This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json) Hash identifier: rHNbureAFA4gRnH2n4pEkQNiv+Wx1SJ4FopVRXGpKWI= Subject key identifier: 54:48:86:F2:13:E2:68:BC:C0:34:9B:58:24:57:55:A3:C7:5A:53:D9 Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B3C7F5779CF7AFF47878CA0F95140AB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft Manifest number: 0C53 Signing time: Sat 20 Dec 2025 16:02:16 +0000 Manifest this update: Sat 20 Dec 2025 16:02:16 +0000 Manifest next update: Sun 21 Dec 2025 16:02:16 +0000 Files and hashes: 1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: 2il+Nk/UT9AYapMi8/Sq5Rv01V7V/poNeg8D99+QI8o=) 2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=) 3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=) 4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=) 5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=) 6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:57:79:cf:7a:ff:47:87:8c:a0:f9:51:40:ab:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Dec 20 16:02:16 2025 GMT Not After : Dec 21 16:02:16 2025 GMT Subject: CN=544886f213e268bcc0349b58245755a3c75a53d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:71:69:98:1c:c8:e3:9b:65:d9:03:a8:cf: d9:f6:8d:7f:66:75:c7:17:ce:91:90:32:c6:38:e8: a0:4e:1c:c9:52:b2:74:24:60:21:2e:fa:bf:6f:89: f3:20:fb:b1:69:7f:13:48:55:bc:dd:19:bd:6e:f0: ed:55:61:dd:1f:71:d3:c6:70:3c:d3:11:65:03:15: 48:3d:9a:6d:2e:5c:a6:f8:c6:d7:16:d2:82:7d:52: 92:06:55:6a:ce:aa:18:a2:96:95:2a:60:37:4f:81: 52:78:3b:64:10:91:09:10:a1:0c:d5:93:9c:ed:92: 2c:d9:5a:71:15:ad:6e:d0:58:45:83:5d:0a:0c:4c: a9:bd:8d:ea:99:96:f5:aa:bb:ac:b7:f7:b8:17:b0: 39:ed:77:fc:0f:28:44:80:de:c1:cc:85:19:f2:54: 39:6a:30:7b:42:53:81:8a:1d:42:e5:0c:33:84:b1: ae:d0:b5:9e:8c:22:7d:ac:a3:3f:d4:c2:c1:be:44: 0f:5d:09:55:ca:26:e7:4c:37:38:e9:ee:d0:eb:37: 75:ff:fb:e3:6a:07:c3:dd:8a:9e:39:f1:ab:2e:a4: e1:66:ac:91:e8:38:0f:c3:21:37:9c:26:6e:c3:66: 55:71:b4:3f:2a:5e:e0:21:c1:b0:65:75:04:5b:4b: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:86:F2:13:E2:68:BC:C0:34:9B:58:24:57:55:A3:C7:5A:53:D9 X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:46:4c:c1:79:fc:64:53:9f:cf:c5:b8:b5:5e:b5:64:0c: 84:7d:05:f2:03:30:a1:eb:f1:c5:f6:ce:82:8f:df:9e:c8:3a: 7b:f5:65:21:ed:04:eb:c9:a2:bf:a9:65:8d:ea:b9:98:e8:e0: aa:1c:45:12:2d:e3:11:7e:4b:a0:3a:f9:c7:45:ab:46:f0:63: 50:4c:6e:25:b0:53:cb:f4:8e:1b:0a:67:23:d8:4e:8f:60:29: 3b:63:89:e9:c1:1f:40:76:7b:73:78:16:34:ef:d2:68:cc:8e: 17:fe:f7:8b:a1:37:42:e6:55:f9:a2:b9:a9:33:b8:aa:ba:f6: 12:62:92:42:0e:d1:4d:1e:25:a5:de:b1:07:4b:f5:ee:21:84: bb:66:9f:a8:8a:2c:1b:d2:65:52:53:c4:22:c3:58:f2:99:3e: 86:7c:62:b9:09:7e:58:fd:c5:81:e9:84:79:e5:cc:9c:97:85: 15:ba:c2:71:f9:2b:f6:d1:6a:34:fe:39:35:ad:91:11:80:ca: c0:14:8b:30:80:fe:35:3c:9c:72:7d:99:42:47:8d:3e:e0:3a: c5:fd:48:d9:35:e8:46:30:6a:a3:83:33:88:92:65:df:f3:68: 3a:7e:6f:5e:64:ea:d7:3c:7c:3e:3e:1f:11:d5:2e:cb:b8:26: 45:0c:47:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1d5z3r/R4eMoPlRQKs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjUxMjIwMTYwMjE2WhcNMjUxMjIxMTYwMjE2WjAzMTEwLwYDVQQD Eyg1NDQ4ODZmMjEzZTI2OGJjYzAzNDliNTgyNDU3NTVhM2M3NWE1M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojpxaZgcyOObZdkDqM/Z9o1/ZnXH F86RkDLGOOigThzJUrJ0JGAhLvq/b4nzIPuxaX8TSFW83Rm9bvDtVWHdH3HTxnA8 0xFlAxVIPZptLlym+MbXFtKCfVKSBlVqzqoYopaVKmA3T4FSeDtkEJEJEKEM1ZOc 7ZIs2VpxFa1u0FhFg10KDEypvY3qmZb1qrust/e4F7A57Xf8DyhEgN7BzIUZ8lQ5 ajB7QlOBih1C5QwzhLGu0LWejCJ9rKM/1MLBvkQPXQlVyibnTDc46e7Q6zd1//vj agfD3YqeOfGrLqThZqyR6DgPwyE3nCZuw2ZVcbQ/Kl7gIcGwZXUEW0v5QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRIhvIT4mi8wDSbWCRXVaPHWlPZMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKRGTMF5 /GRTn8/FuLVetWQMhH0F8gMwoevxxfbOgo/fnsg6e/VlIe0E68miv6lljeq5mOjg qhxFEi3jEX5LoDr5x0WrRvBjUExuJbBTy/SOGwpnI9hOj2ApO2OJ6cEfQHZ7c3gW NO/SaMyOF/73i6E3QuZV+aK5qTO4qrr2EmKSQg7RTR4lpd6xB0v17iGEu2afqIos G9JlUlPEIsNY8pk+hnxiuQl+WP3FgemEeeXMnJeFFbrCcfkr9tFqNP45Na2REYDK wBSLMID+NTyccn2ZQkeNPuA6xf1I2TXoRjBqo4MziJJl3/NoOn5vXmTq1zx8Pj4f EdUuy7gmRQxH4w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:33 2025 by rpki-client