This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json) Hash identifier: RqekccG7/s1o5mtvJ7hpSvpo35eckD2DLLRUPFVLGkM= Subject key identifier: 0E:97:8C:8C:ED:10:79:38:CB:EA:96:A8:60:A0:56:B8:2A:CC:FD:C5 Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Certificate serial: 019B35D6D306B1BC2E46B16B7CA9B548C4A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft Manifest number: 117E Signing time: Fri 19 Dec 2025 09:00:29 +0000 Manifest this update: Fri 19 Dec 2025 09:00:29 +0000 Manifest next update: Sat 20 Dec 2025 09:00:29 +0000 Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=) 2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: RKgN8bniIOj6pNbQHjS/jFdGpZ1pQAIFE07pN4mXDtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:d3:06:b1:bc:2e:46:b1:6b:7c:a9:b5:48:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e Validity Not Before: Dec 19 09:00:29 2025 GMT Not After : Dec 20 09:00:29 2025 GMT Subject: CN=0e978c8ced107938cbea96a860a056b82accfdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:f5:41:dc:16:b5:ca:37:e5:b4:52:01:ac: 3b:0c:71:a7:79:3b:45:35:12:b9:2c:a3:42:48:5a: 21:3d:2d:a4:61:96:ae:f5:b4:78:42:ad:36:30:35: 5b:0c:4c:43:8d:bd:f1:32:17:93:ef:ed:8f:9b:22: ae:50:37:d0:94:7a:bd:5a:1f:f6:17:11:a2:66:82: e8:a7:77:7c:f5:f4:a7:a6:d9:71:1a:ee:f2:71:62: 42:15:0f:ba:c4:a2:fe:6c:ac:77:f0:b1:07:90:9c: 43:89:03:57:fb:58:bc:86:55:c3:23:90:59:92:d2: cf:c1:c8:7f:d6:1c:27:f0:1b:07:f3:7a:37:f3:64: f9:ec:e6:5b:1f:59:9e:f8:10:b5:cb:f2:40:df:fe: 40:70:75:d0:42:10:20:ca:e9:50:fa:f7:b5:4c:22: 15:3a:5e:07:e2:72:5b:51:32:07:08:bf:dd:64:26: cf:e3:c2:96:2a:67:99:b4:90:bf:87:c1:da:ad:89: 94:6d:4e:e3:a1:23:1f:65:e7:5c:a3:ba:88:b5:e4: dd:18:f2:3a:73:94:88:44:fe:8b:e0:87:47:d4:e4: 33:58:cc:b4:7b:e0:f9:8a:fd:6c:82:9a:99:3c:78: 9e:e5:48:4f:6d:c4:d5:26:bf:f6:89:0b:0d:59:70: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:8C:8C:ED:10:79:38:CB:EA:96:A8:60:A0:56:B8:2A:CC:FD:C5 X509v3 Authority Key Identifier: keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:1f:c9:fa:a4:d7:34:8b:6a:4c:29:b7:3e:e1:d0:16:4e: af:28:31:9e:a7:12:23:cf:98:e4:fd:8c:e1:9e:2a:89:83:be: 26:41:66:0b:3c:c6:99:95:94:84:0a:4d:7a:c3:d4:48:ff:b9: af:de:df:3b:36:20:7e:5b:fe:0f:e6:e7:ce:62:e2:9c:9d:03: bf:d8:f7:ae:1c:26:20:4a:a7:40:dd:20:01:64:44:de:f9:35: 3e:97:4c:fc:43:4f:ed:4a:45:c1:20:21:1e:9e:21:a8:bd:54: 98:7a:3e:8e:ca:a1:49:80:26:a5:34:60:1b:2a:70:a6:ca:80: d9:58:ae:cf:46:d0:43:df:16:3b:a9:34:58:e2:21:c1:70:0d: 15:d6:06:71:92:b3:85:94:d8:98:73:d9:e4:7e:64:46:c0:1f: c1:bf:4c:8e:78:4c:52:a3:da:df:ea:12:af:79:36:ee:8a:16: c8:4a:17:d4:78:d8:16:49:90:0b:25:7e:ea:ba:87:1d:ec:4b: 38:10:97:e8:11:7a:ba:6d:83:62:f0:df:68:55:5a:ea:ab:a0: b7:a6:80:19:50:bf:0b:b9:b1:49:6a:04:18:b5:c2:aa:ba:da: 91:c8:28:f9:90:ef:68:16:26:5b:44:94:2d:80:77:77:79:36: 7f:02:a2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11tMGsbwuRrFrfKm1SMSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw Y2ZlNGUwHhcNMjUxMjE5MDkwMDI5WhcNMjUxMjIwMDkwMDI5WjAzMTEwLwYDVQQD EygwZTk3OGM4Y2VkMTA3OTM4Y2JlYTk2YTg2MGEwNTZiODJhY2NmZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWX1QdwWtco35bRSAaw7DHGneTtF NRK5LKNCSFohPS2kYZau9bR4Qq02MDVbDExDjb3xMheT7+2PmyKuUDfQlHq9Wh/2 FxGiZoLop3d89fSnptlxGu7ycWJCFQ+6xKL+bKx38LEHkJxDiQNX+1i8hlXDI5BZ ktLPwch/1hwn8BsH83o382T57OZbH1me+BC1y/JA3/5AcHXQQhAgyulQ+ve1TCIV Ol4H4nJbUTIHCL/dZCbP48KWKmeZtJC/h8HarYmUbU7joSMfZedco7qIteTdGPI6 c5SIRP6L4IdH1OQzWMy0e+D5iv1sgpqZPHie5UhPbcTVJr/2iQsNWXB9EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6XjIztEHk4y+qWqGCgVrgqzP3FMB8GA1UdIwQY MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX4fyfqk 1zSLakwptz7h0BZOrygxnqcSI8+Y5P2M4Z4qiYO+JkFmCzzGmZWUhApNesPUSP+5 r97fOzYgflv+D+bnzmLinJ0Dv9j3rhwmIEqnQN0gAWRE3vk1PpdM/ENP7UpFwSAh Hp4hqL1UmHo+jsqhSYAmpTRgGypwpsqA2Viuz0bQQ98WO6k0WOIhwXANFdYGcZKz hZTYmHPZ5H5kRsAfwb9MjnhMUqPa3+oSr3k27ooWyEoX1HjYFkmQCyV+6rqHHexL OBCX6BF6um2DYvDfaFVa6qugt6aAGVC/C7mxSWoEGLXCqrrakcgo+ZDvaBYmW0SU LYB3d3k2fwKi/w== -----END CERTIFICATE-----Generated at Fri Dec 19 11:41:48 2025 by rpki-client