This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json) Hash identifier: mJ7e3TvulTKPekpTP9Omp9TgySWyIUyRR55s5qGGrpY= Subject key identifier: EA:49:1B:75:58:6D:3B:3D:F7:43:78:84:9C:6C:3F:FB:73:8F:1D:08 Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f Certificate serial: 019B4D72143536549856FC5AC8587EBAE503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft Manifest number: 06F1 Signing time: Tue 23 Dec 2025 23:01:20 +0000 Manifest this update: Tue 23 Dec 2025 23:01:20 +0000 Manifest next update: Wed 24 Dec 2025 23:01:20 +0000 Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: 7ITAYj9eOR5wl0Fe3ifYe2fcizFGXGmWsRcvaqP1vIY=) 2: THpGYC3KAh4Nh2aSf_ElMpZJEww.roa (hash: 6eDhHzhaISARxdiDWICa8Q3A3/Q7+g+k7UoN1vc+WFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:72:14:35:36:54:98:56:fc:5a:c8:58:7e:ba:e5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f Validity Not Before: Dec 23 23:01:20 2025 GMT Not After : Dec 24 23:01:20 2025 GMT Subject: CN=ea491b75586d3b3df74378849c6c3ffb738f1d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:1c:a7:bf:18:3d:4a:1b:43:82:00:6b:c5: dd:d3:4b:70:a6:29:8a:57:b3:63:a8:ee:e9:8f:63: 17:62:8c:c4:d6:7a:de:85:b7:5a:34:3a:60:20:21: 51:06:63:b8:d9:2b:b4:be:95:02:49:e6:d9:aa:41: 0f:17:4b:82:e4:22:23:9a:d6:d7:32:8b:ea:cd:6a: f0:74:ba:5b:5c:88:e1:97:89:21:43:35:d3:13:49: 1d:c7:2f:1e:25:e5:cc:70:1e:8b:d2:0c:fa:29:ed: f7:6d:55:1d:ae:69:44:b7:6b:e1:6e:df:f8:64:f8: 4c:d0:ce:f4:92:69:4c:7d:aa:34:9a:a7:e8:52:07: 8f:d4:06:e3:02:c7:08:77:46:a1:8e:f0:07:e0:bf: 8a:0d:3d:48:dc:fc:25:b5:d9:13:74:e2:55:87:6b: e7:6e:0b:42:24:bb:58:eb:2c:a7:db:46:d1:49:f4: bf:94:00:98:c3:01:cf:7e:4b:4c:fa:81:99:76:02: ab:e7:e9:64:b1:11:76:96:c3:ec:bf:01:f9:f0:f6: 86:af:62:cf:9f:5c:ed:1e:8a:fd:5f:f7:f2:30:0f: 9b:5d:21:2c:ff:c3:06:19:f6:6d:cc:0d:7a:3c:1b: d7:c7:28:b2:26:08:52:7a:d5:71:da:7f:09:44:01: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:1B:75:58:6D:3B:3D:F7:43:78:84:9C:6C:3F:FB:73:8F:1D:08 X509v3 Authority Key Identifier: keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:55:45:bd:7e:46:92:a6:e5:ce:81:0f:b5:ea:43:79:7e:7b: 10:45:c3:13:bc:9c:25:23:39:df:65:a7:38:c2:79:9a:32:ce: f6:7d:69:e5:cc:6c:0b:c3:ad:64:60:13:9c:c1:0f:00:d1:4b: 20:76:5e:4a:0f:2f:82:1d:8e:1c:04:62:1f:99:93:c8:d7:bc: 31:f0:09:8d:f5:60:c6:07:9c:6b:16:03:01:93:e0:62:f1:f9: df:ed:bf:90:c5:f9:87:3c:45:f5:46:8c:22:04:99:d3:60:3d: bf:2b:54:08:86:d4:aa:2b:cd:41:90:19:8c:86:5a:c8:38:96: 18:ab:64:26:48:c2:8b:b7:cf:bd:4f:15:c7:6b:bd:15:dd:70: cc:5b:5b:6a:94:86:90:45:e6:9b:8b:17:66:27:fb:0a:bd:b4: e3:07:47:d2:05:16:0a:78:85:ff:35:6e:cf:7e:a4:42:44:4b: bb:b9:4f:6b:30:35:b3:6c:ff:cd:22:8b:15:f3:86:33:d6:f8: 04:fd:aa:bc:11:a2:a5:9a:e1:16:34:b1:c5:72:42:dc:29:5a: f5:b6:bc:6b:a6:97:91:59:10:7e:2d:a6:b3:95:75:6f:bd:64: e7:5a:46:97:64:30:50:5f:5e:02:57:55:ca:71:c8:ad:cb:d1: 4d:e3:b8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNchQ1NlSYVvxayFh+uuUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1 YzBjMGYwHhcNMjUxMjIzMjMwMTIwWhcNMjUxMjI0MjMwMTIwWjAzMTEwLwYDVQQD EyhlYTQ5MWI3NTU4NmQzYjNkZjc0Mzc4ODQ5YzZjM2ZmYjczOGYxZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAMcp78YPUobQ4IAa8Xd00twpimK V7NjqO7pj2MXYozE1nrehbdaNDpgICFRBmO42Su0vpUCSebZqkEPF0uC5CIjmtbX MovqzWrwdLpbXIjhl4khQzXTE0kdxy8eJeXMcB6L0gz6Ke33bVUdrmlEt2vhbt/4 ZPhM0M70kmlMfao0mqfoUgeP1AbjAscId0ahjvAH4L+KDT1I3PwltdkTdOJVh2vn bgtCJLtY6yyn20bRSfS/lACYwwHPfktM+oGZdgKr5+lksRF2lsPsvwH58PaGr2LP n1ztHor9X/fyMA+bXSEs/8MGGfZtzA16PBvXxyiyJghSetVx2n8JRAEUIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpJG3VYbTs990N4hJxsP/tzjx0IMB8GA1UdIwQY MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt NmU2ZTc2ZjM3OTQ2LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2 LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlVFvX5G kqblzoEPtepDeX57EEXDE7ycJSM532WnOMJ5mjLO9n1p5cxsC8OtZGATnMEPANFL IHZeSg8vgh2OHARiH5mTyNe8MfAJjfVgxgecaxYDAZPgYvH53+2/kMX5hzxF9UaM IgSZ02A9vytUCIbUqivNQZAZjIZayDiWGKtkJkjCi7fPvU8Vx2u9Fd1wzFtbapSG kEXmm4sXZif7Cr204wdH0gUWCniF/zVuz36kQkRLu7lPazA1s2z/zSKLFfOGM9b4 BP2qvBGipZrhFjSxxXJC3Cla9ba8a6aXkVkQfi2ms5V1b71k51pGl2QwUF9eAldV ynHIrcvRTeO46g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:11 2025 by rpki-client