This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json) Hash identifier: lyaeTSjZ2WSxOxlorDupagfEsbI04Y2814yxWT7rTrk= Subject key identifier: 77:D4:E8:5C:4F:35:55:2F:AB:20:E8:98:DF:15:73:17:55:4B:78:72 Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Certificate serial: 019B378F0B70628FC1360485930F49E180B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft Manifest number: 17F1 Signing time: Fri 19 Dec 2025 17:01:19 +0000 Manifest this update: Fri 19 Dec 2025 17:01:19 +0000 Manifest next update: Sat 20 Dec 2025 17:01:19 +0000 Files and hashes: 1: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: hwqiJOG9qwIb3dXYozg0/F8vFr3xrFKcNHSY5yLZ8Xs=) 2: u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa (hash: IB8pV7Q+dwm9Rody8Bp/FIsIiSm2P1roaWpfj3CLMGI=) 3: w41Q-pBzKfdWHXR2vGX4i5Q4snE.roa (hash: WtueUI2Jm3MhYJ2HMFzJ55B+hyohmoA3tc1o3ULlx0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:0b:70:62:8f:c1:36:04:85:93:0f:49:e1:80:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Validity Not Before: Dec 19 17:01:19 2025 GMT Not After : Dec 20 17:01:19 2025 GMT Subject: CN=77d4e85c4f35552fab20e898df157317554b7872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:07:1e:eb:8d:2e:3b:b9:65:5c:2f:a9:1a: a0:88:f5:58:20:a8:19:6f:f9:ea:87:39:47:1f:de: 5c:be:4f:97:86:03:71:0c:b9:90:7f:13:44:62:e0: e7:f6:a7:ce:84:e9:19:ba:88:e6:53:01:ff:99:2e: cb:d2:c3:a6:aa:04:38:db:db:03:69:99:79:d3:d2: ed:76:d9:e7:74:af:29:43:4e:f0:41:90:dc:ce:80: 67:b7:83:9b:2f:a6:6b:fd:da:73:db:7d:11:49:52: a7:64:77:39:ae:77:ab:89:b2:55:27:87:2f:10:c5: 32:9d:af:af:4b:c7:1e:d0:33:0f:84:a8:32:b3:11: 8e:ec:b4:6d:31:ea:03:5f:d9:1b:5f:28:78:72:a6: fa:15:82:c3:0b:cc:44:be:ec:15:4c:43:25:dc:41: cb:ee:46:85:19:73:94:e0:fe:ed:85:96:af:40:93: 74:16:45:5f:80:79:a5:00:6a:18:66:8f:9e:f8:2d: 88:d5:4a:19:23:a8:ba:c7:b1:68:25:92:5e:52:9c: fd:75:fc:24:13:38:93:d1:67:d0:44:7d:07:43:ad: f8:f1:7a:bb:a0:14:39:38:87:6e:33:d1:61:f3:6d: 4a:6c:37:b3:a6:00:77:7f:73:62:87:69:f8:8e:1b: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:E8:5C:4F:35:55:2F:AB:20:E8:98:DF:15:73:17:55:4B:78:72 X509v3 Authority Key Identifier: keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:40:b3:5f:19:d5:47:57:25:f4:59:b0:57:ed:ee:d9:f6:5e: cf:2a:1a:4e:ec:a6:95:83:1b:65:07:a0:44:fa:7b:2d:6e:20: 59:ac:d3:97:08:7e:7c:40:53:90:a3:62:04:82:66:35:31:8a: 29:9f:23:77:5d:6a:7a:ea:ac:f2:9f:f7:46:19:1d:75:41:14: 98:67:fb:f0:c0:21:cd:5d:1d:76:82:62:9c:ca:41:25:f7:fb: bc:89:82:10:9e:ad:0d:68:6a:ae:e5:31:ae:6c:82:90:f0:11: f1:b3:dd:bf:99:1e:6c:7d:ce:7e:74:dd:7b:ab:14:a7:2f:55: 61:e8:04:43:e4:e5:41:3a:9c:2f:b4:99:05:72:71:08:f1:82: 4e:81:87:77:16:ce:fe:63:e6:85:4d:4f:61:ad:0e:88:32:7a: b1:bd:75:b6:8e:a4:0f:af:70:a5:1e:0d:2c:ac:3d:44:c2:89: 8f:54:10:4b:e4:79:51:5d:6f:a7:3b:74:61:57:1e:79:05:93: f9:96:b9:a1:b7:9b:fa:cd:fc:44:d0:d1:5f:c3:43:62:49:34: 32:47:da:2c:a5:a0:52:34:fc:a7:20:b9:07:32:52:5e:80:7d: 5d:82:9a:7d:c9:4e:2d:63:cf:19:ee:8c:08:52:b5:85:38:e8: 17:6d:f2:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwtwYo/BNgSFkw9J4YC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4 OWU5NWIwHhcNMjUxMjE5MTcwMTE5WhcNMjUxMjIwMTcwMTE5WjAzMTEwLwYDVQQD Eyg3N2Q0ZTg1YzRmMzU1NTJmYWIyMGU4OThkZjE1NzMxNzU1NGI3ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwHHuuNLju5ZVwvqRqgiPVYIKgZ b/nqhzlHH95cvk+XhgNxDLmQfxNEYuDn9qfOhOkZuojmUwH/mS7L0sOmqgQ429sD aZl509LtdtnndK8pQ07wQZDczoBnt4ObL6Zr/dpz230RSVKnZHc5rneribJVJ4cv EMUyna+vS8ce0DMPhKgysxGO7LRtMeoDX9kbXyh4cqb6FYLDC8xEvuwVTEMl3EHL 7kaFGXOU4P7thZavQJN0FkVfgHmlAGoYZo+e+C2I1UoZI6i6x7FoJZJeUpz9dfwk EziT0WfQRH0HQ6348Xq7oBQ5OIduM9Fh821KbDezpgB3f3Nih2n4jhstCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfU6FxPNVUvqyDomN8VcxdVS3hyMB8GA1UdIwQY MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt NDAyMTI2NWMzOWIwLzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkCzXxnV R1cl9FmwV+3u2fZezyoaTuymlYMbZQegRPp7LW4gWazTlwh+fEBTkKNiBIJmNTGK KZ8jd11qeuqs8p/3RhkddUEUmGf78MAhzV0ddoJinMpBJff7vImCEJ6tDWhqruUx rmyCkPAR8bPdv5kebH3OfnTde6sUpy9VYegEQ+TlQTqcL7SZBXJxCPGCToGHdxbO /mPmhU1PYa0OiDJ6sb11to6kD69wpR4NLKw9RMKJj1QQS+R5UV1vpzt0YVceeQWT +Za5obeb+s38RNDRX8NDYkk0MkfaLKWgUjT8pyC5BzJSXoB9XYKafclOLWPPGe6M CFK1hTjoF23ygA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:32 2025 by rpki-client