This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json) Hash identifier: PpZmPTh5+Cs375n3Yqa1T0m0i+8e+UCQMonvC+Z8T/g= Subject key identifier: 5A:8D:6E:38:6D:4B:B1:EB:B8:C6:46:FA:36:75:38:2D:46:85:33:D9 Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Certificate serial: 019B733544EFEF888F62152D3FD8D777294D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft Manifest number: 0E74 Signing time: Wed 31 Dec 2025 07:00:29 +0000 Manifest this update: Wed 31 Dec 2025 07:00:29 +0000 Manifest next update: Thu 01 Jan 2026 07:00:29 +0000 Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: ibOpN0JgwUgd2/6cZZo6pA5u/BTn4emDfGWIlTPafrk=) 2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:44:ef:ef:88:8f:62:15:2d:3f:d8:d7:77:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe Validity Not Before: Dec 31 07:00:29 2025 GMT Not After : Jan 1 07:00:29 2026 GMT Subject: CN=5a8d6e386d4bb1ebb8c646fa3675382d468533d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1b:b4:f7:09:bc:67:39:3a:6c:ac:c5:90:f5: e5:0b:2a:e3:d1:e2:9b:f0:29:b7:d3:71:f7:87:1b: 16:ec:a8:9e:e4:bf:94:98:76:b2:1a:05:87:f2:87: 66:c0:fe:f3:31:b8:8f:12:b0:e9:73:4c:e0:02:fc: 99:c8:85:34:cc:04:b6:2a:e0:3a:1b:a5:ca:40:82: f4:d3:fd:d8:9c:27:31:96:76:43:a8:be:9e:78:b1: 06:5a:f7:3c:49:74:39:c1:7f:ad:1f:e0:2d:74:dc: 49:33:51:58:18:81:76:f3:0e:24:50:24:4b:cf:f2: 71:9c:27:ba:19:79:6c:47:e4:e8:7b:ea:e6:ae:d6: 54:60:ac:e5:6c:6c:96:a4:ed:8f:ad:66:26:06:40: 74:a1:2e:31:62:74:35:a2:5d:50:78:a3:91:20:d9: 92:d6:82:1a:61:fc:41:fa:90:0f:81:41:3d:43:9d: cc:74:84:54:33:93:6b:61:61:8c:5a:fc:bf:7a:f8: ba:21:f2:2c:bf:13:b1:c5:e1:dd:2c:59:78:dd:d6: 3b:ec:3f:67:34:04:6f:e2:22:f8:15:04:c4:8f:4c: 6c:54:cc:1d:4d:24:1d:42:20:ee:87:7a:41:29:5e: 41:84:d3:21:cc:2c:01:2a:bb:f4:42:5a:ce:05:da: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:6E:38:6D:4B:B1:EB:B8:C6:46:FA:36:75:38:2D:46:85:33:D9 X509v3 Authority Key Identifier: keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:06:d4:c8:7a:e0:f0:db:26:16:58:fd:7a:f8:3d:6e:22: bf:94:d7:95:29:2b:6a:96:5c:54:4b:af:f1:c3:05:37:6b:b6: 4e:e2:be:58:fb:4c:a2:b4:cd:7e:fc:66:e3:0f:5d:b2:94:bc: a4:8d:e4:bb:c1:6e:18:e5:35:a5:ca:41:3e:e5:0d:4a:b5:8b: 5e:93:69:ba:b3:d9:69:d2:d8:d3:f8:63:45:7e:1d:c4:c4:a0: 6b:6f:47:4d:9d:41:63:e3:00:72:29:d9:fd:3b:40:03:46:0b: 5f:a0:e5:4a:15:bd:1c:17:2c:2b:c7:ed:8c:18:a8:95:2b:a4: 02:7c:08:67:38:c5:63:35:98:84:92:bb:8e:bf:40:73:5d:6a: 3f:e1:10:9c:ca:3d:e2:93:98:32:8d:53:a3:09:34:b5:59:2f: bf:0a:ac:aa:0b:16:01:1e:0f:e9:4c:7b:d6:aa:94:95:fa:7b: 59:75:6b:a4:a8:02:a5:36:b6:7a:7e:8b:6b:59:c4:3d:98:df: b2:91:ec:53:08:56:3d:ae:d3:fb:2f:8b:1d:69:ee:fc:64:e4: 5b:c9:4b:db:12:2e:11:fb:0f:51:8a:00:d7:08:8f:f4:83:1a: ec:d3:86:d6:c8:2c:90:0b:2c:09:61:3e:df:58:a6:b7:04:b5: d6:9c:5e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNUTv74iPYhUtP9jXdylNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji MmQzZmUwHhcNMjUxMjMxMDcwMDI5WhcNMjYwMTAxMDcwMDI5WjAzMTEwLwYDVQQD Eyg1YThkNmUzODZkNGJiMWViYjhjNjQ2ZmEzNjc1MzgyZDQ2ODUzM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hu09wm8Zzk6bKzFkPXlCyrj0eKb 8Cm303H3hxsW7Kie5L+UmHayGgWH8odmwP7zMbiPErDpc0zgAvyZyIU0zAS2KuA6 G6XKQIL00/3YnCcxlnZDqL6eeLEGWvc8SXQ5wX+tH+AtdNxJM1FYGIF28w4kUCRL z/JxnCe6GXlsR+Toe+rmrtZUYKzlbGyWpO2PrWYmBkB0oS4xYnQ1ol1QeKORINmS 1oIaYfxB+pAPgUE9Q53MdIRUM5NrYWGMWvy/evi6IfIsvxOxxeHdLFl43dY77D9n NARv4iL4FQTEj0xsVMwdTSQdQiDuh3pBKV5BhNMhzCwBKrv0QlrOBdp7UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqNbjhtS7HruMZG+jZ1OC1GhTPZMB8GA1UdIwQY MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoYG1Mh6 4PDbJhZY/Xr4PW4iv5TXlSkrapZcVEuv8cMFN2u2TuK+WPtMorTNfvxm4w9dspS8 pI3ku8FuGOU1pcpBPuUNSrWLXpNpurPZadLY0/hjRX4dxMSga29HTZ1BY+MAcinZ /TtAA0YLX6DlShW9HBcsK8ftjBiolSukAnwIZzjFYzWYhJK7jr9Ac11qP+EQnMo9 4pOYMo1Towk0tVkvvwqsqgsWAR4P6Ux71qqUlfp7WXVrpKgCpTa2en6La1nEPZjf spHsUwhWPa7T+y+LHWnu/GTkW8lL2xIuEfsPUYoA1wiP9IMa7NOG1sgskAssCWE+ 31imtwS11pxeHQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:23 2025 by rpki-client