This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json) Hash identifier: 4N882E7nq1dCkPg2YDXG+VddYy19idt7tktRPUZ/ti0= Subject key identifier: AE:80:67:03:A2:AB:0A:B7:93:73:1C:B2:F7:F6:FD:89:A3:F8:2E:4F Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Certificate serial: 019B7A4A1A4A7220E5E5B8E6A832881CFFA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft Manifest number: 17AA Signing time: Thu 01 Jan 2026 16:00:35 +0000 Manifest this update: Thu 01 Jan 2026 16:00:35 +0000 Manifest next update: Fri 02 Jan 2026 16:00:35 +0000 Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: 0bBM+w29wO8Mdv+qgLIKDCWGDxDrf4JgD/vc2avCu38=) 2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:1a:4a:72:20:e5:e5:b8:e6:a8:32:88:1c:ff:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Validity Not Before: Jan 1 16:00:35 2026 GMT Not After : Jan 2 16:00:35 2026 GMT Subject: CN=ae806703a2ab0ab793731cb2f7f6fd89a3f82e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:5f:69:de:3c:3b:02:45:6e:6b:68:18:77: 95:13:26:8c:80:b5:85:ce:95:ee:d1:9a:94:21:b8: 60:d0:d6:f7:01:1f:ce:df:f9:f0:46:2f:65:11:89: e7:7c:d2:c0:d7:61:91:21:97:91:61:8d:40:bd:e7: f2:a0:c3:f8:ea:28:26:b0:26:79:14:a0:63:c4:38: b9:98:a0:81:04:66:a6:97:91:e9:6a:bf:99:19:db: f7:58:d1:3a:7a:b6:1f:b1:ad:34:1e:e3:06:1e:6a: 01:52:59:2f:c6:4b:39:0c:40:c1:65:8d:8a:c9:6e: e1:64:31:86:35:26:cd:2a:75:87:95:c4:d4:6a:e8: b1:8f:eb:9e:ab:cb:41:64:9f:24:8e:46:2a:ed:8d: 1d:ef:ce:98:16:de:7d:02:50:26:23:c3:8e:7c:27: ee:74:9a:6e:fb:93:8a:61:98:a3:3f:d9:1d:24:c5: 3e:8f:0c:ef:84:22:7d:a5:d9:d3:4b:9d:d3:78:15: 10:f8:5e:5e:08:4c:ab:52:fd:97:ee:12:e4:19:af: a3:68:f3:30:0b:c7:2f:4d:d0:b4:b0:9d:c4:01:00: 16:d7:37:d3:63:45:32:ca:cb:78:1f:1c:2f:d6:2c: 56:a2:f2:77:71:f4:ff:23:81:b2:5a:45:f5:9d:47: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:67:03:A2:AB:0A:B7:93:73:1C:B2:F7:F6:FD:89:A3:F8:2E:4F X509v3 Authority Key Identifier: keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e2:93:56:de:ac:2f:d9:d6:01:09:eb:06:5a:ac:eb:4c:08: ce:fa:14:0e:7e:e7:68:3a:15:50:7b:56:e6:94:f4:fa:71:83: a4:7d:f4:4e:cb:3c:8d:2e:fb:e3:3c:fe:07:7e:72:92:d4:c8: 1b:b7:ff:a4:60:94:03:fe:e4:c0:c8:57:e4:fb:b3:67:50:66: 93:98:1b:cd:7a:20:52:51:e4:72:4e:23:fa:54:b2:8a:1d:4a: 2b:c2:16:16:e6:03:66:1f:79:59:35:9b:ea:da:b7:1e:92:df: 1a:4f:e4:63:fe:9b:6b:12:9c:65:6a:67:1d:06:45:85:fe:33: 34:2f:21:ec:a6:0c:9b:bf:4d:51:5b:93:91:0a:17:24:cd:c2: 1d:49:7d:cb:9d:e3:43:ed:ac:05:d0:e9:a3:79:5e:06:da:3f: 3b:55:fc:63:ca:48:58:1b:9c:da:d2:e3:e8:44:44:ed:d3:8e: aa:bf:7b:b5:3e:82:10:85:e1:d1:6a:95:69:ac:81:34:a2:e0: 34:7c:5a:87:db:97:e5:e1:6f:89:48:41:06:84:62:63:6f:0e: 1a:91:f2:6f:2a:d4:50:5a:94:5a:e1:61:87:4e:fd:dd:26:02: f3:2c:f6:92:55:7a:13:da:d1:19:58:b9:5f:33:c4:6e:ef:c6: a6:af:d7:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6ShpKciDl5bjmqDKIHP+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm ZmM0ZjgwHhcNMjYwMTAxMTYwMDM1WhcNMjYwMTAyMTYwMDM1WjAzMTEwLwYDVQQD EyhhZTgwNjcwM2EyYWIwYWI3OTM3MzFjYjJmN2Y2ZmQ4OWEzZjgyZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqpfad48OwJFbmtoGHeVEyaMgLWF zpXu0ZqUIbhg0Nb3AR/O3/nwRi9lEYnnfNLA12GRIZeRYY1AvefyoMP46igmsCZ5 FKBjxDi5mKCBBGaml5Hpar+ZGdv3WNE6erYfsa00HuMGHmoBUlkvxks5DEDBZY2K yW7hZDGGNSbNKnWHlcTUauixj+ueq8tBZJ8kjkYq7Y0d786YFt59AlAmI8OOfCfu dJpu+5OKYZijP9kdJMU+jwzvhCJ9pdnTS53TeBUQ+F5eCEyrUv2X7hLkGa+jaPMw C8cvTdC0sJ3EAQAW1zfTY0Uyyst4Hxwv1ixWovJ3cfT/I4GyWkX1nUcZTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6AZwOiqwq3k3Mcsvf2/Ymj+C5PMB8GA1UdIwQY MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+KTVt6s L9nWAQnrBlqs60wIzvoUDn7naDoVUHtW5pT0+nGDpH30Tss8jS774zz+B35yktTI G7f/pGCUA/7kwMhX5PuzZ1Bmk5gbzXogUlHkck4j+lSyih1KK8IWFuYDZh95WTWb 6tq3HpLfGk/kY/6baxKcZWpnHQZFhf4zNC8h7KYMm79NUVuTkQoXJM3CHUl9y53j Q+2sBdDpo3leBto/O1X8Y8pIWBuc2tLj6ERE7dOOqr97tT6CEIXh0WqVaayBNKLg NHxah9uX5eFviUhBBoRiY28OGpHybyrUUFqUWuFhh0793SYC8yz2klV6E9rRGVi5 XzPEbu/Gpq/X2Q== -----END CERTIFICATE-----Generated at Thu Jan 1 19:53:11 2026 by rpki-client