This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json) Hash identifier: lg7dVPWGq1iJ5Ckm3sjXO5MMIIbyZBNIEz59PCNyC5A= Subject key identifier: C2:3F:84:42:2E:79:F7:5B:1F:5D:30:E6:21:73:D2:9C:BE:02:32:F6 Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411 Certificate serial: 019B3F7EE2011597D854EA8F7BE47ECD01CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:00:38 +0000 Manifest this update: Sun 21 Dec 2025 06:00:38 +0000 Manifest next update: Mon 22 Dec 2025 06:00:38 +0000 Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: gvpnqrneMLZa9N3lbPQSGJ/2e5TuD/gXRkHlZp3tlc4=) 2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e2:01:15:97:d8:54:ea:8f:7b:e4:7e:cd:01:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411 Validity Not Before: Dec 21 06:00:38 2025 GMT Not After : Dec 22 06:00:38 2025 GMT Subject: CN=c23f84422e79f75b1f5d30e62173d29cbe0232f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:29:5a:06:e4:85:38:53:e3:56:53:92:a9: 53:31:bf:66:6f:0b:af:ef:44:c1:97:62:86:f6:ea: 3c:68:e9:bb:88:5e:69:b5:61:83:c6:08:52:39:2a: 77:6b:14:5b:8d:95:da:5f:07:f6:23:5d:cf:d7:07: 84:db:ef:ec:b4:0b:64:35:6c:bc:2b:e3:48:cc:8c: 33:13:29:6b:35:f0:9a:3c:ae:62:08:54:51:ca:4d: 49:14:bc:d7:80:23:f0:2c:5f:07:5a:95:5c:86:7a: 8e:6b:cf:88:a3:df:59:e6:2b:d5:4b:d6:b9:50:8e: 65:e8:b3:49:dd:29:48:8f:85:7a:4a:91:53:c7:1c: 06:67:9b:c8:63:a4:7b:74:93:69:57:e1:5f:82:a5: 83:7a:2a:1d:2a:9a:74:40:6a:aa:12:89:7f:65:a1: 1e:5c:2e:65:0a:72:b5:67:ec:0a:47:b6:e7:8d:88: ad:af:9b:08:80:d4:35:60:17:7c:b5:fe:6f:ad:69: 59:4d:7a:91:f1:fc:3a:b5:03:c6:05:1e:d9:69:ef: c1:35:54:3f:5e:93:a6:a8:25:3e:59:a6:0f:6f:e8: e7:46:b6:ad:4d:13:58:63:27:dd:98:6f:74:ab:e5: 9e:29:96:c0:80:d9:eb:0d:e2:c3:5b:1b:30:78:33: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:84:42:2E:79:F7:5B:1F:5D:30:E6:21:73:D2:9C:BE:02:32:F6 X509v3 Authority Key Identifier: keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:25:55:4a:57:43:94:15:13:10:b4:71:d6:3b:e6:72:cf:91: d2:e9:2a:0c:6d:96:71:02:e8:c7:f0:04:49:4c:4c:bc:74:be: 33:e8:e4:ce:82:fd:b7:fa:3f:fe:87:06:dd:1c:1a:d6:8b:a4: 9a:73:fc:7d:e8:e6:9e:1a:c4:61:66:57:73:bc:cc:f7:cf:40: 0b:d6:83:54:47:a2:95:22:7e:7b:17:be:fd:e9:67:b1:7f:0c: df:d9:2c:18:8b:33:42:82:45:3b:92:ed:1d:b5:23:86:d7:b9: 1d:3c:da:34:17:41:58:d4:b1:06:6f:e6:5e:1c:93:bf:c8:80: 33:47:42:3a:96:48:9e:5d:71:45:8c:63:9a:ce:36:e9:5b:6e: 4d:8d:de:fa:2f:c2:aa:81:22:69:f6:ff:6c:27:ae:16:be:d0: d9:73:fb:d7:ca:6d:56:6b:b6:6d:24:f0:77:06:df:29:2b:63: a1:7a:31:7d:c3:c2:1f:25:ee:93:65:6b:ff:cd:bd:89:d6:4e: 57:51:e2:5d:14:1f:87:c8:f5:6d:31:f9:97:40:7b:19:03:69: dc:59:d5:52:e5:af:16:00:d6:d4:64:39:43:ce:f4:7f:9e:20: 80:34:cc:39:ef:22:82:22:58:64:66:72:9b:22:5b:43:b6:ab: fa:ff:ba:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuIBFZfYVOqPe+R+zQHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODI3YWNjNjgwYWEyOWRkYWM4MjM4ODlkODc4NjNlNDE0 YjI0MTEwHhcNMjUxMjIxMDYwMDM4WhcNMjUxMjIyMDYwMDM4WjAzMTEwLwYDVQQD EyhjMjNmODQ0MjJlNzlmNzViMWY1ZDMwZTYyMTczZDI5Y2JlMDIzMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AMpWgbkhThT41ZTkqlTMb9mbwuv 70TBl2KG9uo8aOm7iF5ptWGDxghSOSp3axRbjZXaXwf2I13P1weE2+/stAtkNWy8 K+NIzIwzEylrNfCaPK5iCFRRyk1JFLzXgCPwLF8HWpVchnqOa8+Io99Z5ivVS9a5 UI5l6LNJ3SlIj4V6SpFTxxwGZ5vIY6R7dJNpV+FfgqWDeiodKpp0QGqqEol/ZaEe XC5lCnK1Z+wKR7bnjYitr5sIgNQ1YBd8tf5vrWlZTXqR8fw6tQPGBR7Zae/BNVQ/ XpOmqCU+WaYPb+jnRratTRNYYyfdmG90q+WeKZbAgNnrDeLDWxsweDNWkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI/hEIuefdbH10w5iFz0py+AjL2MB8GA1UdIwQY MBaAFHuCesxoCqKd2sgjiJ2Hhj5BSyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUt ZTRkNDU5NzFiMTNkLzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUtZTRkNDU5NzFiMTNk LzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACVVSldD lBUTELRx1jvmcs+R0ukqDG2WcQLox/AESUxMvHS+M+jkzoL9t/o//ocG3Rwa1ouk mnP8fejmnhrEYWZXc7zM989AC9aDVEeilSJ+exe+/elnsX8M39ksGIszQoJFO5Lt HbUjhte5HTzaNBdBWNSxBm/mXhyTv8iAM0dCOpZInl1xRYxjms426VtuTY3e+i/C qoEiafb/bCeuFr7Q2XP718ptVmu2bSTwdwbfKStjoXoxfcPCHyXuk2Vr/829idZO V1HiXRQfh8j1bTH5l0B7GQNp3FnVUuWvFgDW1GQ5Q870f54ggDTMOe8igiJYZGZy myJbQ7ar+v+6KQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:26 2025 by rpki-client