This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json) Hash identifier: dITyxavCcxrM3CLCOq2jQVMk0kuqpUlnNVO9EW3vRMM= Subject key identifier: DF:6E:88:63:E4:D1:CA:2D:A5:8E:4B:0F:1D:24:51:B6:A6:8E:AF:79 Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Certificate serial: 019B2BF82E5D40DE1377E1E5477E11DB3D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft Manifest number: 1613 Signing time: Wed 17 Dec 2025 11:00:43 +0000 Manifest this update: Wed 17 Dec 2025 11:00:43 +0000 Manifest next update: Thu 18 Dec 2025 11:00:43 +0000 Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: MN5jKO2OBJjh1PB/VhCjrBlQNWytnepzSszWUhIGr10=) 2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:2e:5d:40:de:13:77:e1:e5:47:7e:11:db:3d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Validity Not Before: Dec 17 11:00:43 2025 GMT Not After : Dec 18 11:00:43 2025 GMT Subject: CN=df6e8863e4d1ca2da58e4b0f1d2451b6a68eaf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:08:7d:72:d0:15:30:b0:60:50:d1:90:87: 4c:4e:57:3f:d1:13:0b:13:33:e0:8a:b8:a3:76:98: 92:6f:2a:14:fa:ea:fe:eb:83:c3:5b:45:5f:8f:91: 3c:ee:21:0d:04:a0:9e:7b:de:e7:80:44:ed:58:3a: f4:66:be:ba:ee:e2:b3:2d:37:62:74:fb:49:44:dc: 66:16:d4:4f:34:c0:4c:b8:6d:03:75:77:08:ad:62: 98:c6:b8:3a:81:01:de:55:18:9c:c4:f3:d2:6c:75: 1b:ca:ed:5d:6d:be:78:c4:6a:85:7b:5a:25:14:ab: eb:47:19:15:97:d1:80:7c:76:30:5f:e4:34:99:72: cb:7b:af:88:f2:ac:40:d5:38:22:67:a8:b7:53:1c: 9d:bf:84:4b:9c:3d:dc:ba:85:5b:61:77:68:f1:09: 11:70:ec:ce:5d:e1:5b:3f:ec:2d:6b:e1:82:ef:18: 4c:65:5f:7c:92:c0:cf:b1:01:95:54:ab:47:e8:2b: b7:89:65:0e:7b:7e:3c:4e:4b:5b:22:1e:7f:50:3d: b6:01:ca:a0:d7:1d:ed:a7:96:de:76:3f:52:48:7e: 1a:26:cb:2c:98:a7:aa:13:c0:3f:13:e2:bb:1d:66: 93:3c:8a:c1:ef:b0:7c:4f:06:90:0f:ac:5f:88:a2: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:88:63:E4:D1:CA:2D:A5:8E:4B:0F:1D:24:51:B6:A6:8E:AF:79 X509v3 Authority Key Identifier: keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8b:8d:09:0a:18:a8:af:1e:55:3c:f0:7a:21:88:7f:86:4c: 21:47:e5:bf:58:71:95:c6:27:b4:a3:65:a4:f1:1a:43:40:42: 70:28:97:61:ac:1a:39:aa:a5:87:7d:59:fe:f1:d9:ba:0c:59: 67:3f:45:3c:7b:c3:28:ea:20:cc:10:e4:48:d9:2b:2e:f7:80: 86:1d:ca:c3:19:5a:c5:e2:25:dd:2f:96:2c:0a:07:12:5c:6b: 87:c9:f4:a0:54:b8:07:05:48:e4:4d:a8:af:14:1b:23:64:72: 95:b9:16:51:c4:4e:4b:da:98:09:7f:b8:bd:1a:cd:22:25:47: e7:dd:7a:87:4d:01:ce:82:05:e5:5b:8a:3f:66:9c:12:89:47: 2e:96:0f:2f:c9:98:ba:16:93:73:3b:13:44:fd:03:2a:63:19: cf:1a:b6:50:cb:2f:27:f6:c0:63:22:15:bc:b4:53:f7:17:86: 9f:9d:5c:94:87:5d:59:51:d6:0f:9c:45:1a:f8:7a:d6:db:94: fe:64:ac:96:46:95:41:85:8f:8f:ae:1c:0d:bf:d4:35:22:00: f0:c2:1a:9d:f9:50:47:44:9e:6c:97:71:cc:bc:e1:e4:b1:bb: 54:02:e8:c6:5a:00:9b:3b:45:c7:bc:95:64:c3:1d:41:ab:f1: 72:6b:8d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+C5dQN4Td+HlR34R2z2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk MzQ0OWUwHhcNMjUxMjE3MTEwMDQzWhcNMjUxMjE4MTEwMDQzWjAzMTEwLwYDVQQD EyhkZjZlODg2M2U0ZDFjYTJkYTU4ZTRiMGYxZDI0NTFiNmE2OGVhZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8QIfXLQFTCwYFDRkIdMTlc/0RML EzPgirijdpiSbyoU+ur+64PDW0Vfj5E87iENBKCee97ngETtWDr0Zr667uKzLTdi dPtJRNxmFtRPNMBMuG0DdXcIrWKYxrg6gQHeVRicxPPSbHUbyu1dbb54xGqFe1ol FKvrRxkVl9GAfHYwX+Q0mXLLe6+I8qxA1TgiZ6i3Uxydv4RLnD3cuoVbYXdo8QkR cOzOXeFbP+wta+GC7xhMZV98ksDPsQGVVKtH6Cu3iWUOe348TktbIh5/UD22Acqg 1x3tp5bedj9SSH4aJsssmKeqE8A/E+K7HWaTPIrB77B8TwaQD6xfiKL64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9uiGPk0cotpY5LDx0kUbamjq95MB8GA1UdIwQY MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5 LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYuNCQoY qK8eVTzweiGIf4ZMIUflv1hxlcYntKNlpPEaQ0BCcCiXYawaOaqlh31Z/vHZugxZ Zz9FPHvDKOogzBDkSNkrLveAhh3KwxlaxeIl3S+WLAoHElxrh8n0oFS4BwVI5E2o rxQbI2RylbkWUcROS9qYCX+4vRrNIiVH5916h00BzoIF5VuKP2acEolHLpYPL8mY uhaTczsTRP0DKmMZzxq2UMsvJ/bAYyIVvLRT9xeGn51clIddWVHWD5xFGvh61tuU /mSslkaVQYWPj64cDb/UNSIA8MIanflQR0SebJdxzLzh5LG7VALoxloAmztFx7yV ZMMdQavxcmuNaA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:13 2025 by rpki-client