This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json) Hash identifier: 7imx6d7Ity6SGIwgKa/MKYFgYgNX+qp5APTwn9+nNEo= Subject key identifier: F3:35:36:97:F7:A8:DB:DD:1C:4D:11:99:71:83:94:ED:49:2F:18:AB Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38 Certificate serial: 019AF1D2144DF5E108471E420EAB2CC78541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft Manifest number: 0D79 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: Qq9Rv/iNV+fBCQxMSiwA5fFzKHHDuZ9tDNkfbAxmDMA=) 2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:4d:f5:e1:08:47:1e:42:0e:ab:2c:c7:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=f3353697f7a8dbdd1c4d1199718394ed492f18ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:44:bb:d9:73:39:24:d8:a0:d4:75:00:8a: 32:4a:5c:99:31:7e:90:39:da:08:de:01:e6:6c:f8: b1:f6:06:68:1d:ba:7c:70:8d:47:bf:22:e4:12:ff: c7:48:e6:ad:25:22:fc:11:7c:f2:df:48:16:8c:e5: c4:52:b1:fd:05:e0:19:9b:68:18:aa:a2:61:07:2f: 9d:2a:5c:fa:b6:18:88:19:f5:81:50:3c:cf:57:54: 7c:e0:ba:60:f7:04:6f:8b:8a:50:fe:68:31:47:ce: 97:dd:11:9f:9d:14:52:3e:f9:71:1d:3a:3e:4a:0b: 33:d3:9a:cc:97:81:cc:87:77:6f:72:b6:29:60:d3: 59:ce:14:87:a4:6f:c3:0b:10:30:42:44:2f:d1:f3: 83:ce:16:4f:e1:8d:92:39:5f:7f:65:15:ab:1a:ef: ad:24:d4:9e:13:45:75:3b:56:0f:38:c1:a4:fd:0c: 4e:63:27:9e:d2:17:4e:86:34:58:ab:49:dd:99:33: eb:ff:98:b7:83:ea:a6:e1:a2:83:ea:ec:88:e4:60: 5c:2e:b1:06:2f:90:9d:6b:c7:27:af:51:f0:5a:45: 69:cb:a2:48:84:d1:fd:5b:ca:c5:35:bd:87:91:6d: f7:09:a5:f9:e1:b2:51:8b:7e:a4:05:a7:a1:d6:ed: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:36:97:F7:A8:DB:DD:1C:4D:11:99:71:83:94:ED:49:2F:18:AB X509v3 Authority Key Identifier: keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:61:c7:82:32:f0:88:5e:d2:18:14:c3:3e:26:86:3c:aa: 8a:81:8b:01:81:60:40:d5:ea:40:a0:30:24:92:04:f0:4a:92: 1d:c0:aa:6b:77:a9:47:51:40:7d:d9:68:79:b5:08:2d:bf:3b: 6b:43:1a:e8:49:51:73:cc:c4:da:dc:55:96:c3:64:70:4d:de: af:65:d0:a3:80:55:13:3a:13:c9:a3:19:f1:99:a9:97:78:6f: cc:46:8d:70:c3:92:50:9b:21:9a:5b:7f:93:69:43:2f:87:f3: 4e:00:57:e4:55:9e:eb:79:8c:be:76:a0:47:4e:de:b4:91:5a: 0c:1c:0f:1b:df:57:b7:f9:1b:3f:6e:4d:40:90:78:63:6a:e9: fc:e2:40:bb:f9:a5:40:2b:f8:24:10:f3:2b:6f:f2:4f:b6:ea: ff:85:b3:16:6e:b4:3f:7b:0d:bf:61:73:e6:4e:9f:75:07:17: 65:4f:35:b6:6b:b7:f7:94:bd:44:ab:ed:51:50:52:e9:8f:7f: b0:62:5d:7f:98:d8:04:03:ef:30:52:99:cc:3d:94:08:16:e2: b2:24:e4:df:7c:90:57:93:45:e3:f4:4e:fc:56:90:77:a9:76: 2e:7d:94:aa:b3:56:d1:9d:2b:3d:e4:b3:86:c7:4c:44:c7:70: 21:3a:73:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hRN9eEIRx5CDqssx4VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk ODFkMzgwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhmMzM1MzY5N2Y3YThkYmRkMWM0ZDExOTk3MTgzOTRlZDQ5MmYxOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlexEu9lzOSTYoNR1AIoySlyZMX6Q OdoI3gHmbPix9gZoHbp8cI1HvyLkEv/HSOatJSL8EXzy30gWjOXEUrH9BeAZm2gY qqJhBy+dKlz6thiIGfWBUDzPV1R84Lpg9wRvi4pQ/mgxR86X3RGfnRRSPvlxHTo+ Sgsz05rMl4HMh3dvcrYpYNNZzhSHpG/DCxAwQkQv0fODzhZP4Y2SOV9/ZRWrGu+t JNSeE0V1O1YPOMGk/QxOYyee0hdOhjRYq0ndmTPr/5i3g+qm4aKD6uyI5GBcLrEG L5Cda8cnr1HwWkVpy6JIhNH9W8rFNb2HkW33CaX54bJRi36kBaeh1u2ZKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM1Npf3qNvdHE0RmXGDlO1JLxirMB8GA1UdIwQY MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3 LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtdhx4Iy 8Ihe0hgUwz4mhjyqioGLAYFgQNXqQKAwJJIE8EqSHcCqa3epR1FAfdloebUILb87 a0Ma6ElRc8zE2txVlsNkcE3er2XQo4BVEzoTyaMZ8Zmpl3hvzEaNcMOSUJshmlt/ k2lDL4fzTgBX5FWe63mMvnagR07etJFaDBwPG99Xt/kbP25NQJB4Y2rp/OJAu/ml QCv4JBDzK2/yT7bq/4WzFm60P3sNv2Fz5k6fdQcXZU81tmu395S9RKvtUVBS6Y9/ sGJdf5jYBAPvMFKZzD2UCBbisiTk33yQV5NF4/RO/FaQd6l2Ln2UqrNW0Z0rPeSz hsdMRMdwITpz8g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:46 2025 by rpki-client