This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json) Hash identifier: Y0kaYI2vOg2Q56Sa9QWfUxks5wyKbX41z/0OdvAHY28= Subject key identifier: 96:E2:BC:0B:06:67:D4:DE:99:EF:93:9B:BC:E4:76:7E:AB:C8:33:78 Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16 Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316 Certificate serial: 019B3757FBF09AD2258A516AFC69E96AB7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft Manifest number: 1020 Signing time: Fri 19 Dec 2025 16:01:11 +0000 Manifest this update: Fri 19 Dec 2025 16:01:11 +0000 Manifest next update: Sat 20 Dec 2025 16:01:11 +0000 Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: c9lZYOYg6cwylZH+XnaNu8MjlmywbgG7xRuSJM7+E1s=) 2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:fb:f0:9a:d2:25:8a:51:6a:fc:69:e9:6a:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b8985faea08598c05cc30b82e282306af793316 Validity Not Before: Dec 19 16:01:11 2025 GMT Not After : Dec 20 16:01:11 2025 GMT Subject: CN=96e2bc0b0667d4de99ef939bbce4767eabc83378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:31:9e:63:27:4f:d4:c8:45:45:33:df:55: fe:a0:d9:bb:b8:17:32:97:25:a6:22:67:07:54:1e: 32:4d:06:b1:08:f7:31:ee:08:6a:2d:b2:d7:a7:67: 57:3f:9c:05:c0:08:62:e0:fa:b0:02:e1:60:80:49: e5:85:f8:83:00:4d:e0:91:35:e6:14:1e:32:3d:7e: 9b:62:98:a2:0a:b2:14:6e:14:2d:28:3d:15:8a:d7: f5:22:28:cd:05:2f:18:7d:0f:73:9d:ee:48:41:cb: 26:f3:71:98:94:e9:71:b8:32:b3:1d:1b:56:ee:a4: 0f:81:bf:c0:be:9e:41:32:b6:34:e7:73:68:dc:33: 2e:6b:d5:e0:2d:5c:96:eb:da:91:bc:50:43:f4:87: 45:6e:b7:ba:14:9d:ae:7d:97:ee:03:45:9b:e9:62: 8c:36:85:c1:a7:7b:b5:1b:be:b0:e7:9d:83:61:bc: 5c:5b:e6:b5:71:95:7a:54:f5:01:cf:71:2b:5e:10: 8d:f1:43:61:a8:51:e9:30:9d:f6:df:26:af:02:ee: 3c:c7:93:00:e6:59:78:22:4f:7f:30:cd:55:4d:2b: 29:e2:eb:1e:79:35:94:fc:1c:56:e5:29:01:31:68: 0d:37:ad:f2:48:3d:00:73:a5:9d:02:12:97:69:d1: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:BC:0B:06:67:D4:DE:99:EF:93:9B:BC:E4:76:7E:AB:C8:33:78 X509v3 Authority Key Identifier: keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:25:b3:40:41:b0:c9:9d:cd:1e:0e:19:5a:f7:22:59:a3: e0:48:ab:54:95:3f:5a:41:55:44:2a:1e:93:d4:73:16:d1:f3: 46:f3:9f:69:0b:40:b5:75:c1:3c:a5:2d:14:7b:fd:a5:e0:e9: d6:17:8f:6a:b2:12:0f:09:eb:4f:47:0d:4c:2a:f1:7c:af:a9: 77:67:73:24:c2:da:25:5c:c8:04:04:d5:a3:4d:78:6f:3a:c7: 4c:54:81:50:3c:f4:01:70:8b:bd:1a:3a:a2:49:57:91:fb:b0: ab:7e:7c:fa:78:f5:d5:a0:b5:7a:de:a9:8c:04:8b:aa:62:d5: 00:5e:99:f3:2e:f9:a3:9e:ac:83:3b:51:35:35:6c:85:b1:57: 8a:99:e2:5d:3e:22:79:b5:66:9e:8d:6d:cb:06:82:c7:7e:05: 06:ea:59:33:6f:56:10:31:4b:dd:53:63:84:cc:0e:c0:dd:6a: 9e:40:bd:f0:1a:86:58:2c:fc:ee:aa:bf:29:2a:ce:1f:09:01: 2a:5d:1b:b3:4d:4e:65:21:77:b1:71:9c:19:16:ff:7b:b3:ad: 78:82:50:26:18:94:0e:de:1f:71:cf:d0:12:eb:6a:5f:8f:d9: da:2e:1b:98:95:0f:e6:a3:5c:b6:a1:58:2c:1d:5a:97:08:ab: 25:ce:b0:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/vwmtIlilFq/GnparevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODk4NWZhZWEwODU5OGMwNWNjMzBiODJlMjgyMzA2YWY3 OTMzMTYwHhcNMjUxMjE5MTYwMTExWhcNMjUxMjIwMTYwMTExWjAzMTEwLwYDVQQD Eyg5NmUyYmMwYjA2NjdkNGRlOTllZjkzOWJiY2U0NzY3ZWFiYzgzMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsMxnmMnT9TIRUUz31X+oNm7uBcy lyWmImcHVB4yTQaxCPcx7ghqLbLXp2dXP5wFwAhi4PqwAuFggEnlhfiDAE3gkTXm FB4yPX6bYpiiCrIUbhQtKD0Vitf1IijNBS8YfQ9zne5IQcsm83GYlOlxuDKzHRtW 7qQPgb/Avp5BMrY053No3DMua9XgLVyW69qRvFBD9IdFbre6FJ2ufZfuA0Wb6WKM NoXBp3u1G76w552DYbxcW+a1cZV6VPUBz3ErXhCN8UNhqFHpMJ323yavAu48x5MA 5ll4Ik9/MM1VTSsp4useeTWU/BxW5SkBMWgNN63ySD0Ac6WdAhKXadGMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbivAsGZ9Teme+Tm7zkdn6ryDN4MB8GA1UdIwQY MBaAFHuJhfrqCFmMBcwwuC4oIwaveTMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTIt MzdjODZlMzU1MjY3LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTItMzdjODZlMzU1MjY3 LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRgls0BB sMmdzR4OGVr3Ilmj4EirVJU/WkFVRCoek9RzFtHzRvOfaQtAtXXBPKUtFHv9peDp 1heParISDwnrT0cNTCrxfK+pd2dzJMLaJVzIBATVo014bzrHTFSBUDz0AXCLvRo6 oklXkfuwq358+nj11aC1et6pjASLqmLVAF6Z8y75o56sgztRNTVshbFXipniXT4i ebVmno1tywaCx34FBupZM29WEDFL3VNjhMwOwN1qnkC98BqGWCz87qq/KSrOHwkB Kl0bs01OZSF3sXGcGRb/e7OteIJQJhiUDt4fcc/QEutqX4/Z2i4bmJUP5qNctqFY LB1alwirJc6wBw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:24:31 2025 by rpki-client