH 3rCazEZ62kDOh9ppe5s5wz0I71aLgo90ofcu2Fll2RbLnyk5LJgI9a3KAeWwYwmv O1MAsp6Tjt4LdwlRvMYgZid1ZgNGspSH/yW3YkEbZ19KRzsK0RfTIcQv7if7x/i5 cXHrjwLZnWHggnUUZKJCkxAQj0MHPI8dX+cymRuMbBmznDvUAYLlSdoy760j5+mM iwLkLd6Vkf8C9x7T1jZhK0YrEQfHzRzGp1/Ng6A6vP3OIDlhCyjS3/O/aryaVrBN YcoSoEg6OebJkQ7PR+iReWTVXWIzpvZMAVV1tDkl5yua/Jl0gHJyK6T0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLLKIl0gC28AvcW5OGWHpOVf7OgMB8GA1UdIwQY MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1 LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1z+2H01 QhPkbacUe7FNXs+wnf3msdjQN6GAX9pX8zDCst03+IYyAy4aYffj34OXvfHK5Gyg taCXJyvgNt4/uMCbbGfkujj/Q1N7khncijirNE0gjOJiD4KHqJAzbbFHOyNnFYGe JHNEF3JyxKdzOy+LfxFn3EjqWUxdUbI32w4Tm1f515eCMFqbF+82YzJpxMx7WIYp df2E7iUpgPyP4HGWs99SY2rC4hjg/AhSBipvc6pHY8nisun9yi46QxTJG2m/WMme Pd4dpUJ1jalsc2rdRVMp5QlsMYioMTq6Uld+0RREKksn30+tGt9mwgLy5DVjsH4a AbIvov7HLmz3xQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:22:26 2025 by rpki-client