This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json) Hash identifier: t0qlqq8W/YNoYthkMAmkl98hnYbdar1ybOy0f/PHnI4= Subject key identifier: EC:68:BA:F3:14:56:83:BC:4E:73:17:53:7E:BE:86:13:9E:C0:03:51 Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Certificate serial: 019AF209AE75036C3FA2D11BA472E0C0048D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft Manifest number: 15F5 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: QXt3szIg3GC/yf8+lVWRwyZempOSqgRUGcE7BtPnchk=) 2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ae:75:03:6c:3f:a2:d1:1b:a4:72:e0:c0:04:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=ec68baf3145683bc4e7317537ebe86139ec00351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:f2:81:26:de:63:6d:f8:2c:8d:fb:cf:aa: 42:cb:a2:5b:8d:80:26:b9:a2:a5:7e:f3:7a:ef:8a: c8:86:09:ba:c3:a3:bf:96:0e:97:a2:09:e1:ec:1f: 04:0e:ef:1f:d9:eb:ec:67:05:8e:3c:70:60:11:da: ec:7c:49:56:7b:78:af:37:fe:0f:cb:79:f5:f3:33: f2:88:88:2a:6d:9a:9b:44:b7:62:40:42:3e:a0:95: 39:75:c2:23:65:62:b0:43:13:5f:e2:6d:d8:9d:9e: 50:92:f2:07:af:00:36:f1:1d:17:15:b8:22:5f:34: 94:9a:6b:78:d9:86:35:26:38:1e:6f:33:02:2e:c2: fe:87:17:d1:fb:73:03:fa:f8:e2:42:fa:f0:13:35: b2:b9:58:bc:6d:db:bf:92:23:a6:12:61:48:33:9f: e3:62:a2:d2:e2:00:b3:ee:8f:4f:7f:aa:b1:67:ef: f7:7d:7f:05:b9:37:f4:12:51:bd:8b:f7:86:dc:62: aa:84:53:de:64:19:ea:02:84:14:93:d1:07:df:e6: 7a:22:68:3f:c0:8a:f2:36:65:ae:f8:4f:5b:fa:3a: eb:e4:b9:45:b7:10:44:39:84:84:da:63:46:31:1b: eb:3b:24:32:c5:78:ef:3a:12:9b:9d:30:b5:1d:55: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:BA:F3:14:56:83:BC:4E:73:17:53:7E:BE:86:13:9E:C0:03:51 X509v3 Authority Key Identifier: keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:d3:f1:35:0a:74:74:6f:1b:e4:4c:41:08:c7:c3:2c:d1: 9c:7a:48:77:67:82:49:88:60:1b:a9:04:cb:a5:42:58:40:cd: aa:ac:eb:20:86:94:59:32:5f:2d:48:92:77:b7:10:cf:f1:ab: 67:98:8e:4c:a8:9b:16:a7:f9:16:27:ce:3c:c2:3b:2c:c1:e4: f1:0d:70:3c:f1:a1:ba:1c:17:cd:bb:73:fd:14:2d:e6:c5:f4: dd:f8:21:f5:b9:74:3a:d0:3d:6b:78:5f:f1:b2:22:f7:b7:b7: 09:18:c0:82:4d:33:cc:5a:98:20:a5:86:3a:a3:c5:54:74:89: aa:76:f0:d5:02:23:7b:51:69:b7:57:7d:c6:b5:6b:9c:38:57: 57:df:67:6a:fe:14:65:d6:d6:57:31:c5:6b:ef:f9:32:60:ea: 9b:d7:41:de:30:4e:d8:18:d1:93:4e:36:8b:2d:de:94:4d:5a: 52:cf:8b:9e:66:3f:ab:7c:fe:8e:4f:20:0e:09:21:4e:9b:97: 8d:40:a0:d1:b3:c7:2f:c2:ad:f5:40:c9:55:1c:78:46:d9:91: 9a:a9:34:19:a7:05:b7:5d:07:88:ea:4f:a9:1f:e1:34:7d:87: 12:1b:d1:59:b6:27:81:ff:01:b2:d6:70:7c:b6:97:f1:7b:4e: 3c:2f:dc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa51A2w/otEbpHLgwASNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk MzQ0OWUwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhlYzY4YmFmMzE0NTY4M2JjNGU3MzE3NTM3ZWJlODYxMzllYzAwMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmXygSbeY234LI37z6pCy6JbjYAm uaKlfvN674rIhgm6w6O/lg6Xognh7B8EDu8f2evsZwWOPHBgEdrsfElWe3ivN/4P y3n18zPyiIgqbZqbRLdiQEI+oJU5dcIjZWKwQxNf4m3YnZ5QkvIHrwA28R0XFbgi XzSUmmt42YY1JjgebzMCLsL+hxfR+3MD+vjiQvrwEzWyuVi8bdu/kiOmEmFIM5/j YqLS4gCz7o9Pf6qxZ+/3fX8FuTf0ElG9i/eG3GKqhFPeZBnqAoQUk9EH3+Z6Img/ wIryNmWu+E9b+jrr5LlFtxBEOYSE2mNGMRvrOyQyxXjvOhKbnTC1HVVmAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxouvMUVoO8TnMXU36+hhOewANRMB8GA1UdIwQY MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5 LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU7T8TUK dHRvG+RMQQjHwyzRnHpId2eCSYhgG6kEy6VCWEDNqqzrIIaUWTJfLUiSd7cQz/Gr Z5iOTKibFqf5FifOPMI7LMHk8Q1wPPGhuhwXzbtz/RQt5sX03fgh9bl0OtA9a3hf 8bIi97e3CRjAgk0zzFqYIKWGOqPFVHSJqnbw1QIje1Fpt1d9xrVrnDhXV99nav4U ZdbWVzHFa+/5MmDqm9dB3jBO2BjRk042iy3elE1aUs+LnmY/q3z+jk8gDgkhTpuX jUCg0bPHL8Kt9UDJVRx4RtmRmqk0GacFt10HiOpPqR/hNH2HEhvRWbYngf8BstZw fLaX8XtOPC/cnA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:16 2025 by rpki-client