This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json) Hash identifier: BfHLtgja3NqR8XZpsnCtgLm5nxe9etwIocLaMWrFM9A= Subject key identifier: E4:16:2E:5F:C2:9E:D7:92:79:04:81:B6:D7:69:A2:03:21:D0:10:39 Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80 Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80 Certificate serial: 019B5117D5D78742F1CA32F49B67404C2509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 16:01:15 +0000 Manifest this update: Wed 24 Dec 2025 16:01:15 +0000 Manifest next update: Thu 25 Dec 2025 16:01:15 +0000 Files and hashes: 1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=) 2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: K1RAGl9xRw7MGiuiABPj+qb7TmtQ6eo1Is2Kkk5+Q4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:d5:d7:87:42:f1:ca:32:f4:9b:67:40:4c:25:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80 Validity Not Before: Dec 24 16:01:15 2025 GMT Not After : Dec 25 16:01:15 2025 GMT Subject: CN=e4162e5fc29ed792790481b6d769a20321d01039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:48:9c:0d:22:60:4e:e6:49:99:70:51:64: 97:85:d6:40:fb:e4:7a:9e:a2:6f:64:66:10:56:09: b3:c4:42:ff:c1:5b:8e:68:05:f1:dd:c3:54:86:59: bb:72:43:d5:35:03:3d:b0:01:38:d6:d5:21:ab:64: 25:33:8b:44:f8:58:03:11:3c:1e:ed:36:b5:ba:13: 2d:e5:e8:e6:81:e4:28:9b:d8:9b:c4:0c:d6:b5:e2: c5:2f:8a:5d:52:58:54:b8:dc:ad:4f:e5:47:d5:dc: 19:f5:3b:7f:92:fd:95:15:39:94:75:2b:dd:fa:ad: cc:27:28:9e:5d:06:c7:49:73:40:9f:f8:29:8c:f7: c4:a7:94:a7:ef:f3:96:75:c6:70:1a:b5:06:72:a8: 52:ed:cd:a3:6b:8d:fd:98:e7:0f:7a:9c:f8:79:31: 70:ee:d2:2d:76:e4:33:2f:bf:e5:98:3c:3f:44:81: f3:97:88:34:4d:1b:7c:93:d8:bc:88:4f:c3:e6:30: bb:6d:e8:4b:8e:5a:5e:95:e8:8e:d5:74:15:9a:72: de:79:cc:7e:34:d0:e0:1e:b6:72:e7:69:64:1e:e1: f1:ce:5f:43:ee:33:0d:e8:fe:82:9c:cc:94:5e:d2: 9c:85:6f:44:aa:6b:d2:7b:10:3b:8a:ea:bc:16:0a: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:16:2E:5F:C2:9E:D7:92:79:04:81:B6:D7:69:A2:03:21:D0:10:39 X509v3 Authority Key Identifier: keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:a7:70:7d:0a:8d:2b:97:bd:ea:34:73:60:52:6d:5b:c2: d5:44:2d:25:be:71:fb:0d:67:40:06:57:c3:fd:27:40:63:54: 5a:b1:49:f9:1c:3c:cf:69:b0:dd:dc:fd:b1:e1:ec:99:90:9c: 8f:b3:de:fd:13:84:75:8e:c5:db:94:8e:10:2e:e3:ca:c1:e3: c6:7b:51:a3:94:09:3b:10:26:ed:90:32:02:38:2a:ad:7f:74: 55:81:7e:9e:5f:2d:2f:3d:72:6f:18:98:d9:81:25:29:e0:7a: 79:75:6b:af:6d:bb:a4:d6:b5:42:ad:91:f2:ac:ee:4c:5f:bf: 4d:a8:23:cf:ec:11:f0:36:37:a4:17:c6:ec:32:57:15:36:ff: a9:16:0f:48:df:d9:2d:20:d7:e6:50:84:3d:7d:7a:a1:95:28: 95:32:ae:1c:a2:9d:cc:5f:75:2a:91:ea:26:c0:11:eb:0f:7b: 3c:f9:73:e2:a9:9b:81:28:ce:b3:84:40:75:a5:70:94:d7:2f: e9:58:c7:89:3b:b3:05:63:68:d2:76:49:dd:cf:0e:df:21:b5: 56:80:89:12:c5:8d:08:18:f3:8c:5d:bd:c6:e6:ad:45:c9:0f: 26:82:08:1e:8d:62:b5:35:0c:9e:13:5d:dd:2e:03:e8:81:6d: 55:8d:d0:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF9XXh0LxyjL0m2dATCUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODMxZWU5NGMzN2I5YjExNTljN2Q3NzMyOTM2MTgxYWI1 NDFkODAwHhcNMjUxMjI0MTYwMTE1WhcNMjUxMjI1MTYwMTE1WjAzMTEwLwYDVQQD EyhlNDE2MmU1ZmMyOWVkNzkyNzkwNDgxYjZkNzY5YTIwMzIxZDAxMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO5InA0iYE7mSZlwUWSXhdZA++R6 nqJvZGYQVgmzxEL/wVuOaAXx3cNUhlm7ckPVNQM9sAE41tUhq2QlM4tE+FgDETwe 7Ta1uhMt5ejmgeQom9ibxAzWteLFL4pdUlhUuNytT+VH1dwZ9Tt/kv2VFTmUdSvd +q3MJyieXQbHSXNAn/gpjPfEp5Sn7/OWdcZwGrUGcqhS7c2ja439mOcPepz4eTFw 7tItduQzL7/lmDw/RIHzl4g0TRt8k9i8iE/D5jC7behLjlpeleiO1XQVmnLeecx+ NNDgHrZy52lkHuHxzl9D7jMN6P6CnMyUXtKchW9EqmvSexA7iuq8Fgo0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQWLl/CnteSeQSBttdpogMh0BA5MB8GA1UdIwQY MBaAFJuDHulMN7mxFZx9dzKTYYGrVB2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgt MTI4MGYyZTc4M2Q0LzEvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgtMTI4MGYyZTc4M2Q0 LzEvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHuncH0K jSuXveo0c2BSbVvC1UQtJb5x+w1nQAZXw/0nQGNUWrFJ+Rw8z2mw3dz9seHsmZCc j7Pe/ROEdY7F25SOEC7jysHjxntRo5QJOxAm7ZAyAjgqrX90VYF+nl8tLz1ybxiY 2YElKeB6eXVrr227pNa1Qq2R8qzuTF+/Tagjz+wR8DY3pBfG7DJXFTb/qRYPSN/Z LSDX5lCEPX16oZUolTKuHKKdzF91KpHqJsAR6w97PPlz4qmbgSjOs4RAdaVwlNcv 6VjHiTuzBWNo0nZJ3c8O3yG1VoCJEsWNCBjzjF29xuatRckPJoIIHo1itTUMnhNd 3S4D6IFtVY3QUQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:03:36 2025 by rpki-client