This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json) Hash identifier: Rz2md4FbEY5q6RVfIp3S29LQlPd5EQKP4TUIR/SQOPI= Subject key identifier: CD:49:14:FB:4C:CA:7C:6A:C5:5C:2A:D2:48:A3:0F:A0:B5:C3:BD:CB Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965 Certificate serial: 019B42B6D0DA98C0E4EDCF438F29F8E4D5C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft Manifest number: 080C Signing time: Sun 21 Dec 2025 21:00:35 +0000 Manifest this update: Sun 21 Dec 2025 21:00:35 +0000 Manifest next update: Mon 22 Dec 2025 21:00:35 +0000 Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: h9ke8px7mFHiTxOV3b6CPYZHtsnYIPimCIMHLTPOrI8=) 2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:d0:da:98:c0:e4:ed:cf:43:8f:29:f8:e4:d5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965 Validity Not Before: Dec 21 21:00:35 2025 GMT Not After : Dec 22 21:00:35 2025 GMT Subject: CN=cd4914fb4cca7c6ac55c2ad248a30fa0b5c3bdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:8f:d1:3a:dd:67:3d:dd:5e:b7:c1:09:0f: 48:ba:c4:07:ca:c2:b0:8e:89:15:31:7e:fc:bc:ef: d5:d4:c3:74:2f:1c:e0:ec:49:3c:af:85:e6:0f:74: a1:46:5f:e3:58:dc:cb:1c:c2:2c:03:72:eb:68:14: 3f:6a:66:ee:f3:15:2f:98:58:8d:8a:ec:37:a6:31: 6f:f7:1c:a8:0e:9b:5e:52:9d:de:22:a8:f7:9f:1d: 34:dd:0d:c9:11:e2:d8:ec:a6:3d:07:6d:e2:c7:84: 10:9d:00:c6:2b:96:0f:ed:d3:18:83:f3:a6:41:9f: cd:ba:1c:fb:c6:04:71:bb:22:6e:c2:fd:4c:22:b4: f8:a6:06:03:d2:ed:7e:28:bb:fd:ec:91:81:0a:41: ac:c0:87:85:a9:8b:0b:25:22:64:36:51:5b:6d:a1: 0b:53:89:43:c9:5b:44:f6:f0:a7:38:66:95:6a:0f: c8:04:fb:ca:0f:76:44:b3:76:9a:c8:21:c0:a1:a8: d4:47:c7:52:b2:0e:2e:fa:e2:d4:b4:41:6e:4a:fb: 9a:dc:12:50:3e:87:d6:76:64:ee:34:05:6a:73:43: c8:87:bb:b9:4c:ee:1e:aa:63:df:85:c2:8a:b9:9a: f2:dc:ea:5e:8d:1c:f4:49:ab:bf:fb:ae:c6:85:48: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:14:FB:4C:CA:7C:6A:C5:5C:2A:D2:48:A3:0F:A0:B5:C3:BD:CB X509v3 Authority Key Identifier: keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:24:be:ec:e7:cc:dc:25:b2:63:59:c5:75:8e:51:b9:a8: 09:bf:6e:14:e7:05:f4:f4:06:de:7d:dd:7b:19:ac:8e:81:a3: 49:9d:65:2e:1f:cf:ab:f7:2e:e2:bd:80:62:9b:c3:b2:a4:ca: 90:f1:5d:9e:ff:a1:5e:7f:67:34:a4:27:e9:4c:95:fa:cc:b3: a4:4e:ce:07:ff:bd:c0:2c:85:95:29:25:f8:d7:c0:02:83:b6: 52:80:7f:24:e1:10:8f:1d:4e:f8:d0:1a:c1:ae:55:b9:0b:b8: 7a:7d:67:15:c9:ea:f4:7e:ac:12:83:aa:d3:f8:38:c7:91:5d: b5:05:25:f6:30:01:7f:46:27:0c:ee:a6:d1:d8:af:cf:7c:ea: 7f:b2:ea:8d:96:2c:4b:62:31:cc:af:47:48:8a:39:9a:49:e9: ab:a2:77:2f:20:4a:ee:6a:ff:3b:7f:c3:41:23:a8:ca:90:e4: f0:46:b9:cb:c3:6f:52:86:b3:87:93:13:bf:ab:01:f3:36:fb: 79:9a:04:f0:66:5e:ac:ee:4e:51:c0:e0:ec:44:06:31:27:63: c7:2d:0d:78:87:a5:be:39:bb:89:12:80:3a:74:35:8c:60:bf: 0a:ac:39:a3:4a:0c:77:1f:81:0f:62:c6:2f:f3:ab:7d:e1:fe: 56:39:6c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCttDamMDk7c9Djyn45NXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMDEyYmNiOWU2ZTc0NzIzNzcyNDc4MWE0YzkxOWZjNWM5 NDE5NjUwHhcNMjUxMjIxMjEwMDM1WhcNMjUxMjIyMjEwMDM1WjAzMTEwLwYDVQQD EyhjZDQ5MTRmYjRjY2E3YzZhYzU1YzJhZDI0OGEzMGZhMGI1YzNiZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSP0TrdZz3dXrfBCQ9IusQHysKw jokVMX78vO/V1MN0Lxzg7Ek8r4XmD3ShRl/jWNzLHMIsA3LraBQ/ambu8xUvmFiN iuw3pjFv9xyoDpteUp3eIqj3nx003Q3JEeLY7KY9B23ix4QQnQDGK5YP7dMYg/Om QZ/Nuhz7xgRxuyJuwv1MIrT4pgYD0u1+KLv97JGBCkGswIeFqYsLJSJkNlFbbaEL U4lDyVtE9vCnOGaVag/IBPvKD3ZEs3aayCHAoajUR8dSsg4u+uLUtEFuSvua3BJQ PofWdmTuNAVqc0PIh7u5TO4eqmPfhcKKuZry3OpejRz0Sau/+67GhUibCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1JFPtMynxqxVwq0kijD6C1w73LMB8GA1UdIwQY MBaAFOABK8uebnRyN3JHgaTJGfxclBllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMt MGRiODhlYzczNDJjLzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMtMGRiODhlYzczNDJj LzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuQkvuzn zNwlsmNZxXWOUbmoCb9uFOcF9PQG3n3dexmsjoGjSZ1lLh/Pq/cu4r2AYpvDsqTK kPFdnv+hXn9nNKQn6UyV+syzpE7OB/+9wCyFlSkl+NfAAoO2UoB/JOEQjx1O+NAa wa5VuQu4en1nFcnq9H6sEoOq0/g4x5FdtQUl9jABf0YnDO6m0divz3zqf7LqjZYs S2IxzK9HSIo5mknpq6J3LyBK7mr/O3/DQSOoypDk8Ea5y8NvUoazh5MTv6sB8zb7 eZoE8GZerO5OUcDg7EQGMSdjxy0NeIelvjm7iRKAOnQ1jGC/Cqw5o0oMdx+BD2LG L/OrfeH+VjlsLA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:17 2025 by rpki-client