This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json) Hash identifier: SFzbNwmCfbw1KCX97P8om+5YYa0Ya1vgd5XI0jPW0RI= Subject key identifier: F6:61:D3:0C:0F:0D:CD:DC:D0:0E:A6:19:B1:CD:C2:13:22:FD:99:66 Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Certificate serial: 019B416D8971E14D353D2FB753192CD96C4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft Manifest number: 0E6B Signing time: Sun 21 Dec 2025 15:00:56 +0000 Manifest this update: Sun 21 Dec 2025 15:00:56 +0000 Manifest next update: Mon 22 Dec 2025 15:00:56 +0000 Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: 8IA0Gsa+fFRwsauUMZUH0pHGbEVl76hKRiGh63gT0Gk=) 2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:89:71:e1:4d:35:3d:2f:b7:53:19:2c:d9:6c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083 Validity Not Before: Dec 21 15:00:56 2025 GMT Not After : Dec 22 15:00:56 2025 GMT Subject: CN=f661d30c0f0dcddcd00ea619b1cdc21322fd9966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:3c:fe:0f:be:04:29:d5:bd:18:61:56:1e: a0:d0:47:2f:dc:f4:14:3b:ab:25:78:70:00:9a:e2: 30:1e:c8:9f:a6:1b:ec:ab:11:4f:50:2e:c2:91:f0: c6:38:25:f4:3d:77:ab:4b:ec:89:ba:8d:9a:b9:5e: 53:ce:57:2a:05:91:2a:f9:6e:20:6e:bf:29:fa:87: ae:49:b9:29:39:4e:21:d7:cd:45:a5:c4:e6:0a:da: 51:de:d3:53:43:27:38:e4:06:fc:20:93:b5:9f:46: 24:3a:7f:a2:01:e6:80:fc:99:c1:98:06:d6:9d:54: 7f:58:63:4f:1a:0f:96:d1:b1:65:f7:c5:28:61:2f: be:c2:33:d4:45:73:e4:7d:dc:2e:32:2b:e0:5a:70: ea:83:82:60:74:09:cd:43:e5:02:a3:1a:05:7f:68: 51:96:f8:39:57:c0:bd:89:ea:f0:be:86:79:d9:23: 4e:7b:e4:c5:5e:a7:a5:62:c9:12:93:3b:6f:f4:b6: 65:76:e2:a3:83:9d:25:11:39:d2:40:93:a6:f9:a2: 1e:cd:b6:85:aa:8f:99:01:f4:1b:84:3d:1b:05:d3: 4c:26:d2:ec:3b:ad:b4:ba:2e:86:69:d9:5b:63:f6: 78:fe:5c:c9:01:f3:86:b5:7a:cc:f5:5d:f5:f5:c8: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:61:D3:0C:0F:0D:CD:DC:D0:0E:A6:19:B1:CD:C2:13:22:FD:99:66 X509v3 Authority Key Identifier: keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:77:34:b9:ca:e6:d1:1c:4f:8d:76:d8:19:40:e1:ae:31:5b: 39:f9:4e:f6:e9:80:5c:70:61:e1:6d:39:eb:67:27:41:cd:9a: 79:81:ce:48:ef:e3:b8:98:ca:1c:96:41:51:38:c8:d7:7f:c6: 6d:56:5b:50:18:f7:d5:24:87:63:63:4c:71:63:35:d4:6d:93: ce:59:07:47:1e:d1:ec:67:69:25:68:be:76:7d:fe:66:86:1c: 6a:17:74:be:9d:e6:ce:9d:ff:c0:02:cd:4f:4b:1c:17:f7:5b: 37:80:aa:d3:a7:e4:ff:cc:f7:bb:5b:f7:bb:dc:6f:24:d0:1c: c2:49:7f:73:d2:a2:1f:f6:c7:b6:57:ca:88:e5:b5:7e:9d:18: 6e:b3:9d:d9:59:4c:5c:a8:ba:4a:67:96:d5:96:59:a9:58:15: 05:97:b7:60:00:b2:de:21:e0:b1:b3:f7:c5:65:d0:75:02:e5: 4b:b0:a2:30:85:de:88:26:14:49:30:84:d1:ad:c1:02:2f:9a: a8:c8:54:60:21:33:17:c0:fa:e7:a7:db:c5:41:f5:ec:d6:03: 75:0b:32:fa:ab:cd:ba:3b:90:39:fd:4a:b4:72:e1:2f:46:87: 25:83:da:a3:ff:1c:06:69:13:b9:4d:c6:ec:6a:39:c2:22:b8: eb:c2:62:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYlx4U01PS+3Uxks2WxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWJmNmQzZGY1MzliYjdjMTY4NGZiNGY0NjE3OWQwZGEw NmIwODMwHhcNMjUxMjIxMTUwMDU2WhcNMjUxMjIyMTUwMDU2WjAzMTEwLwYDVQQD EyhmNjYxZDMwYzBmMGRjZGRjZDAwZWE2MTliMWNkYzIxMzIyZmQ5OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPw8/g++BCnVvRhhVh6g0Ecv3PQU O6sleHAAmuIwHsifphvsqxFPUC7CkfDGOCX0PXerS+yJuo2auV5TzlcqBZEq+W4g br8p+oeuSbkpOU4h181FpcTmCtpR3tNTQyc45Ab8IJO1n0YkOn+iAeaA/JnBmAbW nVR/WGNPGg+W0bFl98UoYS++wjPURXPkfdwuMivgWnDqg4JgdAnNQ+UCoxoFf2hR lvg5V8C9ierwvoZ52SNOe+TFXqelYskSkztv9LZlduKjg50lETnSQJOm+aIezbaF qo+ZAfQbhD0bBdNMJtLsO620ui6GadlbY/Z4/lzJAfOGtXrM9V319cgwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZh0wwPDc3c0A6mGbHNwhMi/ZlmMB8GA1UdIwQY MBaAFOKr9tPfU5u3wWhPtPRhedDaBrCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQt YjdhMWI0YWUxNTExLzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQtYjdhMWI0YWUxNTEx LzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHc0ucrm 0RxPjXbYGUDhrjFbOflO9umAXHBh4W0562cnQc2aeYHOSO/juJjKHJZBUTjI13/G bVZbUBj31SSHY2NMcWM11G2TzlkHRx7R7GdpJWi+dn3+ZoYcahd0vp3mzp3/wALN T0scF/dbN4Cq06fk/8z3u1v3u9xvJNAcwkl/c9KiH/bHtlfKiOW1fp0YbrOd2VlM XKi6SmeW1ZZZqVgVBZe3YACy3iHgsbP3xWXQdQLlS7CiMIXeiCYUSTCE0a3BAi+a qMhUYCEzF8D656fbxUH17NYDdQsy+qvNujuQOf1KtHLhL0aHJYPao/8cBmkTuU3G 7Go5wiK468Ji4A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:51 2025 by rpki-client