This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json) Hash identifier: d07WcXfuDvw66ZPm5jeQXXosVQU1wEuloJgQ3inMpbg= Subject key identifier: F9:88:D0:3C:5F:2A:8E:DF:BB:05:F8:D1:6A:59:84:2D:A1:2D:18:91 Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Certificate serial: 019AF1D22687BEF536C1DFAD07ABDB12F2F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: 7ludZ0TvmrF4XH2nzyh7QaYIZuztV6zsgZ83eqdMXXk=) 2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:26:87:be:f5:36:c1:df:ad:07:ab:db:12:f2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=f988d03c5f2a8edfbb05f8d16a59842da12d1891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:8f:0c:ce:62:d2:c7:36:ca:50:f1:39:86: d5:7d:b8:c0:d5:b8:2c:cb:ee:cd:df:bf:df:0a:62: cf:70:b8:8e:db:cd:3a:33:02:35:4d:f9:40:ad:e5: 5d:77:3e:f2:0c:36:ef:31:c6:fa:22:9a:91:ef:b1: 2c:4c:90:11:da:5f:df:26:29:34:0b:39:aa:36:78: e3:a3:df:8d:8c:b0:56:25:8c:e9:f3:3a:7a:fa:88: 47:9c:a9:7e:5a:c1:7e:d4:2d:4b:34:d0:bc:13:e6: e6:c7:ba:50:c9:53:de:0c:14:91:82:ba:a5:18:16: 09:70:5f:dd:a3:2a:b5:75:7e:21:f2:1a:b3:01:dd: e4:f8:ab:f6:86:87:c0:c6:8d:d3:83:36:2a:53:af: 32:92:98:63:e2:c7:f1:ba:44:b1:4e:de:07:d0:0e: 10:f0:ca:1a:17:40:4e:db:d4:fe:a2:bd:9a:14:2f: 59:1d:04:cb:f3:6c:cd:40:3b:a6:9d:3a:a2:49:72: 79:14:2f:81:5a:83:89:3a:82:fd:8a:72:ec:db:f4: a2:8b:ec:1c:78:d8:df:4a:65:cd:8d:08:b7:1f:e4: fa:40:f3:0d:87:da:f7:7f:46:8d:d4:e8:58:7a:8a: 82:7e:7f:fe:bb:19:c5:3c:b2:c1:d1:70:37:2e:5d: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:D0:3C:5F:2A:8E:DF:BB:05:F8:D1:6A:59:84:2D:A1:2D:18:91 X509v3 Authority Key Identifier: keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8a:2a:39:1d:ee:6d:03:d3:b5:b8:e5:ce:a4:78:61:97:b9: 79:ab:4f:59:78:88:79:90:e5:56:b7:cf:19:06:2d:ec:66:3c: 11:fc:60:ce:5f:eb:52:58:82:a1:a3:3a:04:4e:bc:84:bd:f2: 54:fd:7d:7e:38:f0:f1:a1:9e:19:73:84:e1:ea:72:46:79:35: 1a:3c:87:33:ab:eb:01:da:ba:d6:54:68:66:c2:af:0f:d8:a1: 6b:d2:1b:8f:e9:bd:5a:d4:67:6e:b2:f2:47:3e:ce:ea:b6:50: e0:a3:5d:5d:3e:38:6a:42:60:26:13:13:f3:a1:f2:98:d7:39: 01:c8:5f:a2:7d:74:b6:b8:8e:d6:75:2a:75:8e:b6:30:4f:a6: 75:c2:12:c7:ce:0a:76:c2:0d:fc:37:60:bf:e1:c3:5f:52:fb: f0:ad:4f:1f:bd:e7:4d:49:09:71:73:1a:d1:13:ca:06:a2:ad: 2c:c0:e1:ef:99:a6:6d:f7:fd:e6:a0:84:9a:29:64:68:d0:ba: 1b:7d:e0:02:2f:35:aa:06:68:fb:a8:af:bc:28:d6:de:8f:eb: 41:b4:00:8c:9f:e7:00:01:6b:92:6d:06:d6:0b:7e:77:42:d3: e6:41:aa:22:ea:5d:a2:5e:27:16:42:4e:30:59:e3:56:90:62: e0:6a:ed:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iaHvvU2wd+tB6vbEvLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh OGFlMzYwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhmOTg4ZDAzYzVmMmE4ZWRmYmIwNWY4ZDE2YTU5ODQyZGExMmQxODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOuPDM5i0sc2ylDxOYbVfbjA1bgs y+7N37/fCmLPcLiO2806MwI1TflAreVddz7yDDbvMcb6IpqR77EsTJAR2l/fJik0 CzmqNnjjo9+NjLBWJYzp8zp6+ohHnKl+WsF+1C1LNNC8E+bmx7pQyVPeDBSRgrql GBYJcF/doyq1dX4h8hqzAd3k+Kv2hofAxo3TgzYqU68ykphj4sfxukSxTt4H0A4Q 8MoaF0BO29T+or2aFC9ZHQTL82zNQDumnTqiSXJ5FC+BWoOJOoL9inLs2/Sii+wc eNjfSmXNjQi3H+T6QPMNh9r3f0aN1OhYeoqCfn/+uxnFPLLB0XA3Ll1L0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmI0DxfKo7fuwX40WpZhC2hLRiRMB8GA1UdIwQY MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApooqOR3u bQPTtbjlzqR4YZe5eatPWXiIeZDlVrfPGQYt7GY8Efxgzl/rUliCoaM6BE68hL3y VP19fjjw8aGeGXOE4epyRnk1GjyHM6vrAdq61lRoZsKvD9iha9Ibj+m9WtRnbrLy Rz7O6rZQ4KNdXT44akJgJhMT86HymNc5Achfon10triO1nUqdY62ME+mdcISx84K dsIN/Ddgv+HDX1L78K1PH73nTUkJcXMa0RPKBqKtLMDh75mmbff95qCEmilkaNC6 G33gAi81qgZo+6ivvCjW3o/rQbQAjJ/nAAFrkm0G1gt+d0LT5kGqIupdol4nFkJO MFnjVpBi4Grtug== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:20 2025 by rpki-client