This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json) Hash identifier: gYIrBP5bJTPq2e0oS6cusVdakBsn0q10O/f01BoB9RI= Subject key identifier: 2B:35:56:2D:38:07:9C:4F:F7:DE:AB:BA:D8:B9:9A:01:F2:7B:01:CA Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Certificate serial: 019B2D78B0ADCC3A7C2512AE134E4775694D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 18:00:42 +0000 Manifest this update: Wed 17 Dec 2025 18:00:42 +0000 Manifest next update: Thu 18 Dec 2025 18:00:42 +0000 Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: 3o+y7A/GLVX5Xsb8mzlCQVaqsuwqP1I5HbrmtJkmlrI=) 2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=) 3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=) 4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:b0:ad:cc:3a:7c:25:12:ae:13:4e:47:75:69:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Validity Not Before: Dec 17 18:00:42 2025 GMT Not After : Dec 18 18:00:42 2025 GMT Subject: CN=2b35562d38079c4ff7deabbad8b99a01f27b01ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:ec:9b:25:4d:c7:7b:24:3d:30:32:74:0a: c1:d2:c2:f3:10:3c:fc:cf:bb:1b:ac:b2:76:f6:15: f0:87:6e:69:8b:c8:47:e6:88:f2:2a:73:98:68:ed: e6:15:fa:17:bf:41:8f:b3:59:78:6a:ae:4e:21:1e: 7d:44:fc:34:ff:2a:e0:e2:c7:c5:35:dd:58:d6:a3: a7:07:ee:39:62:91:ab:40:15:83:d3:ef:15:ae:0e: d1:48:f7:ae:2d:0d:c4:81:4d:2e:be:b2:6b:00:87: 11:c5:79:2a:cc:cb:47:90:4d:6f:dd:68:14:37:33: be:f9:f8:6b:e6:2c:1d:c6:be:41:88:a9:c3:16:36: 95:d4:c4:18:95:2e:cf:f3:c4:8a:e7:18:1d:99:fb: d6:e0:96:a9:bc:98:03:28:a8:d7:e1:66:59:ef:35: 57:b8:fe:0e:04:b7:48:b8:43:5e:be:1a:5b:4e:82: 4c:23:fc:93:2c:cc:57:73:0c:ff:8d:41:43:17:8b: 17:a6:33:72:fc:dd:7f:6c:c2:3d:80:04:f2:a7:30: e9:be:d9:1a:60:f4:3d:81:1d:d5:bb:39:9f:9f:d8: b4:6c:39:1e:bf:a5:eb:ff:75:70:e9:fd:ff:f3:0a: 70:84:18:34:1a:8a:76:19:7f:27:64:e2:1e:54:cd: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:35:56:2D:38:07:9C:4F:F7:DE:AB:BA:D8:B9:9A:01:F2:7B:01:CA X509v3 Authority Key Identifier: keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:db:26:13:45:8b:3c:eb:e5:70:8e:89:77:e0:72:44:08:b3: f6:44:29:00:05:4e:80:0e:fb:42:5f:dc:1b:6b:12:66:42:a2: da:e5:cc:36:75:eb:0e:f9:3b:2a:20:36:44:67:5c:4d:8e:0a: 8c:e7:32:06:82:a6:06:e1:69:db:d2:20:18:bb:57:30:e6:2e: 42:41:02:4c:4f:e9:7d:47:e9:f3:4e:75:fb:a2:af:2a:50:90: bb:41:79:b1:77:72:fd:f8:49:fc:bb:33:be:44:fd:b5:5d:9b: 2f:d9:b5:1c:75:2e:e6:ae:f2:90:e5:dd:29:e7:70:7b:47:12: 53:eb:be:31:3f:33:8a:bc:d3:d2:8a:2e:28:d2:83:e9:f9:0e: 88:89:85:01:19:d5:c9:68:98:76:cf:59:aa:8a:0c:3c:bf:fa: 5f:d4:8d:1a:6f:90:40:3b:ad:54:34:5c:81:86:3c:af:25:b2: fe:a0:54:43:66:ea:36:d6:a7:3a:16:72:23:b9:84:44:b5:98: e6:ff:47:b7:2c:eb:b9:60:45:96:19:8c:e4:76:28:cb:5d:5e: 10:6a:4e:bc:99:3d:cd:e8:22:e9:f4:dd:69:2f:3d:11:2e:f1: 7d:ad:a8:2c:84:86:b4:f0:84:84:9c:48:73:f9:af:9c:93:64: 12:0f:f2:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteLCtzDp8JRKuE05HdWlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2 OWM5NDkwHhcNMjUxMjE3MTgwMDQyWhcNMjUxMjE4MTgwMDQyWjAzMTEwLwYDVQQD EygyYjM1NTYyZDM4MDc5YzRmZjdkZWFiYmFkOGI5OWEwMWYyN2IwMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb3smyVNx3skPTAydArB0sLzEDz8 z7sbrLJ29hXwh25pi8hH5ojyKnOYaO3mFfoXv0GPs1l4aq5OIR59RPw0/yrg4sfF Nd1Y1qOnB+45YpGrQBWD0+8Vrg7RSPeuLQ3EgU0uvrJrAIcRxXkqzMtHkE1v3WgU NzO++fhr5iwdxr5BiKnDFjaV1MQYlS7P88SK5xgdmfvW4JapvJgDKKjX4WZZ7zVX uP4OBLdIuENevhpbToJMI/yTLMxXcwz/jUFDF4sXpjNy/N1/bMI9gATypzDpvtka YPQ9gR3Vuzmfn9i0bDkev6Xr/3Vw6f3/8wpwhBg0Gop2GX8nZOIeVM07MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs1Vi04B5xP996ruti5mgHyewHKMB8GA1UdIwQY MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0 LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNsmE0WL POvlcI6Jd+ByRAiz9kQpAAVOgA77Ql/cG2sSZkKi2uXMNnXrDvk7KiA2RGdcTY4K jOcyBoKmBuFp29IgGLtXMOYuQkECTE/pfUfp8051+6KvKlCQu0F5sXdy/fhJ/Lsz vkT9tV2bL9m1HHUu5q7ykOXdKedwe0cSU+u+MT8zirzT0oouKNKD6fkOiImFARnV yWiYds9ZqooMPL/6X9SNGm+QQDutVDRcgYY8ryWy/qBUQ2bqNtanOhZyI7mERLWY 5v9HtyzruWBFlhmM5HYoy11eEGpOvJk9zegi6fTdaS89ES7xfa2oLISGtPCEhJxI c/mvnJNkEg/ysQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:39 2025 by rpki-client