This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json) Hash identifier: YwxuDLSXDN0XFSIrjQ7rWiF/eNnyuSK8YPHMLazxH7U= Subject key identifier: DD:61:1A:AE:E9:19:E0:30:15:D4:22:CC:FB:72:31:E9:72:BD:18:FE Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019B3A901CCC47F1300A7F2855DA1363D624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft Manifest number: 0DCF Signing time: Sat 20 Dec 2025 07:01:21 +0000 Manifest this update: Sat 20 Dec 2025 07:01:21 +0000 Manifest next update: Sun 21 Dec 2025 07:01:21 +0000 Files and hashes: 1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: toRpy6blv3tyuyg2YJBfZD7Z7CJ7d/sHEIcYn0hemIM=) 2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=) 3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=) 4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:1c:cc:47:f1:30:0a:7f:28:55:da:13:63:d6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Dec 20 07:01:21 2025 GMT Not After : Dec 21 07:01:21 2025 GMT Subject: CN=dd611aaee919e03015d422ccfb7231e972bd18fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:e3:91:53:f9:bc:78:42:58:95:1d:f5:06: e4:ba:63:9f:05:9c:56:ea:56:f2:0b:7f:6a:91:ab: e3:77:cd:74:8c:74:7c:65:08:ba:0e:96:19:08:75: 28:44:7b:f9:1c:48:cc:18:8d:ec:76:d4:cf:35:8b: 67:8b:fc:22:38:fe:08:66:e2:0e:61:4f:f2:2f:ab: 81:72:67:1e:3d:81:4c:0e:31:05:38:d4:2c:5a:89: 40:15:73:be:e7:96:30:1e:2f:d7:81:cf:e8:c6:d2: 70:80:0f:bb:99:40:eb:21:36:88:c3:64:62:55:a7: bf:84:f8:05:83:26:05:f5:3b:9a:b3:15:fb:b3:48: 3b:e1:74:53:76:3c:13:6f:44:ac:9e:1e:2a:32:86: 6e:69:b0:25:81:ed:7c:49:8c:6e:e8:2b:c7:e6:63: 5a:ce:ab:d8:7f:db:56:fb:1a:64:10:65:e3:53:72: 28:56:7b:ee:d1:3d:5f:a7:a5:80:04:ed:6c:88:59: fa:71:90:15:0d:e5:83:74:c3:3f:ed:2e:6c:68:56: 92:f6:b5:f8:bb:62:4e:f3:9b:a5:43:cb:84:cb:37: 19:03:08:f1:92:70:06:1c:2f:1c:4a:1d:c1:6e:94: 74:e9:4a:90:51:84:a1:4d:fd:09:ec:dd:17:2d:bd: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:1A:AE:E9:19:E0:30:15:D4:22:CC:FB:72:31:E9:72:BD:18:FE X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:bd:fb:98:ff:2e:5e:2a:a5:3d:22:8d:fc:f3:01:9f:94: 7e:4c:e7:89:75:d1:54:99:73:dd:f0:4c:9c:73:2c:bb:4f:3b: 85:e0:3c:0c:7f:e3:39:1b:b1:87:d7:a7:b4:dd:ba:71:c4:4a: c4:66:b7:64:21:f4:2c:79:2b:1f:c3:5c:a6:77:c8:a0:c5:b1: ed:41:c2:01:1f:d3:81:a4:1d:b6:f4:06:52:77:1e:0f:0c:dc: d5:4f:3b:bd:e3:2f:ae:99:66:b2:1b:02:35:1c:46:13:47:8f: d9:b4:02:6e:05:4c:a4:eb:f9:6c:e9:45:05:6a:a8:70:03:21: 6c:71:64:18:bd:ef:eb:1b:6c:7b:fe:f7:f3:e6:9d:a9:5b:4b: b8:e9:29:4e:d4:e4:e6:15:c1:a2:26:74:fc:5b:8e:4f:02:d4: df:e4:56:0d:ef:13:56:b3:6a:12:5b:8e:09:10:61:af:b5:d1: b2:2a:05:3c:4d:6c:7a:d6:9e:07:34:ed:b3:5e:f6:9c:92:b4: d5:d9:9d:f0:6d:33:d7:62:a1:1a:56:bf:74:38:b7:d5:ff:de: 64:5d:11:f3:b1:87:d8:29:30:08:7b:7d:84:e7:94:34:45:3e: 10:c2:56:0f:c0:5f:e1:c9:a9:79:31:66:5b:53:d1:bd:55:06: 44:a9:98:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kBzMR/EwCn8oVdoTY9YkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjUxMjIwMDcwMTIxWhcNMjUxMjIxMDcwMTIxWjAzMTEwLwYDVQQD EyhkZDYxMWFhZWU5MTllMDMwMTVkNDIyY2NmYjcyMzFlOTcyYmQxOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYPjkVP5vHhCWJUd9QbkumOfBZxW 6lbyC39qkavjd810jHR8ZQi6DpYZCHUoRHv5HEjMGI3sdtTPNYtni/wiOP4IZuIO YU/yL6uBcmcePYFMDjEFONQsWolAFXO+55YwHi/Xgc/oxtJwgA+7mUDrITaIw2Ri Vae/hPgFgyYF9TuasxX7s0g74XRTdjwTb0Ssnh4qMoZuabAlge18SYxu6CvH5mNa zqvYf9tW+xpkEGXjU3IoVnvu0T1fp6WABO1siFn6cZAVDeWDdMM/7S5saFaS9rX4 u2JO85ulQ8uEyzcZAwjxknAGHC8cSh3BbpR06UqQUYShTf0J7N0XLb08lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1hGq7pGeAwFdQizPtyMelyvRj+MB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuG9+5j/ Ll4qpT0ijfzzAZ+UfkzniXXRVJlz3fBMnHMsu087heA8DH/jORuxh9entN26ccRK xGa3ZCH0LHkrH8NcpnfIoMWx7UHCAR/TgaQdtvQGUnceDwzc1U87veMvrplmshsC NRxGE0eP2bQCbgVMpOv5bOlFBWqocAMhbHFkGL3v6xtse/738+adqVtLuOkpTtTk 5hXBoiZ0/FuOTwLU3+RWDe8TVrNqEluOCRBhr7XRsioFPE1setaeBzTts172nJK0 1dmd8G0z12KhGla/dDi31f/eZF0R87GH2CkwCHt9hOeUNEU+EMJWD8Bf4cmpeTFm W1PRvVUGRKmYxA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:06:36 2025 by rpki-client