This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json) Hash identifier: bauSZ8ZfsTvrSZKSgeIMrZn+I/FnQDqQSptOhHW2yjY= Subject key identifier: C1:B7:E2:B5:93:C6:FD:1D:C3:D0:3E:CD:D9:CE:62:E0:04:A8:13:B8 Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86 Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86 Certificate serial: 019B4581B97B5F30999AC36D10B709D07379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 10:01:27 +0000 Manifest this update: Mon 22 Dec 2025 10:01:27 +0000 Manifest next update: Tue 23 Dec 2025 10:01:27 +0000 Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: TsnU7u/qDbcBicXxMnRAVCYVBXklfInTuXb3kaT9FgA=) 2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:b9:7b:5f:30:99:9a:c3:6d:10:b7:09:d0:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86 Validity Not Before: Dec 22 10:01:27 2025 GMT Not After : Dec 23 10:01:27 2025 GMT Subject: CN=c1b7e2b593c6fd1dc3d03ecdd9ce62e004a813b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:05:c1:9a:f8:e8:63:8e:ea:4e:82:c8:2e: 0e:64:02:e5:09:ba:23:d5:a6:ab:78:a6:3b:66:66: 81:d4:66:d8:9c:6b:e6:74:e0:d6:0a:e7:e0:d2:d6: dd:38:f7:a1:bf:5b:0b:13:1f:17:f5:24:4f:20:5f: ec:14:4d:87:a6:88:e9:bd:8d:13:74:62:6d:b8:5f: bd:17:67:a1:58:6e:88:a8:cf:99:e2:fa:5b:f4:04: e8:c8:92:14:49:f0:d8:cc:5a:4b:63:f0:da:ce:ca: d2:8d:e2:1a:92:43:3c:25:4a:ed:90:13:f3:47:a3: df:6a:c7:c3:36:c1:34:a7:78:fa:c5:6d:69:cc:9c: 6a:fc:54:e3:43:9a:c5:2c:f5:62:b4:2b:58:30:cc: f3:5f:97:6e:de:1d:bc:3c:8a:b9:d4:18:5c:a7:00: a2:b1:88:2e:08:b8:92:c2:72:af:76:66:f5:2a:5d: aa:a6:ca:ef:29:dd:0c:1f:99:09:cd:68:8a:d8:ea: a8:40:5a:9a:d5:44:93:39:48:22:12:96:c0:6e:33: e9:de:1b:0b:de:1e:01:bd:d5:35:24:6a:d2:b5:01: c5:05:9f:fa:83:2e:77:6c:ce:93:76:be:46:e5:df: be:9b:5c:80:c8:05:15:4e:3b:82:ec:70:2d:2d:f9: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B7:E2:B5:93:C6:FD:1D:C3:D0:3E:CD:D9:CE:62:E0:04:A8:13:B8 X509v3 Authority Key Identifier: keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7d:dc:a0:86:4d:c3:94:c4:43:cb:6a:c6:bc:b5:93:83:82: 89:93:5d:f4:24:67:27:f8:ef:62:56:e1:23:5c:4c:d4:b2:42: 7c:95:df:11:65:4c:5f:45:96:c2:03:c6:1b:8e:70:29:ba:04: dc:28:b2:0f:c2:76:f1:81:db:45:7b:c2:a7:e8:ce:01:30:c5: 43:63:df:27:38:ea:6d:b0:21:d9:40:00:b1:49:79:f7:3e:92: 1a:81:cf:fb:88:34:a8:4e:83:57:9d:0f:83:a6:90:f4:cf:fb: 73:23:0d:25:35:65:e4:43:77:f7:0d:e5:cf:6e:6c:30:40:b5: 27:ec:d4:4c:ab:20:34:6f:6f:36:63:27:12:be:50:6f:18:97: 65:a3:c3:1f:31:40:f5:16:84:c1:8d:34:ea:aa:ec:0b:c7:b8: c9:5d:fc:35:a4:9a:d5:77:74:59:02:82:11:95:d4:95:ac:16: 6c:9a:11:95:bc:6a:86:45:4a:0e:f9:6c:26:25:90:4c:9a:4e: c9:e7:d8:8d:83:14:6f:8a:5a:78:10:59:80:9b:39:67:47:4f: 4a:5d:75:c4:5d:09:2c:7f:a5:cb:c9:68:44:bf:81:cd:dc:24: d3:2c:ad:95:c7:6f:fd:f7:f3:39:38:b2:d1:77:a8:30:28:24: 6b:19:68:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgbl7XzCZmsNtELcJ0HN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMjgwYzYzNTJhMGJmYmI3OWQyNDljODg3NWVkMTg2ZWNj ZThhODYwHhcNMjUxMjIyMTAwMTI3WhcNMjUxMjIzMTAwMTI3WjAzMTEwLwYDVQQD EyhjMWI3ZTJiNTkzYzZmZDFkYzNkMDNlY2RkOWNlNjJlMDA0YTgxM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fIFwZr46GOO6k6CyC4OZALlCboj 1aareKY7ZmaB1GbYnGvmdODWCufg0tbdOPehv1sLEx8X9SRPIF/sFE2HpojpvY0T dGJtuF+9F2ehWG6IqM+Z4vpb9AToyJIUSfDYzFpLY/DazsrSjeIakkM8JUrtkBPz R6PfasfDNsE0p3j6xW1pzJxq/FTjQ5rFLPVitCtYMMzzX5du3h28PIq51BhcpwCi sYguCLiSwnKvdmb1Kl2qpsrvKd0MH5kJzWiK2OqoQFqa1USTOUgiEpbAbjPp3hsL 3h4BvdU1JGrStQHFBZ/6gy53bM6Tdr5G5d++m1yAyAUVTjuC7HAtLfneDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG34rWTxv0dw9A+zdnOYuAEqBO4MB8GA1UdIwQY MBaAFOMoDGNSoL+7edJJyIde0YbszoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQt ZWYwYjgyMTg5NDQ0LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQtZWYwYjgyMTg5NDQ0 LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn3coIZN w5TEQ8tqxry1k4OCiZNd9CRnJ/jvYlbhI1xM1LJCfJXfEWVMX0WWwgPGG45wKboE 3CiyD8J28YHbRXvCp+jOATDFQ2PfJzjqbbAh2UAAsUl59z6SGoHP+4g0qE6DV50P g6aQ9M/7cyMNJTVl5EN39w3lz25sMEC1J+zUTKsgNG9vNmMnEr5QbxiXZaPDHzFA 9RaEwY006qrsC8e4yV38NaSa1Xd0WQKCEZXUlawWbJoRlbxqhkVKDvlsJiWQTJpO yefYjYMUb4paeBBZgJs5Z0dPSl11xF0JLH+ly8loRL+Bzdwk0yytlcdv/ffzOTiy 0XeoMCgkaxlolw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:48:34 2025 by rpki-client