This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json) Hash identifier: /ISCfOKUSunF4SlyKvcJx2MD7RXTTDhpuW6sWGhZgio= Subject key identifier: 73:8E:F0:25:7F:F8:9E:8F:BB:00:15:B0:39:06:2F:AF:BC:F6:8B:26 Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B405B5C425750FE32C9B2DB7867425C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:27 +0000 Manifest this update: Sun 21 Dec 2025 10:01:27 +0000 Manifest next update: Mon 22 Dec 2025 10:01:27 +0000 Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: 8BHnFvO++b+i1mg87uq2eKV5Y55j2rfM3UO5UzwMeGY=) 2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=) 3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:5c:42:57:50:fe:32:c9:b2:db:78:67:42:5c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Dec 21 10:01:27 2025 GMT Not After : Dec 22 10:01:27 2025 GMT Subject: CN=738ef0257ff89e8fbb0015b039062fafbcf68b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:87:d7:b1:48:2d:5c:f5:fb:4c:72:06:be: 55:8a:2c:68:5b:30:50:24:2b:ff:53:47:cc:e0:c2: c3:02:1b:9e:d5:48:49:f4:7e:b8:ff:5b:9b:76:6f: 7c:6c:39:6f:71:b0:e6:ad:84:e7:bf:ea:dd:f2:fb: 63:d9:07:e4:bb:e9:b6:48:6c:34:63:e1:1e:75:31: 2b:ca:43:3e:9c:7c:30:73:7d:d1:58:5d:e4:a5:e9: 20:92:43:0c:e2:08:c2:58:13:2e:bc:d2:d0:c0:c5: c4:fe:44:4a:07:77:8e:ce:cb:d2:99:bf:e3:40:a0: f3:7d:eb:4c:2b:15:69:f8:70:98:01:de:9e:4c:6d: 3d:62:75:91:f0:3f:5a:99:69:bd:5c:d2:9e:e9:da: be:f0:2c:04:03:ed:21:d2:94:0f:70:2f:7e:8a:9e: fb:3f:ec:70:85:e2:17:93:42:1d:4f:ce:21:51:8d: b7:a9:bb:2a:be:b3:b0:d1:90:28:4b:40:d8:91:f6: 05:94:bf:99:de:d7:5f:42:5e:33:34:c1:36:9a:ab: 9e:cf:96:4a:76:12:16:42:cf:b0:a3:09:fd:51:e8: a2:75:fe:77:cf:2b:1b:6e:a8:fd:9d:3f:c8:23:e0: 40:ae:6e:2f:ae:65:f0:f8:b5:e7:d6:f7:c5:6b:b3: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8E:F0:25:7F:F8:9E:8F:BB:00:15:B0:39:06:2F:AF:BC:F6:8B:26 X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:81:ea:9a:0d:99:22:91:7d:4e:0e:77:40:4e:0d:2a:39:fb: 38:f1:59:63:b3:f0:cb:5c:41:51:85:9d:8f:3c:6b:47:b0:e0: f6:67:b2:84:b2:eb:88:9a:a4:d9:ec:4f:b6:7a:b3:93:18:24: 4a:4c:28:ef:de:0e:7c:29:d2:07:90:62:40:cc:73:0b:13:ca: 29:70:32:9f:06:44:b6:34:a4:d5:ff:16:e2:00:96:55:83:44: 5a:20:b3:76:c1:7f:70:50:f4:d9:c7:03:59:91:f5:56:1c:4e: 6a:ce:60:3e:85:cf:47:db:d4:35:87:59:07:5e:0d:56:c0:cb: d6:fc:70:cf:15:82:f0:b8:c6:0c:65:fd:42:1d:43:de:83:89: 83:1f:0c:8d:05:ed:fa:8d:71:6c:6f:0f:3c:c1:bc:fd:13:fd: 05:c8:33:16:75:f9:25:84:92:4e:18:cd:2d:57:1f:c7:9b:34: ff:08:e4:fd:94:e2:99:0f:b9:c3:ca:2e:e0:63:9a:a7:97:fe: 39:a9:13:60:de:dc:dc:b1:d9:f8:f5:0a:24:df:eb:a6:1a:13: d7:d9:f5:23:b8:73:27:66:b3:49:6e:9f:be:9f:6f:60:f4:6a: 7d:17:2f:48:d8:f3:b1:01:15:8f:a6:a6:66:68:b8:52:78:9f: dd:f8:66:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW1xCV1D+Msmy23hnQlwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjUxMjIxMTAwMTI3WhcNMjUxMjIyMTAwMTI3WjAzMTEwLwYDVQQD Eyg3MzhlZjAyNTdmZjg5ZThmYmIwMDE1YjAzOTA2MmZhZmJjZjY4YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+CH17FILVz1+0xyBr5ViixoWzBQ JCv/U0fM4MLDAhue1UhJ9H64/1ubdm98bDlvcbDmrYTnv+rd8vtj2Qfku+m2SGw0 Y+EedTErykM+nHwwc33RWF3kpekgkkMM4gjCWBMuvNLQwMXE/kRKB3eOzsvSmb/j QKDzfetMKxVp+HCYAd6eTG09YnWR8D9amWm9XNKe6dq+8CwEA+0h0pQPcC9+ip77 P+xwheIXk0IdT84hUY23qbsqvrOw0ZAoS0DYkfYFlL+Z3tdfQl4zNME2mquez5ZK dhIWQs+wown9Ueiidf53zysbbqj9nT/II+BArm4vrmXw+LXn1vfFa7OBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOO8CV/+J6PuwAVsDkGL6+89osmMB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYHqmg2Z IpF9Tg53QE4NKjn7OPFZY7Pwy1xBUYWdjzxrR7Dg9meyhLLriJqk2exPtnqzkxgk Skwo794OfCnSB5BiQMxzCxPKKXAynwZEtjSk1f8W4gCWVYNEWiCzdsF/cFD02ccD WZH1VhxOas5gPoXPR9vUNYdZB14NVsDL1vxwzxWC8LjGDGX9Qh1D3oOJgx8MjQXt +o1xbG8PPMG8/RP9BcgzFnX5JYSSThjNLVcfx5s0/wjk/ZTimQ+5w8ou4GOap5f+ OakTYN7c3LHZ+PUKJN/rphoT19n1I7hzJ2azSW6fvp9vYPRqfRcvSNjzsQEVj6am Zmi4Unif3fhmTA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:39 2025 by rpki-client