This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json) Hash identifier: UzPlazqAYjqwFbphw4w09KPdolmtV973Gt9bwrch/R4= Subject key identifier: 5B:0B:83:9F:2B:C2:CC:B5:7A:7B:6E:59:0B:9F:2C:A9:0C:2E:87:B9 Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Certificate serial: 019B3C7DEF1DB376EEFFE152329A4D202E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft Manifest number: 067A Signing time: Sat 20 Dec 2025 16:00:44 +0000 Manifest this update: Sat 20 Dec 2025 16:00:44 +0000 Manifest next update: Sun 21 Dec 2025 16:00:44 +0000 Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: eoqvEw0wbmyryTdP/500PaiDzpcoKhds3t0d8kTfM6c=) 2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ef:1d:b3:76:ee:ff:e1:52:32:9a:4d:20:2e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Validity Not Before: Dec 20 16:00:44 2025 GMT Not After : Dec 21 16:00:44 2025 GMT Subject: CN=5b0b839f2bc2ccb57a7b6e590b9f2ca90c2e87b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:a0:20:bb:9f:36:92:0b:1c:a1:20:4a:91: 1b:96:23:f7:11:af:2a:af:77:37:1a:e7:70:e1:c2: 3e:4b:d4:b4:06:85:fb:91:cb:6a:b2:e6:c3:65:38: 4e:14:31:78:20:c3:4e:15:ca:66:57:50:0f:c9:15: 1d:b4:f9:cb:1a:8c:66:c1:ab:72:05:2d:99:66:be: 0d:12:dc:45:9a:d3:13:b7:00:0c:e2:f5:17:02:d9: 0c:84:f6:9d:0f:d1:36:0c:d4:95:dd:9b:fd:f2:39: 85:99:80:dc:9b:33:61:7b:47:52:d5:67:a8:d1:6e: 7e:1f:c0:3f:5f:aa:c9:2b:a6:56:2c:aa:b8:ac:aa: 46:21:bd:31:4b:40:83:bd:92:81:2a:de:7b:ed:5f: d7:75:75:89:69:f1:00:d4:77:6d:95:f1:a8:6e:01: a4:d8:69:80:64:07:f0:86:e3:c0:8e:5c:d5:a6:d9: 84:1c:d6:11:cd:24:52:87:f9:08:17:47:34:fe:3b: 31:11:66:55:d6:8b:3d:ce:24:39:c1:d5:b7:1c:31: d1:a6:7a:d6:01:7e:b1:d5:de:a8:75:1a:00:0c:86: 8a:44:91:bd:2f:27:8e:37:e1:3a:d3:f3:ac:a9:be: f9:32:c7:57:3a:a1:31:5f:bb:2a:56:78:d1:ad:5f: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:83:9F:2B:C2:CC:B5:7A:7B:6E:59:0B:9F:2C:A9:0C:2E:87:B9 X509v3 Authority Key Identifier: keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:45:98:8b:d4:85:e4:56:5d:96:29:b8:8e:09:e0:0c:13:59: f0:27:af:92:b4:f0:b4:44:62:d9:51:21:0c:41:8b:54:d8:99: c3:c1:9c:d8:b7:11:83:95:b2:7d:a1:03:62:7b:18:10:d2:3f: c9:62:2e:9e:1f:bb:8a:c5:bf:93:ac:11:a7:12:f4:65:46:f1: d7:e9:92:fa:d9:86:04:e8:f2:bc:11:56:ad:82:6f:11:41:20: b1:7b:e5:b7:0e:7d:2b:37:3a:b2:d5:d5:03:f9:59:c9:1b:02: aa:f8:19:0f:bf:43:b0:14:ce:a7:00:d3:c1:fb:8b:f1:74:9b: 79:bd:32:a9:98:fd:11:c4:a5:27:dd:b9:c2:4f:62:73:7c:22: 20:95:06:60:89:e0:5f:7b:2d:8d:c4:e5:17:86:84:59:7c:bb: a2:c7:a1:bf:f9:e2:ca:f6:db:12:0c:0d:45:3e:db:4f:91:02: a1:ca:07:09:a4:16:90:e2:76:4e:27:4d:28:43:93:15:aa:25: 7b:25:db:d4:ac:e0:3e:4d:e8:a7:2c:be:cc:48:cf:1e:73:d2: d7:c7:a3:17:49:f9:f9:81:09:32:06:9d:82:63:38:df:9e:db: fd:64:38:10:ad:3c:fe:2c:f7:56:1a:d9:c6:8e:c6:72:66:4a: 51:ce:bd:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fe8ds3bu/+FSMppNIC5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3 OTA5N2MwHhcNMjUxMjIwMTYwMDQ0WhcNMjUxMjIxMTYwMDQ0WjAzMTEwLwYDVQQD Eyg1YjBiODM5ZjJiYzJjY2I1N2E3YjZlNTkwYjlmMmNhOTBjMmU4N2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwKgILufNpILHKEgSpEbliP3Ea8q r3c3Gudw4cI+S9S0BoX7kctqsubDZThOFDF4IMNOFcpmV1APyRUdtPnLGoxmwaty BS2ZZr4NEtxFmtMTtwAM4vUXAtkMhPadD9E2DNSV3Zv98jmFmYDcmzNhe0dS1Weo 0W5+H8A/X6rJK6ZWLKq4rKpGIb0xS0CDvZKBKt577V/XdXWJafEA1HdtlfGobgGk 2GmAZAfwhuPAjlzVptmEHNYRzSRSh/kIF0c0/jsxEWZV1os9ziQ5wdW3HDHRpnrW AX6x1d6odRoADIaKRJG9LyeON+E60/Osqb75MsdXOqExX7sqVnjRrV/RHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsLg58rwsy1entuWQufLKkMLoe5MB8GA1UdIwQY MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0WYi9SF 5FZdlim4jgngDBNZ8CevkrTwtERi2VEhDEGLVNiZw8Gc2LcRg5WyfaEDYnsYENI/ yWIunh+7isW/k6wRpxL0ZUbx1+mS+tmGBOjyvBFWrYJvEUEgsXvltw59Kzc6stXV A/lZyRsCqvgZD79DsBTOpwDTwfuL8XSbeb0yqZj9EcSlJ925wk9ic3wiIJUGYIng X3stjcTlF4aEWXy7osehv/niyvbbEgwNRT7bT5ECocoHCaQWkOJ2TidNKEOTFaol eyXb1KzgPk3opyy+zEjPHnPS18ejF0n5+YEJMgadgmM4357b/WQ4EK08/iz3VhrZ xo7GcmZKUc69/w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:26 2025 by rpki-client