This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: g81lngeLcw5Oc7bjvQPqXfHE5GiYXjU/WpZm9Z4oO8k= Subject key identifier: EE:A5:1E:6E:E2:95:CD:4C:32:EA:97:1E:09:37:43:71:96:8F:67:AB Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019B6CC71503B5ECC03C1C2C10697A683629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 0286 Signing time: Tue 30 Dec 2025 01:02:24 +0000 Manifest this update: Tue 30 Dec 2025 01:02:24 +0000 Manifest next update: Wed 31 Dec 2025 01:02:24 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: 603VHc5xi9WdQNayLiBHAv3ESCqJELAPAL9A0X0atFM=) 2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:15:03:b5:ec:c0:3c:1c:2c:10:69:7a:68:36:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Dec 30 01:02:24 2025 GMT Not After : Dec 31 01:02:24 2025 GMT Subject: CN=eea51e6ee295cd4c32ea971e09374371968f67ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:fa:df:56:ad:3d:a7:ef:8a:f9:58:51:49: 0f:f9:12:5c:47:26:3c:af:6d:d5:8a:12:49:52:9d: f1:70:1a:17:64:94:5e:37:d9:54:41:85:d1:ea:ca: 61:88:06:f8:31:39:1d:e7:24:69:2e:94:fe:93:94: 83:1d:70:a7:d0:ef:07:6f:86:1d:0f:3f:96:1b:24: c7:8c:2a:f9:44:a0:39:4d:75:75:41:df:c0:14:e6: 77:c2:24:f2:3a:5e:65:4d:0b:5c:3a:8f:61:ee:53: c8:d0:f4:58:45:80:4e:5c:8e:4b:3c:10:b3:c6:81: 18:0c:83:30:7c:cc:11:c3:9c:4d:e9:56:69:9c:e3: d1:7c:f0:88:d4:5a:a4:10:b9:e4:ea:46:78:4e:a1: 93:44:87:0b:69:fa:00:d3:38:1f:ad:3d:9e:f4:00: 08:8a:ab:41:2a:e0:09:cb:f7:42:b5:a3:47:51:1c: de:2b:0e:18:62:03:d9:ed:22:d8:f0:e0:41:59:e9: 74:43:b6:fe:52:b6:a3:03:40:9c:1d:41:df:fc:fb: e8:20:13:8c:10:d6:c3:0b:3c:09:fc:fa:06:15:53: 21:5c:8f:89:f4:cf:24:5e:d7:fe:52:af:33:54:af: a3:e3:0e:a8:86:95:53:5f:fc:99:a3:81:a0:43:18: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A5:1E:6E:E2:95:CD:4C:32:EA:97:1E:09:37:43:71:96:8F:67:AB X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ba:69:2c:d7:af:75:b8:9e:c3:82:2e:65:08:c3:fa:f0:bc: 35:cd:3b:3f:12:ac:a4:b6:b7:f9:ab:8a:c0:14:eb:e1:bd:07: ea:9a:0d:de:9b:d7:38:24:df:f7:4d:b6:8b:a7:19:33:6c:95: 33:d5:4c:33:e9:24:9e:eb:77:a1:1c:1f:96:d1:a7:9d:56:86: f5:bc:14:c0:33:ae:88:b9:56:72:90:47:e7:ce:61:e3:a3:21: 4d:df:b2:bc:0b:0b:2b:66:a4:de:34:e0:b4:68:7e:77:ae:25: 68:23:dd:44:ff:86:67:00:30:34:a9:c5:b1:39:d2:ab:59:87: a9:8e:78:64:e8:87:b6:d7:fb:81:4f:fd:ec:9e:83:57:b4:0e: 6f:8d:5f:8c:a9:e7:0b:b9:1d:5b:8f:96:b4:1b:56:bb:68:3d: 07:84:bc:39:c8:d6:02:da:ce:0b:bc:8d:a6:6e:83:74:41:d9: ca:07:43:ec:85:24:c6:40:c6:40:c7:cb:3f:73:e8:24:fd:45: 35:0a:93:ad:71:2b:f8:29:10:c6:45:18:9e:df:59:d4:48:75: 4b:57:9c:fd:78:c8:81:51:8b:1e:04:ee:81:37:9f:bd:96:09: c3:d5:a8:ac:a3:94:5a:5f:d1:83:e3:a7:26:f7:46:ee:0a:5a: 9a:71:e1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxxUDtezAPBwsEGl6aDYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjUxMjMwMDEwMjI0WhcNMjUxMjMxMDEwMjI0WjAzMTEwLwYDVQQD EyhlZWE1MWU2ZWUyOTVjZDRjMzJlYTk3MWUwOTM3NDM3MTk2OGY2N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk7631atPafvivlYUUkP+RJcRyY8 r23VihJJUp3xcBoXZJReN9lUQYXR6sphiAb4MTkd5yRpLpT+k5SDHXCn0O8Hb4Yd Dz+WGyTHjCr5RKA5TXV1Qd/AFOZ3wiTyOl5lTQtcOo9h7lPI0PRYRYBOXI5LPBCz xoEYDIMwfMwRw5xN6VZpnOPRfPCI1FqkELnk6kZ4TqGTRIcLafoA0zgfrT2e9AAI iqtBKuAJy/dCtaNHURzeKw4YYgPZ7SLY8OBBWel0Q7b+UrajA0CcHUHf/PvoIBOM ENbDCzwJ/PoGFVMhXI+J9M8kXtf+Uq8zVK+j4w6ohpVTX/yZo4GgQxjJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6lHm7ilc1MMuqXHgk3Q3GWj2erMB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7ppLNev dbiew4IuZQjD+vC8Nc07PxKspLa3+auKwBTr4b0H6poN3pvXOCTf9022i6cZM2yV M9VMM+kknut3oRwfltGnnVaG9bwUwDOuiLlWcpBH585h46MhTd+yvAsLK2ak3jTg tGh+d64laCPdRP+GZwAwNKnFsTnSq1mHqY54ZOiHttf7gU/97J6DV7QOb41fjKnn C7kdW4+WtBtWu2g9B4S8OcjWAtrOC7yNpm6DdEHZygdD7IUkxkDGQMfLP3PoJP1F NQqTrXEr+CkQxkUYnt9Z1Eh1S1ec/XjIgVGLHgTugTefvZYJw9WorKOUWl/Rg+On JvdG7gpamnHheQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:06:17 2025 by rpki-client