This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft File: 4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json) Hash identifier: Ljmh2ny9IBJ6k14YYc9+ToY1eN4tm2VwsE+zwN1gdR8= Subject key identifier: 64:D6:68:9B:46:9B:2A:A6:A3:24:BC:00:63:84:4E:DE:B9:8F:69:1C Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77 Certificate issuer: /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77 Certificate serial: 019AF19BB77C7C5D72E1CE40751A9A73F092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft Manifest number: 51 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: Enz8FHG/4ok8QR8jpgDAfSFfqn761ZCqbU1Badp0CF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b7:7c:7c:5d:72:e1:ce:40:75:1a:9a:73:f0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=64d6689b469b2aa6a324bc0063844edeb98f691c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:8e:bd:7b:f1:cb:e5:8f:eb:05:3d:09:28: eb:b6:99:f3:4f:98:d6:d5:73:70:4c:5d:e6:67:ae: 9a:67:98:f8:b6:d1:90:0b:6a:c2:1f:86:92:4a:f1: ee:d5:2e:58:5e:19:03:de:e2:cf:2f:71:39:1d:bc: db:89:17:8b:17:44:37:09:e6:9c:74:1a:db:c5:0c: 11:cc:f0:ef:22:dc:e5:f1:b9:3d:1a:b4:a0:7a:08: 3f:3e:91:06:8c:f0:3f:53:67:36:6c:69:db:71:ab: a5:40:c9:0f:ec:2a:da:f8:cc:02:9e:eb:63:da:c9: c6:2f:c9:5e:be:a2:fb:ed:e9:4a:fc:97:51:58:82: 54:50:96:50:2b:b4:85:f6:49:e4:c8:9c:a6:30:87: bb:23:b2:f9:fc:d7:14:ce:f9:fb:dd:fc:a1:0b:09: 0d:70:8c:5b:c6:ea:a8:46:ca:d2:f6:15:43:70:60: cd:a9:bb:45:02:38:69:b3:d2:16:e3:06:d6:db:97: 0a:9c:2a:e6:f1:a8:72:a9:d3:0f:1d:68:d5:39:99: 6c:25:c1:7f:dd:e1:b2:2d:1f:3f:81:19:da:9e:be: 43:84:9f:2d:9d:80:7a:bd:4c:1c:80:4a:4d:37:f6: 26:4c:0c:7b:95:16:86:93:0d:1a:c8:1c:df:c6:35: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D6:68:9B:46:9B:2A:A6:A3:24:BC:00:63:84:4E:DE:B9:8F:69:1C X509v3 Authority Key Identifier: keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:9f:2a:29:d0:ab:95:4a:1f:69:90:c4:20:df:54:ed:d2: 59:60:94:f8:e8:e5:12:56:c6:91:ef:82:67:8e:f8:91:ea:c7: d8:8e:d2:9d:ad:93:6e:39:57:86:04:e8:0f:9f:3a:50:4a:1a: 0d:9e:92:47:14:29:07:ff:db:41:84:61:5b:d3:45:50:66:32: 90:b1:47:bf:69:5d:ae:21:b7:0c:92:dd:39:54:04:51:d3:c7: 38:ec:ac:55:3f:ab:ef:8c:45:1c:14:24:76:78:d5:5c:54:13: d6:e7:c5:1b:5f:c3:00:fc:55:21:04:eb:68:63:b4:85:78:50: 10:6a:5b:5d:8b:d5:a3:ea:ed:87:41:43:12:1e:bb:d2:df:9d: d5:1f:3c:08:eb:0c:79:f1:7c:6f:7a:01:74:f0:dc:3f:a4:22: fa:a1:4d:a1:bb:f5:71:6e:e3:41:26:15:0b:94:28:59:d9:04: a1:cd:7e:a8:cb:7a:98:04:cd:53:77:01:bc:0a:80:3f:42:e2: f5:ae:bc:d3:91:47:44:c2:28:ec:44:22:91:2f:fa:d0:9c:a4: a4:9a:b1:52:4a:b2:49:3f:14:27:11:2c:1e:9c:df:05:66:8f: a3:e9:01:7a:51:a8:c1:3b:36:de:c7:ce:7e:5f:be:4c:7d:f1: 80:70:d4:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7d8fF1y4c5AdRqac/CSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWMzZDExZjQzYzc0MmE3ZDAwODU0MmRmNGVmZDNiYjAw ZDJkNzcwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD Eyg2NGQ2Njg5YjQ2OWIyYWE2YTMyNGJjMDA2Mzg0NGVkZWI5OGY2OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqOvXvxy+WP6wU9CSjrtpnzT5jW 1XNwTF3mZ66aZ5j4ttGQC2rCH4aSSvHu1S5YXhkD3uLPL3E5HbzbiReLF0Q3Ceac dBrbxQwRzPDvItzl8bk9GrSgegg/PpEGjPA/U2c2bGnbcaulQMkP7Cra+MwCnutj 2snGL8levqL77elK/JdRWIJUUJZQK7SF9knkyJymMIe7I7L5/NcUzvn73fyhCwkN cIxbxuqoRsrS9hVDcGDNqbtFAjhps9IW4wbW25cKnCrm8ahyqdMPHWjVOZlsJcF/ 3eGyLR8/gRnanr5DhJ8tnYB6vUwcgEpNN/YmTAx7lRaGkw0ayBzfxjVcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTWaJtGmyqmoyS8AGOETt65j2kcMB8GA1UdIwQY MBaAFOMcPRH0PHQqfQCFQt9O/TuwDS13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMt NmUwZjZkMzlmZmZkLzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMtNmUwZjZkMzlmZmZk LzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1afKinQ q5VKH2mQxCDfVO3SWWCU+OjlElbGke+CZ474kerH2I7Sna2TbjlXhgToD586UEoa DZ6SRxQpB//bQYRhW9NFUGYykLFHv2ldriG3DJLdOVQEUdPHOOysVT+r74xFHBQk dnjVXFQT1ufFG1/DAPxVIQTraGO0hXhQEGpbXYvVo+rth0FDEh670t+d1R88COsM efF8b3oBdPDcP6Qi+qFNobv1cW7jQSYVC5QoWdkEoc1+qMt6mATNU3cBvAqAP0Li 9a6805FHRMIo7EQikS/60JykpJqxUkqyST8UJxEsHpzfBWaPo+kBelGowTs23sfO fl++TH3xgHDUng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:06 2025 by rpki-client