This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json) Hash identifier: fS3G9mz8pw3qmhQwzNdftTuNjg3J2iFPGl14BeLqLcE= Subject key identifier: 76:F9:66:0B:B0:58:B2:41:18:BB:F4:76:84:8F:CC:C9:E1:4D:51:13 Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32 Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832 Certificate serial: 019B3EDAC1CE8D0601E0C61D7964FF38DE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft Manifest number: 04A2 Signing time: Sun 21 Dec 2025 03:01:22 +0000 Manifest this update: Sun 21 Dec 2025 03:01:22 +0000 Manifest next update: Mon 22 Dec 2025 03:01:22 +0000 Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=) 2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: cWajRPfjRitvDWcvQvxk6RujaEWVm+IAstlaj2iTIbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:c1:ce:8d:06:01:e0:c6:1d:79:64:ff:38:de:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832 Validity Not Before: Dec 21 03:01:22 2025 GMT Not After : Dec 22 03:01:22 2025 GMT Subject: CN=76f9660bb058b24118bbf476848fccc9e14d5113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:18:26:41:1a:93:3a:a4:94:92:a2:8d:39:c6: 64:dc:d4:f2:3c:5d:67:c2:c4:ef:bb:f9:ab:c8:62: 41:04:6e:fd:6d:dd:7b:e2:59:72:98:15:b6:a3:e6: 72:a8:48:d3:54:78:13:a6:f7:80:9b:00:27:3f:e3: a0:a4:48:48:a8:4e:d8:ec:72:b5:7f:51:a8:cf:a6: a8:77:4c:f7:ff:00:ae:fc:70:ff:51:7b:31:cc:bc: 3c:38:91:d5:92:ef:a6:9c:e4:75:da:ad:de:a7:6b: c1:32:f9:7d:c1:a0:aa:bb:60:07:e1:39:7b:d5:6a: c6:6d:42:9b:4b:cc:d3:50:63:b3:8b:f5:a5:de:22: a3:b4:c1:03:82:be:3d:a5:5d:83:3f:69:39:22:12: 16:54:75:54:79:91:4b:47:ea:a3:f4:69:d1:99:78: ef:1f:1a:36:a1:7c:21:bc:81:8b:d1:18:f1:32:65: 3d:5b:0e:1b:60:d6:07:79:2d:18:21:b5:e8:ec:fe: a0:15:89:04:55:ff:13:c3:25:89:ea:5a:a5:87:53: 87:3b:70:8e:2c:02:db:17:8d:af:d8:56:c1:20:f3: 99:54:d1:d9:d2:fe:0f:a8:93:04:39:3f:cb:d2:c3: ae:5c:9a:ff:11:73:3c:72:3c:04:cf:79:bf:57:d0: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:66:0B:B0:58:B2:41:18:BB:F4:76:84:8F:CC:C9:E1:4D:51:13 X509v3 Authority Key Identifier: keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b5:61:58:2c:7c:a8:3b:06:30:88:af:f4:70:7f:24:88:2e: 19:de:cd:b5:25:91:31:7a:0c:28:26:03:ed:d1:f6:fd:8f:32: bb:ba:91:6a:4a:75:75:d7:c0:a5:16:46:b8:41:3b:3d:9c:66: c9:4c:8c:4f:f3:18:f6:90:76:6e:b0:df:0d:9f:ea:e7:50:17: 4c:43:3e:e3:a4:c9:00:de:df:4d:07:a5:2c:a3:4b:7a:04:8f: 68:16:d1:1b:65:8f:8d:99:ee:ee:7e:72:f5:e3:26:6a:f8:fd: dd:1b:72:3d:19:84:e2:74:38:a7:5d:e6:04:6f:22:1f:6d:63: 6b:73:05:cf:1f:2d:06:95:81:99:e5:83:19:49:74:d3:ae:b8: 21:84:32:ab:4c:ed:0d:93:ec:45:13:a2:d5:4d:57:84:06:c1: 2b:35:5e:d4:a6:91:b9:fb:ae:c2:a9:0a:e8:8a:7d:7e:12:81: fd:be:94:49:22:66:d0:27:67:ea:94:d4:e7:3f:c0:8d:09:85: 83:d7:38:e5:1d:7c:06:ea:58:c8:1b:8e:d7:cf:f0:5c:b4:ec: e9:9c:a1:d3:d7:79:da:78:cc:17:a1:9a:df:4d:2a:f6:ca:df: 3a:7d:ac:56:97:9a:81:10:c7:02:60:9d:bc:e3:53:54:1b:31: 95:4d:4d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2sHOjQYB4MYdeWT/ON5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWE2MDY3NmMxMzBjNjQzOGU0NWI1YTYwNzIxMGU5NTY2 YjY4MzIwHhcNMjUxMjIxMDMwMTIyWhcNMjUxMjIyMDMwMTIyWjAzMTEwLwYDVQQD Eyg3NmY5NjYwYmIwNThiMjQxMThiYmY0NzY4NDhmY2NjOWUxNGQ1MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xgmQRqTOqSUkqKNOcZk3NTyPF1n wsTvu/mryGJBBG79bd174llymBW2o+ZyqEjTVHgTpveAmwAnP+OgpEhIqE7Y7HK1 f1Goz6aod0z3/wCu/HD/UXsxzLw8OJHVku+mnOR12q3ep2vBMvl9waCqu2AH4Tl7 1WrGbUKbS8zTUGOzi/Wl3iKjtMEDgr49pV2DP2k5IhIWVHVUeZFLR+qj9GnRmXjv Hxo2oXwhvIGL0RjxMmU9Ww4bYNYHeS0YIbXo7P6gFYkEVf8TwyWJ6lqlh1OHO3CO LALbF42v2FbBIPOZVNHZ0v4PqJMEOT/L0sOuXJr/EXM8cjwEz3m/V9DrQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb5ZguwWLJBGLv0doSPzMnhTVETMB8GA1UdIwQY MBaAFEaqYGdsEwxkOORbWmByEOlWa2gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUt YzVlMzJjODI3MmQ3LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUtYzVlMzJjODI3MmQ3 LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7VhWCx8 qDsGMIiv9HB/JIguGd7NtSWRMXoMKCYD7dH2/Y8yu7qRakp1ddfApRZGuEE7PZxm yUyMT/MY9pB2brDfDZ/q51AXTEM+46TJAN7fTQelLKNLegSPaBbRG2WPjZnu7n5y 9eMmavj93RtyPRmE4nQ4p13mBG8iH21ja3MFzx8tBpWBmeWDGUl00664IYQyq0zt DZPsRROi1U1XhAbBKzVe1KaRufuuwqkK6Ip9fhKB/b6USSJm0Cdn6pTU5z/AjQmF g9c45R18BupYyBuO18/wXLTs6Zyh09d52njMF6Ga300q9srfOn2sVpeagRDHAmCd vONTVBsxlU1NQw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:34 2025 by rpki-client