This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json) Hash identifier: HbcNRs8WPQ0buoLiMNIE4WC1WG7dVH+RcqBa+MTQ3eE= Subject key identifier: 6E:7E:FE:56:B7:88:08:67:79:AC:E5:02:C5:D0:06:BA:7F:ED:F3:F3 Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040 Certificate serial: 019B50729A99E94A534D9677795AC94090B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft Manifest number: 0532 Signing time: Wed 24 Dec 2025 13:00:46 +0000 Manifest this update: Wed 24 Dec 2025 13:00:46 +0000 Manifest next update: Thu 25 Dec 2025 13:00:46 +0000 Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: hH/Maf6AYygqlWiblylhyvVdwbNJ8GoXuoxrONecKgk=) 2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:9a:99:e9:4a:53:4d:96:77:79:5a:c9:40:90:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e109e278c7862254c88755e4717398a552a49040 Validity Not Before: Dec 24 13:00:46 2025 GMT Not After : Dec 25 13:00:46 2025 GMT Subject: CN=6e7efe56b788086779ace502c5d006ba7fedf3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:d6:9e:80:cb:b9:1b:c1:d4:3c:0f:f3:46: 55:9c:1c:17:ba:90:82:c0:5d:95:c3:78:57:c5:74: 9c:0f:e9:14:cc:e4:cf:34:eb:b4:e9:81:e2:bc:db: 01:0f:b6:a5:0b:c2:00:4d:b0:34:ca:1f:8f:ab:9f: 8a:98:54:2e:7e:87:64:35:29:d9:89:9d:c0:4e:6d: e2:c5:d8:c4:45:79:f7:7b:f5:11:0d:49:bf:0d:e4: a7:a0:e0:4a:ea:1a:77:20:b5:26:be:59:c6:28:50: 8e:c5:c5:f0:81:08:f4:ab:3f:5b:9b:e1:9b:0f:24: 39:07:92:aa:d9:06:87:f8:2d:8e:bc:93:b2:02:3a: b5:a7:f4:37:e6:47:e8:48:b0:34:34:03:f2:84:e7: b9:71:8c:21:d1:95:00:7b:83:9c:c4:aa:47:1e:31: 87:a8:17:eb:00:a0:fa:ed:3a:ec:6a:36:88:c4:f2: 54:cf:46:57:0e:5d:97:ba:9a:b5:7d:1f:99:c7:a4: 80:c8:0e:5c:33:de:9c:47:2b:17:36:82:2c:db:87: 8a:be:2d:05:0e:c8:36:a7:33:95:93:d7:e2:0e:67: 38:a1:f0:d3:6a:af:b3:f8:ce:13:4b:65:7f:fb:8c: 65:60:5f:55:cc:e9:59:84:64:e4:b5:59:5d:0c:4c: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7E:FE:56:B7:88:08:67:79:AC:E5:02:C5:D0:06:BA:7F:ED:F3:F3 X509v3 Authority Key Identifier: keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f8:9c:78:5a:1e:b2:1f:bc:b8:08:9f:40:8d:89:ce:09:07: 15:7a:d2:ff:27:de:f4:da:97:e6:ec:25:bd:08:8e:83:67:d9: a6:98:72:64:df:40:08:43:87:6a:b3:90:e7:14:6d:d5:88:b3: 21:9e:4c:b6:2f:34:8b:47:6f:fe:9b:9c:fa:72:96:c1:ed:23: 9f:7c:ef:95:bc:1f:c1:f5:32:42:13:49:c8:03:3f:6e:8c:5d: 0e:b8:6c:41:c5:9d:90:ec:f8:66:41:1e:54:27:b9:0b:9d:48: 5f:2f:52:95:55:36:ae:35:9b:ae:97:52:1a:20:70:4b:ae:d8: 2a:67:5b:4b:69:c9:52:52:50:6a:56:37:c6:86:d9:2a:dc:ce: 85:5f:f5:cc:fd:e1:51:7d:31:06:a1:e4:3f:aa:a0:b4:23:d2: 0b:b9:cd:26:7a:83:f7:5d:31:4c:92:b1:2f:d0:5a:fe:fe:a9: 2c:6c:3a:93:a2:49:0c:d2:e6:4b:c0:36:d1:3d:1a:2e:7b:af: 18:b1:41:8d:2a:12:06:96:6f:1d:14:ca:45:d0:10:de:d8:42: e2:bd:d9:74:d0:b5:51:26:a0:25:ef:84:15:a8:bc:58:6a:00: fd:4b:5a:41:56:67:43:c3:8c:24:69:e8:fc:c3:e6:38:99:44: 2f:dd:21:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpqZ6UpTTZZ3eVrJQJCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh NDkwNDAwHhcNMjUxMjI0MTMwMDQ2WhcNMjUxMjI1MTMwMDQ2WjAzMTEwLwYDVQQD Eyg2ZTdlZmU1NmI3ODgwODY3NzlhY2U1MDJjNWQwMDZiYTdmZWRmM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwTWnoDLuRvB1DwP80ZVnBwXupCC wF2Vw3hXxXScD+kUzOTPNOu06YHivNsBD7alC8IATbA0yh+Pq5+KmFQufodkNSnZ iZ3ATm3ixdjERXn3e/URDUm/DeSnoOBK6hp3ILUmvlnGKFCOxcXwgQj0qz9bm+Gb DyQ5B5Kq2QaH+C2OvJOyAjq1p/Q35kfoSLA0NAPyhOe5cYwh0ZUAe4OcxKpHHjGH qBfrAKD67TrsajaIxPJUz0ZXDl2Xupq1fR+Zx6SAyA5cM96cRysXNoIs24eKvi0F Dsg2pzOVk9fiDmc4ofDTaq+z+M4TS2V/+4xlYF9VzOlZhGTktVldDEy+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5+/la3iAhneazlAsXQBrp/7fPzMB8GA1UdIwQY MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdficeFoe sh+8uAifQI2JzgkHFXrS/yfe9NqX5uwlvQiOg2fZpphyZN9ACEOHarOQ5xRt1Yiz IZ5Mti80i0dv/puc+nKWwe0jn3zvlbwfwfUyQhNJyAM/boxdDrhsQcWdkOz4ZkEe VCe5C51IXy9SlVU2rjWbrpdSGiBwS67YKmdbS2nJUlJQalY3xobZKtzOhV/1zP3h UX0xBqHkP6qgtCPSC7nNJnqD910xTJKxL9Ba/v6pLGw6k6JJDNLmS8A20T0aLnuv GLFBjSoSBpZvHRTKRdAQ3thC4r3ZdNC1USagJe+EFai8WGoA/UtaQVZnQ8OMJGno /MPmOJlEL90hmw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:21 2025 by rpki-client