This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json) Hash identifier: fqcnh+bIF1EwNAOsviKsffWwtqZEI2OHkBa3C3nnw78= Subject key identifier: 33:5D:7E:08:27:20:69:21:E4:58:54:A0:2B:7F:65:E2:42:BC:BC:5A Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Certificate serial: 019B41367C93C75A6B1F5A65439409E0A924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft Manifest number: 04A5 Signing time: Sun 21 Dec 2025 14:00:48 +0000 Manifest this update: Sun 21 Dec 2025 14:00:48 +0000 Manifest next update: Mon 22 Dec 2025 14:00:48 +0000 Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: d+ugugRBeUjUzlrMJWCl9/Qgt8n7BrI6BZqTOu5Culk=) 2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:7c:93:c7:5a:6b:1f:5a:65:43:94:09:e0:a9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Validity Not Before: Dec 21 14:00:48 2025 GMT Not After : Dec 22 14:00:48 2025 GMT Subject: CN=335d7e0827206921e45854a02b7f65e242bcbc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:d4:40:43:30:09:9e:69:21:5b:a8:59:e2: 5e:75:c3:72:6d:2f:18:84:85:fd:d6:f1:3b:dc:12: f3:08:0a:91:3b:31:a1:9c:45:19:cb:37:2a:f8:59: fa:d0:80:a6:ff:6f:59:15:19:a2:ec:ea:f8:ce:2f: d7:26:96:7f:ac:8c:d4:7e:01:f2:a3:70:dc:4b:7a: 93:eb:8b:e9:98:4a:6e:bb:b7:15:ea:ae:76:c7:e8: 86:9c:42:ae:f7:f2:9e:33:4f:be:d9:63:ec:d9:a2: 98:12:20:06:57:15:6b:74:80:76:be:4d:2f:48:74: 99:53:7e:53:4f:e7:86:13:66:19:c3:82:81:95:d4: 9b:ce:a5:fa:4a:99:e4:04:40:0d:f0:0b:95:6a:34: c9:85:a0:17:4a:02:9c:8c:2c:2c:9a:e4:cf:91:78: 5f:e5:49:73:38:17:92:8a:90:03:b0:7d:6c:ca:8c: 9d:18:6f:53:34:85:fa:ae:c4:b3:0b:82:b3:2c:ed: 62:df:75:44:f8:89:d3:8f:66:a5:0e:f6:4d:70:03: 05:de:f9:f2:5a:b7:f0:39:79:a8:ac:bc:58:42:9f: c8:e1:a8:4d:4c:dc:66:57:5f:b6:d4:19:4b:d9:ab: 48:8a:71:ab:37:b0:28:f0:28:f1:c6:6d:7c:8d:93: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:7E:08:27:20:69:21:E4:58:54:A0:2B:7F:65:E2:42:BC:BC:5A X509v3 Authority Key Identifier: keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:8c:5b:55:a6:55:e3:16:5c:a2:ae:28:32:c3:e9:1f:f3: a4:28:6c:05:ec:78:41:f0:cc:dd:e2:80:36:13:07:fc:4e:d9: 83:48:e1:d0:a7:27:0e:8b:c0:0f:db:03:29:e7:e4:b9:3c:e3: f4:26:01:f4:1d:e1:73:01:38:59:28:3a:2b:00:92:44:6a:a7: e9:e1:08:02:23:a3:17:15:b9:f7:47:61:1b:c6:39:9d:d6:eb: 71:b3:44:f2:cf:a4:16:b1:72:26:58:46:d1:80:cc:eb:22:0d: 26:c4:ee:5d:df:1a:03:eb:da:bb:1a:5f:07:2a:a9:5f:df:2f: 72:63:3a:b3:36:74:ae:b3:19:ca:17:a7:1e:9c:88:b5:0b:a5: 9a:88:38:db:94:64:51:d6:07:f3:ac:da:bb:2b:1b:25:9e:45: 85:cb:bd:d8:20:e0:78:e7:ed:1a:85:1f:55:0e:35:9c:4c:8b: 6f:8c:a9:ac:78:35:0b:0b:0c:3c:b2:f6:c1:f9:12:d6:ba:b3: 4d:03:1c:77:9e:25:51:b4:77:a7:ec:c5:be:ed:2f:46:67:b6: 23:aa:fc:c9:63:d6:b7:5f:7b:c0:49:87:2b:90:f5:22:c1:35: b5:77:c3:d6:d4:23:49:b5:a6:d9:df:5a:86:61:3b:2d:62:0b: 3b:72:88:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNnyTx1prH1plQ5QJ4KkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj YmZkZDQwHhcNMjUxMjIxMTQwMDQ4WhcNMjUxMjIyMTQwMDQ4WjAzMTEwLwYDVQQD EygzMzVkN2UwODI3MjA2OTIxZTQ1ODU0YTAyYjdmNjVlMjQyYmNiYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHLUQEMwCZ5pIVuoWeJedcNybS8Y hIX91vE73BLzCAqROzGhnEUZyzcq+Fn60ICm/29ZFRmi7Or4zi/XJpZ/rIzUfgHy o3DcS3qT64vpmEpuu7cV6q52x+iGnEKu9/KeM0++2WPs2aKYEiAGVxVrdIB2vk0v SHSZU35TT+eGE2YZw4KBldSbzqX6SpnkBEAN8AuVajTJhaAXSgKcjCwsmuTPkXhf 5UlzOBeSipADsH1syoydGG9TNIX6rsSzC4KzLO1i33VE+InTj2alDvZNcAMF3vny WrfwOXmorLxYQp/I4ahNTNxmV1+21BlL2atIinGrN7Ao8Cjxxm18jZNAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNdfggnIGkh5FhUoCt/ZeJCvLxaMB8GA1UdIwQY MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0 LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJyMW1Wm VeMWXKKuKDLD6R/zpChsBex4QfDM3eKANhMH/E7Zg0jh0KcnDovAD9sDKefkuTzj 9CYB9B3hcwE4WSg6KwCSRGqn6eEIAiOjFxW590dhG8Y5ndbrcbNE8s+kFrFyJlhG 0YDM6yINJsTuXd8aA+vauxpfByqpX98vcmM6szZ0rrMZyhenHpyItQulmog425Rk UdYH86zauysbJZ5Fhcu92CDgeOftGoUfVQ41nEyLb4yprHg1CwsMPLL2wfkS1rqz TQMcd54lUbR3p+zFvu0vRme2I6r8yWPWt197wEmHK5D1IsE1tXfD1tQjSbWm2d9a hmE7LWILO3KIAg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:57:32 2025 by rpki-client