This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json) Hash identifier: vrv85KTKvv98U6syt8lgeMExb0sGF1s5AAARohWHPGs= Subject key identifier: 99:96:F3:E6:D3:DA:55:97:70:67:02:90:BF:74:6C:38:2A:6A:47:D5 Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019AF31CB5926A245EF6C25BDA485E28C5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft Manifest number: 0247 Signing time: Sat 06 Dec 2025 10:02:16 +0000 Manifest this update: Sat 06 Dec 2025 10:02:16 +0000 Manifest next update: Sun 07 Dec 2025 10:02:16 +0000 Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: 5fKJb6/f6MzG0Q0cVYUUMq+e/rwI9x4/McAdi/KzZh0=) 2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b5:92:6a:24:5e:f6:c2:5b:da:48:5e:28:c5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Dec 6 10:02:16 2025 GMT Not After : Dec 7 10:02:16 2025 GMT Subject: CN=9996f3e6d3da559770670290bf746c382a6a47d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:28:9a:c3:c4:03:ea:93:36:21:38:8a:6b:24: 86:da:31:b6:8e:23:f2:ab:58:7e:71:be:86:18:f2: 0a:42:e1:85:ee:4a:c3:a9:99:d2:7c:c8:4a:a6:8c: 0d:b0:db:a1:e8:8b:cf:09:1d:83:2b:7a:39:8a:3a: 6c:e0:95:6c:92:ef:13:a3:e6:0f:5c:23:80:53:7f: b7:77:81:34:2f:e8:3d:26:df:08:85:34:70:05:ac: 15:1c:d6:ce:d2:fb:10:8d:05:b8:01:8b:71:6f:83: d1:92:1e:25:0c:db:f4:17:19:3c:22:7a:32:b6:45: 0b:b5:f9:26:a1:c3:7e:ef:dd:91:d2:60:ff:b4:4f: 29:0a:48:81:4d:93:3f:bd:7d:aa:c1:58:00:73:15: 25:6e:e8:9b:6a:12:83:80:52:07:ed:c6:ab:77:30: 93:26:04:37:09:2a:dc:3f:fb:c2:9a:8b:f2:18:5b: c9:65:92:c4:ea:1f:e6:fb:a2:1d:fd:62:94:ee:a5: fb:2f:d4:83:fe:18:ce:50:7c:f9:df:e4:ee:e9:f4: 16:97:d5:b6:d3:f1:6d:6e:97:63:79:1e:ce:24:9a: 3f:d4:f1:b4:22:1e:32:38:84:a2:ab:dd:92:c4:7a: 3c:81:a9:bc:93:ed:ed:5a:57:e0:1d:c1:7b:a8:6e: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:96:F3:E6:D3:DA:55:97:70:67:02:90:BF:74:6C:38:2A:6A:47:D5 X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bd:96:35:1f:dc:ea:d1:b3:16:d3:e8:b4:48:cb:57:e0:8f: 04:85:2b:13:3d:6b:4e:97:ba:18:c2:ff:39:c9:1a:16:87:5a: 4e:86:62:3c:c6:7f:03:40:81:b1:3b:d2:aa:a5:f2:81:22:99: f3:31:95:23:9a:d8:6e:a4:18:3f:3e:d3:03:c7:69:d1:16:67: 04:b2:47:96:f2:14:79:70:78:f4:24:e9:2a:3d:60:53:e9:fe: 4f:d6:6b:f4:8a:2a:42:9f:53:69:a9:a9:22:f2:fc:05:bf:f4: 69:9c:4e:2e:d2:ca:b8:38:d7:20:30:bb:86:6b:c0:f4:42:88: b3:49:52:ff:7a:b6:a9:f7:3b:fd:5e:45:9a:9e:b6:9d:f9:07: de:61:45:3a:3b:57:d2:59:c4:6f:82:0c:9f:16:ab:9f:1c:46: 42:af:5f:bb:6a:87:c7:4e:97:f8:f8:6a:e7:06:5a:e2:bb:a3: 80:59:59:4d:08:00:00:44:1f:8f:ae:3e:05:40:d5:80:75:e7: c9:98:89:00:92:4b:6c:66:88:08:8d:59:0b:e6:60:17:35:36: b1:71:b1:35:92:09:ea:e5:5d:d3:e6:47:36:2c:f8:4b:2d:91: 63:c4:26:69:f8:12:37:4d:07:a3:f8:b2:b7:92:ad:39:2c:46: 09:4f:e0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLWSaiRe9sJb2kheKMXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjUxMjA2MTAwMjE2WhcNMjUxMjA3MTAwMjE2WjAzMTEwLwYDVQQD Eyg5OTk2ZjNlNmQzZGE1NTk3NzA2NzAyOTBiZjc0NmMzODJhNmE0N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiiaw8QD6pM2ITiKaySG2jG2jiPy q1h+cb6GGPIKQuGF7krDqZnSfMhKpowNsNuh6IvPCR2DK3o5ijps4JVsku8To+YP XCOAU3+3d4E0L+g9Jt8IhTRwBawVHNbO0vsQjQW4AYtxb4PRkh4lDNv0Fxk8Inoy tkULtfkmocN+792R0mD/tE8pCkiBTZM/vX2qwVgAcxUlbuibahKDgFIH7cardzCT JgQ3CSrcP/vCmovyGFvJZZLE6h/m+6Id/WKU7qX7L9SD/hjOUHz53+Tu6fQWl9W2 0/FtbpdjeR7OJJo/1PG0Ih4yOISiq92SxHo8gam8k+3tWlfgHcF7qG5fZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmW8+bT2lWXcGcCkL90bDgqakfVMB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqr2WNR/c 6tGzFtPotEjLV+CPBIUrEz1rTpe6GML/OckaFodaToZiPMZ/A0CBsTvSqqXygSKZ 8zGVI5rYbqQYPz7TA8dp0RZnBLJHlvIUeXB49CTpKj1gU+n+T9Zr9IoqQp9Taamp IvL8Bb/0aZxOLtLKuDjXIDC7hmvA9EKIs0lS/3q2qfc7/V5Fmp62nfkH3mFFOjtX 0lnEb4IMnxarnxxGQq9fu2qHx06X+Phq5wZa4rujgFlZTQgAAEQfj64+BUDVgHXn yZiJAJJLbGaICI1ZC+ZgFzU2sXGxNZIJ6uVd0+ZHNiz4Sy2RY8QmafgSN00Ho/iy t5KtOSxGCU/g/w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:54 2025 by rpki-client