This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json) Hash identifier: RpB+uhwxPvC+svCgEZs9iTkqN6AURNp/mBjEn9aODas= Subject key identifier: D5:ED:DC:38:A0:E6:A8:A7:F8:D9:66:21:4F:93:92:2B:BA:59:31:C9 Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Certificate serial: 019B4C5EDDE0F4DA75C0D37C07075AE33699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 18:00:44 +0000 Manifest this update: Tue 23 Dec 2025 18:00:44 +0000 Manifest next update: Wed 24 Dec 2025 18:00:44 +0000 Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: 7m6sjLgDcwNVBj4Vcj3J1AkIglKKx2gglAyw8KvxmEY=) 2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=) 3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=) 4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:dd:e0:f4:da:75:c0:d3:7c:07:07:5a:e3:36:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Validity Not Before: Dec 23 18:00:44 2025 GMT Not After : Dec 24 18:00:44 2025 GMT Subject: CN=d5eddc38a0e6a8a7f8d966214f93922bba5931c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:4f:18:e1:79:4c:30:b0:85:51:3d:35:9c: 6e:71:b4:cc:a8:db:70:51:68:9a:06:14:03:74:c0: 19:b9:36:47:cc:3f:d5:ec:d4:4e:45:42:3e:2c:00: 4c:8d:d7:69:56:59:47:9e:20:05:9e:c6:dc:6d:97: af:3e:9c:83:37:17:1d:9f:be:31:bf:93:45:6e:41: 34:5b:8d:6a:1b:32:be:55:32:01:8f:c4:08:4a:ab: 49:40:82:01:81:d5:2f:81:e8:f5:59:24:8d:f5:85: 52:64:e2:fd:84:46:de:c7:b7:13:6d:f6:1f:c8:fa: 29:aa:11:bf:54:95:bc:3f:fa:45:99:e7:eb:49:b0: ea:7e:c1:62:11:8b:bf:96:20:c0:e5:58:dd:c7:50: dd:2d:13:11:b7:7c:4b:e6:56:8c:64:75:02:b8:36: d6:40:ee:11:2e:73:64:ad:c5:a3:13:38:e9:31:8e: 0f:4f:e0:9c:ad:cd:14:4b:cb:05:3f:c9:d8:9a:b5: 34:99:03:63:59:0b:2d:8a:11:4e:cf:9c:88:ab:2c: f1:dd:23:63:04:60:c5:5e:0d:b0:73:b5:b4:db:e2: 8d:b5:8c:75:7a:3b:0d:cc:5c:e4:1a:a4:81:9d:03: 3a:2a:7d:23:74:1c:33:10:13:8c:a0:42:19:34:58: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:DC:38:A0:E6:A8:A7:F8:D9:66:21:4F:93:92:2B:BA:59:31:C9 X509v3 Authority Key Identifier: keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:18:06:a1:0a:c7:38:4d:8b:5f:37:d2:6c:7f:e2:24:95:b4: 76:4b:fb:21:78:69:eb:43:39:4a:3d:f5:3a:01:b1:0a:ac:aa: 75:74:55:33:58:aa:36:a6:60:1d:b0:75:96:a3:5a:b1:51:eb: 05:1a:3c:9a:52:5f:db:ef:cd:58:de:37:4e:b5:69:ff:d6:73: 1b:c5:56:1e:3e:f1:9f:d2:cd:34:05:d4:fe:a2:c2:a9:1d:22: 99:ca:67:39:39:4f:31:4f:7b:26:84:a1:93:f1:af:ef:a5:1b: 98:41:77:4b:26:49:7c:97:a4:86:19:f1:cc:7d:96:cd:59:7a: b5:77:e7:7d:fd:36:be:42:0b:ed:c7:df:e1:c1:dd:8c:b5:fe: 0a:25:3b:1a:d3:1a:bb:91:0e:b3:2e:b7:c1:93:2f:85:6c:8e: 06:33:5a:8c:f7:e3:99:55:3d:a5:91:e4:63:be:32:63:b8:4c: 49:0d:bc:a0:da:e2:0c:08:c3:55:af:13:a2:1e:d9:22:2a:84: 07:51:50:5e:ce:29:1d:f5:c5:0c:61:7f:1d:bd:70:c1:c6:8e: 50:3b:05:35:96:e3:87:35:1f:d2:8d:b6:80:8f:2e:7d:31:09: 91:94:2f:17:e4:47:86:e5:4c:1c:aa:fa:14:35:0f:44:5c:02: 2f:d2:0e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXt3g9Np1wNN8Bwda4zaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2 OWM5NDkwHhcNMjUxMjIzMTgwMDQ0WhcNMjUxMjI0MTgwMDQ0WjAzMTEwLwYDVQQD EyhkNWVkZGMzOGEwZTZhOGE3ZjhkOTY2MjE0ZjkzOTIyYmJhNTkzMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hpPGOF5TDCwhVE9NZxucbTMqNtw UWiaBhQDdMAZuTZHzD/V7NRORUI+LABMjddpVllHniAFnsbcbZevPpyDNxcdn74x v5NFbkE0W41qGzK+VTIBj8QISqtJQIIBgdUvgej1WSSN9YVSZOL9hEbex7cTbfYf yPopqhG/VJW8P/pFmefrSbDqfsFiEYu/liDA5Vjdx1DdLRMRt3xL5laMZHUCuDbW QO4RLnNkrcWjEzjpMY4PT+Ccrc0US8sFP8nYmrU0mQNjWQstihFOz5yIqyzx3SNj BGDFXg2wc7W02+KNtYx1ejsNzFzkGqSBnQM6Kn0jdBwzEBOMoEIZNFgc+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXt3Dig5qin+NlmIU+Tkiu6WTHJMB8GA1UdIwQY MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0 LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8RgGoQrH OE2LXzfSbH/iJJW0dkv7IXhp60M5Sj31OgGxCqyqdXRVM1iqNqZgHbB1lqNasVHr BRo8mlJf2+/NWN43TrVp/9ZzG8VWHj7xn9LNNAXU/qLCqR0imcpnOTlPMU97JoSh k/Gv76UbmEF3SyZJfJekhhnxzH2WzVl6tXfnff02vkIL7cff4cHdjLX+CiU7GtMa u5EOsy63wZMvhWyOBjNajPfjmVU9pZHkY74yY7hMSQ28oNriDAjDVa8Toh7ZIiqE B1FQXs4pHfXFDGF/Hb1wwcaOUDsFNZbjhzUf0o22gI8ufTEJkZQvF+RHhuVMHKr6 FDUPRFwCL9IOwA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:32:58 2025 by rpki-client