This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json) Hash identifier: QB23fZyiZKpa7LT7eC5eHfHXaYE0k/KTUX5ZF9CDlq4= Subject key identifier: 8E:71:BA:DA:B7:6F:62:D1:C1:56:CF:27:D9:B4:E3:3E:79:6E:32:F6 Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44 Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44 Certificate serial: 019B51BDFB7CD997EDE895017007641B68C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft Manifest number: 076A Signing time: Wed 24 Dec 2025 19:02:43 +0000 Manifest this update: Wed 24 Dec 2025 19:02:43 +0000 Manifest next update: Thu 25 Dec 2025 19:02:43 +0000 Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: M3TRgLS1zLkldpX8aeOFwLDRN2xD3thi3yX8g7Mq4rU=) 2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:fb:7c:d9:97:ed:e8:95:01:70:07:64:1b:68:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44 Validity Not Before: Dec 24 19:02:43 2025 GMT Not After : Dec 25 19:02:43 2025 GMT Subject: CN=8e71badab76f62d1c156cf27d9b4e33e796e32f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:1d:1c:35:1c:4e:a2:4e:56:84:a6:26:cd: a0:6a:ca:81:3e:97:c9:50:f1:76:4b:7d:47:1d:fb: a8:9a:fc:f0:61:34:a7:ef:7a:73:1d:56:28:04:6e: 56:14:aa:4a:71:0e:1e:05:96:eb:74:2b:da:2c:cc: 53:a0:1d:6e:89:46:0a:3a:9d:28:78:8c:cd:d5:71: ad:8b:26:2c:af:51:c5:7f:45:30:01:8f:80:1d:d2: 21:f8:1b:09:79:b0:a7:8d:4b:22:60:1a:18:1d:6f: 53:65:b8:b7:ac:f7:c6:9b:48:13:0d:54:6f:85:89: 5a:39:c9:90:83:63:f3:50:6f:a6:7c:c5:6f:01:fd: 2a:1d:fb:20:d7:0a:21:49:e6:e6:06:52:61:54:0e: 51:db:75:49:d3:8b:1a:fc:95:da:6f:4e:e0:84:6c: fc:d0:4a:19:3a:b4:54:52:da:a3:d4:52:a9:04:71: 34:1f:94:1b:a3:52:4e:10:52:6b:ed:10:ad:11:82: e4:72:ee:11:8d:fe:7f:66:0b:e1:e9:36:b7:54:1a: b0:e3:54:72:94:dc:90:5e:85:df:d5:21:29:8d:09: a0:11:f5:c9:68:8a:ab:76:c6:9d:d7:57:d0:95:50: 8d:d3:b5:66:e4:07:d2:9b:3b:f9:81:2d:52:c1:2d: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:71:BA:DA:B7:6F:62:D1:C1:56:CF:27:D9:B4:E3:3E:79:6E:32:F6 X509v3 Authority Key Identifier: keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ce:32:0a:61:1d:6e:09:9a:1d:a9:1b:ff:d0:ed:c1:8a:68: 8d:57:ae:65:51:56:33:c3:e0:5a:8c:5f:75:ac:28:bc:7a:17: 85:89:fc:b0:56:87:ae:68:e0:50:aa:5e:1d:f9:e6:5b:f5:22: 66:72:90:c5:ef:13:b2:c5:f7:16:f8:16:f9:2b:3b:4d:a7:08: 3b:72:61:e7:0d:84:3a:32:a6:7e:42:c5:ae:5f:39:f4:d7:01: 88:e2:a9:54:1a:bd:2b:ab:05:05:f4:95:71:8c:87:fd:df:b0: 65:71:ee:81:dc:d7:4a:e7:cf:da:69:c9:0a:c3:ef:34:e2:fb: 4d:e9:9c:9c:7b:f8:58:c6:9c:79:5d:3b:2e:8a:ed:91:ec:18: 17:ae:0c:2a:92:d1:06:95:bd:99:d8:10:54:4f:d9:19:e0:66: 38:74:ab:ad:d1:ce:52:5c:73:5c:de:37:5d:29:6a:91:10:4d: 05:3a:91:9f:ae:2f:0e:52:c8:d8:d7:18:a9:f7:8f:53:4b:8c: 65:ee:8d:05:52:15:c1:78:9e:50:32:06:13:dc:18:2b:68:d5: 23:ea:cc:4a:31:66:04:d1:e8:9d:31:47:4b:7a:c4:2b:98:45: f6:70:96:21:51:bb:54:4a:16:1e:e8:b2:da:40:eb:15:01:49: 62:51:51:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvft82Zft6JUBcAdkG2jGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMTk1MzVmYWMzZmE0ODc3OTU3OWJjZThmYzNiNDAyZGVm MmNiNDQwHhcNMjUxMjI0MTkwMjQzWhcNMjUxMjI1MTkwMjQzWjAzMTEwLwYDVQQD Eyg4ZTcxYmFkYWI3NmY2MmQxYzE1NmNmMjdkOWI0ZTMzZTc5NmUzMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBgdHDUcTqJOVoSmJs2gasqBPpfJ UPF2S31HHfuomvzwYTSn73pzHVYoBG5WFKpKcQ4eBZbrdCvaLMxToB1uiUYKOp0o eIzN1XGtiyYsr1HFf0UwAY+AHdIh+BsJebCnjUsiYBoYHW9TZbi3rPfGm0gTDVRv hYlaOcmQg2PzUG+mfMVvAf0qHfsg1wohSebmBlJhVA5R23VJ04sa/JXab07ghGz8 0EoZOrRUUtqj1FKpBHE0H5Qbo1JOEFJr7RCtEYLkcu4Rjf5/Zgvh6Ta3VBqw41Ry lNyQXoXf1SEpjQmgEfXJaIqrdsad11fQlVCN07Vm5AfSmzv5gS1SwS3eMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5xutq3b2LRwVbPJ9m04z55bjL2MB8GA1UdIwQY MBaAFOEZU1+sP6SHeVebzo/DtALe8stEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQt ZGU5ZTI3ZWJiMjVkLzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQtZGU5ZTI3ZWJiMjVk LzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA84yCmEd bgmaHakb/9DtwYpojVeuZVFWM8PgWoxfdawovHoXhYn8sFaHrmjgUKpeHfnmW/Ui ZnKQxe8TssX3FvgW+Ss7TacIO3Jh5w2EOjKmfkLFrl859NcBiOKpVBq9K6sFBfSV cYyH/d+wZXHugdzXSufP2mnJCsPvNOL7TemcnHv4WMaceV07LortkewYF64MKpLR BpW9mdgQVE/ZGeBmOHSrrdHOUlxzXN43XSlqkRBNBTqRn64vDlLI2NcYqfePU0uM Ze6NBVIVwXieUDIGE9wYK2jVI+rMSjFmBNHonTFHS3rEK5hF9nCWIVG7VEoWHuiy 2kDrFQFJYlFRwg== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:15 2025 by rpki-client