This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json) Hash identifier: TVHH8jUARBEaSFIxeQrTRwaTwoKfClqgzMxUnU0qSGA= Subject key identifier: C5:B5:88:BB:6D:43:65:0B:12:51:82:F0:E6:4B:99:F1:98:34:D2:41 Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Certificate serial: 019B390F21D6235B89A724B86C33E1218E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft Manifest number: 1887 Signing time: Sat 20 Dec 2025 00:00:51 +0000 Manifest this update: Sat 20 Dec 2025 00:00:51 +0000 Manifest next update: Sun 21 Dec 2025 00:00:51 +0000 Files and hashes: 1: 0KdeedL2T8Rp4WiBVO1IOf9Yktc.roa (hash: Nc/tWrHQyoi0hEQ+1RcEv6I0SBogxbOFgcOCweAWCBY=) 2: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: e6fGkS2JmKBumwSGVYlbA1mn7ndVlSo2AjdLf5NHjEM=) 3: 7RC3Heke14KWEkE1YfovjuS1AV4.roa (hash: 9kNgfJeVl3CqYFhxYkFKQO4Oj9G96rT+UBRZvsr6QiY=) 4: WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa (hash: Gvh794vOKgG0OwQ64JTnIyPSYhfW7Hev4v5ELJw0JcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:21:d6:23:5b:89:a7:24:b8:6c:33:e1:21:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Validity Not Before: Dec 20 00:00:51 2025 GMT Not After : Dec 21 00:00:51 2025 GMT Subject: CN=c5b588bb6d43650b125182f0e64b99f19834d241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:c5:9d:97:b0:69:f8:32:85:1d:68:8e:cf: 7e:dd:6e:c1:e5:7a:bf:3e:3c:04:41:dd:bd:2e:28: d2:39:ca:1f:58:35:67:05:91:22:9a:4b:07:2b:0f: 58:b3:46:a5:9e:32:f7:05:51:71:88:43:05:bc:48: 5e:52:75:5e:6a:9a:7d:87:f1:79:4b:8e:2c:c2:b3: 2a:dc:aa:de:9b:2a:24:52:52:f9:98:de:e0:0a:38: 60:d2:f2:13:bf:52:21:e5:6a:3f:52:4e:1c:c1:40: 81:e6:1d:c5:e2:d8:82:77:cd:d1:ca:e8:66:34:96: fd:b0:b8:eb:b2:0f:f1:4f:16:8f:fb:37:28:5a:59: 52:45:03:26:7e:12:17:aa:2f:39:35:b1:06:97:c8: 30:14:96:1c:63:3b:36:b9:a6:89:c7:12:02:18:d3: 9f:28:3d:c5:a2:43:a5:42:4c:38:f4:2d:ca:2a:6c: 00:a6:6e:2e:d7:7d:40:4f:40:bb:44:66:b2:04:ef: 9f:04:9a:43:10:1c:af:0d:36:c1:0e:b9:00:ea:70: 63:13:b4:c2:b6:4e:76:95:e0:6a:18:f1:1a:93:98: 50:84:fd:ef:b0:cb:1b:80:1e:c3:aa:e4:93:15:b5: 78:57:c7:e6:58:4e:7b:bd:b9:e6:25:d8:0d:f5:60: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:88:BB:6D:43:65:0B:12:51:82:F0:E6:4B:99:F1:98:34:D2:41 X509v3 Authority Key Identifier: keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:02:c6:28:0e:50:66:c0:42:71:62:56:8e:cb:cc:b2:bf: 91:e5:98:10:66:57:51:10:fe:6b:54:65:1d:39:a3:f0:1b:fb: 9c:fe:02:12:2b:e4:62:e2:c6:28:48:e5:bf:85:3f:74:98:8f: b8:d8:e5:f6:fc:a4:ac:10:2c:6a:cb:53:f4:05:5f:fb:3a:c1: 78:bd:e7:64:57:a8:52:3e:58:ac:c2:9b:50:24:43:90:e9:c8: ef:34:42:ae:56:0b:ea:6b:cd:85:e2:7f:15:52:06:9b:bd:13: 2c:d3:98:a4:f4:ed:48:5c:83:77:27:61:80:b3:11:c5:b3:1d: 22:0d:3d:ad:80:d7:63:e5:44:e3:ff:6d:4f:c7:19:70:c0:e4: 45:87:c6:67:3b:cf:7b:b3:c3:7b:13:7a:43:07:fd:21:4e:df: 3d:9a:ad:72:c7:42:14:ea:3b:2f:bd:08:cd:b8:52:6f:28:22: a6:7a:f9:82:f1:c6:c2:e7:93:5e:cc:e2:f8:68:73:ca:aa:47: 70:7c:c1:5c:50:ae:6c:b1:72:5a:90:52:0e:08:32:0a:47:82: f6:39:84:2b:da:c9:aa:58:4b:f8:4d:c8:6a:58:5d:c7:f7:6b: 1d:c6:14:e7:aa:3d:3d:3d:6a:a9:3c:03:a6:dc:7f:a3:b8:19: b7:cc:2b:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyHWI1uJpyS4bDPhIY4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi MzZjNmMwHhcNMjUxMjIwMDAwMDUxWhcNMjUxMjIxMDAwMDUxWjAzMTEwLwYDVQQD EyhjNWI1ODhiYjZkNDM2NTBiMTI1MTgyZjBlNjRiOTlmMTk4MzRkMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wzFnZewafgyhR1ojs9+3W7B5Xq/ PjwEQd29LijSOcofWDVnBZEimksHKw9Ys0alnjL3BVFxiEMFvEheUnVeapp9h/F5 S44swrMq3KremyokUlL5mN7gCjhg0vITv1Ih5Wo/Uk4cwUCB5h3F4tiCd83Ryuhm NJb9sLjrsg/xTxaP+zcoWllSRQMmfhIXqi85NbEGl8gwFJYcYzs2uaaJxxICGNOf KD3FokOlQkw49C3KKmwApm4u131AT0C7RGayBO+fBJpDEByvDTbBDrkA6nBjE7TC tk52leBqGPEak5hQhP3vsMsbgB7DquSTFbV4V8fmWE57vbnmJdgN9WCwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW1iLttQ2ULElGC8OZLmfGYNNJBMB8GA1UdIwQY MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt MDc0MDExNWI1YTUyLzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpUCxigO UGbAQnFiVo7LzLK/keWYEGZXURD+a1RlHTmj8Bv7nP4CEivkYuLGKEjlv4U/dJiP uNjl9vykrBAsastT9AVf+zrBeL3nZFeoUj5YrMKbUCRDkOnI7zRCrlYL6mvNheJ/ FVIGm70TLNOYpPTtSFyDdydhgLMRxbMdIg09rYDXY+VE4/9tT8cZcMDkRYfGZzvP e7PDexN6Qwf9IU7fPZqtcsdCFOo7L70IzbhSbygipnr5gvHGwueTXszi+GhzyqpH cHzBXFCubLFyWpBSDggyCkeC9jmEK9rJqlhL+E3Ialhdx/drHcYU56o9PT1qqTwD ptx/o7gZt8wrlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:28:01 2025 by rpki-client