This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json) Hash identifier: 4FL2EEtNxXmlOH+TrzD4+7u32b7j4+qqzzIwYBVWIL8= Subject key identifier: B5:C1:9D:25:4E:92:51:87:A5:69:37:EC:5B:F7:CA:1C:57:20:44:01 Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00 Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500 Certificate serial: 019AF276C88B8407892B78AB0733E8C7B1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft Manifest number: 0725 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: IOFe+NLiQCTQ7MF3JRTFcrSW02Nvj/4LykJUTwlYOS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c8:8b:84:07:89:2b:78:ab:07:33:e8:c7:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=b5c19d254e925187a56937ec5bf7ca1c57204401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f3:13:b7:0b:d8:49:88:6a:74:6b:47:12:b4: 4d:de:e0:4c:22:fd:b4:2c:4a:2a:b4:5e:2b:81:31: 8b:bd:a8:a9:3b:2d:dc:a4:10:30:5d:7f:39:c4:84: aa:14:aa:97:eb:3f:0c:be:b1:62:2d:36:5f:43:d9: af:a4:2f:32:16:48:53:14:25:b3:e1:c5:41:a8:64: 32:e2:ba:30:91:fa:9e:c5:82:ca:99:c4:31:81:34: a4:4b:e3:30:72:72:b6:66:bc:20:99:0c:a7:90:e9: 2f:ab:9a:4d:5e:17:e9:92:15:25:ea:a3:01:db:bf: d6:6d:32:28:3e:16:45:14:12:06:35:fb:d5:74:e2: 23:32:22:95:16:33:2d:53:f6:e1:13:64:a9:c1:c4: 4e:f3:27:16:a9:f3:30:19:15:56:ba:8d:e7:61:db: 6d:b4:e1:bb:48:ce:fe:fe:e1:4d:bd:ff:66:00:3d: f0:1c:a1:ca:03:f8:a1:1e:48:58:38:66:34:eb:c3: 6f:f9:01:aa:ae:99:56:aa:48:f3:30:1e:98:18:9e: 7e:a3:e1:6c:d0:f3:46:36:9a:41:04:4a:1a:23:bb: 12:80:ec:23:c9:83:19:a7:5e:de:f5:d9:5a:58:08: b2:4f:29:9c:ff:92:bd:da:ef:e4:82:45:2e:11:14: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:9D:25:4E:92:51:87:A5:69:37:EC:5B:F7:CA:1C:57:20:44:01 X509v3 Authority Key Identifier: keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:85:93:57:e8:d6:ec:a1:e4:aa:20:e1:31:d7:2c:67:34:0e: 06:fb:01:7a:7c:b4:33:2a:75:d3:68:fd:29:84:95:99:c8:c8: 84:63:09:8d:39:67:e2:e6:8c:10:83:c5:81:c3:6d:f4:53:6b: 93:62:d3:e4:91:6b:ee:b7:52:46:4a:5f:80:fe:6c:4f:e1:1f: 82:68:3c:0f:22:9f:90:da:ba:17:f4:9e:43:16:8e:f4:75:aa: 06:7a:4c:36:ac:a4:a6:e2:ca:af:84:d9:13:98:e7:31:20:7e: 54:3b:5b:fd:a3:75:8b:3e:30:f7:ae:ec:28:93:49:7d:c5:d9: d3:71:dd:b7:84:34:50:2a:e9:68:0c:4f:83:5d:96:df:fe:6a: 06:9d:9c:06:c7:7b:84:ba:62:48:0a:6e:df:7a:39:86:9e:c0: 42:aa:f8:c2:49:e4:14:31:1f:cf:df:a9:a9:5a:ba:10:84:34: 9b:16:15:ca:17:c4:f6:bd:35:f0:33:29:03:f1:0c:d9:b9:ad: 74:33:ba:db:4f:42:3b:0c:76:d6:77:8d:b3:66:be:5b:97:17: e4:e3:a5:c8:f4:5e:b7:d1:ba:7b:fc:2c:6f:23:3c:a4:b2:3d: 47:df:07:42:91:0b:01:1d:11:d5:05:ba:5c:6b:21:5b:a8:2d: 2c:33:e0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsiLhAeJK3irBzPox7HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjcwODYxYzdjZjZlZmU3N2QyMmZjNzA0OWJlOTZjNjc2 OGE1MDAwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EyhiNWMxOWQyNTRlOTI1MTg3YTU2OTM3ZWM1YmY3Y2ExYzU3MjA0NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/MTtwvYSYhqdGtHErRN3uBMIv20 LEoqtF4rgTGLvaipOy3cpBAwXX85xISqFKqX6z8MvrFiLTZfQ9mvpC8yFkhTFCWz 4cVBqGQy4rowkfqexYLKmcQxgTSkS+MwcnK2ZrwgmQynkOkvq5pNXhfpkhUl6qMB 27/WbTIoPhZFFBIGNfvVdOIjMiKVFjMtU/bhE2SpwcRO8ycWqfMwGRVWuo3nYdtt tOG7SM7+/uFNvf9mAD3wHKHKA/ihHkhYOGY068Nv+QGqrplWqkjzMB6YGJ5+o+Fs 0PNGNppBBEoaI7sSgOwjyYMZp17e9dlaWAiyTymc/5K92u/kgkUuERSLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXBnSVOklGHpWk37Fv3yhxXIEQBMB8GA1UdIwQY MBaAFOD3CGHHz27+d9IvxwSb6WxnaKUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYt NDQ3M2MwYjFlMDQ2LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYtNDQ3M2MwYjFlMDQ2 LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4WTV+jW 7KHkqiDhMdcsZzQOBvsBeny0Myp102j9KYSVmcjIhGMJjTln4uaMEIPFgcNt9FNr k2LT5JFr7rdSRkpfgP5sT+Efgmg8DyKfkNq6F/SeQxaO9HWqBnpMNqykpuLKr4TZ E5jnMSB+VDtb/aN1iz4w967sKJNJfcXZ03Hdt4Q0UCrpaAxPg12W3/5qBp2cBsd7 hLpiSApu33o5hp7AQqr4wknkFDEfz9+pqVq6EIQ0mxYVyhfE9r018DMpA/EM2bmt dDO6209COwx21neNs2a+W5cX5OOlyPRet9G6e/wsbyM8pLI9R98HQpELAR0R1QW6 XGshW6gtLDPgoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:14 2025 by rpki-client