This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json) Hash identifier: foeBvu7zefz2B3Coj/hKkoPGN5zlSGnfZod2Xg8Zh/Y= Subject key identifier: 45:DD:F3:36:3D:83:16:3B:A1:1D:2F:EC:B3:3E:0A:18:75:C2:9C:AE Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040 Certificate serial: 019B61D3FEAF8E3FB436112A142A7BBD1596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft Manifest number: 053B Signing time: Sat 27 Dec 2025 22:00:41 +0000 Manifest this update: Sat 27 Dec 2025 22:00:41 +0000 Manifest next update: Sun 28 Dec 2025 22:00:41 +0000 Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: uzFX7dgi9tXshfL2CTzJ0NBxVFMTJRvLP9JnWC5a/CU=) 2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d3:fe:af:8e:3f:b4:36:11:2a:14:2a:7b:bd:15:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e109e278c7862254c88755e4717398a552a49040 Validity Not Before: Dec 27 22:00:41 2025 GMT Not After : Dec 28 22:00:41 2025 GMT Subject: CN=45ddf3363d83163ba11d2fecb33e0a1875c29cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:a0:5d:f1:80:98:6a:e7:45:35:d1:6c:20: d5:0b:5f:b3:22:b9:ff:7e:9a:49:a9:95:48:6a:5a: d7:9c:17:f4:ce:a7:74:b9:c6:96:1a:fa:8a:ca:3c: b8:8d:fa:6f:4f:64:7b:99:ee:44:b6:65:0a:d2:cb: 8f:24:71:8b:44:7a:04:37:23:48:da:a7:df:9a:12: 14:9b:1a:0d:2b:ed:09:d3:92:e2:a7:50:ed:67:22: bf:cd:6b:3b:10:4e:e9:b6:64:b8:60:f5:1e:0e:1e: 17:c9:0b:71:3d:32:4f:dc:6b:54:91:e9:50:2b:26: 42:71:09:28:e5:93:7d:e3:71:b3:ad:53:2a:cc:29: c0:e3:5a:1f:ab:da:d4:40:62:ac:52:46:0c:bc:3a: fd:88:c1:2c:b7:34:e8:2e:dd:fd:c6:b8:7c:f5:42: 81:55:45:e8:8b:ba:17:fa:8f:f0:dd:01:b7:7b:4e: 25:3f:61:ea:8b:88:5f:20:27:49:87:be:b4:7a:68: 34:cf:42:79:ef:92:79:bd:57:69:0a:50:38:cf:fb: ff:ce:18:d9:1d:d3:82:09:bb:69:0e:b0:c5:45:af: 72:25:08:d3:3c:94:19:f9:15:a8:1e:2b:57:2f:ab: a5:8f:8f:7f:9e:9a:f3:00:7f:31:04:23:a5:c6:46: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DD:F3:36:3D:83:16:3B:A1:1D:2F:EC:B3:3E:0A:18:75:C2:9C:AE X509v3 Authority Key Identifier: keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:be:33:34:7c:f3:06:9d:5a:4d:fb:d2:7c:73:ad:dc:55:4b: 2e:d4:bc:f3:2a:fe:68:12:24:48:83:6f:0a:25:96:8a:94:13: 6b:8f:ca:e5:51:35:39:96:58:c0:19:39:fe:81:e3:80:e5:98: 28:40:a3:9b:ff:7e:aa:7f:03:7c:a6:39:57:9a:3d:7a:07:5f: 57:ab:37:6f:1d:4f:77:e0:dd:b9:05:6b:a0:a7:b5:88:d6:f6: 79:2a:e2:14:82:7c:1d:9c:8a:7b:24:51:06:06:a4:e5:41:04: cc:80:32:d2:2f:fc:4a:ad:3d:ef:62:e9:60:b6:68:79:20:7d: 2a:07:d2:3c:f3:e4:32:de:1f:56:93:dd:e6:ae:22:e3:41:a6: 43:da:9a:84:a6:f3:c4:ef:e8:a6:bd:fa:ca:3d:5f:1d:3f:09: f0:9d:e6:eb:1c:77:d8:28:4c:4e:47:48:50:41:b3:9b:a9:0c: 87:d1:2e:5d:1a:99:8a:e9:7a:a7:80:9d:0a:c8:b8:18:3b:e6: 00:25:6b:ee:cf:6a:02:6b:d4:1d:c2:5d:11:7f:cc:03:8c:8d: ea:70:85:4d:75:91:8f:e4:a5:3f:5c:9b:f2:dc:2f:e7:6b:d4: 45:87:db:12:d9:57:46:08:8f:1b:ce:03:32:af:7e:0c:9b:a1: a8:f0:ff:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth0/6vjj+0NhEqFCp7vRWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh NDkwNDAwHhcNMjUxMjI3MjIwMDQxWhcNMjUxMjI4MjIwMDQxWjAzMTEwLwYDVQQD Eyg0NWRkZjMzNjNkODMxNjNiYTExZDJmZWNiMzNlMGExODc1YzI5Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LugXfGAmGrnRTXRbCDVC1+zIrn/ fppJqZVIalrXnBf0zqd0ucaWGvqKyjy4jfpvT2R7me5EtmUK0suPJHGLRHoENyNI 2qffmhIUmxoNK+0J05Lip1DtZyK/zWs7EE7ptmS4YPUeDh4XyQtxPTJP3GtUkelQ KyZCcQko5ZN943GzrVMqzCnA41ofq9rUQGKsUkYMvDr9iMEstzToLt39xrh89UKB VUXoi7oX+o/w3QG3e04lP2Hqi4hfICdJh760emg0z0J575J5vVdpClA4z/v/zhjZ HdOCCbtpDrDFRa9yJQjTPJQZ+RWoHitXL6ulj49/nprzAH8xBCOlxkYJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXd8zY9gxY7oR0v7LM+Chh1wpyuMB8GA1UdIwQY MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp74zNHzz Bp1aTfvSfHOt3FVLLtS88yr+aBIkSINvCiWWipQTa4/K5VE1OZZYwBk5/oHjgOWY KECjm/9+qn8DfKY5V5o9egdfV6s3bx1Pd+DduQVroKe1iNb2eSriFIJ8HZyKeyRR Bgak5UEEzIAy0i/8Sq0972LpYLZoeSB9KgfSPPPkMt4fVpPd5q4i40GmQ9qahKbz xO/opr36yj1fHT8J8J3m6xx32ChMTkdIUEGzm6kMh9EuXRqZiul6p4CdCsi4GDvm ACVr7s9qAmvUHcJdEX/MA4yN6nCFTXWRj+SlP1yb8twv52vURYfbEtlXRgiPG84D Mq9+DJuhqPD/dA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:36 2025 by rpki-client