This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json) Hash identifier: UJbCXLbVLLgA0jAIvzU0GlkPkScKlF3ZZwRczmTgkAg= Subject key identifier: 9F:76:96:84:06:E0:72:E5:30:66:E8:33:49:46:A5:DA:0B:7F:E2:7C Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f Certificate serial: 019B3EDB01B27F2DC9CF445DFFE779217898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 03:01:38 +0000 Manifest this update: Sun 21 Dec 2025 03:01:38 +0000 Manifest next update: Mon 22 Dec 2025 03:01:38 +0000 Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=) 2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: q03OqetJR2gYtBNVGq3JgbeDhNo0LaIHlC/FGiOIgvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:01:b2:7f:2d:c9:cf:44:5d:ff:e7:79:21:78:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f Validity Not Before: Dec 21 03:01:38 2025 GMT Not After : Dec 22 03:01:38 2025 GMT Subject: CN=9f76968406e072e53066e8334946a5da0b7fe27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:c0:5b:86:bf:3c:9b:f0:6e:f2:1a:c2:71: 1f:a4:46:a7:60:69:61:5f:c5:34:42:c2:0a:a1:78: e8:8a:2a:7d:bb:6f:e5:95:b2:91:c5:67:30:ea:aa: fb:d6:cf:c5:3e:8f:00:e4:d0:e0:d3:f8:5a:e3:39: 1e:bc:1f:2b:a7:bf:62:e6:06:46:f1:52:a4:d0:5d: 4a:a3:dc:6e:be:aa:82:b4:e4:b3:de:61:b1:98:2c: a9:84:18:68:41:d8:bd:2b:29:94:2f:3d:1d:28:43: 47:f9:99:7c:e2:9f:5a:ae:4d:de:73:e4:44:29:cd: 2c:00:b2:03:92:de:de:a7:46:84:2a:b1:cf:d2:5d: 5b:06:5c:4a:73:4c:be:49:dd:69:f1:ad:5c:0e:51: 3a:66:bc:a8:41:14:f4:96:29:57:7a:8a:d2:db:b2: 47:e1:8e:a6:fb:ad:b9:42:16:3d:e3:3c:2b:b6:5e: 5e:58:0f:e4:ac:df:a7:84:11:3e:1b:fe:5e:aa:1c: 0e:e4:37:91:25:3e:87:ee:41:ae:2d:f4:2c:08:69: 7d:be:b3:27:71:c8:38:10:9f:a1:d4:97:8d:ac:03: 4c:56:09:a4:5b:c7:34:e7:aa:1d:6c:80:f5:b8:78: cb:2b:6e:7b:f4:92:09:f9:c9:be:4b:dc:97:72:9a: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:76:96:84:06:E0:72:E5:30:66:E8:33:49:46:A5:DA:0B:7F:E2:7C X509v3 Authority Key Identifier: keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1d:49:9e:7b:4a:39:26:be:f9:c9:5a:8b:46:b3:02:cb:c0: fa:3c:d9:2c:d4:d0:24:5f:08:51:4e:8f:c3:3a:78:0c:6e:47: 9d:55:ba:e4:f3:66:cb:65:94:9f:88:50:58:e2:78:13:57:82: e3:c9:96:6c:2c:2d:3c:a9:af:e9:7d:32:52:a7:92:62:e6:85: 19:1a:bd:ab:d6:6f:cf:23:66:63:33:f4:b4:51:61:7d:d4:f4: ea:40:6a:b4:5c:b9:6d:7a:f1:65:20:e2:d4:70:30:61:3a:b8: 0f:e4:17:ff:22:04:a2:22:08:eb:88:64:e5:ba:de:f1:e2:f1: cf:5b:64:de:cb:43:b2:d8:db:6a:70:46:fe:da:97:27:71:94: 92:b2:4b:03:fb:8c:77:56:2b:8a:6d:8e:7e:14:ea:e3:92:04: 9d:fc:b8:d1:05:bd:8b:e4:53:37:1f:88:5e:19:5d:08:0a:81: 5c:ca:ff:44:49:77:1c:39:01:59:86:5a:6b:5c:f0:89:2e:aa: 91:2e:e8:b7:e9:c8:d5:51:a3:e8:a5:35:be:5c:98:f2:34:86: ad:ee:b6:04:34:cf:fe:27:54:2a:18:e4:63:9f:b1:86:e7:4e: 81:5f:0a:65:f0:84:32:c3:0b:75:ca:c3:6d:82:af:f0:77:86: 3c:c8:bd:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wGyfy3Jz0Rd/+d5IXiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw OTY4OWYwHhcNMjUxMjIxMDMwMTM4WhcNMjUxMjIyMDMwMTM4WjAzMTEwLwYDVQQD Eyg5Zjc2OTY4NDA2ZTA3MmU1MzA2NmU4MzM0OTQ2YTVkYTBiN2ZlMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLAW4a/PJvwbvIawnEfpEanYGlh X8U0QsIKoXjoiip9u2/llbKRxWcw6qr71s/FPo8A5NDg0/ha4zkevB8rp79i5gZG 8VKk0F1Ko9xuvqqCtOSz3mGxmCyphBhoQdi9KymULz0dKENH+Zl84p9ark3ec+RE Kc0sALIDkt7ep0aEKrHP0l1bBlxKc0y+Sd1p8a1cDlE6ZryoQRT0lilXeorS27JH 4Y6m+625QhY94zwrtl5eWA/krN+nhBE+G/5eqhwO5DeRJT6H7kGuLfQsCGl9vrMn ccg4EJ+h1JeNrANMVgmkW8c056odbID1uHjLK2579JIJ+cm+S9yXcpo8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ92loQG4HLlMGboM0lGpdoLf+J8MB8GA1UdIwQY MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR1JnntK OSa++clai0azAsvA+jzZLNTQJF8IUU6Pwzp4DG5HnVW65PNmy2WUn4hQWOJ4E1eC 48mWbCwtPKmv6X0yUqeSYuaFGRq9q9ZvzyNmYzP0tFFhfdT06kBqtFy5bXrxZSDi 1HAwYTq4D+QX/yIEoiII64hk5bre8eLxz1tk3stDstjbanBG/tqXJ3GUkrJLA/uM d1Yrim2OfhTq45IEnfy40QW9i+RTNx+IXhldCAqBXMr/REl3HDkBWYZaa1zwiS6q kS7ot+nI1VGj6KU1vlyY8jSGre62BDTP/idUKhjkY5+xhudOgV8KZfCEMsMLdcrD bYKv8HeGPMi9yg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:12 2025 by rpki-client