This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json) Hash identifier: Lj74W+G7C7K6gr0qeYiuTxDW8LjSB5KREBhbNwpPqTo= Subject key identifier: 72:1D:4E:B4:FA:D1:D4:1C:BD:82:DE:B3:95:69:39:A2:90:DB:81:2F Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Certificate serial: 019B3F7F03A14AE9984A3373B2BC74622E98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft Manifest number: 0CE1 Signing time: Sun 21 Dec 2025 06:00:47 +0000 Manifest this update: Sun 21 Dec 2025 06:00:47 +0000 Manifest next update: Mon 22 Dec 2025 06:00:47 +0000 Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: dKHwWmdqxgAcYPMO6mMaPheF7L8YogZGFZeN7iv2Uq8=) 2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:03:a1:4a:e9:98:4a:33:73:b2:bc:74:62:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d Validity Not Before: Dec 21 06:00:47 2025 GMT Not After : Dec 22 06:00:47 2025 GMT Subject: CN=721d4eb4fad1d41cbd82deb3956939a290db812f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:e6:ec:de:1b:8f:00:4b:63:f3:02:bc:3a: d7:f4:f1:64:14:dd:66:df:6b:96:03:77:6a:79:a3: 66:8e:e4:73:a7:12:5a:37:9a:95:65:32:ea:e9:5f: a4:01:e5:74:41:20:34:89:3b:04:3e:62:34:1a:1e: 2e:a4:44:12:53:d8:44:e8:15:3a:bf:06:4d:5c:01: 28:9e:ea:e5:88:61:7e:b6:4c:ce:ae:f9:04:5e:9c: b5:cd:98:e3:69:6c:12:16:6b:d7:e6:84:97:f9:e5: ed:bc:ab:26:2e:09:22:2f:72:fb:07:6b:85:0e:a8: 49:aa:40:aa:2d:b9:be:04:a4:48:63:b3:85:21:1a: f5:f6:20:8a:5d:e8:71:2c:63:0a:8c:e6:c7:3f:17: 33:82:0c:0d:6e:38:78:d4:e7:33:4a:75:dc:7c:19: 48:cf:64:9f:0a:6e:7e:af:dc:0d:29:b1:c8:7b:cc: 45:8b:2d:dc:94:13:74:7e:92:89:54:a3:cc:24:8b: 79:76:a5:0d:29:bc:ae:ec:10:0f:2f:51:32:bb:25: 61:9a:ad:53:1c:e6:ba:f9:d0:5c:35:e6:f8:19:22: 93:ed:f5:4c:5f:17:4c:dd:be:37:da:63:c1:be:96: 8e:3c:c1:b3:a5:de:7a:d0:0a:c2:e3:fe:e7:d1:07: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:4E:B4:FA:D1:D4:1C:BD:82:DE:B3:95:69:39:A2:90:DB:81:2F X509v3 Authority Key Identifier: keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bb:1c:c6:b1:66:01:c5:d0:74:ae:7a:ff:2a:50:32:5b:c6: bb:db:cf:d3:ce:de:e8:77:1d:06:62:6a:f4:88:cb:62:fa:cb: b0:ec:71:d9:f4:c2:e8:01:ef:22:6b:41:8f:92:2d:d7:85:04: 79:95:3c:9c:29:76:d5:00:1b:09:3a:6b:6a:1f:80:34:a4:1b: 92:5b:7d:3d:02:c4:ac:9d:5c:c3:6c:d1:66:59:e5:ad:0d:1d: 70:a1:dc:f4:ff:52:6c:2e:fd:11:a1:6e:a3:0e:c2:b0:ab:c3: b0:54:59:ce:80:94:d6:9e:86:fb:49:71:b0:3b:66:81:4b:21: 5e:af:8b:bd:6c:8d:de:23:4c:94:3e:01:48:0c:0f:67:59:2a: 64:54:c0:f1:82:7c:d5:6a:ee:0d:d0:66:9c:bc:49:2f:6d:64: 05:1f:3e:c4:16:7c:68:ac:5a:13:16:1e:ad:8b:3a:cb:ef:9f: be:36:c6:54:6e:7e:19:a8:9b:f4:21:30:02:a7:7c:c4:be:1c: 9a:8e:84:9a:fa:61:d0:13:47:6c:92:b1:8c:09:f2:2f:ce:a8: 13:23:cf:96:30:50:ea:56:96:dd:72:ce:13:0a:ed:e5:a8:5f: 0e:d3:11:6d:83:38:58:b8:4e:9b:ce:3b:0a:97:7c:d1:2e:be: 39:8f:b0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwOhSumYSjNzsrx0Yi6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1 NjVlOWQwHhcNMjUxMjIxMDYwMDQ3WhcNMjUxMjIyMDYwMDQ3WjAzMTEwLwYDVQQD Eyg3MjFkNGViNGZhZDFkNDFjYmQ4MmRlYjM5NTY5MzlhMjkwZGI4MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Dm7N4bjwBLY/MCvDrX9PFkFN1m 32uWA3dqeaNmjuRzpxJaN5qVZTLq6V+kAeV0QSA0iTsEPmI0Gh4upEQSU9hE6BU6 vwZNXAEonurliGF+tkzOrvkEXpy1zZjjaWwSFmvX5oSX+eXtvKsmLgkiL3L7B2uF DqhJqkCqLbm+BKRIY7OFIRr19iCKXehxLGMKjObHPxczggwNbjh41OczSnXcfBlI z2SfCm5+r9wNKbHIe8xFiy3clBN0fpKJVKPMJIt5dqUNKbyu7BAPL1EyuyVhmq1T HOa6+dBcNeb4GSKT7fVMXxdM3b432mPBvpaOPMGzpd560ArC4/7n0Qc/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIdTrT60dQcvYLes5VpOaKQ24EvMB8GA1UdIwQY MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7scxrFm AcXQdK56/ypQMlvGu9vP087e6HcdBmJq9IjLYvrLsOxx2fTC6AHvImtBj5It14UE eZU8nCl21QAbCTprah+ANKQbklt9PQLErJ1cw2zRZlnlrQ0dcKHc9P9SbC79EaFu ow7CsKvDsFRZzoCU1p6G+0lxsDtmgUshXq+LvWyN3iNMlD4BSAwPZ1kqZFTA8YJ8 1WruDdBmnLxJL21kBR8+xBZ8aKxaExYerYs6y++fvjbGVG5+Gaib9CEwAqd8xL4c mo6Emvph0BNHbJKxjAnyL86oEyPPljBQ6laW3XLOEwrt5ahfDtMRbYM4WLhOm847 Cpd80S6+OY+wiA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:42:33 2025 by rpki-client