This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json) Hash identifier: No2vg4wrRaGtjTAh11eullFaj5ttspwUAKFYQ5PnKu4= Subject key identifier: C1:9C:D4:3C:5E:E5:DF:AE:29:94:E1:94:A4:25:F6:22:44:40:71:9E Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Certificate serial: 019B41DBA222392AA672173C8FC0F9677753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft Manifest number: 13C3 Signing time: Sun 21 Dec 2025 17:01:11 +0000 Manifest this update: Sun 21 Dec 2025 17:01:11 +0000 Manifest next update: Mon 22 Dec 2025 17:01:11 +0000 Files and hashes: 1: 1yffeEAlkHpCSPofwopCAZ2rRWc.roa (hash: oLYYyh0+bRIg5caImko3WBrhuFPOBEoNn3gpu+iT4Rs=) 2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: iZLuyUAz26YUf78i/tNwgwwErdD0v1U015NAg0sDX2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:a2:22:39:2a:a6:72:17:3c:8f:c0:f9:67:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Validity Not Before: Dec 21 17:01:11 2025 GMT Not After : Dec 22 17:01:11 2025 GMT Subject: CN=c19cd43c5ee5dfae2994e194a425f6224440719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:b8:58:fe:56:06:8b:29:6f:8d:f3:60:b2: 16:99:35:35:92:04:87:db:e2:06:69:24:5e:1c:c6: f8:2d:35:20:44:e6:69:40:20:7b:c6:83:76:ca:c7: 2b:3b:0d:f4:56:b4:60:61:19:1e:d3:4e:57:9e:98: 51:f2:4c:2a:90:e3:6b:cf:f6:c4:08:78:2f:f8:65: 75:79:64:3f:65:d8:80:9d:61:2b:44:1b:22:63:9b: c4:cc:61:42:36:19:92:df:c4:3c:a3:f0:47:20:03: 4c:79:6c:4a:95:1c:f0:d1:1d:e7:02:a5:2c:88:69: 2e:de:5c:cc:a0:c5:7b:0e:b0:f2:1f:7e:e5:82:37: 82:da:3e:d0:eb:78:bd:79:7f:cf:1f:da:58:b2:79: 11:83:08:fc:bf:10:a1:28:dc:ad:19:0a:cd:e6:90: 54:f7:64:38:b6:eb:30:39:ed:7d:c6:72:d3:c6:9e: 06:a5:55:28:31:ee:2e:b5:d2:a5:00:41:ec:5a:9a: 49:14:76:04:3a:22:20:19:9a:da:60:13:93:42:bc: ed:ba:ec:6d:51:3f:3f:12:eb:5e:0b:f4:d2:38:af: 1d:97:bb:0a:18:96:a1:64:0c:e7:33:83:ff:d8:5a: 2a:87:8d:6c:b0:5e:72:ad:1f:98:ea:00:1d:14:a5: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:D4:3C:5E:E5:DF:AE:29:94:E1:94:A4:25:F6:22:44:40:71:9E X509v3 Authority Key Identifier: keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:a2:dd:f5:75:60:07:b3:fe:d4:29:2f:97:d6:cc:e7:7f: 8f:5c:35:29:f9:d0:21:cb:12:85:a8:1e:94:c3:b9:41:3d:34: cd:4f:4c:d6:7d:b5:75:59:12:d7:df:44:85:eb:df:9e:4e:7c: 81:00:68:96:b7:a0:f5:6d:20:a9:97:ff:84:f8:20:a6:41:df: 81:59:dc:81:53:35:92:84:3f:ea:14:95:df:16:44:d3:ec:e9: f1:b1:a5:2b:4d:b3:a9:3d:a3:d2:9a:30:b6:fe:89:30:1c:27: ff:63:73:0f:a4:88:76:2d:e4:a3:c9:87:f5:fa:19:02:4b:10: 8b:f3:1b:84:2c:40:0b:e7:d0:be:36:55:a3:81:26:b1:34:79: 7e:0e:aa:ec:c7:eb:57:d9:ec:9c:4f:71:dd:6c:50:43:67:e7: d4:9e:fb:13:59:1d:11:b4:cd:e2:65:3b:e0:41:be:32:82:e7: 9a:7c:1a:63:4e:62:00:4b:13:80:68:bd:0d:96:7f:c7:49:ff: 22:fd:1c:08:d9:39:20:98:da:7c:6e:08:89:1a:9c:b2:c4:c8: 57:29:9a:8c:ba:79:87:62:b8:ee:01:de:2a:de:ac:9e:31:73: d2:97:a9:cd:aa:b8:a2:7e:75:46:59:78:4e:fa:b8:26:17:94: ee:65:c7:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB26IiOSqmchc8j8D5Z3dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0 YjVkNDMwHhcNMjUxMjIxMTcwMTExWhcNMjUxMjIyMTcwMTExWjAzMTEwLwYDVQQD EyhjMTljZDQzYzVlZTVkZmFlMjk5NGUxOTRhNDI1ZjYyMjQ0NDA3MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM+4WP5WBospb43zYLIWmTU1kgSH 2+IGaSReHMb4LTUgROZpQCB7xoN2yscrOw30VrRgYRke005XnphR8kwqkONrz/bE CHgv+GV1eWQ/ZdiAnWErRBsiY5vEzGFCNhmS38Q8o/BHIANMeWxKlRzw0R3nAqUs iGku3lzMoMV7DrDyH37lgjeC2j7Q63i9eX/PH9pYsnkRgwj8vxChKNytGQrN5pBU 92Q4tuswOe19xnLTxp4GpVUoMe4utdKlAEHsWppJFHYEOiIgGZraYBOTQrztuuxt UT8/EuteC/TSOK8dl7sKGJahZAznM4P/2Foqh41ssF5yrR+Y6gAdFKWIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGc1Dxe5d+uKZThlKQl9iJEQHGeMB8GA1UdIwQY MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt NzFlZWNmODk4ZDQyLzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaGi3fV1 YAez/tQpL5fWzOd/j1w1KfnQIcsShagelMO5QT00zU9M1n21dVkS199Ehevfnk58 gQBolreg9W0gqZf/hPggpkHfgVncgVM1koQ/6hSV3xZE0+zp8bGlK02zqT2j0pow tv6JMBwn/2NzD6SIdi3ko8mH9foZAksQi/MbhCxAC+fQvjZVo4EmsTR5fg6q7Mfr V9nsnE9x3WxQQ2fn1J77E1kdEbTN4mU74EG+MoLnmnwaY05iAEsTgGi9DZZ/x0n/ Iv0cCNk5IJjafG4IiRqcssTIVymajLp5h2K47gHeKt6snjFz0pepzaq4on51Rll4 Tvq4JheU7mXHew== -----END CERTIFICATE-----Generated at Mon Dec 22 00:21:00 2025 by rpki-client