This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json) Hash identifier: HdXO/ocOYBOL3sfL28uk9DSNSQB8HdOx2Ol2BqPl9Nk= Subject key identifier: 81:11:F5:94:2B:04:71:2F:A1:BF:92:47:C1:D5:C6:E1:BE:CE:6D:6C Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Certificate serial: 019B3BD94D18E764E024417D45A64626403C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft Manifest number: 1048 Signing time: Sat 20 Dec 2025 13:00:55 +0000 Manifest this update: Sat 20 Dec 2025 13:00:55 +0000 Manifest next update: Sun 21 Dec 2025 13:00:55 +0000 Files and hashes: 1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: ts3PLW5HIE/ycFzTk9Hz/1O2el0nMyIixLjGyUk05hc=) 2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=) 3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=) 4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4d:18:e7:64:e0:24:41:7d:45:a6:46:26:40:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2 Validity Not Before: Dec 20 13:00:55 2025 GMT Not After : Dec 21 13:00:55 2025 GMT Subject: CN=8111f5942b04712fa1bf9247c1d5c6e1bece6d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:d5:5d:e8:e0:25:70:ca:4a:9b:63:87:f1: 98:29:c8:9b:61:a6:a5:a4:bd:3b:39:f6:55:88:7f: 23:c0:a2:e7:61:9e:4c:62:8f:c0:cb:ae:36:37:82: 48:d0:39:17:cc:5f:9e:10:cb:11:58:94:51:f7:c2: c5:42:21:b9:9d:85:25:01:1f:8e:0e:42:a5:af:29: 69:f9:86:de:39:4d:28:ac:89:4d:d9:aa:1c:30:9d: 9d:2c:0f:fb:0c:68:d2:a7:61:ea:9f:24:dd:89:f4: 15:cc:ef:cf:50:b8:fe:8c:e7:e2:ef:64:47:32:bb: 92:92:b2:d3:06:77:e9:68:5a:ea:e6:1a:ed:88:f6: 28:51:eb:8f:a8:46:d8:f3:96:a8:81:49:06:9c:ae: 40:22:43:75:f1:83:88:5e:f1:37:ce:9c:c2:30:d7: bd:67:57:1a:85:13:d5:55:1d:af:e8:9e:d6:52:da: 9d:24:9d:37:27:f3:ad:b6:4e:f6:93:26:85:ae:78: 67:91:6d:9b:b2:1e:55:12:a6:94:37:06:98:e0:cf: 5f:bb:c2:42:0b:c6:5f:39:01:1c:0b:3d:14:d5:8f: 60:93:b3:93:27:0d:e0:a1:09:57:9d:de:28:55:39: ec:be:bd:c9:54:98:4a:41:05:12:c7:c3:10:c9:c7: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:F5:94:2B:04:71:2F:A1:BF:92:47:C1:D5:C6:E1:BE:CE:6D:6C X509v3 Authority Key Identifier: keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:70:8d:fc:92:47:63:47:fd:45:69:93:0b:b7:2f:a3:3c:7f: 56:90:d0:8d:cf:c1:57:b7:c4:2d:2b:4b:58:c7:26:a1:77:26: 38:8e:9f:3a:c8:a4:a5:66:89:b5:f8:56:b8:05:ef:20:26:7f: 86:2c:01:00:39:35:de:03:bf:5e:77:65:11:0c:40:3f:c4:79: 04:9e:3d:b6:1e:f1:9b:51:bd:ee:a9:e2:98:7a:5e:0d:42:f8: cb:58:f0:c3:43:69:5c:05:8a:eb:9d:c6:93:a2:4d:a9:5a:99: b3:f8:47:89:9e:36:d6:a2:0b:6f:39:1d:58:65:af:41:52:d8: 8a:db:70:c4:b6:a8:ca:6a:0c:cb:7c:bf:51:7e:e3:a5:5f:c0: b5:d8:07:7a:6a:0d:bd:86:53:cd:68:c3:a2:e2:25:c2:3d:32: f5:3a:d0:3a:ae:f3:88:b9:96:2f:f7:bc:db:9b:6d:7d:d1:d3: 40:b7:0d:83:40:c3:df:63:d1:4b:8f:e6:27:0b:a2:b2:2b:90: 48:f8:c7:e4:5b:b0:b3:f0:68:59:fe:74:85:5d:a4:04:3d:0f: 60:77:53:0b:05:ac:6a:cd:81:ed:cd:0c:68:fc:7f:23:88:e4: 65:d6:1f:92:17:c0:9b:97:58:d0:6c:4f:ed:b2:f4:62:a8:a4: 21:89:b0:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72U0Y52TgJEF9RaZGJkA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx ZmI0ZjIwHhcNMjUxMjIwMTMwMDU1WhcNMjUxMjIxMTMwMDU1WjAzMTEwLwYDVQQD Eyg4MTExZjU5NDJiMDQ3MTJmYTFiZjkyNDdjMWQ1YzZlMWJlY2U2ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP7VXejgJXDKSptjh/GYKcibYaal pL07OfZViH8jwKLnYZ5MYo/Ay642N4JI0DkXzF+eEMsRWJRR98LFQiG5nYUlAR+O DkKlrylp+YbeOU0orIlN2aocMJ2dLA/7DGjSp2HqnyTdifQVzO/PULj+jOfi72RH MruSkrLTBnfpaFrq5hrtiPYoUeuPqEbY85aogUkGnK5AIkN18YOIXvE3zpzCMNe9 Z1cahRPVVR2v6J7WUtqdJJ03J/Ottk72kyaFrnhnkW2bsh5VEqaUNwaY4M9fu8JC C8ZfOQEcCz0U1Y9gk7OTJw3goQlXnd4oVTnsvr3JVJhKQQUSx8MQyceZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIER9ZQrBHEvob+SR8HVxuG+zm1sMB8GA1UdIwQY MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3CN/JJH Y0f9RWmTC7cvozx/VpDQjc/BV7fELStLWMcmoXcmOI6fOsikpWaJtfhWuAXvICZ/ hiwBADk13gO/XndlEQxAP8R5BJ49th7xm1G97qnimHpeDUL4y1jww0NpXAWK653G k6JNqVqZs/hHiZ421qILbzkdWGWvQVLYittwxLaoymoMy3y/UX7jpV/AtdgHemoN vYZTzWjDouIlwj0y9TrQOq7ziLmWL/e825ttfdHTQLcNg0DD32PRS4/mJwuisiuQ SPjH5Fuws/BoWf50hV2kBD0PYHdTCwWsas2B7c0MaPx/I4jkZdYfkhfAm5dY0GxP 7bL0YqikIYmw1g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:59 2025 by rpki-client