This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json) Hash identifier: jOtimDr2VnKu2iRdL0JdqqN2ZKkbcqEmLabK6FLBtN4= Subject key identifier: 47:9E:9D:CE:B9:CA:E0:26:00:15:B7:E0:DE:65:7B:3A:53:DF:1B:DE Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a Certificate serial: 019B41DB8DD5448A6C8C600A4522BE90EAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft Manifest number: 1289 Signing time: Sun 21 Dec 2025 17:01:06 +0000 Manifest this update: Sun 21 Dec 2025 17:01:06 +0000 Manifest next update: Mon 22 Dec 2025 17:01:06 +0000 Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: XrzSsjQCQ8oKlwt3Ob2PJjwxjPiMYjdpw0sAS5ktRto=) 2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:8d:d5:44:8a:6c:8c:60:0a:45:22:be:90:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a Validity Not Before: Dec 21 17:01:06 2025 GMT Not After : Dec 22 17:01:06 2025 GMT Subject: CN=479e9dceb9cae0260015b7e0de657b3a53df1bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1d:44:16:df:ae:a8:1b:b3:11:07:40:a4:77: 53:7a:21:8d:3f:54:77:81:e6:c2:fe:70:6d:75:83: 59:de:06:9a:38:04:4a:df:91:aa:ea:28:83:0c:44: 53:31:d3:04:25:50:9e:b6:f1:c5:31:4e:58:71:1f: 7e:76:8d:4e:63:49:3d:0e:f8:af:83:c1:ce:01:a8: 53:dd:0f:d0:97:ba:1d:8c:c9:bd:e1:60:83:ea:a5: ca:8c:52:27:03:e6:3c:9a:ff:0e:39:66:49:0d:d0: 40:29:3a:cb:89:49:87:0d:e0:59:3c:8d:71:1f:48: f8:81:ca:51:1a:da:5c:b9:04:b1:a3:ed:4f:7b:28: f9:f3:db:6a:48:a3:b4:16:c7:fa:68:fa:57:19:77: 89:32:da:28:65:a4:42:75:62:a3:83:c0:49:a5:ba: 72:e5:7b:e4:28:46:2b:88:af:97:54:8b:05:a5:7f: 22:8d:15:3d:8d:95:d5:a1:ed:65:ef:21:6d:fe:54: 4e:52:d2:6b:3a:18:34:e5:de:40:77:d1:bb:5c:ef: fe:2c:e9:c4:01:84:47:c3:b6:68:9d:e9:09:93:c5: cd:12:d5:05:f0:3f:2c:46:4f:09:b1:a2:53:34:33: 8d:d7:c8:75:bd:ea:fe:16:f2:a6:ed:66:cd:bb:6c: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:9D:CE:B9:CA:E0:26:00:15:B7:E0:DE:65:7B:3A:53:DF:1B:DE X509v3 Authority Key Identifier: keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:76:05:ed:7f:56:e2:b9:f4:7c:b5:4c:9f:7b:09:2a:91:fd: fb:42:75:57:1d:15:7d:3c:b4:30:08:23:90:2a:ad:15:40:b7: da:45:70:79:79:c6:95:b0:c0:19:28:23:45:5f:d7:03:91:b4: 39:21:e1:ac:18:94:56:76:0f:9c:88:88:a5:89:10:90:e3:d0: ba:fe:27:df:4a:55:33:fd:7e:f9:50:6d:00:f0:d4:3a:2d:1e: f8:16:dc:d8:52:49:83:0a:41:a2:82:ef:69:0e:f8:b6:7b:30: fa:9c:2b:c8:87:ed:bf:a3:d2:a6:5e:a9:70:a3:f9:0d:dd:83: af:22:fe:2c:3e:02:bf:69:8c:98:6f:63:70:6a:6e:94:b4:ad: 57:8c:42:a9:4a:ed:46:52:12:67:64:87:9e:36:fc:be:ce:56: 6e:65:01:9d:bd:ad:48:da:2b:9a:77:e7:57:c0:be:f4:68:d3: 9d:e4:f8:5d:65:89:f8:2c:a8:18:5d:c5:c9:91:59:e6:c1:7b: 38:b5:f7:1c:7b:03:d5:09:d3:b6:2f:0e:1b:f9:24:36:38:14: 9e:45:18:58:29:52:69:5d:c5:10:de:ca:0c:cc:f7:d0:d6:b7: c2:9b:89:5d:66:db:8b:05:d1:20:9f:f0:e1:1a:1b:03:87:1f: 90:7f:33:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB243VRIpsjGAKRSK+kOrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1 MTNjOWEwHhcNMjUxMjIxMTcwMTA2WhcNMjUxMjIyMTcwMTA2WjAzMTEwLwYDVQQD Eyg0NzllOWRjZWI5Y2FlMDI2MDAxNWI3ZTBkZTY1N2IzYTUzZGYxYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h1EFt+uqBuzEQdApHdTeiGNP1R3 gebC/nBtdYNZ3gaaOARK35Gq6iiDDERTMdMEJVCetvHFMU5YcR9+do1OY0k9Dviv g8HOAahT3Q/Ql7odjMm94WCD6qXKjFInA+Y8mv8OOWZJDdBAKTrLiUmHDeBZPI1x H0j4gcpRGtpcuQSxo+1Peyj589tqSKO0Fsf6aPpXGXeJMtooZaRCdWKjg8BJpbpy 5XvkKEYriK+XVIsFpX8ijRU9jZXVoe1l7yFt/lROUtJrOhg05d5Ad9G7XO/+LOnE AYRHw7ZonekJk8XNEtUF8D8sRk8JsaJTNDON18h1ver+FvKm7WbNu2wc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeenc65yuAmABW34N5lezpT3xveMB8GA1UdIwQY MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt OTAxYTM3M2RmMDgwLzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3YF7X9W 4rn0fLVMn3sJKpH9+0J1Vx0VfTy0MAgjkCqtFUC32kVweXnGlbDAGSgjRV/XA5G0 OSHhrBiUVnYPnIiIpYkQkOPQuv4n30pVM/1++VBtAPDUOi0e+Bbc2FJJgwpBooLv aQ74tnsw+pwryIftv6PSpl6pcKP5Dd2DryL+LD4Cv2mMmG9jcGpulLStV4xCqUrt RlISZ2SHnjb8vs5WbmUBnb2tSNormnfnV8C+9GjTneT4XWWJ+CyoGF3FyZFZ5sF7 OLX3HHsD1QnTti8OG/kkNjgUnkUYWClSaV3FEN7KDMz30Na3wpuJXWbbiwXRIJ/w 4RobA4cfkH8zGw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:38:45 2025 by rpki-client