This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json) Hash identifier: sX4hamQ6L27nsX6IcDHQCAUn45piuUPqcfESlQVQCSs= Subject key identifier: CD:82:74:67:DE:3A:AF:AF:69:F0:EA:36:2D:A3:02:A7:A8:F6:6A:75 Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Certificate serial: 019B620B08F62B97F2D9604E85EB46901076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft Manifest number: 04B6 Signing time: Sat 27 Dec 2025 23:00:48 +0000 Manifest this update: Sat 27 Dec 2025 23:00:48 +0000 Manifest next update: Sun 28 Dec 2025 23:00:48 +0000 Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: lLCBmRDNir2AzN+tHhVLVAO30JTiEN57Z3Td15KWZog=) 2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:08:f6:2b:97:f2:d9:60:4e:85:eb:46:90:10:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Validity Not Before: Dec 27 23:00:48 2025 GMT Not After : Dec 28 23:00:48 2025 GMT Subject: CN=cd827467de3aafaf69f0ea362da302a7a8f66a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:25:ca:a6:84:c8:10:b9:7d:46:ee:18:41: a9:32:81:db:4b:89:3d:24:11:19:08:fe:35:85:d3: 86:d8:65:7b:d7:25:fc:7a:f2:3d:24:1d:8f:83:a4: be:09:d7:3b:1c:e3:47:5f:26:3f:1f:c7:6b:c7:16: 35:4b:71:1a:75:60:5b:c6:57:31:80:01:ea:88:b9: a8:f5:bc:f6:cf:c4:42:6d:64:29:17:77:57:96:2a: 51:58:9c:bb:e2:4c:46:08:7c:b2:4c:a3:48:21:55: ef:6f:f9:5d:11:90:1e:5f:1b:da:f4:43:d9:7f:09: a7:44:08:ad:15:8e:f6:99:90:d0:0e:1c:c7:2b:8d: 01:ec:9e:dd:42:e1:94:79:0d:08:3b:76:b8:ee:70: b1:57:09:8a:2f:44:8d:54:59:ac:fa:31:09:a4:1c: b2:08:51:0c:a8:dc:93:ca:16:0d:7a:62:84:15:c3: 62:a9:91:31:77:f1:ea:18:99:3f:a5:86:31:0c:7f: d6:9e:a5:f3:95:e2:ac:cd:39:aa:3b:7c:1c:9a:43: 2d:2c:a2:89:69:6b:96:75:28:06:d2:38:28:c0:d0: 75:f2:05:a3:e2:e0:2c:f1:02:08:61:f8:ad:ef:fa: 4e:08:47:d2:73:60:55:62:d6:a4:77:34:e0:52:6b: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:74:67:DE:3A:AF:AF:69:F0:EA:36:2D:A3:02:A7:A8:F6:6A:75 X509v3 Authority Key Identifier: keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:36:73:78:fe:d1:81:43:4e:08:39:ce:bf:a1:7c:6b:fe:5d: ff:b5:2e:a2:19:9c:e0:6b:39:79:f4:db:31:6e:6c:82:89:99: 6d:7e:a4:3c:c7:61:6b:39:74:ef:f8:a1:9a:dc:fb:38:69:05: ca:a0:cb:d3:6f:f0:7a:54:4e:0a:1c:b4:1b:5e:f0:9f:10:4f: bb:9b:ae:c2:f6:d7:3b:2b:d4:4b:24:04:43:6e:e3:9d:e6:96: de:e1:d9:20:20:54:d5:ad:6e:6b:67:d7:57:f9:82:1c:fe:98: 15:cf:9a:48:af:8f:37:10:60:b2:fa:21:bd:f5:e4:63:16:50: 04:3b:c3:ad:75:4a:d9:d1:69:9a:80:67:c0:d6:fd:6b:c3:d5: f8:b3:98:61:e1:21:37:3e:c8:1c:da:16:3e:0b:72:cf:91:64: e7:4e:a5:1f:76:e8:58:4c:87:79:fc:09:1b:c8:d2:7d:0e:e1: 35:27:05:f4:04:50:52:df:62:45:88:7c:c5:d4:ef:1a:09:31: e4:1d:5b:a8:e4:30:6f:a7:2b:a9:ea:e2:36:5a:62:4b:5c:88: 6b:c1:8a:62:66:70:da:ab:da:b1:a0:5a:10:68:66:0b:bf:51: e1:3a:6c:00:cf:45:09:b1:2f:d7:ed:2a:2d:9d:ae:4e:93:6a: fa:ad:6c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCwj2K5fy2WBOhetGkBB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj YmZkZDQwHhcNMjUxMjI3MjMwMDQ4WhcNMjUxMjI4MjMwMDQ4WjAzMTEwLwYDVQQD EyhjZDgyNzQ2N2RlM2FhZmFmNjlmMGVhMzYyZGEzMDJhN2E4ZjY2YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pklyqaEyBC5fUbuGEGpMoHbS4k9 JBEZCP41hdOG2GV71yX8evI9JB2Pg6S+Cdc7HONHXyY/H8drxxY1S3EadWBbxlcx gAHqiLmo9bz2z8RCbWQpF3dXlipRWJy74kxGCHyyTKNIIVXvb/ldEZAeXxva9EPZ fwmnRAitFY72mZDQDhzHK40B7J7dQuGUeQ0IO3a47nCxVwmKL0SNVFms+jEJpByy CFEMqNyTyhYNemKEFcNiqZExd/HqGJk/pYYxDH/WnqXzleKszTmqO3wcmkMtLKKJ aWuWdSgG0jgowNB18gWj4uAs8QIIYfit7/pOCEfSc2BVYtakdzTgUmtInwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2CdGfeOq+vafDqNi2jAqeo9mp1MB8GA1UdIwQY MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0 LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzZzeP7R gUNOCDnOv6F8a/5d/7Uuohmc4Gs5efTbMW5sgomZbX6kPMdhazl07/ihmtz7OGkF yqDL02/welROChy0G17wnxBPu5uuwvbXOyvUSyQEQ27jneaW3uHZICBU1a1ua2fX V/mCHP6YFc+aSK+PNxBgsvohvfXkYxZQBDvDrXVK2dFpmoBnwNb9a8PV+LOYYeEh Nz7IHNoWPgtyz5Fk506lH3boWEyHefwJG8jSfQ7hNScF9ARQUt9iRYh8xdTvGgkx 5B1bqOQwb6crqeriNlpiS1yIa8GKYmZw2qvasaBaEGhmC79R4TpsAM9FCbEv1+0q LZ2uTpNq+q1syg== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:14 2025 by rpki-client