This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json) Hash identifier: wY7+4EMb+qZx9vvsOcxo8Gc0BDaiu4TvACW7bVmRh58= Subject key identifier: 2C:8E:F4:9F:B2:F6:6A:25:EA:BD:53:AC:13:23:45:65:E6:6B:A2:7A Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f Certificate serial: 019AF50B35CCEFDBF3496AF7138CCF9D5F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft Manifest number: 05A9 Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: Co7WkRYMhM5hbiFsSO1DN17jLdp67gyPZxCBhhEOJco=) 2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:35:cc:ef:db:f3:49:6a:f7:13:8c:cf:9d:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=2c8ef49fb2f66a25eabd53ac13234565e66ba27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:a2:8d:83:ba:06:c6:0c:3b:3b:5e:72:ba: 75:73:1e:a9:0c:2b:28:56:72:0c:58:42:fd:f8:70: 33:73:62:f6:e2:71:01:b6:93:eb:8e:02:2e:67:90: 50:e8:ec:5a:5d:ab:82:4f:22:cd:13:1a:13:bf:03: 33:ae:36:85:f6:6b:ca:78:1d:5b:b7:eb:46:2b:c6: c1:48:87:53:14:50:7a:ee:de:c8:61:b5:99:a9:99: a1:72:89:0c:cc:77:5a:b8:9c:db:8b:a8:ea:eb:8e: 93:68:9d:f8:82:c7:fd:58:21:20:80:fb:fc:a8:51: 02:6f:d0:f3:7b:44:19:4c:b4:ee:0a:65:b2:ce:57: 55:13:80:8f:99:61:04:00:3a:81:eb:ea:05:d2:dd: 31:46:f9:c4:d6:40:d0:8c:04:0c:d9:e1:63:59:8b: 27:0d:a5:ad:f7:bc:09:b5:c2:97:ef:ff:8a:61:d8: b1:e7:4b:a5:28:cf:f7:60:b9:6b:76:5b:fe:7c:4c: 3d:b4:e6:69:18:33:0d:a8:02:0f:cb:a7:fd:17:24: e2:db:06:94:d1:3b:3c:90:99:75:f3:e2:fa:63:15: 8b:05:4b:b5:bc:98:bd:fb:2b:9e:7e:df:79:bc:8d: da:19:ae:8f:a9:2e:a9:0b:16:0b:34:83:03:cb:40: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:F4:9F:B2:F6:6A:25:EA:BD:53:AC:13:23:45:65:E6:6B:A2:7A X509v3 Authority Key Identifier: keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ab:9e:43:cc:35:cd:e9:0b:5d:0f:64:83:b3:57:5e:7d:15: ca:c9:a6:19:a1:2b:10:06:85:40:3a:13:ee:cf:23:33:31:cf: cf:8c:9c:4e:c4:ef:97:b7:c8:40:2a:90:94:f7:8a:80:a9:39: 3f:af:ad:95:10:ad:dd:0f:be:50:b7:29:5d:39:34:35:86:b2: 40:9a:76:74:ed:88:c0:97:a5:25:65:ae:05:2f:3d:45:03:5e: 33:50:98:20:2a:54:c7:cf:30:81:fd:ed:3e:ba:f5:56:14:ab: fb:2f:ae:4e:47:14:ca:d0:66:1f:3d:24:3b:69:04:df:3a:9c: cb:81:49:1e:8f:9f:29:ad:d5:7d:b2:a2:a5:c3:ef:ee:6b:9d: 7a:90:24:6f:96:51:12:7d:30:99:b2:82:db:40:ad:90:ad:67: 41:2c:93:c9:6b:88:05:d0:42:b7:82:46:07:a2:b6:e9:96:f1: ed:cf:8e:18:b7:4d:4d:1e:18:c6:16:02:8a:91:19:31:25:39: d3:98:4f:28:b3:ab:5b:b8:a3:d5:b2:ae:98:a3:c2:b2:6d:73: df:70:53:bd:b5:79:7a:6f:72:45:bf:a7:78:f0:0e:4f:6c:73: 0b:d7:bb:bf:4a:38:1b:69:2f:ee:03:ef:cd:ac:a7:da:75:68: 36:0d:1b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzXM79vzSWr3E4zPnV9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl MTIyMGYwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD EygyYzhlZjQ5ZmIyZjY2YTI1ZWFiZDUzYWMxMzIzNDU2NWU2NmJhMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44WijYO6BsYMOztecrp1cx6pDCso VnIMWEL9+HAzc2L24nEBtpPrjgIuZ5BQ6OxaXauCTyLNExoTvwMzrjaF9mvKeB1b t+tGK8bBSIdTFFB67t7IYbWZqZmhcokMzHdauJzbi6jq646TaJ34gsf9WCEggPv8 qFECb9Dze0QZTLTuCmWyzldVE4CPmWEEADqB6+oF0t0xRvnE1kDQjAQM2eFjWYsn DaWt97wJtcKX7/+KYdix50ulKM/3YLlrdlv+fEw9tOZpGDMNqAIPy6f9FyTi2waU 0Ts8kJl18+L6YxWLBUu1vJi9+yueft95vI3aGa6PqS6pCxYLNIMDy0DsqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyO9J+y9mol6r1TrBMjRWXma6J6MB8GA1UdIwQY MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt YmI2YzZjNDU3ODE3LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3 LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKueQ8w1 zekLXQ9kg7NXXn0VysmmGaErEAaFQDoT7s8jMzHPz4ycTsTvl7fIQCqQlPeKgKk5 P6+tlRCt3Q++ULcpXTk0NYayQJp2dO2IwJelJWWuBS89RQNeM1CYICpUx88wgf3t Prr1VhSr+y+uTkcUytBmHz0kO2kE3zqcy4FJHo+fKa3VfbKipcPv7mudepAkb5ZR En0wmbKC20CtkK1nQSyTyWuIBdBCt4JGB6K26Zbx7c+OGLdNTR4YxhYCipEZMSU5 05hPKLOrW7ij1bKumKPCsm1z33BTvbV5em9yRb+nePAOT2xzC9e7v0o4G2kv7gPv zayn2nVoNg0blg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:13 2025 by rpki-client