This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft File: 4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json) Hash identifier: 9PASWLPZZzdjYuQcfJ4knXin+DjEIWFUNnMnAb9cEYM= Subject key identifier: CF:90:EC:20:6C:AF:9D:FC:BA:FE:A0:82:38:33:97:7D:81:F0:37:0B Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Certificate serial: 019B3CEC55343D97C2477979CF54F4839771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft Manifest number: 08E1 Signing time: Sat 20 Dec 2025 18:01:19 +0000 Manifest this update: Sat 20 Dec 2025 18:01:19 +0000 Manifest next update: Sun 21 Dec 2025 18:01:19 +0000 Files and hashes: 1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=) 2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: mcNxgJuiXGSMEkbuwQh2sqYhJtk1ZxsdiKG2q/f4GRs=) 3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=) 4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:55:34:3d:97:c2:47:79:79:cf:54:f4:83:97:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Validity Not Before: Dec 20 18:01:19 2025 GMT Not After : Dec 21 18:01:19 2025 GMT Subject: CN=cf90ec206caf9dfcbafea0823833977d81f0370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:86:e7:e9:ea:a8:83:71:a3:b8:da:a8:b6:a6: c5:48:ad:d4:e2:34:36:42:38:da:dd:9e:03:fc:5c: f3:4b:78:06:cd:5e:81:af:e6:49:cf:c4:78:d6:e5: 38:0d:9d:46:af:97:2d:03:e9:d4:95:09:70:e9:43: 86:12:da:46:af:79:55:60:dc:9c:4d:31:ac:74:41: 8e:4c:9d:e1:01:2f:ee:61:33:3c:e5:f6:45:e7:20: 67:6d:7e:71:04:6a:b5:47:e0:19:0f:2a:2a:91:5f: d7:21:6a:46:05:8a:12:60:32:b1:d1:7f:8b:65:7c: ee:d4:fc:92:86:99:61:5d:7b:eb:97:a9:86:78:cf: 61:d6:12:08:75:39:3f:85:6f:8c:cf:27:85:32:f4: 12:bc:1a:94:4c:c8:4e:a4:a2:2c:68:6e:4d:4c:72: b9:f4:48:ad:57:57:d8:dd:78:a8:bf:d7:59:e2:95: 47:38:5b:fd:f0:3c:bc:5e:e5:f8:44:34:77:91:c3: 81:b4:b5:b5:4f:ba:80:5a:88:82:16:41:7a:fb:38: 09:56:90:00:f3:23:b7:6a:3f:0c:93:57:9f:c8:4c: 54:de:72:91:a0:93:df:9a:6f:39:3e:16:51:a1:0c: 0f:1b:90:ff:ef:bf:40:3c:db:c9:60:0e:d1:44:cd: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:90:EC:20:6C:AF:9D:FC:BA:FE:A0:82:38:33:97:7D:81:F0:37:0B X509v3 Authority Key Identifier: keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:02:af:cf:af:dc:73:fc:c3:20:3e:26:c4:64:f3:bb:a6: 21:41:14:77:fa:c4:ad:7b:eb:a6:20:44:37:69:1f:0a:69:e2: b6:14:c0:51:db:f4:6a:b4:87:6d:85:1b:9a:25:b1:ea:fc:15: e2:4b:cc:f2:b0:b1:04:a5:08:13:60:63:bf:3d:f4:d8:a4:9f: a3:3a:02:4a:2c:11:3f:79:a7:22:80:47:53:63:c8:b7:d5:5e: 75:c1:80:ad:1a:a0:39:bb:39:5d:1a:bd:55:13:4d:f8:2c:68: 67:ba:d1:1d:74:48:06:99:aa:3c:e3:c5:60:c0:6c:c2:1d:29: df:e7:ce:ca:18:35:dd:ce:5e:fa:8f:c6:9d:e0:72:30:bd:b6: b5:17:dc:5f:b9:54:06:47:2a:1a:11:be:ce:b5:9f:85:35:75: 8d:bc:df:5d:24:0b:d8:3f:48:50:53:9f:b3:25:4c:fc:3d:fc: 3a:ae:e3:ac:9d:f8:32:67:bc:1b:12:08:59:67:9c:38:96:3e: 63:cd:86:fa:86:d7:76:37:37:2a:48:ef:2b:cc:e7:1d:12:87: 09:bf:a8:35:d2:4e:99:81:08:1b:6e:f1:49:0f:5f:46:19:fb: c7:c4:ae:51:a3:87:59:5a:a4:9d:de:49:fb:26:34:42:bb:a2: cd:9a:09:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FU0PZfCR3l5z1T0g5dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDczZmZjM2YzN2M0ZmVjNGJkMzVhZDFjNTk1Y2QwNTZi YWVjZmQwHhcNMjUxMjIwMTgwMTE5WhcNMjUxMjIxMTgwMTE5WjAzMTEwLwYDVQQD EyhjZjkwZWMyMDZjYWY5ZGZjYmFmZWEwODIzODMzOTc3ZDgxZjAzNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5obn6eqog3GjuNqotqbFSK3U4jQ2 Qjja3Z4D/FzzS3gGzV6Br+ZJz8R41uU4DZ1Gr5ctA+nUlQlw6UOGEtpGr3lVYNyc TTGsdEGOTJ3hAS/uYTM85fZF5yBnbX5xBGq1R+AZDyoqkV/XIWpGBYoSYDKx0X+L ZXzu1PyShplhXXvrl6mGeM9h1hIIdTk/hW+MzyeFMvQSvBqUTMhOpKIsaG5NTHK5 9EitV1fY3Xiov9dZ4pVHOFv98Dy8XuX4RDR3kcOBtLW1T7qAWoiCFkF6+zgJVpAA 8yO3aj8Mk1efyExU3nKRoJPfmm85PhZRoQwPG5D/779APNvJYA7RRM3y9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+Q7CBsr538uv6ggjgzl32B8DcLMB8GA1UdIwQY MBaAFOLXP/w/N8T+xL01rRxZXNBWuuz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUt YWEwYzRkYzAzMjIyLzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUtYWEwYzRkYzAzMjIy LzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALcCr8+v 3HP8wyA+JsRk87umIUEUd/rErXvrpiBEN2kfCmnithTAUdv0arSHbYUbmiWx6vwV 4kvM8rCxBKUIE2Bjvz302KSfozoCSiwRP3mnIoBHU2PIt9VedcGArRqgObs5XRq9 VRNN+CxoZ7rRHXRIBpmqPOPFYMBswh0p3+fOyhg13c5e+o/GneByML22tRfcX7lU BkcqGhG+zrWfhTV1jbzfXSQL2D9IUFOfsyVM/D38Oq7jrJ34Mme8GxIIWWecOJY+ Y82G+obXdjc3KkjvK8znHRKHCb+oNdJOmYEIG27xSQ9fRhn7x8SuUaOHWVqknd5J +yY0QruizZoJ+g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:11 2025 by rpki-client