This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json) Hash identifier: IhGnk6pFvEoNb5GE1s3LL4QpA4dhJ4EHvpiUq/SPUn4= Subject key identifier: 09:EF:75:71:08:33:94:96:AB:45:9C:99:6B:C9:F4:3A:AB:13:2A:CC Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Certificate serial: 019B3AFD9A0EB71D7A49BA1C0624B8AA2869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft Manifest number: 0769 Signing time: Sat 20 Dec 2025 09:00:57 +0000 Manifest this update: Sat 20 Dec 2025 09:00:57 +0000 Manifest next update: Sun 21 Dec 2025 09:00:57 +0000 Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: fZXIEiMx95lzGBh/5KYWUog9Kn2H/w42x9e2MVH2K+M=) 2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=) 3: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (hash: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:9a:0e:b7:1d:7a:49:ba:1c:06:24:b8:aa:28:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Validity Not Before: Dec 20 09:00:57 2025 GMT Not After : Dec 21 09:00:57 2025 GMT Subject: CN=09ef757108339496ab459c996bc9f43aab132acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:76:d4:15:18:85:d1:1a:8c:31:2b:c7:94: 45:e5:33:25:25:cc:2e:6c:64:b0:77:3d:b8:ab:26: 28:60:1c:d3:ca:76:51:bf:1f:47:4e:11:b2:4a:92: a2:95:2e:6e:58:02:e9:db:a0:81:9d:03:db:6d:d9: d3:9d:7e:00:3f:bc:bf:c5:fe:a5:3b:6d:18:43:1e: b2:5e:03:7d:03:f7:be:21:c7:e4:e7:8f:ca:99:ec: f8:0c:66:46:5e:6e:4f:d5:ff:62:99:a0:dc:0c:e5: 6c:29:22:34:bc:0c:a3:d8:d5:56:63:a7:a2:2a:c9: 7a:13:62:c5:19:82:7b:10:c7:ad:b3:98:c6:c4:15: e5:4b:6f:8d:6d:76:44:78:3b:cb:e0:b6:86:f8:13: 64:2f:6d:36:10:7b:ed:19:d6:0e:12:65:6b:31:6b: 49:e2:46:1a:a8:0f:d6:9b:4a:0b:31:74:f1:5c:54: 76:24:c4:76:37:fe:07:cd:25:a2:71:f2:ca:4b:85: 46:4c:80:96:24:98:a6:71:9c:ab:85:0f:ee:6c:8e: da:95:bf:68:49:e9:ba:a1:2d:00:84:44:4b:6c:1e: c9:2c:86:27:98:41:94:db:82:0d:05:b2:b5:ca:3e: f8:29:f3:dd:47:fc:a2:14:7f:39:99:95:42:ae:98: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:75:71:08:33:94:96:AB:45:9C:99:6B:C9:F4:3A:AB:13:2A:CC X509v3 Authority Key Identifier: keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d2:54:85:15:c5:84:3b:84:9f:6a:af:78:eb:0a:b7:b2:0c: 7c:f8:81:e4:b6:f0:4b:8c:9c:74:a2:41:9e:94:e4:0f:11:0d: 17:82:62:64:df:7f:df:d4:f8:78:3f:40:5b:85:7f:90:cc:1f: 78:8c:13:a7:57:bb:64:70:ba:24:90:0a:07:88:d9:5c:4a:0c: f0:d4:48:1b:88:f2:65:b8:81:97:d1:84:3e:cc:b3:f2:41:3a: 0f:0b:84:80:e7:7b:b4:57:9d:df:52:8d:95:ee:77:ca:e8:31: 70:1b:89:39:59:e8:c2:ea:c3:c4:89:06:a6:0b:29:8e:f8:93: 53:a8:e6:28:0d:8d:64:8b:0f:b3:85:31:bb:92:61:2c:e6:81: ea:84:41:18:a1:1d:32:22:c4:cb:c9:c4:a2:c9:78:4e:c1:ac: 71:8b:a0:1b:84:90:d8:5f:58:da:5a:cc:f8:67:5b:1c:5e:2e: e2:90:0c:f3:54:7c:39:19:1a:33:d9:91:0f:31:75:39:7d:9c: ce:43:f5:0c:94:62:a0:97:4d:05:3b:e1:70:66:d5:3d:6c:96: 22:85:0b:90:a8:d9:ad:ce:1b:aa:67:91:9b:56:f7:e6:34:64: 4a:e6:34:ad:07:42:45:67:85:91:e7:25:f1:3b:c6:2f:43:7b: 4a:d4:69:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ZoOtx16SbocBiS4qihpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4 ZTU3ZDMwHhcNMjUxMjIwMDkwMDU3WhcNMjUxMjIxMDkwMDU3WjAzMTEwLwYDVQQD EygwOWVmNzU3MTA4MzM5NDk2YWI0NTljOTk2YmM5ZjQzYWFiMTMyYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8121BUYhdEajDErx5RF5TMlJcwu bGSwdz24qyYoYBzTynZRvx9HThGySpKilS5uWALp26CBnQPbbdnTnX4AP7y/xf6l O20YQx6yXgN9A/e+Icfk54/Kmez4DGZGXm5P1f9imaDcDOVsKSI0vAyj2NVWY6ei Ksl6E2LFGYJ7EMets5jGxBXlS2+NbXZEeDvL4LaG+BNkL202EHvtGdYOEmVrMWtJ 4kYaqA/Wm0oLMXTxXFR2JMR2N/4HzSWicfLKS4VGTICWJJimcZyrhQ/ubI7alb9o Sem6oS0AhERLbB7JLIYnmEGU24INBbK1yj74KfPdR/yiFH85mZVCrpiN8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnvdXEIM5SWq0WcmWvJ9DqrEyrMMB8GA1UdIwQY MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt ZTczM2MyNjJhMzgyLzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdJUhRXF hDuEn2qveOsKt7IMfPiB5LbwS4ycdKJBnpTkDxENF4JiZN9/39T4eD9AW4V/kMwf eIwTp1e7ZHC6JJAKB4jZXEoM8NRIG4jyZbiBl9GEPsyz8kE6DwuEgOd7tFed31KN le53yugxcBuJOVnowurDxIkGpgspjviTU6jmKA2NZIsPs4Uxu5JhLOaB6oRBGKEd MiLEy8nEosl4TsGscYugG4SQ2F9Y2lrM+GdbHF4u4pAM81R8ORkaM9mRDzF1OX2c zkP1DJRioJdNBTvhcGbVPWyWIoULkKjZrc4bqmeRm1b35jRkSuY0rQdCRWeFkecl 8TvGL0N7StRp1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:45:02 2025 by rpki-client