This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json) Hash identifier: Bg0g/oitDH+C9ybzoD3/VJJ6PmC5fK0M3WAvnkwK3BM= Subject key identifier: 28:A6:05:6F:CD:C6:2E:CB:B8:AC:50:09:DC:99:30:BB:FF:E6:8D:90 Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce Certificate serial: 019B3E6D06F94149D2CFA4A4A86856A18E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft Manifest number: 0B3D Signing time: Sun 21 Dec 2025 01:01:31 +0000 Manifest this update: Sun 21 Dec 2025 01:01:31 +0000 Manifest next update: Mon 22 Dec 2025 01:01:31 +0000 Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=) 2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: xO7Z0dlNYNV4OQhSjeJxpeH0NXkjYiU/DcRArgTDFDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:06:f9:41:49:d2:cf:a4:a4:a8:68:56:a1:8e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce Validity Not Before: Dec 21 01:01:31 2025 GMT Not After : Dec 22 01:01:31 2025 GMT Subject: CN=28a6056fcdc62ecbb8ac5009dc9930bbffe68d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:71:eb:2d:b9:42:96:e6:b5:09:ea:78:39: 40:3e:29:97:77:ae:d2:d9:7f:3e:e2:9e:44:a8:46: a8:6c:50:5f:da:9b:69:19:22:73:bf:02:12:f0:fc: 28:73:b6:ff:bd:af:96:c9:08:81:e7:19:f9:73:af: 5d:67:a7:21:a2:72:49:87:65:7c:01:35:02:52:47: 37:59:05:6e:38:d3:68:39:53:02:03:e8:d9:79:d6: 10:3f:7f:7c:cf:c3:1a:80:d0:38:b4:92:76:7c:87: 7b:2a:3b:38:29:1b:25:e5:c4:64:39:8e:60:f1:d9: c1:50:cc:cf:98:c6:ac:d2:f3:59:9f:19:49:c2:4c: 26:45:d0:a3:04:90:f2:93:d2:52:c1:e7:53:f5:cc: 5d:43:07:2a:c1:26:30:1e:9d:7e:d5:b8:ec:73:20: 4d:1e:4a:31:91:28:c9:2b:1d:da:1d:4d:15:f5:28: 2d:25:6a:d5:22:eb:9d:1d:33:15:75:f7:f3:7f:0e: 4b:f7:92:fe:34:ce:25:c3:b3:86:06:ab:9a:35:11: 57:e6:40:c0:6c:ff:0f:c3:dc:28:b2:5b:05:ec:f5: 32:69:5a:fe:d6:1a:e6:65:03:44:d5:da:5d:95:e8: 77:97:6e:93:95:38:76:7e:11:ce:f9:dc:05:70:5a: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A6:05:6F:CD:C6:2E:CB:B8:AC:50:09:DC:99:30:BB:FF:E6:8D:90 X509v3 Authority Key Identifier: keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:68:25:d3:06:11:ee:35:1e:75:4f:4f:15:62:67:0e:b6:b4: f2:75:22:0d:39:45:78:d0:0e:61:59:d2:9a:3f:b0:cb:10:10: c0:be:1e:69:78:ab:3e:c1:0c:7a:84:8a:cf:8f:94:02:ea:8a: 84:4e:3e:25:d8:95:15:c0:72:1f:f9:e9:68:83:bc:17:ce:9e: cb:a8:ca:3b:1e:12:0f:24:3c:70:b9:76:d0:68:e0:79:70:0d: f2:a1:eb:89:2f:6e:5d:cc:57:84:b4:74:a8:e7:0b:85:a1:54: 91:88:ec:f2:67:3f:f9:dc:d5:0e:39:0a:29:e8:be:4a:43:d4: 18:81:e0:f4:6c:6c:82:fb:36:7d:cc:72:b8:2a:6e:05:ec:4b: a0:f4:4f:d0:c7:f1:6c:1f:7c:14:31:73:14:de:9d:4b:33:1b: c4:1d:48:58:11:78:01:cd:6e:b6:49:12:99:2b:db:48:d6:bd: ff:45:4d:69:9f:61:b0:ac:ff:3a:a9:d3:b0:46:c4:f5:e0:c9: c1:b9:7d:ab:5d:0d:c2:4d:0e:48:75:10:d4:59:5f:88:2b:e8: 51:f0:48:c2:93:f1:b1:5e:ea:c7:92:9e:2f:84:d0:f0:49:67: 69:a4:7d:49:6a:23:ae:82:5f:3f:28:70:92:9d:69:64:93:7b: 09:dc:72:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQb5QUnSz6SkqGhWoY4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy MzA4Y2UwHhcNMjUxMjIxMDEwMTMxWhcNMjUxMjIyMDEwMTMxWjAzMTEwLwYDVQQD EygyOGE2MDU2ZmNkYzYyZWNiYjhhYzUwMDlkYzk5MzBiYmZmZTY4ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygxx6y25QpbmtQnqeDlAPimXd67S 2X8+4p5EqEaobFBf2ptpGSJzvwIS8Pwoc7b/va+WyQiB5xn5c69dZ6chonJJh2V8 ATUCUkc3WQVuONNoOVMCA+jZedYQP398z8MagNA4tJJ2fId7Kjs4KRsl5cRkOY5g 8dnBUMzPmMas0vNZnxlJwkwmRdCjBJDyk9JSwedT9cxdQwcqwSYwHp1+1bjscyBN HkoxkSjJKx3aHU0V9SgtJWrVIuudHTMVdffzfw5L95L+NM4lw7OGBquaNRFX5kDA bP8Pw9woslsF7PUyaVr+1hrmZQNE1dpdleh3l26TlTh2fhHO+dwFcFo4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCimBW/Nxi7LuKxQCdyZMLv/5o2QMB8GA1UdIwQY MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1 LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWgl0wYR 7jUedU9PFWJnDra08nUiDTlFeNAOYVnSmj+wyxAQwL4eaXirPsEMeoSKz4+UAuqK hE4+JdiVFcByH/npaIO8F86ey6jKOx4SDyQ8cLl20GjgeXAN8qHriS9uXcxXhLR0 qOcLhaFUkYjs8mc/+dzVDjkKKei+SkPUGIHg9Gxsgvs2fcxyuCpuBexLoPRP0Mfx bB98FDFzFN6dSzMbxB1IWBF4Ac1utkkSmSvbSNa9/0VNaZ9hsKz/OqnTsEbE9eDJ wbl9q10Nwk0OSHUQ1FlfiCvoUfBIwpPxsV7qx5KeL4TQ8ElnaaR9SWojroJfPyhw kp1pZJN7CdxyRw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:43 2025 by rpki-client