This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json) Hash identifier: lxApYJVCugV15pJBF7BRQasxZ9STlx+yHCWJEnn4l6o= Subject key identifier: F4:6C:98:30:13:19:F6:FD:BF:DA:54:68:CC:45:1B:EE:D6:86:F3:A8 Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121 Certificate serial: 019B3B6B12D2A6491929F6B3EA11CB93CA2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft Manifest number: 0358 Signing time: Sat 20 Dec 2025 11:00:31 +0000 Manifest this update: Sat 20 Dec 2025 11:00:31 +0000 Manifest next update: Sun 21 Dec 2025 11:00:31 +0000 Files and hashes: 1: 5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa (hash: 8fAOJFpGS1CZZLyn3E+heU8rt8qm4ywsWgdel84Aa/Q=) 2: YvRVUVUo7_yU7Iq1s_PjtWUSc3E.roa (hash: 573R9YYxB5EQXEuIaiXRONNginQD8FqOnode2lo9il4=) 3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: I+V5nrHocYI8Xan2p9CXLMZW5LRoMhwQIpL8+84rbak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:12:d2:a6:49:19:29:f6:b3:ea:11:cb:93:ca:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121 Validity Not Before: Dec 20 11:00:31 2025 GMT Not After : Dec 21 11:00:31 2025 GMT Subject: CN=f46c98301319f6fdbfda5468cc451beed686f3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:f8:2b:a1:3c:46:6f:26:b8:6d:91:0d:d9: b1:a0:9b:9f:f1:ad:28:61:19:e2:ab:d6:51:68:55: 5e:f4:43:72:f7:9e:df:29:6b:4d:04:4e:e1:bf:ce: 8a:ab:e0:c0:8f:3b:e6:b4:d7:d2:7f:2c:b7:8f:e1: 55:13:2e:b0:43:d6:ed:53:c2:c9:aa:66:54:92:ba: 9a:9b:5e:a6:c2:eb:a6:cb:c2:15:cb:a9:36:a8:33: 21:8d:05:ba:6f:b6:34:90:28:62:67:f1:8b:cf:55: d5:7a:72:6f:b4:e3:65:c6:2d:7f:89:71:c8:00:7c: 91:71:a3:0b:f3:b1:54:38:a4:37:24:62:db:1c:e7: d6:f6:3e:f1:63:97:b0:39:d7:86:e1:06:28:9e:63: 9a:a6:1f:c4:05:0f:bd:04:57:a1:d0:d5:c5:04:22: a6:a9:bc:a9:f9:7f:73:5a:8c:d2:7f:d0:68:e4:25: d6:10:ef:9b:bc:c4:ed:04:86:9a:51:5c:f5:49:65: fc:1e:ec:cd:58:de:14:7e:b1:92:0c:58:2f:f5:e8: 83:ab:7b:88:ba:34:a5:ed:c2:47:7b:b4:7e:0d:59: 72:02:c8:33:73:9b:79:08:c2:d5:f9:f2:be:a2:27: 76:df:27:d4:75:46:87:c3:af:31:5b:75:71:77:cb: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:98:30:13:19:F6:FD:BF:DA:54:68:CC:45:1B:EE:D6:86:F3:A8 X509v3 Authority Key Identifier: keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:15:95:93:d9:f2:05:0c:22:f1:b9:12:7b:35:eb:10:22:d7: 8d:4f:62:66:81:78:3b:e8:65:f2:bc:b7:79:72:09:73:9e:23: a2:5a:55:54:7e:06:b1:ba:b0:a5:f8:32:7c:cc:47:80:7b:c3: 4d:0c:fe:c2:68:67:2e:ea:8b:00:b5:ad:17:57:0f:40:49:2c: 18:8f:98:59:74:49:a0:29:e1:8e:08:95:ac:6b:88:8b:aa:b1: 97:2c:84:e6:4c:2a:f7:83:bb:61:08:e4:6c:3d:30:2d:af:77: 71:36:9d:df:18:c0:79:b5:79:0e:7d:59:ff:db:10:78:c9:01: 1b:d3:8a:ed:a2:4d:50:03:9e:1a:ae:37:cc:1d:7f:63:19:b7: c0:25:5a:ba:c8:31:61:5d:04:b9:3a:11:4f:92:85:24:fc:b7: 68:2c:e3:f9:cd:b5:0c:a0:c1:dc:40:fd:18:b9:1c:88:49:7b: 64:fd:63:e4:b3:21:e3:df:a7:42:4f:7a:03:64:40:3f:d2:8f: 07:bd:1f:99:fd:54:6a:a3:cd:e8:1b:b9:f8:db:78:ce:7a:d5: e7:0d:90:1c:dc:38:34:c3:10:39:7c:73:7c:2e:d8:a4:be:0c: aa:49:02:b2:9d:95:d1:7f:84:79:c6:08:82:96:b3:bb:ff:f0: b7:5f:b3:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axLSpkkZKfaz6hHLk8orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk N2ExMjEwHhcNMjUxMjIwMTEwMDMxWhcNMjUxMjIxMTEwMDMxWjAzMTEwLwYDVQQD EyhmNDZjOTgzMDEzMTlmNmZkYmZkYTU0NjhjYzQ1MWJlZWQ2ODZmM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcD4K6E8Rm8muG2RDdmxoJuf8a0o YRniq9ZRaFVe9ENy957fKWtNBE7hv86Kq+DAjzvmtNfSfyy3j+FVEy6wQ9btU8LJ qmZUkrqam16mwuumy8IVy6k2qDMhjQW6b7Y0kChiZ/GLz1XVenJvtONlxi1/iXHI AHyRcaML87FUOKQ3JGLbHOfW9j7xY5ewOdeG4QYonmOaph/EBQ+9BFeh0NXFBCKm qbyp+X9zWozSf9Bo5CXWEO+bvMTtBIaaUVz1SWX8HuzNWN4UfrGSDFgv9eiDq3uI ujSl7cJHe7R+DVlyAsgzc5t5CMLV+fK+oid23yfUdUaHw68xW3Vxd8uo4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRsmDATGfb9v9pUaMxFG+7WhvOoMB8GA1UdIwQY MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt MjM3MzliNWZkODRjLzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBWVk9ny BQwi8bkSezXrECLXjU9iZoF4O+hl8ry3eXIJc54jolpVVH4GsbqwpfgyfMxHgHvD TQz+wmhnLuqLALWtF1cPQEksGI+YWXRJoCnhjgiVrGuIi6qxlyyE5kwq94O7YQjk bD0wLa93cTad3xjAebV5Dn1Z/9sQeMkBG9OK7aJNUAOeGq43zB1/Yxm3wCVausgx YV0EuToRT5KFJPy3aCzj+c21DKDB3ED9GLkciEl7ZP1j5LMh49+nQk96A2RAP9KP B70fmf1UaqPN6Bu5+Nt4znrV5w2QHNw4NMMQOXxzfC7YpL4MqkkCsp2V0X+EecYI gpazu//wt1+zIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:54:55 2025 by rpki-client