This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json) Hash identifier: 6XMV4jo9hSTgGkeYbUapsNB4i+oL4nJBZIHVMCF+ASY= Subject key identifier: B3:CB:F4:A0:B9:1A:23:3B:14:10:A6:10:A3:0B:60:6F:EF:05:B7:5F Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c Certificate serial: 019B3FECE6B1C22CD30DA6EB919C7AD81710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft Manifest number: 0AE3 Signing time: Sun 21 Dec 2025 08:00:48 +0000 Manifest this update: Sun 21 Dec 2025 08:00:48 +0000 Manifest next update: Mon 22 Dec 2025 08:00:48 +0000 Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: ML3kK1jPJ4LR5uPNqzovjFygjix6PccV3SmlhQbmw6Y=) 2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:e6:b1:c2:2c:d3:0d:a6:eb:91:9c:7a:d8:17:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c Validity Not Before: Dec 21 08:00:48 2025 GMT Not After : Dec 22 08:00:48 2025 GMT Subject: CN=b3cbf4a0b91a233b1410a610a30b606fef05b75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:18:a9:d4:59:64:8f:59:3e:05:51:94:f2: ba:f3:8c:e4:a0:e9:41:97:ad:db:b2:20:6c:1c:8f: ed:64:81:72:76:c6:15:50:8e:9c:87:d2:16:50:a2: 28:39:85:5a:eb:a8:8b:d2:cb:1a:04:ef:ab:6f:88: 3f:c2:ce:7d:b8:88:82:d6:f9:3e:29:33:c8:e8:77: 2d:20:3a:0d:3a:45:28:d4:27:14:3a:cd:74:2a:20: 11:16:89:b1:fe:a7:20:65:29:f7:83:42:d8:7f:0d: d7:c3:a7:91:64:b0:9e:32:02:e2:ba:8a:72:33:ce: 65:dd:16:49:6d:23:c8:d0:02:14:5e:0f:83:d9:29: d1:37:30:d4:6c:a3:83:56:ec:95:45:77:39:bd:52: a6:d0:be:27:70:3a:cd:a4:ac:2e:0a:50:60:92:ff: e6:90:ea:9a:ea:94:3a:28:b1:b4:7c:61:88:06:9c: f3:7e:34:d3:15:c6:7a:aa:e1:14:2f:7e:5e:bd:4c: 34:1e:30:c9:a7:0d:2b:82:ef:2c:6e:a0:77:02:e1: 53:7e:81:e2:c4:e9:e7:98:c3:fd:dd:c8:2a:fc:50: cd:be:c1:44:e4:32:1d:aa:6b:f8:bf:7f:5a:6f:1d: de:6e:f0:70:82:f5:c4:98:47:ca:d6:35:97:2d:39: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CB:F4:A0:B9:1A:23:3B:14:10:A6:10:A3:0B:60:6F:EF:05:B7:5F X509v3 Authority Key Identifier: keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:de:73:a2:28:6e:c7:cc:92:93:cc:81:ff:7c:4e:65:1f:fc: 56:be:07:c7:e4:b9:e3:f9:16:a6:a8:78:f1:96:e3:43:be:19: 1e:4a:c2:49:1e:1d:b4:19:f0:ac:d7:aa:b1:eb:31:c5:90:85: 04:ce:7d:60:8d:8d:03:c5:df:b3:16:83:93:80:f9:39:52:7b: 1f:fc:0e:c8:b7:d9:f6:44:54:2b:e0:af:51:a4:68:a2:ce:cd: f1:dc:2d:a1:ad:10:0b:50:b8:54:a7:0c:3a:4a:1b:42:e5:a1: d5:42:7f:35:47:15:26:38:11:18:a8:8f:14:76:97:b6:af:4d: 6f:12:ab:63:e0:c6:c0:e4:71:8d:09:c9:a7:de:7a:7c:99:3e: 89:b3:eb:9b:18:72:3f:bb:f8:df:f2:0e:89:f1:bd:a5:d6:49: 79:5c:d5:a0:ba:63:95:74:f9:cf:92:83:7c:a0:66:16:39:d6: 79:52:89:b2:b0:f5:60:f7:5d:c7:a5:6e:4c:c1:fe:18:61:83: e8:d6:80:88:12:68:9c:ae:00:d3:da:e0:a6:08:8a:86:95:5b: ce:a8:92:dc:55:b3:04:dc:ed:ef:5b:2c:c3:16:8e:39:37:ab: 1b:1d:ab:e5:0c:df:c7:c3:62:58:5a:e7:e8:bc:92:28:a6:3d: 99:21:f6:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7OaxwizTDabrkZx62BcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNDFjODViNDc0ZThiNmMwMDg5MWQ5NTQxMjRmZjBjODEy MDBkOGMwHhcNMjUxMjIxMDgwMDQ4WhcNMjUxMjIyMDgwMDQ4WjAzMTEwLwYDVQQD EyhiM2NiZjRhMGI5MWEyMzNiMTQxMGE2MTBhMzBiNjA2ZmVmMDViNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0MYqdRZZI9ZPgVRlPK684zkoOlB l63bsiBsHI/tZIFydsYVUI6ch9IWUKIoOYVa66iL0ssaBO+rb4g/ws59uIiC1vk+ KTPI6HctIDoNOkUo1CcUOs10KiARFomx/qcgZSn3g0LYfw3Xw6eRZLCeMgLiuopy M85l3RZJbSPI0AIUXg+D2SnRNzDUbKODVuyVRXc5vVKm0L4ncDrNpKwuClBgkv/m kOqa6pQ6KLG0fGGIBpzzfjTTFcZ6quEUL35evUw0HjDJpw0rgu8sbqB3AuFTfoHi xOnnmMP93cgq/FDNvsFE5DIdqmv4v39abx3ebvBwgvXEmEfK1jWXLTki3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPL9KC5GiM7FBCmEKMLYG/vBbdfMB8GA1UdIwQY MBaAFOBByFtHTotsAIkdlUEk/wyBIA2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMt NDZiYjNmYTI4YjAwLzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMtNDZiYjNmYTI4YjAw LzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZN5zoihu x8ySk8yB/3xOZR/8Vr4Hx+S54/kWpqh48ZbjQ74ZHkrCSR4dtBnwrNeqsesxxZCF BM59YI2NA8XfsxaDk4D5OVJ7H/wOyLfZ9kRUK+CvUaRoos7N8dwtoa0QC1C4VKcM OkobQuWh1UJ/NUcVJjgRGKiPFHaXtq9NbxKrY+DGwORxjQnJp956fJk+ibPrmxhy P7v43/IOifG9pdZJeVzVoLpjlXT5z5KDfKBmFjnWeVKJsrD1YPddx6VuTMH+GGGD 6NaAiBJonK4A09rgpgiKhpVbzqiS3FWzBNzt71sswxaOOTerGx2r5Qzfx8NiWFrn 6LySKKY9mSH2RQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:20 2025 by rpki-client