This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json) Hash identifier: 5CP3BrmjHd1+65BpTvElDnnuZqUun+a46XXXWRosmhE= Subject key identifier: AB:69:96:55:22:8F:65:47:3F:A9:4C:D3:76:C5:24:80:90:9D:2C:42 Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Certificate serial: 019B2B8B2CCF670971CEF4CB5C198ED32ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft Manifest number: 1242 Signing time: Wed 17 Dec 2025 09:01:39 +0000 Manifest this update: Wed 17 Dec 2025 09:01:39 +0000 Manifest next update: Thu 18 Dec 2025 09:01:39 +0000 Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=) 2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: KizMQIhFRnMWe0/f5ASkrlPPF53yWqpaiMCIE9hI5q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:2c:cf:67:09:71:ce:f4:cb:5c:19:8e:d3:2e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Validity Not Before: Dec 17 09:01:39 2025 GMT Not After : Dec 18 09:01:39 2025 GMT Subject: CN=ab699655228f65473fa94cd376c52480909d2c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:49:fb:e7:4a:c5:81:ff:58:e2:32:ee:7b: e4:ad:07:96:3b:ab:e4:4f:f2:ab:cc:20:93:b6:7e: 7a:17:e3:62:b0:be:e2:fb:53:50:0f:08:69:7a:de: 72:18:1d:61:24:a3:88:72:b3:0f:39:bb:dd:08:d5: fd:91:83:9e:f1:c7:e4:94:12:11:88:f6:60:1c:c2: b7:30:46:90:46:49:09:4a:87:34:92:2d:d7:87:18: 49:72:8b:bc:63:29:89:6b:90:7d:dd:8f:a5:be:4f: cd:6a:b5:59:ec:a6:b3:60:d2:6f:6e:7c:eb:f8:b5: b7:ed:00:70:4e:1f:e7:f8:d7:4c:c7:3e:b8:ec:f6: aa:57:09:6a:ce:0d:f4:4e:4d:e3:8f:cf:54:61:e2: 0b:c9:1e:7c:f6:c6:68:6b:6c:26:3e:e3:cb:e5:6f: f3:ad:58:57:6e:1d:83:9e:b4:0d:8c:83:7c:0e:c2: 7b:88:84:5c:16:b5:9b:1d:a3:80:7a:5a:43:17:bc: 3e:7d:44:1f:eb:7b:f6:fa:b8:3e:e3:0b:22:a8:7f: 28:5b:d7:2e:9f:ee:e8:9e:1a:fe:ba:60:5e:c1:a9: 8d:19:d3:16:71:b3:cc:c1:5e:0b:9a:4d:09:2b:cb: 7a:59:6e:a0:42:b6:6b:9a:e4:c3:46:79:7c:1f:c4: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:96:55:22:8F:65:47:3F:A9:4C:D3:76:C5:24:80:90:9D:2C:42 X509v3 Authority Key Identifier: keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:98:e9:74:8e:ce:f0:17:5a:a7:ee:09:d6:6a:1e:97:ab:f6: e2:cf:c5:b9:e3:1a:6f:d8:48:6c:da:94:f4:ad:75:c9:a2:9e: 61:ad:85:3f:92:9d:de:42:60:9a:a8:69:2a:70:8d:04:e5:1f: d3:f6:6b:a5:e6:6f:b7:f8:26:48:6b:90:78:dc:d5:be:b1:e4: 73:08:15:2c:4a:76:80:c9:e9:64:7a:3c:29:c5:b9:35:18:87: 8c:33:26:a5:18:14:f0:f1:39:51:4b:45:dd:cb:aa:0c:86:2f: 40:b4:e7:80:32:38:cc:92:82:25:44:92:0f:89:0c:6d:81:11: fe:6d:2a:48:b5:3e:f4:6e:92:7a:58:20:f3:9d:9c:2a:b3:fa: ad:db:d3:6f:5e:ed:8b:5f:0a:3b:3c:b8:a3:14:98:9b:3d:6a: 80:38:f3:55:11:6a:7c:06:93:94:76:33:55:4e:a4:61:cc:8f: 99:ce:b1:32:a7:79:e7:ef:f8:7d:64:74:3c:70:91:c0:7e:1d: 99:5c:5b:20:df:9a:52:c4:7e:b6:5d:63:08:08:13:91:2f:bd: 78:d2:c3:cb:18:e9:bc:a7:ca:74:0d:7a:61:d9:aa:09:d0:68: fb:82:30:99:e6:78:0f:1a:6a:0d:87:a1:6b:8c:4b:7c:38:a0: 34:ce:be:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriyzPZwlxzvTLXBmO0y7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0 NTk0ZGQwHhcNMjUxMjE3MDkwMTM5WhcNMjUxMjE4MDkwMTM5WjAzMTEwLwYDVQQD EyhhYjY5OTY1NTIyOGY2NTQ3M2ZhOTRjZDM3NmM1MjQ4MDkwOWQyYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5tJ++dKxYH/WOIy7nvkrQeWO6vk T/KrzCCTtn56F+NisL7i+1NQDwhpet5yGB1hJKOIcrMPObvdCNX9kYOe8cfklBIR iPZgHMK3MEaQRkkJSoc0ki3XhxhJcou8YymJa5B93Y+lvk/NarVZ7KazYNJvbnzr +LW37QBwTh/n+NdMxz647PaqVwlqzg30Tk3jj89UYeILyR589sZoa2wmPuPL5W/z rVhXbh2DnrQNjIN8DsJ7iIRcFrWbHaOAelpDF7w+fUQf63v2+rg+4wsiqH8oW9cu n+7onhr+umBewamNGdMWcbPMwV4Lmk0JK8t6WW6gQrZrmuTDRnl8H8SSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtpllUij2VHP6lM03bFJICQnSxCMB8GA1UdIwQY MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt NmI2ZmRiNTRiYTMxLzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5jpdI7O 8Bdap+4J1moel6v24s/FueMab9hIbNqU9K11yaKeYa2FP5Kd3kJgmqhpKnCNBOUf 0/ZrpeZvt/gmSGuQeNzVvrHkcwgVLEp2gMnpZHo8KcW5NRiHjDMmpRgU8PE5UUtF 3cuqDIYvQLTngDI4zJKCJUSSD4kMbYER/m0qSLU+9G6Selgg852cKrP6rdvTb17t i18KOzy4oxSYmz1qgDjzVRFqfAaTlHYzVU6kYcyPmc6xMqd55+/4fWR0PHCRwH4d mVxbIN+aUsR+tl1jCAgTkS+9eNLDyxjpvKfKdA16YdmqCdBo+4IwmeZ4DxpqDYeh a4xLfDigNM6+Jw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:16:00 2025 by rpki-client