This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json) Hash identifier: 3klsxf67NP03rM2xMXwwbjfwia3Tf5kshStFfpRimHY= Subject key identifier: F8:A3:5F:5F:31:D6:19:6F:08:53:29:94:C2:80:C5:CA:3F:87:65:7B Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Certificate serial: 019B36B3ACA624567EB427EAEFABF8223D7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft Manifest number: 0ABC Signing time: Fri 19 Dec 2025 13:01:43 +0000 Manifest this update: Fri 19 Dec 2025 13:01:43 +0000 Manifest next update: Sat 20 Dec 2025 13:01:43 +0000 Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: jO++9NPXz+YQUa3B8bvMyLfFe23Zv2wny2s+wH9VxVw=) 2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:ac:a6:24:56:7e:b4:27:ea:ef:ab:f8:22:3d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Validity Not Before: Dec 19 13:01:43 2025 GMT Not After : Dec 20 13:01:43 2025 GMT Subject: CN=f8a35f5f31d6196f08532994c280c5ca3f87657b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:1a:2e:b7:7b:b7:4c:0e:98:65:fa:fd:98: 9c:66:ac:8e:41:04:19:b4:da:a7:9a:5a:9a:94:0c: 79:4f:98:a9:8c:f4:98:3d:27:1c:0b:a8:2d:26:6e: e7:3a:0c:8b:10:86:f2:79:f2:94:53:56:61:32:c7: 6a:98:78:17:4c:b6:32:97:06:1d:17:9c:85:33:7e: 00:24:28:82:6c:5e:70:7e:41:9f:8b:c6:57:75:fa: 44:76:94:56:3a:dc:7b:de:8b:eb:50:ee:8e:02:c5: 53:45:44:d1:1b:6f:83:da:12:26:9f:28:3b:7c:13: 07:5f:ca:0f:59:3a:46:35:b9:f6:cc:5b:44:64:8a: 30:68:44:cd:23:dd:d4:25:0c:1b:20:5d:8f:c6:c3: 39:05:3f:d4:98:d7:7e:60:f9:3a:b5:6c:dd:63:bb: 36:58:49:61:42:5f:c1:74:c8:7b:c1:35:b0:db:6b: 62:dc:5c:77:e6:65:38:5b:ad:a2:30:d2:81:27:ae: 75:be:91:ad:df:7a:9e:ba:5c:87:90:d0:98:f4:55: 62:51:39:52:4d:fd:b0:c6:7a:af:6a:74:ad:da:fe: 24:c5:2b:86:d2:4f:81:55:01:10:2e:a6:54:5e:dc: 8c:b5:f2:47:f9:60:bb:13:fd:2c:b1:57:1f:c7:50: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:5F:5F:31:D6:19:6F:08:53:29:94:C2:80:C5:CA:3F:87:65:7B X509v3 Authority Key Identifier: keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:15:32:45:79:b3:6e:07:bc:ad:71:db:8d:04:c2:66:9a:7f: ec:77:72:06:fb:3a:13:ff:7f:fd:80:12:57:0b:60:ca:cc:54: 1c:54:dc:4b:2f:98:0c:04:89:df:af:a6:0d:e3:71:e4:ad:54: 7f:c0:27:be:e9:9a:94:f9:ce:07:38:dd:62:89:01:e1:90:16: 7d:d4:95:10:4e:99:c8:8c:66:56:f2:00:51:bb:f8:ce:9f:a8: 5f:c0:90:2f:26:5c:d8:25:cf:49:fa:3b:c3:42:d1:53:2a:f9: 09:ee:35:2f:b0:0e:48:fe:2f:79:65:94:1e:4d:f8:73:b7:35: 82:84:2e:70:df:7f:fb:e2:cf:9b:30:68:6a:fd:4d:10:35:f9: 76:6a:c6:6a:27:f5:01:aa:aa:ef:af:77:6e:59:79:7d:06:4b: c7:4a:b9:0b:5b:e2:49:b5:f0:25:9e:78:08:98:19:28:04:8d: cc:d1:2c:d8:11:df:6a:de:f4:ed:b7:ce:f2:49:40:73:b5:ce: 17:2c:f4:a9:28:ff:76:97:66:5b:85:c3:83:7a:3e:eb:e0:64: 52:12:26:4b:7c:10:53:f2:a5:c9:d0:f3:e2:36:1d:6c:45:4b: be:10:9d:b5:8a:27:41:34:c6:4e:e4:a7:64:fe:5a:e9:0a:fe: 0c:c5:00:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s6ymJFZ+tCfq76v4Ij17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi ZmUwZTAwHhcNMjUxMjE5MTMwMTQzWhcNMjUxMjIwMTMwMTQzWjAzMTEwLwYDVQQD EyhmOGEzNWY1ZjMxZDYxOTZmMDg1MzI5OTRjMjgwYzVjYTNmODc2NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtkaLrd7t0wOmGX6/ZicZqyOQQQZ tNqnmlqalAx5T5ipjPSYPSccC6gtJm7nOgyLEIbyefKUU1ZhMsdqmHgXTLYylwYd F5yFM34AJCiCbF5wfkGfi8ZXdfpEdpRWOtx73ovrUO6OAsVTRUTRG2+D2hImnyg7 fBMHX8oPWTpGNbn2zFtEZIowaETNI93UJQwbIF2PxsM5BT/UmNd+YPk6tWzdY7s2 WElhQl/BdMh7wTWw22ti3Fx35mU4W62iMNKBJ651vpGt33qeulyHkNCY9FViUTlS Tf2wxnqvanSt2v4kxSuG0k+BVQEQLqZUXtyMtfJH+WC7E/0ssVcfx1C2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPijX18x1hlvCFMplMKAxco/h2V7MB8GA1UdIwQY MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt ZWE2ZjcwNWQyYzBkLzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxUyRXmz bge8rXHbjQTCZpp/7HdyBvs6E/9//YASVwtgysxUHFTcSy+YDASJ36+mDeNx5K1U f8AnvumalPnOBzjdYokB4ZAWfdSVEE6ZyIxmVvIAUbv4zp+oX8CQLyZc2CXPSfo7 w0LRUyr5Ce41L7AOSP4veWWUHk34c7c1goQucN9/++LPmzBoav1NEDX5dmrGaif1 Aaqq7693bll5fQZLx0q5C1viSbXwJZ54CJgZKASNzNEs2BHfat707bfO8klAc7XO Fyz0qSj/dpdmW4XDg3o+6+BkUhImS3wQU/KlydDz4jYdbEVLvhCdtYonQTTGTuSn ZP5a6Qr+DMUA1g== -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:20 2025 by rpki-client