This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json) Hash identifier: /OlFPBr2SlQP2Gi0cqq/iDoeq/FZoKNMqByVd7gzShk= Subject key identifier: 02:CB:FA:AB:D1:A8:B7:A7:3A:4A:A7:51:6E:7D:6B:69:0D:FE:08:0A Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026 Certificate serial: 019AF31CEF56D842B34A5028E74F59725E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft Manifest number: 12BD Signing time: Sat 06 Dec 2025 10:02:30 +0000 Manifest this update: Sat 06 Dec 2025 10:02:30 +0000 Manifest next update: Sun 07 Dec 2025 10:02:30 +0000 Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: HRu6D7OT18YOBfQ5kZPbM7ExBlqov47bxKSsFT4IcwU=) 2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ef:56:d8:42:b3:4a:50:28:e7:4f:59:72:5e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026 Validity Not Before: Dec 6 10:02:30 2025 GMT Not After : Dec 7 10:02:30 2025 GMT Subject: CN=02cbfaabd1a8b7a73a4aa7516e7d6b690dfe080a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:ba:6d:16:11:21:91:03:6f:73:09:a0:ce: 6b:3f:f9:b7:86:64:90:5b:cf:58:53:a1:d9:7d:45: df:92:4e:0d:97:75:6c:e5:9a:60:29:04:0c:4c:9e: cc:11:22:14:9a:8b:f3:78:fa:2b:1b:e0:c3:fa:b8: d6:db:fb:2c:44:43:7b:7a:01:53:61:4d:c5:4a:d3: d1:15:27:7a:dd:a4:1d:a8:a8:08:83:3a:1c:27:ef: a5:cf:6a:45:cc:d3:80:4a:96:b5:81:bf:ae:ac:c6: 17:6a:69:b6:64:b4:19:83:ba:c3:e0:f8:d7:76:c9: 69:09:f6:40:24:7c:30:15:7e:58:32:56:17:a5:78: c7:4d:9b:12:00:18:1b:99:64:66:13:a9:6e:95:20: a8:0a:4e:d0:4b:14:b2:67:57:a6:62:1b:15:63:12: 0c:92:ea:03:38:cb:38:8a:ce:13:6d:98:b3:91:7e: 1c:ba:43:e1:23:e4:98:4a:bd:fb:00:5c:82:1a:60: 18:03:07:f4:24:19:6f:61:ca:b9:06:44:0d:65:bc: 8a:9f:db:e6:84:44:b3:2b:e1:03:dc:8d:f4:ec:0b: 97:24:19:1a:95:4f:b6:0e:0c:7d:1f:ba:84:34:27: 73:a1:85:be:20:b4:01:df:0e:36:47:ab:39:31:01: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:FA:AB:D1:A8:B7:A7:3A:4A:A7:51:6E:7D:6B:69:0D:FE:08:0A X509v3 Authority Key Identifier: keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8f:40:ff:b9:25:2b:96:12:c8:05:70:3b:f5:2e:39:22:1b: af:db:7c:ca:d2:19:bb:61:f0:7d:29:6f:0a:8b:65:0e:99:b3: 7c:18:c5:f3:ce:4c:58:47:4b:1e:7b:40:90:57:34:66:47:a6: db:3b:a1:21:ac:e2:59:c8:fe:79:87:48:54:cb:cc:05:06:df: ec:00:c9:06:2c:cf:4d:8c:23:be:d6:ab:3c:df:05:82:5b:56: 80:18:84:90:40:98:0c:16:9a:4d:25:90:df:fe:a5:54:2b:87: 6c:7d:29:ba:93:7f:64:1e:c5:fe:a2:4c:fd:32:98:87:bd:13: 89:d5:61:dd:64:2f:a4:26:cb:da:44:e7:d7:b7:78:28:bb:85: 46:17:1f:44:58:4b:67:3f:7f:ab:37:44:91:09:a8:6b:ef:b2: 7a:4e:6e:ea:5c:b0:44:db:3d:7e:1c:73:7e:e5:d4:37:c3:a7: eb:c1:06:f0:8d:88:f0:78:bb:3c:be:85:f1:d4:05:5f:25:f4: 8a:f6:6d:d6:10:b8:08:cf:96:7a:89:11:32:78:ba:31:e2:2a: 48:9d:ee:29:a3:6e:7d:60:2f:00:57:db:ea:b3:2b:d5:a2:46: f9:90:fb:08:31:82:18:48:1b:24:5c:a1:b7:80:d5:c7:b1:d4: 57:9c:69:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHO9W2EKzSlAo509Zcl6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm ZDIwMjYwHhcNMjUxMjA2MTAwMjMwWhcNMjUxMjA3MTAwMjMwWjAzMTEwLwYDVQQD EygwMmNiZmFhYmQxYThiN2E3M2E0YWE3NTE2ZTdkNmI2OTBkZmUwODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQu6bRYRIZEDb3MJoM5rP/m3hmSQ W89YU6HZfUXfkk4Nl3Vs5ZpgKQQMTJ7MESIUmovzePorG+DD+rjW2/ssREN7egFT YU3FStPRFSd63aQdqKgIgzocJ++lz2pFzNOASpa1gb+urMYXamm2ZLQZg7rD4PjX dslpCfZAJHwwFX5YMlYXpXjHTZsSABgbmWRmE6lulSCoCk7QSxSyZ1emYhsVYxIM kuoDOMs4is4TbZizkX4cukPhI+SYSr37AFyCGmAYAwf0JBlvYcq5BkQNZbyKn9vm hESzK+ED3I307AuXJBkalU+2Dgx9H7qENCdzoYW+ILQB3w42R6s5MQF1dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALL+qvRqLenOkqnUW59a2kN/ggKMB8GA1UdIwQY MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5 LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI9A/7kl K5YSyAVwO/UuOSIbr9t8ytIZu2HwfSlvCotlDpmzfBjF885MWEdLHntAkFc0Zkem 2zuhIaziWcj+eYdIVMvMBQbf7ADJBizPTYwjvtarPN8FgltWgBiEkECYDBaaTSWQ 3/6lVCuHbH0pupN/ZB7F/qJM/TKYh70TidVh3WQvpCbL2kTn17d4KLuFRhcfRFhL Zz9/qzdEkQmoa++yek5u6lywRNs9fhxzfuXUN8On68EG8I2I8Hi7PL6F8dQFXyX0 ivZt1hC4CM+WeokRMni6MeIqSJ3uKaNufWAvAFfb6rMr1aJG+ZD7CDGCGEgbJFyh t4DVx7HUV5xp9A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:41:24 2025 by rpki-client