This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json) Hash identifier: Bizf0Rhya10CBBtp2rROp3kaT++WdzQ8MRdc6Hosbrc= Subject key identifier: CE:91:43:4E:A7:C2:AF:1E:5F:5F:7D:BE:65:F0:4D:FD:10:3E:E7:02 Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Certificate serial: 019B3B348801E9AF1F57FB781FE0214DBCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft Manifest number: 0BB4 Signing time: Sat 20 Dec 2025 10:00:56 +0000 Manifest this update: Sat 20 Dec 2025 10:00:56 +0000 Manifest next update: Sun 21 Dec 2025 10:00:56 +0000 Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: iKYMVm0IET0kKc7CMHaoqap+xJ5G1SehfzJe2yTb3Cw=) 2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:88:01:e9:af:1f:57:fb:78:1f:e0:21:4d:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Validity Not Before: Dec 20 10:00:56 2025 GMT Not After : Dec 21 10:00:56 2025 GMT Subject: CN=ce91434ea7c2af1e5f5f7dbe65f04dfd103ee702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:c9:1c:c1:d3:e1:0d:60:00:aa:0b:dc:bf: ba:12:8c:b8:9c:35:2b:15:cf:41:76:68:61:85:4b: 58:22:9f:69:30:75:46:43:97:19:8f:a1:ed:99:5c: 1b:17:8f:0b:ff:09:86:1e:1b:d0:66:8e:5a:92:52: 76:31:8e:59:e4:94:79:6b:dc:08:01:19:5c:3a:62: 3f:49:b8:65:53:ac:54:66:3c:0c:96:60:47:fb:4f: 88:81:b2:ed:02:78:cc:47:9d:09:87:6b:bb:39:d7: c9:cb:04:60:78:88:d4:83:b1:13:34:51:8f:38:e7: 6f:b1:f8:9f:a2:84:b4:5a:8b:1a:75:0c:ee:b1:92: ba:3f:62:b4:1b:25:d2:87:d6:2e:8e:b8:cf:cc:e2: 0a:06:0e:d3:3e:76:c2:52:8c:8d:d7:63:58:71:e1: c3:52:f5:0f:dd:0d:a4:ec:be:7e:68:7c:48:99:a8: b7:47:eb:28:78:6e:f9:3c:99:42:be:ea:70:f0:51: 49:61:4c:10:48:09:3c:f1:a5:83:3e:63:57:c6:0d: 7a:2e:35:b8:7b:7a:66:85:0d:93:b2:e4:05:a2:93: 98:f7:c9:75:af:bc:c5:dc:98:92:fc:9b:55:8d:8a: b8:73:5e:32:6b:a2:a3:94:c7:c3:b0:93:71:4d:9a: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:43:4E:A7:C2:AF:1E:5F:5F:7D:BE:65:F0:4D:FD:10:3E:E7:02 X509v3 Authority Key Identifier: keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:be:ab:52:44:83:91:36:08:0f:b7:29:44:9e:ec:62:fe:e7: 21:91:2f:21:16:8b:4f:60:24:f6:7d:39:8c:de:fa:0c:68:0a: b6:b3:d0:80:a9:33:9f:23:64:02:e4:ac:55:de:b3:d3:0d:90: 79:25:39:a3:bd:2d:01:bd:cb:09:d7:57:1f:6f:20:5a:32:06: e5:50:82:a8:e4:d2:bb:34:de:cc:46:0a:83:cd:2c:04:a9:1f: ec:fb:fd:c1:fa:05:3c:82:1b:64:7a:82:09:6e:18:f0:12:13: 04:fe:db:64:0f:af:24:91:c6:7a:bb:f3:f3:b4:ce:4b:5b:a6: dc:50:fc:6f:52:4c:6b:2e:2e:49:4e:e2:47:c9:f4:35:38:6e: 26:b6:31:bb:eb:02:71:38:a5:0e:be:b6:80:4b:0e:fc:68:33: 7c:b1:52:61:05:72:b2:77:0a:8d:61:01:1b:32:d7:6b:ee:24: bf:1a:a7:81:1d:7d:0c:0c:b3:82:f5:bf:29:0a:49:c1:df:cc: 05:ba:16:8e:0b:70:65:26:be:ee:23:9a:8e:da:c2:9c:46:f5: d7:a8:31:82:26:84:43:05:55:27:e1:2f:87:96:a7:6f:fa:60: d2:4d:5a:b2:ca:c1:c2:47:89:8b:6e:fe:78:3c:c8:27:a6:93: 8a:73:14:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NIgB6a8fV/t4H+AhTbzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw YmFlNTUwHhcNMjUxMjIwMTAwMDU2WhcNMjUxMjIxMTAwMDU2WjAzMTEwLwYDVQQD EyhjZTkxNDM0ZWE3YzJhZjFlNWY1ZjdkYmU2NWYwNGRmZDEwM2VlNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjzJHMHT4Q1gAKoL3L+6Eoy4nDUr Fc9BdmhhhUtYIp9pMHVGQ5cZj6HtmVwbF48L/wmGHhvQZo5aklJ2MY5Z5JR5a9wI ARlcOmI/SbhlU6xUZjwMlmBH+0+IgbLtAnjMR50Jh2u7OdfJywRgeIjUg7ETNFGP OOdvsfifooS0WosadQzusZK6P2K0GyXSh9YujrjPzOIKBg7TPnbCUoyN12NYceHD UvUP3Q2k7L5+aHxImai3R+soeG75PJlCvupw8FFJYUwQSAk88aWDPmNXxg16LjW4 e3pmhQ2TsuQFopOY98l1r7zF3JiS/JtVjYq4c14ya6KjlMfDsJNxTZrqPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6RQ06nwq8eX199vmXwTf0QPucCMB8GA1UdIwQY MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr6rUkSD kTYID7cpRJ7sYv7nIZEvIRaLT2Ak9n05jN76DGgKtrPQgKkznyNkAuSsVd6z0w2Q eSU5o70tAb3LCddXH28gWjIG5VCCqOTSuzTezEYKg80sBKkf7Pv9wfoFPIIbZHqC CW4Y8BITBP7bZA+vJJHGervz87TOS1um3FD8b1JMay4uSU7iR8n0NThuJrYxu+sC cTilDr62gEsO/GgzfLFSYQVysncKjWEBGzLXa+4kvxqngR19DAyzgvW/KQpJwd/M BboWjgtwZSa+7iOajtrCnEb116gxgiaEQwVVJ+Evh5anb/pg0k1assrBwkeJi27+ eDzIJ6aTinMUcg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:27:56 2025 by rpki-client