This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json) Hash identifier: s6sa4UE01OHuJHyPPzwBZ+qNaGpxjMu+I/qwNweC390= Subject key identifier: 59:2E:E8:55:2A:B7:33:7B:78:5D:BF:3C:E5:F0:94:73:CB:9B:6A:BA Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Certificate serial: 019B4EF284FE44007D9E16CB85EA5ED597AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft Manifest number: 0FFF Signing time: Wed 24 Dec 2025 06:01:15 +0000 Manifest this update: Wed 24 Dec 2025 06:01:15 +0000 Manifest next update: Thu 25 Dec 2025 06:01:15 +0000 Files and hashes: 1: 0mSInaOcQzcUaKnk3U9INfBb53Q.roa (hash: qM+YFRRYDhlfBg0HbT486tTWhmPISPFkNx0SGBRbZjE=) 2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: ZK/qOGrvrvFNIfOp3hdakLr7/d/2uaXlrAUphoWWfJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:84:fe:44:00:7d:9e:16:cb:85:ea:5e:d5:97:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Validity Not Before: Dec 24 06:01:15 2025 GMT Not After : Dec 25 06:01:15 2025 GMT Subject: CN=592ee8552ab7337b785dbf3ce5f09473cb9b6aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:a4:18:50:3c:cf:0b:7b:29:40:44:9f:50: 64:b0:41:b6:52:8e:5c:dc:6c:b8:c5:62:c1:07:55: cd:77:6c:be:72:3f:5f:8f:25:d6:a7:b2:a6:43:3f: 4f:b5:b3:fa:70:8e:a0:12:fc:04:98:3f:71:c7:6d: 0e:34:81:dd:04:ef:9c:6f:a4:8b:87:35:de:3f:a0: ef:9b:2c:53:2b:85:94:17:f1:9f:d6:c8:e5:55:f8: 47:61:38:e3:5a:88:0d:78:5b:b6:eb:10:e8:9f:8d: 4d:a1:cb:53:89:69:d5:45:44:4a:3f:23:63:3d:89: 0b:14:97:2c:fd:01:d1:53:e9:36:cc:fa:37:8a:e6: 9b:19:6f:af:0e:64:75:67:24:33:33:40:52:a7:46: 92:96:24:69:63:f8:96:98:73:56:21:8a:de:76:c3: c2:6a:da:19:8c:eb:97:c9:40:62:02:c4:8c:75:39: 3a:de:7e:ea:96:96:f5:82:c9:33:20:02:01:d5:c5: aa:c1:0e:83:d5:88:2c:67:ae:41:c3:d9:92:89:0f: 5d:22:be:1b:e4:63:a3:fa:a9:08:8b:66:ad:85:bc: 02:dc:ba:fe:1e:e3:dc:71:0d:49:cc:e2:96:bc:54: 1c:8b:6e:22:a5:9d:9a:d2:13:ba:13:67:c7:44:f8: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:E8:55:2A:B7:33:7B:78:5D:BF:3C:E5:F0:94:73:CB:9B:6A:BA X509v3 Authority Key Identifier: keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:58:bd:cf:e7:cc:b7:7b:ce:6e:26:ad:51:7a:0e:b9:c7:5b: 34:7c:1b:82:df:3e:b2:92:18:96:ed:51:b4:c4:71:17:68:d5: 83:ea:e6:ca:94:79:b6:a2:6c:18:dc:e4:72:ac:4c:47:b2:3b: 74:b5:b2:67:1d:a9:5a:df:9d:8f:4b:45:88:63:3a:70:79:c7: 3f:80:66:81:f5:fb:08:94:4c:ff:08:fd:27:d6:77:b5:30:c9: 6e:a0:38:b1:f6:d6:d3:64:99:43:55:60:cd:04:de:e3:02:1a: 26:80:03:80:0c:3d:69:be:53:28:dd:ac:11:bd:74:38:4f:5c: 43:24:a8:a1:c8:ed:9e:69:6c:5e:c0:0c:ef:39:88:25:1a:fe: 9e:a3:60:6d:de:22:1e:e4:60:e6:8f:b1:f6:56:56:50:0b:55: 2b:a1:5c:3a:01:44:84:5f:83:e1:71:3d:4c:1a:91:4d:80:a9: a0:b6:d5:8a:13:33:49:6b:d2:c2:0a:48:5e:30:8e:60:68:7a: e4:46:d2:48:b0:de:ea:0b:a7:87:40:59:63:f2:66:09:4f:11: 4a:9d:18:61:63:8f:a8:f0:03:f4:4c:d9:d8:9d:98:b8:97:82: 08:20:46:a1:41:cd:e6:59:c4:28:b2:df:2c:92:ba:30:a3:47: 96:60:29:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8oT+RAB9nhbLhepe1ZerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk ZWM4OTkwHhcNMjUxMjI0MDYwMTE1WhcNMjUxMjI1MDYwMTE1WjAzMTEwLwYDVQQD Eyg1OTJlZTg1NTJhYjczMzdiNzg1ZGJmM2NlNWYwOTQ3M2NiOWI2YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5GkGFA8zwt7KUBEn1BksEG2Uo5c 3Gy4xWLBB1XNd2y+cj9fjyXWp7KmQz9PtbP6cI6gEvwEmD9xx20ONIHdBO+cb6SL hzXeP6DvmyxTK4WUF/Gf1sjlVfhHYTjjWogNeFu26xDon41NoctTiWnVRURKPyNj PYkLFJcs/QHRU+k2zPo3iuabGW+vDmR1ZyQzM0BSp0aSliRpY/iWmHNWIYredsPC atoZjOuXyUBiAsSMdTk63n7qlpb1gskzIAIB1cWqwQ6D1YgsZ65Bw9mSiQ9dIr4b 5GOj+qkIi2athbwC3Lr+HuPccQ1JzOKWvFQci24ipZ2a0hO6E2fHRPiweQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFku6FUqtzN7eF2/POXwlHPLm2q6MB8GA1UdIwQY MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt YTRiZTE3MmM3NmJhLzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcli9z+fM t3vObiatUXoOucdbNHwbgt8+spIYlu1RtMRxF2jVg+rmypR5tqJsGNzkcqxMR7I7 dLWyZx2pWt+dj0tFiGM6cHnHP4BmgfX7CJRM/wj9J9Z3tTDJbqA4sfbW02SZQ1Vg zQTe4wIaJoADgAw9ab5TKN2sEb10OE9cQySoocjtnmlsXsAM7zmIJRr+nqNgbd4i HuRg5o+x9lZWUAtVK6FcOgFEhF+D4XE9TBqRTYCpoLbVihMzSWvSwgpIXjCOYGh6 5EbSSLDe6gunh0BZY/JmCU8RSp0YYWOPqPAD9EzZ2J2YuJeCCCBGoUHN5lnEKLLf LJK6MKNHlmApMg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:48 2025 by rpki-client