This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json) Hash identifier: XADtAfoSmMmg/kYADuU8Ii3/LH43MRRHlL0J6hXHKpQ= Subject key identifier: 0F:F5:F8:61:81:C4:F4:D9:DA:C6:90:F7:1D:16:13:67:F7:73:76:08 Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Certificate serial: 019AF38922D1D86BFB75A6777D97571C47FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: +8Pw6UEpBiortiixaSzjE4CoYO46psgVa5VRVO/wiLM=) 2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=) 3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=) 4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:22:d1:d8:6b:fb:75:a6:77:7d:97:57:1c:47:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949 Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=0ff5f86181c4f4d9dac690f71d161367f7737608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:33:3f:ca:ae:3b:12:1d:2e:ff:7f:de:0d: b2:ab:94:07:20:be:70:f9:d0:01:5c:27:4c:fe:f4: 3c:8e:12:c3:6c:e0:ac:51:89:db:98:82:e3:b0:ad: bd:51:97:e9:7d:db:bf:b6:7e:5e:23:89:17:2c:16: 6d:1a:d6:3e:40:5f:26:94:be:17:97:f1:ed:81:7b: 90:02:87:11:a8:a5:0c:86:ec:4f:c6:82:dc:9c:10: 3a:3d:7b:eb:b7:83:ab:24:ca:4c:3c:2d:b2:d6:86: 28:09:98:6c:f2:b7:8d:db:c2:67:fa:0f:cd:23:94: 40:cb:04:0f:22:50:28:06:00:eb:dc:b6:b1:d2:7c: 3c:d1:de:4a:a0:a5:ca:a3:52:60:17:1b:53:0c:46: 8f:86:5c:17:28:92:a7:ea:13:0d:b6:84:84:a3:62: a1:ad:9e:8c:d4:27:d0:89:98:ba:71:3c:15:5e:b9: dd:5b:ce:62:4c:fd:5b:fa:9e:e3:96:ae:68:13:43: 91:53:11:b5:eb:1c:70:54:bc:4a:40:be:35:b9:aa: c5:bb:c6:5b:5a:96:12:b1:a0:34:55:3e:f3:b4:89: 37:a1:36:80:81:4e:1a:4d:73:29:6b:db:3b:8e:81: 3a:3a:57:30:ab:48:8c:fb:83:2b:71:f9:ea:3a:8e: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:F8:61:81:C4:F4:D9:DA:C6:90:F7:1D:16:13:67:F7:73:76:08 X509v3 Authority Key Identifier: keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:53:21:c3:d0:5f:cc:71:a7:58:1c:23:d0:d2:9d:46:f0:2d: e9:b3:ce:8d:26:95:a7:6c:e7:d0:66:dd:d6:b0:ca:01:d1:b5: fa:48:5c:29:19:b7:2e:76:09:db:4e:82:e2:b6:55:57:6f:50: 95:c2:13:bc:ff:83:7c:78:a4:8a:8b:6c:e2:29:77:f5:f1:d5: 7e:97:7b:0b:37:ca:6b:9a:5c:d8:08:61:d3:62:89:1d:3f:42: 29:f2:e9:76:c3:c4:88:a6:75:c9:88:f9:2e:e0:6b:18:45:fb: bb:b1:f7:e0:37:9f:71:d8:ee:f0:4e:66:b1:0e:5d:8e:47:05: 7d:e5:5b:bf:1a:a7:ce:d0:34:fc:a7:57:58:6b:d7:36:5b:9c: 19:46:4c:cb:32:d8:29:6a:78:ca:05:f4:ec:2d:ac:ee:70:be: 42:11:b8:50:0b:9a:ad:75:49:f9:46:15:4c:ae:a7:b0:6d:31: 9e:a3:5b:1d:a2:18:7a:14:78:3b:3c:37:4a:81:4c:30:36:97: c4:11:1a:d6:c1:fa:6d:16:5e:ed:14:21:c5:04:7c:0c:37:dc: fa:79:12:9a:11:68:fa:06:ad:ab:86:6c:8d:72:de:b1:70:8f: 3f:61:42:28:38:4f:b5:0a:6b:5b:37:09:64:c4:78:67:37:a9: 57:fb:2b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSLR2Gv7daZ3fZdXHEf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2 OWM5NDkwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EygwZmY1Zjg2MTgxYzRmNGQ5ZGFjNjkwZjcxZDE2MTM2N2Y3NzM3NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe0zP8quOxIdLv9/3g2yq5QHIL5w +dABXCdM/vQ8jhLDbOCsUYnbmILjsK29UZfpfdu/tn5eI4kXLBZtGtY+QF8mlL4X l/HtgXuQAocRqKUMhuxPxoLcnBA6PXvrt4OrJMpMPC2y1oYoCZhs8reN28Jn+g/N I5RAywQPIlAoBgDr3Lax0nw80d5KoKXKo1JgFxtTDEaPhlwXKJKn6hMNtoSEo2Kh rZ6M1CfQiZi6cTwVXrndW85iTP1b+p7jlq5oE0ORUxG16xxwVLxKQL41uarFu8Zb WpYSsaA0VT7ztIk3oTaAgU4aTXMpa9s7joE6Olcwq0iM+4MrcfnqOo7SpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/1+GGBxPTZ2saQ9x0WE2f3c3YIMB8GA1UdIwQY MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0 LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3lMhw9Bf zHGnWBwj0NKdRvAt6bPOjSaVp2zn0Gbd1rDKAdG1+khcKRm3LnYJ206C4rZVV29Q lcITvP+DfHikiots4il39fHVfpd7CzfKa5pc2Ahh02KJHT9CKfLpdsPEiKZ1yYj5 LuBrGEX7u7H34Defcdju8E5msQ5djkcFfeVbvxqnztA0/KdXWGvXNlucGUZMyzLY KWp4ygX07C2s7nC+QhG4UAuarXVJ+UYVTK6nsG0xnqNbHaIYehR4Ozw3SoFMMDaX xBEa1sH6bRZe7RQhxQR8DDfc+nkSmhFo+gatq4ZsjXLesXCPP2FCKDhPtQprWzcJ ZMR4ZzepV/srPg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:44 2025 by rpki-client