This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json) Hash identifier: EIr6mRYTr1eTBC1dBqCw4bdOnzCQQvzsZLKFmfvxQg0= Subject key identifier: 6D:3F:CF:50:64:4A:67:AC:2E:7B:41:A3:09:25:2D:5E:45:52:BC:90 Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40 Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540 Certificate serial: 019B2EF9B352770159DFCFD51ED58C9A81B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft Manifest number: 02B7 Signing time: Thu 18 Dec 2025 01:01:14 +0000 Manifest this update: Thu 18 Dec 2025 01:01:14 +0000 Manifest next update: Fri 19 Dec 2025 01:01:14 +0000 Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: mQVc8uB8j0pJZBvjeJmSWNCojaL5DiPTne1vYTrpDsg=) 2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:b3:52:77:01:59:df:cf:d5:1e:d5:8c:9a:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540 Validity Not Before: Dec 18 01:01:14 2025 GMT Not After : Dec 19 01:01:14 2025 GMT Subject: CN=6d3fcf50644a67ac2e7b41a309252d5e4552bc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:4a:f8:6f:b4:ca:f6:b9:25:4f:83:4b:5d: d8:21:52:87:33:24:be:03:af:49:e2:a4:41:ef:c1: 2c:69:ff:d4:16:30:c3:e0:f6:48:2d:68:38:c6:75: 19:28:39:86:68:9b:67:cc:8e:b5:7d:77:81:74:9e: 85:3b:8e:53:03:a3:26:d1:01:85:d2:18:7a:c4:b7: f7:00:02:ca:14:4d:23:b9:a9:4a:18:84:e5:d0:34: 40:0e:24:05:35:e5:f3:09:9e:62:42:9d:7c:bd:08: e2:b0:a4:eb:7c:a7:77:31:ae:ac:7f:0d:7f:38:70: b4:fd:07:8e:c8:ba:6b:3d:b6:bb:79:05:a4:55:ea: c1:33:18:d7:c6:fa:02:09:bf:ba:ed:c5:75:02:e4: 34:15:71:a9:03:ff:64:46:46:26:9a:b4:31:aa:dc: 26:63:6f:33:51:e5:2e:1b:04:23:a3:0a:24:79:ef: 09:61:07:a6:af:bc:e7:c7:fd:90:58:e5:5f:6b:52: 0f:3b:b1:f2:90:d1:ae:35:4d:09:07:cb:77:f3:bc: 0a:fd:11:8c:14:3a:0b:de:8d:e3:80:76:e4:f9:c5: 89:f6:20:d9:c8:ae:e9:25:55:c9:e8:d2:63:ed:4f: c3:fb:71:ed:25:ce:bb:ba:a1:3c:b6:43:99:1b:70: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:CF:50:64:4A:67:AC:2E:7B:41:A3:09:25:2D:5E:45:52:BC:90 X509v3 Authority Key Identifier: keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:5a:04:5c:01:17:71:ae:a8:96:50:c0:47:d4:9f:f6:f8: 13:0e:53:c8:1f:ab:4b:26:37:d0:8f:4c:11:d8:c0:49:af:d3: 36:ce:f0:4e:29:6c:10:42:e7:6e:b1:cb:4b:a6:4b:e0:81:2b: 3a:53:38:a1:44:c5:79:aa:6f:e9:03:d2:f8:9e:2d:8b:54:7f: 1e:b7:93:2b:9c:28:29:e8:22:21:15:b6:b6:ca:ec:d7:20:6b: e4:20:99:49:af:4e:4c:3f:fb:36:35:ed:f3:9d:90:c1:46:eb: e5:4f:eb:69:df:7a:94:10:c0:90:3a:27:1f:03:b5:0d:37:b3: d5:6f:d6:e8:30:60:af:f9:9e:b1:b1:0c:5b:48:46:d5:29:00: f8:cf:9b:2e:a3:2c:f8:48:10:45:90:b4:fe:19:11:f3:ee:f1: eb:35:55:8c:88:53:f8:b3:50:b4:fd:43:af:87:fe:bf:53:66: 6b:3b:b3:cd:a6:a6:c6:36:85:43:8f:16:dc:04:73:5f:95:a6: a3:57:ea:05:20:12:bd:2d:ad:b5:b5:ce:50:3a:7a:c3:05:d2: 4d:7c:bb:85:1a:51:50:00:64:80:cb:eb:09:48:d7:78:1d:69: 5f:fc:01:79:47:4d:62:93:df:8f:97:e0:f3:2a:13:3d:38:d1: c9:6c:db:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bNSdwFZ38/VHtWMmoG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWY2YWY2ZDE5OWYxMWVjYmE0MzU1NTEwZTk5YjdlMjcx YWI1NDAwHhcNMjUxMjE4MDEwMTE0WhcNMjUxMjE5MDEwMTE0WjAzMTEwLwYDVQQD Eyg2ZDNmY2Y1MDY0NGE2N2FjMmU3YjQxYTMwOTI1MmQ1ZTQ1NTJiYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dRK+G+0yva5JU+DS13YIVKHMyS+ A69J4qRB78Esaf/UFjDD4PZILWg4xnUZKDmGaJtnzI61fXeBdJ6FO45TA6Mm0QGF 0hh6xLf3AALKFE0jualKGITl0DRADiQFNeXzCZ5iQp18vQjisKTrfKd3Ma6sfw1/ OHC0/QeOyLprPba7eQWkVerBMxjXxvoCCb+67cV1AuQ0FXGpA/9kRkYmmrQxqtwm Y28zUeUuGwQjowokee8JYQemr7znx/2QWOVfa1IPO7HykNGuNU0JB8t387wK/RGM FDoL3o3jgHbk+cWJ9iDZyK7pJVXJ6NJj7U/D+3HtJc67uqE8tkOZG3DMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0/z1BkSmesLntBowklLV5FUryQMB8GA1UdIwQY MBaAFOKvavbRmfEey6Q1VRDpm34nGrVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWIt MmVhNTI4OTZiYWUxLzEvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWItMmVhNTI4OTZiYWUx LzEvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXddaBFwB F3GuqJZQwEfUn/b4Ew5TyB+rSyY30I9MEdjASa/TNs7wTilsEELnbrHLS6ZL4IEr OlM4oUTFeapv6QPS+J4ti1R/HreTK5woKegiIRW2tsrs1yBr5CCZSa9OTD/7NjXt 852QwUbr5U/rad96lBDAkDonHwO1DTez1W/W6DBgr/mesbEMW0hG1SkA+M+bLqMs +EgQRZC0/hkR8+7x6zVVjIhT+LNQtP1Dr4f+v1NmazuzzaamxjaFQ48W3ARzX5Wm o1fqBSASvS2ttbXOUDp6wwXSTXy7hRpRUABkgMvrCUjXeB1pX/wBeUdNYpPfj5fg 8yoTPTjRyWzb7w== -----END CERTIFICATE-----Generated at Thu Dec 18 06:36:21 2025 by rpki-client