This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json) Hash identifier: woerj32HX2zJ/ILIRRxoAl91YnYU6Klgusv4TW0SQaY= Subject key identifier: D7:21:02:4E:49:74:9E:99:EB:10:89:44:F6:0F:35:06:32:CF:CC:09 Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3 Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3 Certificate serial: 019B48F00F7A6A965ED1EAF4FA57C4F65BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft Manifest number: 0C33 Signing time: Tue 23 Dec 2025 02:00:50 +0000 Manifest this update: Tue 23 Dec 2025 02:00:50 +0000 Manifest next update: Wed 24 Dec 2025 02:00:50 +0000 Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: 2JC1ugHMdzHNVm3Q06Vm5BOIBSZlMd4xC26KQSLbgxg=) 2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:0f:7a:6a:96:5e:d1:ea:f4:fa:57:c4:f6:5b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3 Validity Not Before: Dec 23 02:00:50 2025 GMT Not After : Dec 24 02:00:50 2025 GMT Subject: CN=d721024e49749e99eb108944f60f350632cfcc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:0f:80:21:6d:35:22:46:ee:92:58:4c:a8: 34:22:ad:ed:77:73:48:54:dc:4b:7a:34:aa:39:ea: 91:96:16:9d:69:ce:a8:86:cc:25:02:a0:4a:be:e4: 4f:b0:36:25:8d:f8:4a:1e:a5:3b:f4:f3:d3:b1:ae: 86:f5:a5:77:38:a0:a9:e9:56:bb:e1:04:35:c5:10: fc:37:07:a5:ce:71:9a:d4:49:7f:30:5a:2c:0e:3d: 87:86:c3:15:3f:30:51:50:13:5f:aa:f2:55:c1:f8: ab:01:df:51:a8:15:8b:9b:0d:52:87:e5:f9:55:06: 3f:81:be:7a:fa:82:75:62:b7:d6:71:58:a1:3b:b3: 8a:93:35:56:09:f0:1e:78:1e:8e:36:2a:e7:e2:13: f9:cd:2e:9b:31:7d:1f:51:23:f5:77:cc:e2:ca:d8: ac:39:a2:7b:dd:2e:f0:97:2e:f1:43:2a:30:09:cd: c7:02:52:8d:c2:72:c3:44:05:dd:b7:ff:b5:b5:1f: ba:e6:f9:d5:4b:a0:f1:73:35:b5:7c:5e:b8:46:1c: d2:d4:96:42:70:c4:e2:f8:93:b2:22:55:1c:1a:44: a8:4e:73:95:6b:24:1c:e4:df:25:29:4f:bc:3e:b9: d7:b9:ca:f2:a7:2f:46:10:c1:cf:18:c0:b3:60:89: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:02:4E:49:74:9E:99:EB:10:89:44:F6:0F:35:06:32:CF:CC:09 X509v3 Authority Key Identifier: keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:55:18:f6:48:d6:80:d3:6a:d2:2d:63:50:f5:12:17:22: 0f:57:25:81:be:0a:1d:ff:e0:97:3c:e1:b9:a7:3e:e7:ca:b0: 05:0e:e7:e4:29:86:0f:5b:14:59:27:c1:14:f8:db:9d:ad:73: 61:33:6d:b3:8b:61:f9:24:33:5b:3e:ed:18:94:03:44:3e:90: c6:5d:48:99:74:4b:55:fc:1e:6c:42:a6:29:3b:49:d9:51:2c: a8:be:79:ee:31:ac:c2:eb:da:18:f0:9b:0f:65:81:b6:55:02: 20:eb:58:58:5e:3a:cc:9e:cb:76:ae:6d:7c:dd:95:70:25:0d: 60:05:a9:7b:a2:8e:ee:53:f7:bf:a0:5b:82:15:b3:32:8d:ff: 50:9b:dc:81:28:e6:00:43:ba:8c:12:67:e6:cf:30:af:1e:b1: 4d:58:7b:39:d5:37:45:93:2a:f0:0f:83:ad:a8:1e:7f:3c:0a: 63:23:05:eb:03:c9:6f:fb:37:8a:e3:a1:62:ce:26:71:24:a6: 7e:55:4b:5c:c2:eb:08:c8:75:52:d3:2d:49:ab:1a:c3:65:f1: 0a:f6:6e:79:2f:1d:d4:ee:4a:1a:e4:87:ab:8c:3c:fb:de:05: 76:71:11:a7:f3:72:6a:4c:01:d6:29:92:7d:b9:b7:d5:0e:ef: 54:b6:f9:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8A96apZe0er0+lfE9lvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODNmYTQzOGE2ZmFlNjJiMzVmOTA5MTg3NmM0NGRlZGI5 YzBkYTMwHhcNMjUxMjIzMDIwMDUwWhcNMjUxMjI0MDIwMDUwWjAzMTEwLwYDVQQD EyhkNzIxMDI0ZTQ5NzQ5ZTk5ZWIxMDg5NDRmNjBmMzUwNjMyY2ZjYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fcPgCFtNSJG7pJYTKg0Iq3td3NI VNxLejSqOeqRlhadac6ohswlAqBKvuRPsDYljfhKHqU79PPTsa6G9aV3OKCp6Va7 4QQ1xRD8NwelznGa1El/MFosDj2HhsMVPzBRUBNfqvJVwfirAd9RqBWLmw1Sh+X5 VQY/gb56+oJ1YrfWcVihO7OKkzVWCfAeeB6ONirn4hP5zS6bMX0fUSP1d8ziytis OaJ73S7wly7xQyowCc3HAlKNwnLDRAXdt/+1tR+65vnVS6DxczW1fF64RhzS1JZC cMTi+JOyIlUcGkSoTnOVayQc5N8lKU+8PrnXucrypy9GEMHPGMCzYIk23QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNchAk5JdJ6Z6xCJRPYPNQYyz8wJMB8GA1UdIwQY MBaAFHOD+kOKb65is1+QkYdsRN7bnA2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2Qt OGZlYWFmYWM3ZTg5LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2QtOGZlYWFmYWM3ZTg5 LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3hVGPZI 1oDTatItY1D1EhciD1clgb4KHf/glzzhuac+58qwBQ7n5CmGD1sUWSfBFPjbna1z YTNts4th+SQzWz7tGJQDRD6Qxl1ImXRLVfwebEKmKTtJ2VEsqL557jGswuvaGPCb D2WBtlUCIOtYWF46zJ7Ldq5tfN2VcCUNYAWpe6KO7lP3v6BbghWzMo3/UJvcgSjm AEO6jBJn5s8wrx6xTVh7OdU3RZMq8A+DragefzwKYyMF6wPJb/s3iuOhYs4mcSSm flVLXMLrCMh1UtMtSasaw2XxCvZueS8d1O5KGuSHq4w8+94FdnERp/NyakwB1imS fbm31Q7vVLb5Eg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:16:27 2025 by rpki-client