This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json) Hash identifier: zgt1ErG3TMU1Fyhq0AKt6dXnEBropTk4emOz/LJa/r4= Subject key identifier: F3:7B:61:DE:9B:16:BC:7F:82:77:D1:C0:24:8B:68:CC:3A:42:6C:5A Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019B405C3ED0BA7CC2BD89C893BEC4051C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:02:25 +0000 Manifest this update: Sun 21 Dec 2025 10:02:25 +0000 Manifest next update: Mon 22 Dec 2025 10:02:25 +0000 Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=) 2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: 3Ob2UTNPYA0mX9Oxrt4SeU4AVo7bOWTVsP/UsKvHLNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:3e:d0:ba:7c:c2:bd:89:c8:93:be:c4:05:1c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Dec 21 10:02:25 2025 GMT Not After : Dec 22 10:02:25 2025 GMT Subject: CN=f37b61de9b16bc7f8277d1c0248b68cc3a426c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:96:1f:b3:f9:63:7a:ad:38:bc:3f:7b:e3: 4a:da:84:83:7d:28:45:33:3e:a2:7c:1a:9c:94:ea: c5:d4:f4:24:58:1d:d8:2b:0c:24:25:92:15:c2:f2: d0:9a:5d:b8:5d:fa:ae:45:87:31:71:1a:03:5f:ee: c2:11:ab:16:6b:09:05:58:e1:02:58:35:cc:fd:02: 41:ac:16:e3:6c:c1:98:a4:2d:af:3e:18:91:a3:45: d0:60:18:b6:c2:99:ac:dc:f5:00:30:8b:e7:cc:06: e4:be:31:ad:e9:b7:c8:45:66:49:19:83:53:32:98: 46:ac:9a:96:50:15:b3:e1:0a:4e:33:0f:16:5b:9c: 6a:7c:71:b7:53:ce:60:96:d2:5e:42:72:e1:06:5d: e4:c1:4a:4c:23:85:15:96:c9:d8:c0:18:e9:d7:d7: a5:2e:c7:9d:1e:a3:25:93:a5:7f:76:b5:f5:10:fe: b4:f9:92:4b:94:48:f6:68:fd:63:7f:47:b5:d5:14: 92:1e:c9:41:26:af:d7:92:ab:0c:67:53:a1:c3:a4: d1:df:e8:bd:22:dd:71:e5:e6:c8:e5:d3:bb:f6:22: 9f:2a:b7:78:48:25:ba:6f:05:a9:bb:1f:d8:b1:39: 91:92:a5:96:90:51:34:65:20:0f:3c:73:a2:a3:a2: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:61:DE:9B:16:BC:7F:82:77:D1:C0:24:8B:68:CC:3A:42:6C:5A X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e9:5c:1f:b1:17:9c:4f:d0:70:96:e2:68:54:de:44:0e:78: fc:86:fc:34:3e:15:03:3a:b4:d6:9d:ec:a1:d2:0d:12:5f:72: b4:cc:be:be:73:ae:1a:4f:5a:0c:ee:35:5f:a7:77:e5:18:d2: 65:ea:5f:2e:d3:de:01:95:e9:b4:42:93:07:bf:de:09:66:e0: 8c:85:ae:4d:cd:d9:e6:2f:56:f7:ba:1e:ff:c1:20:46:9f:c3: 9f:6b:fc:18:a2:a1:f2:48:a4:95:e5:ff:d8:fb:6a:7e:eb:ba: cd:d1:4f:6d:2e:16:87:fa:09:41:8b:1f:93:e7:ba:50:a2:d4: f0:e2:90:6b:f5:c1:d1:31:e8:25:95:4a:45:be:fe:c4:1e:b1: 73:31:04:fa:e3:b4:96:07:51:11:8f:63:cd:6e:76:cc:7f:47: 5a:16:87:01:4d:ab:e3:33:7d:67:81:8f:c9:08:85:20:c5:86: e2:d0:39:17:59:fc:38:58:f0:27:43:89:98:9f:3c:f3:a8:f2: 60:b2:6b:4d:23:88:bb:b5:41:bd:a8:6e:9a:d7:f0:19:58:63: 03:d6:0d:a3:71:35:62:45:ec:fd:12:13:bd:58:5e:e8:f6:5f: a3:8b:4d:b2:2a:ad:ec:69:a0:3b:50:0f:f2:d4:5c:74:65:03: ab:9f:6e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXD7QunzCvYnIk77EBRxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjUxMjIxMTAwMjI1WhcNMjUxMjIyMTAwMjI1WjAzMTEwLwYDVQQD EyhmMzdiNjFkZTliMTZiYzdmODI3N2QxYzAyNDhiNjhjYzNhNDI2YzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk6WH7P5Y3qtOLw/e+NK2oSDfShF Mz6ifBqclOrF1PQkWB3YKwwkJZIVwvLQml24XfquRYcxcRoDX+7CEasWawkFWOEC WDXM/QJBrBbjbMGYpC2vPhiRo0XQYBi2wpms3PUAMIvnzAbkvjGt6bfIRWZJGYNT MphGrJqWUBWz4QpOMw8WW5xqfHG3U85gltJeQnLhBl3kwUpMI4UVlsnYwBjp19el LsedHqMlk6V/drX1EP60+ZJLlEj2aP1jf0e11RSSHslBJq/XkqsMZ1Ohw6TR3+i9 It1x5ebI5dO79iKfKrd4SCW6bwWpux/YsTmRkqWWkFE0ZSAPPHOio6JBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPN7Yd6bFrx/gnfRwCSLaMw6QmxaMB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+lcH7EX nE/QcJbiaFTeRA54/Ib8ND4VAzq01p3sodINEl9ytMy+vnOuGk9aDO41X6d35RjS ZepfLtPeAZXptEKTB7/eCWbgjIWuTc3Z5i9W97oe/8EgRp/Dn2v8GKKh8kikleX/ 2Ptqfuu6zdFPbS4Wh/oJQYsfk+e6UKLU8OKQa/XB0THoJZVKRb7+xB6xczEE+uO0 lgdREY9jzW52zH9HWhaHAU2r4zN9Z4GPyQiFIMWG4tA5F1n8OFjwJ0OJmJ8886jy YLJrTSOIu7VBvahumtfwGVhjA9YNo3E1YkXs/RITvVhe6PZfo4tNsiqt7GmgO1AP 8tRcdGUDq59uvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:07 2025 by rpki-client