This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json) Hash identifier: ETpcAty6sVX2kKuUyPhs4aXR9OhL1hp6upQFapo1ShA= Subject key identifier: 1A:4A:BD:4B:5D:2D:2E:A9:78:C6:49:0F:C9:38:5A:6B:0D:4A:A1:4E Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Certificate serial: 019B619D8DFCD91AA1980BC7C8D68E1DB474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft Manifest number: 0920 Signing time: Sat 27 Dec 2025 21:01:13 +0000 Manifest this update: Sat 27 Dec 2025 21:01:13 +0000 Manifest next update: Sun 28 Dec 2025 21:01:13 +0000 Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: QYFHsMdOgyF5recVyVFRqaxLfMxfFE+tbw7QPGD80Lo=) 2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:8d:fc:d9:1a:a1:98:0b:c7:c8:d6:8e:1d:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9 Validity Not Before: Dec 27 21:01:13 2025 GMT Not After : Dec 28 21:01:13 2025 GMT Subject: CN=1a4abd4b5d2d2ea978c6490fc9385a6b0d4aa14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:06:03:e1:28:c5:c8:15:55:ed:62:a4:c0: 4f:01:6f:7c:fe:75:df:ec:3c:f6:28:39:70:03:72: 08:b2:db:ad:99:9d:58:cc:6d:03:2a:f2:0c:a9:6c: a1:ed:18:93:46:a0:e4:3a:c7:16:87:6d:6e:95:66: d0:98:f4:99:aa:99:8b:d1:1a:2d:64:39:b2:78:9e: ba:cc:6b:a6:18:68:b1:98:76:59:fd:6b:6b:53:98: 85:f6:57:d1:59:b3:3d:1f:a7:54:33:90:9c:c8:22: 35:4b:8a:9d:c3:26:a1:65:4d:c6:4b:94:c6:1a:33: 39:92:05:e5:cc:28:2d:ca:c6:e3:10:47:23:31:e8: 25:33:bb:c7:6a:48:3e:b9:da:2a:39:e0:fe:42:b9: 7a:3a:d2:4c:e3:d2:02:b1:1a:e5:cd:f1:40:75:9b: 90:fa:97:86:a3:0e:f4:f5:0c:1f:79:4b:5d:8d:00: 2a:c1:e5:e5:73:38:e1:b5:5c:20:08:cf:58:7a:46: 66:d5:c3:3d:3c:5c:5b:1d:9c:26:c2:5b:8a:87:f5: 1d:dd:ce:9e:fd:0f:2c:7c:3c:18:3b:e1:5b:2d:cc: a4:bc:a5:6c:bc:9c:e9:63:c9:60:34:c0:fb:e1:b2: 16:4b:9b:82:6e:25:53:ab:75:39:c2:b9:23:7c:d5: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4A:BD:4B:5D:2D:2E:A9:78:C6:49:0F:C9:38:5A:6B:0D:4A:A1:4E X509v3 Authority Key Identifier: keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:25:da:5e:29:e7:07:69:87:0e:53:b0:06:c8:09:b4:b0:5e: 22:ab:a4:c6:c4:18:02:5b:7c:ef:1e:f2:4e:b7:68:7c:b9:0e: 4e:7e:56:7d:07:a5:ef:28:1f:32:3f:a8:06:de:ad:02:c0:7f: ba:b5:62:22:7b:d0:18:2a:75:f6:d2:ae:c4:90:74:c2:71:14: 86:8f:22:06:91:3e:cf:2a:8a:11:22:6b:cf:fd:88:8d:73:c1: b2:98:cf:5e:de:51:ef:a1:49:4f:5a:78:fc:96:b8:79:aa:14: 8a:31:e0:42:92:2f:45:7c:d3:15:85:38:31:31:59:1f:9c:a1: 9d:d3:3e:a0:d1:d4:43:64:f6:01:1f:54:66:a8:c1:e2:e0:ab: 0f:56:34:62:7b:1d:1e:62:ab:4f:10:b7:18:a0:16:b2:6f:bf: 12:bc:c7:0b:db:c6:ee:c5:f8:61:7e:33:4d:29:b1:06:58:98: 8b:2e:5a:94:1c:08:d2:9e:76:e6:c2:a2:b0:86:42:f9:3a:4a: fb:05:33:8f:6b:b4:35:ef:7d:ee:b7:5a:41:80:e4:9d:37:cf: 02:89:40:52:a8:d1:b2:ad:f4:76:32:0d:2d:26:41:65:59:dd: 14:8c:b9:41:2e:a2:08:0b:32:35:8c:0a:7f:0f:b9:40:93:b5: b0:9c:69:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnY382RqhmAvHyNaOHbR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5 YzUzZDkwHhcNMjUxMjI3MjEwMTEzWhcNMjUxMjI4MjEwMTEzWjAzMTEwLwYDVQQD EygxYTRhYmQ0YjVkMmQyZWE5NzhjNjQ5MGZjOTM4NWE2YjBkNGFhMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUGA+EoxcgVVe1ipMBPAW98/nXf 7Dz2KDlwA3IIstutmZ1YzG0DKvIMqWyh7RiTRqDkOscWh21ulWbQmPSZqpmL0Rot ZDmyeJ66zGumGGixmHZZ/WtrU5iF9lfRWbM9H6dUM5CcyCI1S4qdwyahZU3GS5TG GjM5kgXlzCgtysbjEEcjMeglM7vHakg+udoqOeD+Qrl6OtJM49ICsRrlzfFAdZuQ +peGow709QwfeUtdjQAqweXlczjhtVwgCM9YekZm1cM9PFxbHZwmwluKh/Ud3c6e /Q8sfDwYO+FbLcykvKVsvJzpY8lgNMD74bIWS5uCbiVTq3U5wrkjfNU26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpKvUtdLS6peMZJD8k4WmsNSqFOMB8GA1UdIwQY MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCXaXinn B2mHDlOwBsgJtLBeIqukxsQYAlt87x7yTrdofLkOTn5WfQel7ygfMj+oBt6tAsB/ urViInvQGCp19tKuxJB0wnEUho8iBpE+zyqKESJrz/2IjXPBspjPXt5R76FJT1p4 /Ja4eaoUijHgQpIvRXzTFYU4MTFZH5yhndM+oNHUQ2T2AR9UZqjB4uCrD1Y0Ynsd HmKrTxC3GKAWsm+/ErzHC9vG7sX4YX4zTSmxBliYiy5alBwI0p525sKisIZC+TpK +wUzj2u0Ne997rdaQYDknTfPAolAUqjRsq30djINLSZBZVndFIy5QS6iCAsyNYwK fw+5QJO1sJxp8w== -----END CERTIFICATE-----Generated at Sun Dec 28 06:23:45 2025 by rpki-client