This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json) Hash identifier: z8u81cF+lMtA3YsoIXFDX03BYuVmMNNg09v6TRTY4c4= Subject key identifier: CC:28:7F:68:1C:4C:05:CC:9F:9A:FB:20:E7:85:E4:FE:D1:5B:EA:C9 Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9 Certificate serial: 019B2EFA466BA60A5CE3DF0BA04261B9F71C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 01:01:52 +0000 Manifest this update: Thu 18 Dec 2025 01:01:52 +0000 Manifest next update: Fri 19 Dec 2025 01:01:52 +0000 Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: nLaVY3fWCIK+QJqtMULOkOnRnAUs7G57x1y2laxbo18=) 2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:46:6b:a6:0a:5c:e3:df:0b:a0:42:61:b9:f7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9 Validity Not Before: Dec 18 01:01:52 2025 GMT Not After : Dec 19 01:01:52 2025 GMT Subject: CN=cc287f681c4c05cc9f9afb20e785e4fed15beac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:8e:c0:48:4f:ef:ff:e4:e8:24:ff:0a:0d: 3e:59:28:5c:80:66:dc:ce:5c:f6:24:b3:e2:40:a6: b8:c4:32:b3:27:fd:89:29:50:9f:03:a1:86:2e:6a: 33:d0:e9:72:68:fd:86:09:50:2d:6a:d1:bc:2f:aa: dc:b9:66:ba:75:89:06:f3:48:dd:2a:3b:68:7d:98: 3d:0a:e3:1f:28:ea:77:e5:b1:fb:82:15:4b:59:58: 5e:48:13:3e:9c:ac:7b:63:1c:8d:e3:ad:8f:47:4b: 23:db:52:0c:f2:79:0c:6b:e6:fb:8f:0d:8f:13:25: a8:b2:af:60:dd:39:fe:2a:6b:38:9e:d6:e3:28:53: 73:43:50:55:70:ef:1f:af:ac:1c:a6:08:b4:43:00: eb:dd:c8:9d:9a:eb:31:01:b9:e3:99:eb:9d:39:06: a3:52:49:45:c9:ff:81:2c:c1:fb:14:16:ba:c9:56: eb:f4:06:4f:05:4d:dc:7c:cf:59:e7:10:1b:bb:7b: 08:e3:29:b4:de:53:d0:0b:b0:5f:2d:15:14:c0:bf: c1:96:3b:62:95:80:c3:53:e9:c4:50:16:ce:27:a5: 09:1d:57:5e:37:16:0a:22:c7:c0:a9:a4:f9:22:f1: 2c:1f:b3:47:12:72:88:9f:a4:d2:36:9e:f7:a7:b2: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:28:7F:68:1C:4C:05:CC:9F:9A:FB:20:E7:85:E4:FE:D1:5B:EA:C9 X509v3 Authority Key Identifier: keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e2:7b:0c:86:81:f0:27:0c:78:48:67:b6:fa:0c:85:92:7b: c3:6d:ef:cf:37:9f:a7:05:99:0a:13:b0:2f:93:41:08:8e:9a: 89:a6:46:45:b2:a8:0a:01:1f:35:1d:08:98:62:cd:eb:2a:62: a2:a9:2e:f3:45:ed:92:9f:fb:c5:ff:f7:7a:1c:36:63:d1:58: 9e:fe:70:67:7e:74:a5:83:31:42:e3:3b:57:3f:17:43:cd:5d: b6:4d:72:20:4b:7d:62:c2:22:e7:1c:4b:61:01:3a:71:86:bb: cb:a5:c6:60:65:33:ac:d5:e3:a1:45:e0:a8:b7:fd:df:33:4c: f7:d2:d1:5e:7e:d1:b7:e4:bb:31:eb:14:a3:6f:fb:26:a4:96: 0f:04:33:78:6d:77:16:46:6c:8d:4c:df:de:0e:f3:87:c8:6d: 7b:42:8e:18:15:72:24:ba:d5:89:9b:7f:93:dc:93:c8:81:1f: 2f:98:e6:03:c2:65:fa:b4:4a:c8:cc:8f:12:ae:18:2b:61:f9: 9f:21:a7:b9:bd:55:21:0d:4a:c5:6b:3a:1e:c4:b8:60:11:96: 5c:26:87:a9:a0:bb:4c:e0:d3:46:8e:ab:2a:ae:8a:24:9a:4f: 9c:81:b1:82:38:a8:d8:fb:1b:81:71:c6:60:6e:10:87:0d:4a: 1a:ef:66:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+kZrpgpc498LoEJhufccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw NjMxYjkwHhcNMjUxMjE4MDEwMTUyWhcNMjUxMjE5MDEwMTUyWjAzMTEwLwYDVQQD EyhjYzI4N2Y2ODFjNGMwNWNjOWY5YWZiMjBlNzg1ZTRmZWQxNWJlYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM+OwEhP7//k6CT/Cg0+WShcgGbc zlz2JLPiQKa4xDKzJ/2JKVCfA6GGLmoz0OlyaP2GCVAtatG8L6rcuWa6dYkG80jd KjtofZg9CuMfKOp35bH7ghVLWVheSBM+nKx7YxyN462PR0sj21IM8nkMa+b7jw2P EyWosq9g3Tn+Kms4ntbjKFNzQ1BVcO8fr6wcpgi0QwDr3cidmusxAbnjmeudOQaj UklFyf+BLMH7FBa6yVbr9AZPBU3cfM9Z5xAbu3sI4ym03lPQC7BfLRUUwL/Bljti lYDDU+nEUBbOJ6UJHVdeNxYKIsfAqaT5IvEsH7NHEnKIn6TSNp73p7KjKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwof2gcTAXMn5r7IOeF5P7RW+rJMB8GA1UdIwQY MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeJ7DIaB 8CcMeEhntvoMhZJ7w23vzzefpwWZChOwL5NBCI6aiaZGRbKoCgEfNR0ImGLN6ypi oqku80Xtkp/7xf/3ehw2Y9FYnv5wZ350pYMxQuM7Vz8XQ81dtk1yIEt9YsIi5xxL YQE6cYa7y6XGYGUzrNXjoUXgqLf93zNM99LRXn7Rt+S7MesUo2/7JqSWDwQzeG13 FkZsjUzf3g7zh8hte0KOGBVyJLrViZt/k9yTyIEfL5jmA8Jl+rRKyMyPEq4YK2H5 nyGnub1VIQ1KxWs6HsS4YBGWXCaHqaC7TODTRo6rKq6KJJpPnIGxgjio2PsbgXHG YG4Qhw1KGu9mtw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:58 2025 by rpki-client