This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft File: 4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json) Hash identifier: QRrCuqcibd4pYmYGTcxvU+0hzHbHAolD5acJQyPPcjI= Subject key identifier: 0E:EB:0E:B7:62:DA:62:2D:C8:62:69:2D:C5:A3:EA:11:1E:B0:C3:23 Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E Certificate issuer: /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e Certificate serial: 019B3231432D78B1612467A29EA66CFB406E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft Manifest number: 06E2 Signing time: Thu 18 Dec 2025 16:00:47 +0000 Manifest this update: Thu 18 Dec 2025 16:00:47 +0000 Manifest next update: Fri 19 Dec 2025 16:00:47 +0000 Files and hashes: 1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: lp4h0V9qYt+M46T6Lrhe00mF0O5t3AEwtjitLY6jnT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:43:2d:78:b1:61:24:67:a2:9e:a6:6c:fb:40:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e Validity Not Before: Dec 18 16:00:47 2025 GMT Not After : Dec 19 16:00:47 2025 GMT Subject: CN=0eeb0eb762da622dc862692dc5a3ea111eb0c323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:e7:a4:80:a3:19:d5:4a:89:03:b2:8f:ea: ba:86:a1:31:d9:46:f0:c9:13:f6:24:ea:97:20:60: a2:d1:ec:9d:2d:50:fc:d9:c2:09:31:20:7a:12:1c: 53:6b:e5:2a:c8:3e:2f:2d:27:5e:52:99:7a:3d:6b: cc:12:e5:1b:fd:2f:f6:4d:70:70:e8:d8:8b:94:a0: 5d:5c:9e:56:0f:c6:f6:a2:d1:16:6c:58:95:3b:ea: 2c:1c:13:db:49:00:94:57:17:c7:42:07:9a:8c:24: b4:f9:ee:c0:78:22:74:a8:e8:65:8b:d9:be:d4:49: 32:f0:f0:10:be:af:6c:62:1f:bf:b3:1c:c3:18:99: de:26:1a:e7:e0:23:b3:c2:d3:4a:08:a8:07:8d:6d: 06:40:fc:d5:16:67:88:d7:24:33:29:c4:21:2d:af: 38:92:eb:c5:53:ac:df:39:20:ec:49:9e:b3:44:98: 30:70:0f:df:39:1b:20:62:82:7b:bc:8f:9d:5e:24: d3:5c:59:b1:a0:9f:8d:6d:c4:17:40:df:f2:9e:bf: d6:63:1f:ca:13:4d:70:f4:19:a0:b3:bd:ac:e6:85: b9:e8:3d:df:49:ab:f3:a1:99:57:a2:fa:18:f8:8b: bf:99:a9:b0:24:70:ac:38:0d:98:40:f3:17:fb:87: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EB:0E:B7:62:DA:62:2D:C8:62:69:2D:C5:A3:EA:11:1E:B0:C3:23 X509v3 Authority Key Identifier: keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:4c:a3:aa:a4:64:89:a4:4b:f0:72:74:f4:69:77:91:6f: b0:42:2d:ff:04:50:8e:a2:f5:53:4d:44:e0:7e:4c:46:39:62: cf:d8:42:87:27:2c:4a:a7:94:60:d4:3f:06:6d:de:17:f1:7e: 86:91:1c:07:f2:e9:39:94:f6:af:b2:21:b3:1c:b6:d1:cc:74: 81:77:b5:46:e8:55:5e:7d:87:8c:22:54:e7:94:90:09:ad:dc: 7a:fe:68:07:c6:be:a3:15:f9:8c:a0:09:d0:7b:8f:94:8e:5f: f7:e7:f0:f3:56:8c:4a:41:19:b3:40:eb:57:a6:10:f2:8a:79: a6:bf:14:da:6d:e2:f7:dd:7a:87:e0:c2:20:68:d9:83:18:cf: a3:c7:20:94:2f:71:27:42:39:2b:e2:0c:0f:3a:d3:4a:13:8a: 22:86:b4:30:ec:96:41:53:57:b3:76:6c:3d:2a:81:03:2f:d6: 68:f6:0e:3f:ec:ec:1b:3f:ea:cd:e8:0d:d0:67:77:c8:c5:24: 27:47:3a:a3:03:e2:85:dc:61:77:d9:f9:73:cc:c6:33:91:f8: e5:5b:3a:65:07:d5:c6:d3:cf:8a:71:8e:5f:f7:7b:9c:71:c6: c6:69:7c:2c:76:a8:29:15:be:3c:63:c6:ac:4c:fe:62:4c:50: 32:eb:f4:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMUMteLFhJGeinqZs+0BuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNzZiYTRkMmI5ZTAwZmJiZjhlYzQzMzExZTkxYjk1NGFh YTUzNmUwHhcNMjUxMjE4MTYwMDQ3WhcNMjUxMjE5MTYwMDQ3WjAzMTEwLwYDVQQD EygwZWViMGViNzYyZGE2MjJkYzg2MjY5MmRjNWEzZWExMTFlYjBjMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztfnpICjGdVKiQOyj+q6hqEx2Ubw yRP2JOqXIGCi0eydLVD82cIJMSB6EhxTa+UqyD4vLSdeUpl6PWvMEuUb/S/2TXBw 6NiLlKBdXJ5WD8b2otEWbFiVO+osHBPbSQCUVxfHQgeajCS0+e7AeCJ0qOhli9m+ 1Eky8PAQvq9sYh+/sxzDGJneJhrn4COzwtNKCKgHjW0GQPzVFmeI1yQzKcQhLa84 kuvFU6zfOSDsSZ6zRJgwcA/fORsgYoJ7vI+dXiTTXFmxoJ+NbcQXQN/ynr/WYx/K E01w9Bmgs72s5oW56D3fSavzoZlXovoY+Iu/mamwJHCsOA2YQPMX+4etKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7rDrdi2mItyGJpLcWj6hEesMMjMB8GA1UdIwQY MBaAFOF2uk0rngD7v47EMxHpG5VKqlNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEt ZDc4ZDhhYjZlNjY4LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEtZDc4ZDhhYjZlNjY4 LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemVMo6qk ZImkS/BydPRpd5FvsEIt/wRQjqL1U01E4H5MRjliz9hChycsSqeUYNQ/Bm3eF/F+ hpEcB/LpOZT2r7Ihsxy20cx0gXe1RuhVXn2HjCJU55SQCa3cev5oB8a+oxX5jKAJ 0HuPlI5f9+fw81aMSkEZs0DrV6YQ8op5pr8U2m3i9916h+DCIGjZgxjPo8cglC9x J0I5K+IMDzrTShOKIoa0MOyWQVNXs3ZsPSqBAy/WaPYOP+zsGz/qzegN0Gd3yMUk J0c6owPihdxhd9n5c8zGM5H45Vs6ZQfVxtPPinGOX/d7nHHGxml8LHaoKRW+PGPG rEz+YkxQMuv0rQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:53 2025 by rpki-client