This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json) Hash identifier: 7Ywsgw6j9wlCc/NAo6eEkzgsWGuYvxURExWp54CDyTo= Subject key identifier: E7:53:38:1B:98:60:45:85:26:72:41:6E:F3:B6:BC:3D:D9:BC:50:34 Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0 Certificate serial: 019B4EBB92765C5C7593A85A77A64F7DFF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 05:01:14 +0000 Manifest this update: Wed 24 Dec 2025 05:01:14 +0000 Manifest next update: Thu 25 Dec 2025 05:01:14 +0000 Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: 2Y0GnLr2xdNnCFKnPDBv7zZQVQUIzf3N/IUHgCw0SUA=) 2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:92:76:5c:5c:75:93:a8:5a:77:a6:4f:7d:ff:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0 Validity Not Before: Dec 24 05:01:14 2025 GMT Not After : Dec 25 05:01:14 2025 GMT Subject: CN=e753381b986045852672416ef3b6bc3dd9bc5034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:31:73:57:d6:a5:63:54:99:e3:62:62:f2: 42:6b:de:f3:e3:a9:81:c5:ef:a9:66:ff:db:eb:f8: 8d:05:8c:48:e7:59:bf:6f:3e:84:61:fb:c5:45:40: 72:66:f9:11:13:74:83:69:94:b1:64:61:2d:46:2e: 74:e4:79:17:7c:a9:95:d8:85:5e:80:4e:30:5e:5c: 98:10:a5:7b:02:69:8d:31:53:5a:3c:8c:81:0f:b2: 9f:eb:b1:01:9b:04:cb:74:18:0c:34:7e:1c:b6:16: 7a:1e:71:9f:16:9d:ff:3d:d7:3f:29:c4:44:b3:5b: 50:fa:c7:64:6b:12:a6:57:f4:fe:30:90:83:a3:a0: f3:e2:40:91:c9:54:3c:8f:1c:d9:d3:5d:67:93:e5: 8b:77:3a:aa:3a:52:d6:58:82:46:f6:57:42:6c:17: 74:2d:b5:9f:2d:05:49:2a:1a:81:71:05:66:3e:c3: 02:ce:c4:67:df:f5:64:b7:dd:9a:e6:af:38:75:59: 51:8d:b3:08:b2:ca:21:45:41:06:22:74:1c:19:23: 2b:7b:6a:b7:b1:61:3f:6a:09:10:e5:8a:02:e6:32: 59:ab:92:43:f9:44:d7:3a:88:17:9f:c0:c4:a1:0b: 4a:8e:36:a1:01:ec:c8:45:65:a3:ae:c1:11:30:96: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:53:38:1B:98:60:45:85:26:72:41:6E:F3:B6:BC:3D:D9:BC:50:34 X509v3 Authority Key Identifier: keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:47:d0:e7:49:ef:7e:72:70:7b:0a:47:2d:29:6a:06:63: f0:25:fc:82:28:79:9c:99:55:45:5b:bf:91:a1:6d:64:56:c4: 47:24:27:16:ce:b7:b8:77:a7:8c:eb:d9:91:2d:6a:2f:63:f6: 61:26:b0:b0:ac:dd:a4:51:8b:a8:ff:df:d9:ca:d7:a3:b2:ef: 92:cf:a7:7d:0f:9b:7f:e7:06:1e:a2:5d:e0:d7:09:bc:af:3b: 32:af:2b:4e:a5:1e:04:a2:d8:81:2e:f4:09:0e:29:73:5b:44: a3:cf:f4:75:4f:83:28:1a:ba:3e:d7:7a:62:44:14:66:fd:07: 0e:00:0a:d1:ab:3c:76:d6:a0:e2:86:c6:17:4d:32:5f:f1:56: b0:47:57:24:b9:9c:aa:69:02:33:30:35:de:16:88:5e:67:4f: 75:bd:40:d1:f2:10:bc:a8:d1:b0:14:2b:5c:4d:77:e3:2d:c4: 42:91:18:3c:e6:4a:bc:b6:f5:6d:31:ca:74:98:3b:60:8b:0e: 8b:a0:3c:5a:c7:e8:c1:d1:c3:ae:b5:e7:2a:c8:65:e9:c2:b4: 23:a0:95:09:69:f1:c9:ce:63:71:d0:be:5c:42:66:7c:11:84: a6:db:30:24:1f:44:70:df:17:9c:fd:dc:5d:18:d7:46:2b:bf: 9e:40:3f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu5J2XFx1k6had6ZPff+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy OTk4ZjAwHhcNMjUxMjI0MDUwMTE0WhcNMjUxMjI1MDUwMTE0WjAzMTEwLwYDVQQD EyhlNzUzMzgxYjk4NjA0NTg1MjY3MjQxNmVmM2I2YmMzZGQ5YmM1MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XUxc1fWpWNUmeNiYvJCa97z46mB xe+pZv/b6/iNBYxI51m/bz6EYfvFRUByZvkRE3SDaZSxZGEtRi505HkXfKmV2IVe gE4wXlyYEKV7AmmNMVNaPIyBD7Kf67EBmwTLdBgMNH4cthZ6HnGfFp3/Pdc/KcRE s1tQ+sdkaxKmV/T+MJCDo6Dz4kCRyVQ8jxzZ011nk+WLdzqqOlLWWIJG9ldCbBd0 LbWfLQVJKhqBcQVmPsMCzsRn3/Vkt92a5q84dVlRjbMIssohRUEGInQcGSMre2q3 sWE/agkQ5YoC5jJZq5JD+UTXOogXn8DEoQtKjjahAezIRWWjrsERMJZBeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdTOBuYYEWFJnJBbvO2vD3ZvFA0MB8GA1UdIwQY MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0 LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWU1H0OdJ 735ycHsKRy0pagZj8CX8gih5nJlVRVu/kaFtZFbERyQnFs63uHenjOvZkS1qL2P2 YSawsKzdpFGLqP/f2crXo7Lvks+nfQ+bf+cGHqJd4NcJvK87Mq8rTqUeBKLYgS70 CQ4pc1tEo8/0dU+DKBq6Ptd6YkQUZv0HDgAK0as8dtag4obGF00yX/FWsEdXJLmc qmkCMzA13haIXmdPdb1A0fIQvKjRsBQrXE134y3EQpEYPOZKvLb1bTHKdJg7YIsO i6A8WsfowdHDrrXnKshl6cK0I6CVCWnxyc5jcdC+XEJmfBGEptswJB9EcN8XnP3c XRjXRiu/nkA/cg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:50 2025 by rpki-client