This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json) Hash identifier: Y2cPVJp3fTJP34bBNLKepzkwmmVg/65naavOWbzzB34= Subject key identifier: AF:E7:CD:80:73:82:BD:56:3D:39:44:BE:E6:30:D1:EC:B8:31:2C:AA Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d Certificate serial: 019B34C66B3140F8FFE0DD6C78750A34A0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft Manifest number: 0487 Signing time: Fri 19 Dec 2025 04:02:57 +0000 Manifest this update: Fri 19 Dec 2025 04:02:57 +0000 Manifest next update: Sat 20 Dec 2025 04:02:57 +0000 Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: WSx+P77PAwQ7a/EFbDTQzxqFqMToaYN5fxD3xdsNe+E=) 2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=) 3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=) 4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:6b:31:40:f8:ff:e0:dd:6c:78:75:0a:34:a0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d Validity Not Before: Dec 19 04:02:57 2025 GMT Not After : Dec 20 04:02:57 2025 GMT Subject: CN=afe7cd807382bd563d3944bee630d1ecb8312caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:d8:0d:99:d4:75:2b:be:84:64:f2:2d:e4: 8d:81:3d:51:31:c9:bf:5e:5a:7a:ba:1a:a4:a1:ab: c9:02:09:35:89:6e:cc:26:45:ee:13:ad:75:89:a4: 82:91:13:ef:76:da:7c:22:64:89:57:b2:c2:2e:0b: 48:f9:67:b3:75:d3:59:a4:2b:25:b3:94:e4:30:40: 6b:5d:a7:69:55:4e:d5:42:a3:69:a1:7a:bc:2a:e7: 44:f4:10:7d:6e:ff:c7:99:f3:4e:3c:82:7e:9b:4b: b7:2e:95:da:6a:74:6b:5e:96:39:3a:27:34:a6:2a: b4:50:b6:72:80:c0:26:cc:68:f7:d4:da:12:94:36: 15:f2:74:00:87:59:0b:59:b7:6a:9e:e8:41:0e:8c: 4b:fe:35:14:1b:a5:7e:aa:4d:1e:da:ea:e8:d8:29: cc:c7:fc:76:e5:d4:66:17:fa:a4:f5:66:da:fa:c5: 65:84:d9:33:c8:f6:60:a1:0d:18:c9:41:7f:25:6b: af:64:d7:c1:ce:2e:e1:94:1c:36:94:50:de:51:95: 85:50:b9:47:0f:0a:ad:24:9f:d7:9f:32:32:84:14: 27:9a:be:84:ad:25:90:ae:57:c3:f3:e4:3e:06:34: f0:fa:13:09:99:d4:33:a1:7a:84:98:f4:bc:e7:36: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:CD:80:73:82:BD:56:3D:39:44:BE:E6:30:D1:EC:B8:31:2C:AA X509v3 Authority Key Identifier: keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:db:dc:87:bd:dc:1b:8a:c8:47:25:93:f7:67:9f:1e:51: db:7e:76:3c:ec:48:65:dd:01:e4:33:eb:dc:4e:9d:5e:84:be: d7:be:a9:ab:d8:f3:6a:61:59:3a:81:1e:de:3f:67:bd:fb:b3: aa:34:25:f7:33:65:fa:93:33:2a:80:50:07:d4:8f:96:a0:00: d1:c9:70:9b:df:03:e6:15:da:0d:46:85:78:54:2f:89:06:e5: 5a:e5:aa:da:7c:b8:0b:5a:20:31:90:1d:1f:20:21:24:0f:77: 4b:2a:c5:db:76:96:77:7c:0a:fd:c7:07:e6:c5:6a:07:82:28: 54:6e:45:5d:c9:cf:5f:29:cc:05:80:1e:fb:72:f7:f7:d6:78: d4:18:cb:7b:91:c5:40:04:da:21:63:98:ab:b8:b8:b3:9e:26: 04:71:c8:6c:c1:23:43:b3:24:f7:d2:92:b9:a8:94:7f:5e:a7: 6d:d3:d2:4b:f0:f9:43:a4:9d:85:b0:d9:da:09:68:ad:55:53: 11:c8:06:d2:6a:c1:aa:41:2b:c1:e4:9b:0e:ac:53:ba:be:16: 9d:f1:5c:b6:b4:a5:f2:24:2a:fd:08:b3:e4:e3:81:de:5c:d3: 1c:89:ca:8b:b9:09:43:10:51:3e:62:5b:8d:24:38:20:ad:bc: 56:77:9f:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xmsxQPj/4N1seHUKNKDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw MzRkM2QwHhcNMjUxMjE5MDQwMjU3WhcNMjUxMjIwMDQwMjU3WjAzMTEwLwYDVQQD EyhhZmU3Y2Q4MDczODJiZDU2M2QzOTQ0YmVlNjMwZDFlY2I4MzEyY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvYDZnUdSu+hGTyLeSNgT1RMcm/ Xlp6uhqkoavJAgk1iW7MJkXuE611iaSCkRPvdtp8ImSJV7LCLgtI+WezddNZpCsl s5TkMEBrXadpVU7VQqNpoXq8KudE9BB9bv/HmfNOPIJ+m0u3LpXaanRrXpY5Oic0 piq0ULZygMAmzGj31NoSlDYV8nQAh1kLWbdqnuhBDoxL/jUUG6V+qk0e2uro2CnM x/x25dRmF/qk9Wba+sVlhNkzyPZgoQ0YyUF/JWuvZNfBzi7hlBw2lFDeUZWFULlH DwqtJJ/XnzIyhBQnmr6ErSWQrlfD8+Q+BjTw+hMJmdQzoXqEmPS85zYxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/nzYBzgr1WPTlEvuYw0ey4MSyqMB8GA1UdIwQY MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9zb3Ie9 3BuKyEclk/dnnx5R2352POxIZd0B5DPr3E6dXoS+176pq9jzamFZOoEe3j9nvfuz qjQl9zNl+pMzKoBQB9SPlqAA0clwm98D5hXaDUaFeFQviQblWuWq2ny4C1ogMZAd HyAhJA93SyrF23aWd3wK/ccH5sVqB4IoVG5FXcnPXynMBYAe+3L399Z41BjLe5HF QATaIWOYq7i4s54mBHHIbMEjQ7Mk99KSuaiUf16nbdPSS/D5Q6SdhbDZ2glorVVT EcgG0mrBqkErweSbDqxTur4WnfFctrSl8iQq/Qiz5OOB3lzTHInKi7kJQxBRPmJb jSQ4IK28VnefWw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:22:21 2025 by rpki-client