This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json) Hash identifier: 1tuAVtWZjAUh5WIEm98nATvbu2g1XrNyWiGs1Z8YZwI= Subject key identifier: B5:20:CB:F4:84:FC:0B:C8:05:E1:EE:40:03:A9:64:73:FD:5E:9B:3B Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0 Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0 Certificate serial: 019AF23FAAA56516B0B96D385D04E9D697CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft Manifest number: 0628 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: iGQWW7y2d6m6Kl/ey+ZwX90C3Lgz00vAXAFzL4Izqng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:aa:a5:65:16:b0:b9:6d:38:5d:04:e9:d6:97:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=b520cbf484fc0bc805e1ee4003a96473fd5e9b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:cf:c2:c1:a2:25:a5:95:c0:80:c5:06:ea: 3c:c0:7e:6f:59:6c:e8:f9:c4:c2:d7:94:6a:ac:b9: f6:cc:2e:fd:53:af:50:a0:97:cb:33:d2:64:de:12: db:9f:2f:01:bb:c2:3b:9d:4e:7e:38:6f:c0:d1:a1: 1d:9a:26:1c:70:bf:0c:48:6e:12:09:94:d4:39:72: 01:78:fd:33:75:14:a5:d1:9d:30:9d:1f:99:88:8f: 56:1a:42:91:6d:7f:01:30:6b:56:9a:3b:0b:2a:36: 97:f9:06:a1:0b:71:d0:d7:16:e7:d7:c8:77:4e:89: 6b:0b:00:8e:c4:88:47:e2:25:55:5e:13:93:70:14: da:f4:8c:ba:38:7c:6b:70:ab:77:40:f5:b2:c7:e3: 83:03:62:3b:d0:2a:dd:37:32:a5:c4:cb:95:23:07: 74:b0:5c:95:eb:3c:b1:27:4e:c8:38:d5:7c:d5:de: b5:0d:ea:6c:7f:f3:c1:92:86:77:04:df:56:b4:9a: 95:c7:28:4b:c5:21:28:35:a7:c0:18:0e:f6:26:97: 7d:be:6f:83:9e:48:b5:c1:7d:bd:d8:e9:68:7c:87: be:d1:a2:85:65:1c:ff:1a:0e:d0:b9:b6:b1:de:b6: d6:81:e2:fb:94:5a:96:41:1f:86:76:23:c1:d8:85: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:CB:F4:84:FC:0B:C8:05:E1:EE:40:03:A9:64:73:FD:5E:9B:3B X509v3 Authority Key Identifier: keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:82:69:02:1a:44:3d:2d:ef:fe:15:59:ef:ce:be:b4:3b:02: c1:6e:b2:f1:ea:0c:59:09:bd:02:d3:45:a3:5e:d7:ab:8d:db: ac:ae:91:e4:1e:01:6c:8a:0e:e5:41:46:89:65:33:78:93:d9: c5:ac:b0:09:8d:59:0e:f2:cb:87:80:6e:1d:42:91:92:87:b9: cc:6b:38:52:2b:6e:90:18:ef:6a:a4:0e:56:ec:93:e7:5d:41: 0a:7d:11:43:a0:2b:b0:04:10:a2:d7:94:22:4b:39:8f:3b:a2: 06:3b:7d:e5:2a:86:28:cb:7f:b1:89:d0:d2:0b:a2:19:71:1e: 0f:3d:69:74:00:4d:b3:ed:28:8d:0e:68:3c:ad:6d:e9:53:cb: 05:83:98:50:93:e4:8e:c3:bd:2a:2f:d1:c2:22:d0:af:72:74: 52:73:dc:f5:16:0f:55:a4:74:5b:70:8e:84:1e:7f:4a:e7:76: 89:96:31:2c:56:a5:0e:9c:f1:77:73:17:c6:45:e1:6d:f0:b6: 49:fa:8f:43:76:af:11:a9:c8:33:79:d5:38:3b:20:9b:8f:10: 4f:70:56:59:f3:0b:61:ee:d4:ab:91:60:a5:b2:e5:f7:41:18: 1a:06:97:40:88:3f:30:3d:84:24:46:e3:a4:7e:73:d4:f5:ca: e6:97:f4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6qlZRawuW04XQTp1pfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx ZmU5YjAwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhiNTIwY2JmNDg0ZmMwYmM4MDVlMWVlNDAwM2E5NjQ3M2ZkNWU5YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQHPwsGiJaWVwIDFBuo8wH5vWWzo +cTC15RqrLn2zC79U69QoJfLM9Jk3hLbny8Bu8I7nU5+OG/A0aEdmiYccL8MSG4S CZTUOXIBeP0zdRSl0Z0wnR+ZiI9WGkKRbX8BMGtWmjsLKjaX+QahC3HQ1xbn18h3 TolrCwCOxIhH4iVVXhOTcBTa9Iy6OHxrcKt3QPWyx+ODA2I70CrdNzKlxMuVIwd0 sFyV6zyxJ07IONV81d61Depsf/PBkoZ3BN9WtJqVxyhLxSEoNafAGA72Jpd9vm+D nki1wX292OlofIe+0aKFZRz/Gg7Qubax3rbWgeL7lFqWQR+GdiPB2IUnjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUgy/SE/AvIBeHuQAOpZHP9Xps7MB8GA1UdIwQY MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2 LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIJpAhpE PS3v/hVZ786+tDsCwW6y8eoMWQm9AtNFo17Xq43brK6R5B4BbIoO5UFGiWUzeJPZ xaywCY1ZDvLLh4BuHUKRkoe5zGs4UitukBjvaqQOVuyT511BCn0RQ6ArsAQQoteU Iks5jzuiBjt95SqGKMt/sYnQ0guiGXEeDz1pdABNs+0ojQ5oPK1t6VPLBYOYUJPk jsO9Ki/RwiLQr3J0UnPc9RYPVaR0W3COhB5/Sud2iZYxLFalDpzxd3MXxkXhbfC2 SfqPQ3avEanIM3nVODsgm48QT3BWWfMLYe7Uq5FgpbLl90EYGgaXQIg/MD2EJEbj pH5z1PXK5pf0Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:30 2025 by rpki-client