This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json) Hash identifier: ceINteGEQePtuMn/CT1GPCXC2y8m4KFkYka+1wvaWU4= Subject key identifier: 9E:D1:6F:F8:32:00:94:A8:40:B0:2A:7D:7C:97:19:92:26:9B:F3:BE Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Certificate serial: 019B3CB4ACE29EE66A4A6BC955BD6C7431A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft Manifest number: 1608 Signing time: Sat 20 Dec 2025 17:00:32 +0000 Manifest this update: Sat 20 Dec 2025 17:00:32 +0000 Manifest next update: Sun 21 Dec 2025 17:00:32 +0000 Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: q9Usxx6HXVBIAQSsvecKUx639weM7yBH0PNiOPFBtSA=) 2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ac:e2:9e:e6:6a:4a:6b:c9:55:bd:6c:74:31:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae Validity Not Before: Dec 20 17:00:32 2025 GMT Not After : Dec 21 17:00:32 2025 GMT Subject: CN=9ed16ff8320094a840b02a7d7c971992269bf3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f8:72:fb:4d:39:bd:1b:ed:7c:fb:e2:46:bf: 04:c6:1d:46:15:6a:17:8c:0a:d6:64:ca:b1:24:08: b4:fa:aa:b2:d0:7c:bb:a7:50:f7:38:83:6c:c6:96: 4b:19:2c:6a:ce:28:47:b2:f0:33:d3:10:09:45:c0: 4e:5f:f6:46:d1:6e:ee:25:c9:e5:7d:6f:17:39:eb: da:eb:c0:ba:15:16:de:61:0a:44:a1:44:9c:95:38: 05:18:cd:2d:29:e3:e4:83:54:7b:8b:ef:08:d9:38: 40:39:b4:ae:ef:61:a8:88:37:6f:6b:d5:95:07:22: 14:56:94:0d:48:12:8f:95:3b:86:7e:ca:e0:86:df: 3f:ff:cf:05:a7:c7:50:2b:c0:30:df:25:3b:82:54: 57:78:42:26:ea:0c:5b:aa:6e:1d:13:0e:d2:e1:a4: 61:16:f0:1a:40:8f:3f:43:39:b5:91:34:0a:48:bc: 10:32:60:3b:db:20:d5:09:17:92:09:40:0d:c9:f1: 2a:c6:43:c3:17:67:ff:2e:bb:8d:03:d1:b1:e2:9f: 75:f6:15:45:da:4d:d7:c9:66:f9:6b:77:99:21:29: 2b:61:66:e0:70:4f:70:54:96:4a:dc:6d:55:ce:75: b1:d3:1c:40:53:21:b8:12:92:21:5c:60:ea:7b:4d: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:6F:F8:32:00:94:A8:40:B0:2A:7D:7C:97:19:92:26:9B:F3:BE X509v3 Authority Key Identifier: keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:bc:68:a2:a1:44:82:b4:eb:37:69:8c:a9:d8:85:df:43: e0:4d:38:69:c7:00:64:21:a7:9c:8a:c5:0c:93:40:40:a3:6a: 67:9e:de:7c:f8:c7:ba:cf:16:16:d8:bd:de:d4:f2:68:24:94: 68:91:a6:5a:ef:ef:81:95:02:5f:ee:7d:c2:ef:65:04:87:e7: 93:53:df:e8:e9:ce:04:c5:98:ef:c8:65:eb:28:70:eb:b0:ec: 69:3d:57:65:a5:8f:87:6b:08:0d:2f:2f:d3:09:0e:a0:6a:b2: 4f:55:3c:ab:25:f9:c4:ff:cc:33:e1:13:ff:db:4b:b2:c6:e2: bf:ae:bf:71:8e:8a:69:8a:62:e0:92:a1:46:7b:93:9e:65:c4: 83:33:cf:e2:3e:74:19:6a:93:af:e6:f4:e4:29:db:10:ec:6a: 37:1b:fc:78:ea:aa:24:85:11:74:37:82:97:62:86:ed:af:33: 11:34:6b:8a:9a:ff:04:04:fa:6e:47:ec:c5:c7:f1:e3:1b:1f: d6:21:4d:6c:63:88:2e:70:3c:05:70:4a:6c:cb:af:20:29:f7: 0a:3c:11:44:08:8a:08:56:5e:3d:09:7e:3e:56:c8:25:2c:fa: ce:19:92:aa:a9:8f:09:0e:4e:4b:01:60:a4:fe:e2:e7:f5:40: 03:dc:f3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKzinuZqSmvJVb1sdDGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4 ZDBmYWUwHhcNMjUxMjIwMTcwMDMyWhcNMjUxMjIxMTcwMDMyWjAzMTEwLwYDVQQD Eyg5ZWQxNmZmODMyMDA5NGE4NDBiMDJhN2Q3Yzk3MTk5MjI2OWJmM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vhy+005vRvtfPviRr8Exh1GFWoX jArWZMqxJAi0+qqy0Hy7p1D3OINsxpZLGSxqzihHsvAz0xAJRcBOX/ZG0W7uJcnl fW8XOeva68C6FRbeYQpEoUSclTgFGM0tKePkg1R7i+8I2ThAObSu72GoiDdva9WV ByIUVpQNSBKPlTuGfsrght8//88Fp8dQK8Aw3yU7glRXeEIm6gxbqm4dEw7S4aRh FvAaQI8/Qzm1kTQKSLwQMmA72yDVCReSCUANyfEqxkPDF2f/LruNA9Gx4p919hVF 2k3XyWb5a3eZISkrYWbgcE9wVJZK3G1VznWx0xxAUyG4EpIhXGDqe03DAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7Rb/gyAJSoQLAqfXyXGZImm/O+MB8GA1UdIwQY MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4 LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFS8aKKh RIK06zdpjKnYhd9D4E04accAZCGnnIrFDJNAQKNqZ57efPjHus8WFti93tTyaCSU aJGmWu/vgZUCX+59wu9lBIfnk1Pf6OnOBMWY78hl6yhw67DsaT1XZaWPh2sIDS8v 0wkOoGqyT1U8qyX5xP/MM+ET/9tLssbiv66/cY6KaYpi4JKhRnuTnmXEgzPP4j50 GWqTr+b05CnbEOxqNxv8eOqqJIURdDeCl2KG7a8zETRripr/BAT6bkfsxcfx4xsf 1iFNbGOILnA8BXBKbMuvICn3CjwRRAiKCFZePQl+PlbIJSz6zhmSqqmPCQ5OSwFg pP7i5/VAA9zzpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:28:45 2025 by rpki-client