This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json) Hash identifier: 5KaN4dKZSeGfPBPdBP4W7SNUGELuombErb29BHLsEAk= Subject key identifier: 39:D8:D8:72:5C:8F:D4:83:67:C9:AF:02:13:19:D1:BA:12:C6:6E:A2 Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9 Certificate serial: 019AF12EAF9FD67A66B22D8CB0FD0F6999CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: GDR5/Kqh4oGlCLFKOj18pC8m9SSH+5baCmKT8pxKOmQ=) 2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:af:9f:d6:7a:66:b2:2d:8c:b0:fd:0f:69:99:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=39d8d8725c8fd48367c9af021319d1ba12c66ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:02:d8:56:93:24:a0:5c:b1:8c:af:fb:98: 1a:20:7b:2f:c7:63:6b:72:15:3f:10:71:5b:b7:90: 58:09:fd:a4:97:7a:3c:f6:7c:54:02:93:0f:5e:2b: 48:9d:17:c7:cd:53:ab:0b:f4:57:cd:db:7e:ff:6a: 69:7a:2e:59:74:16:85:fc:42:11:bc:07:83:51:72: b3:76:8e:6b:53:d6:10:96:1f:f0:55:73:99:cc:75: 87:5f:1c:04:9f:70:f7:02:9c:ba:4a:21:d0:d1:61: 9b:25:4e:bb:49:ae:ae:01:e6:0f:e8:14:83:f0:a1: c5:3d:7c:d1:11:31:5c:07:f7:f0:97:b8:45:5c:2f: a9:5f:00:54:6a:3c:6d:4f:b9:a6:f1:4d:9f:60:03: e7:a1:d1:03:2d:86:7c:40:52:47:7c:aa:46:e0:08: 7a:be:89:84:ef:a9:02:c1:06:8a:07:47:7a:65:ff: 1d:e1:64:28:f1:f9:2d:95:fc:23:a8:40:25:7f:ce: e9:2b:11:9a:62:a4:29:9e:3e:f2:55:ed:3a:22:c5: f2:b4:aa:97:10:24:e5:9d:e5:a4:31:61:18:59:2d: 97:7c:1d:36:0f:ad:21:b9:c3:91:a7:93:81:0d:2b: f1:74:7c:97:a7:bb:09:cb:13:5d:91:62:21:d0:1c: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:D8:72:5C:8F:D4:83:67:C9:AF:02:13:19:D1:BA:12:C6:6E:A2 X509v3 Authority Key Identifier: keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c6:b3:1d:5f:96:a7:b8:5b:40:cd:8e:92:bf:1c:99:57:60: 2e:04:59:8a:c6:d9:28:71:ff:13:96:c9:60:90:cf:13:15:e8: bf:50:99:3e:61:32:6b:66:01:90:ce:c6:d0:85:93:68:77:73: 9d:f6:52:fc:7b:c3:4c:98:31:0d:35:5a:97:0b:37:fe:b2:97: 6e:28:ae:67:c3:e9:6c:fe:7d:31:f3:a6:fb:11:04:84:d6:4f: fd:dc:47:d7:cd:0a:84:21:f2:47:4f:16:f7:07:7f:c4:45:23: a2:1f:8a:a7:e6:dd:dc:be:1d:97:9e:1e:4e:d7:4a:fd:97:3b: 33:a1:0b:fd:9e:f9:02:40:06:65:ae:47:39:59:b1:87:7f:7c: 05:66:e7:8b:3f:13:16:7e:c5:53:41:b8:65:63:d9:43:af:5f: 2d:5f:b3:64:f2:87:a0:cc:fc:b6:f4:36:78:78:5d:a6:ae:e6: c7:50:d6:0f:f9:ca:b6:bc:fb:86:0c:9f:01:2b:3d:c0:4f:4c: be:8b:77:0e:32:e8:43:16:b8:48:a2:49:82:10:da:9b:2b:f8: 5e:2b:e3:c7:6f:8f:8e:f2:4c:00:50:0e:c5:92:7e:bc:98:2a: 8f:c8:c0:71:28:34:9e:fc:22:8e:a8:ad:7a:9f:d9:69:99:45: c3:e0:d7:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq+f1npmsi2MsP0PaZnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw NjMxYjkwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EygzOWQ4ZDg3MjVjOGZkNDgzNjdjOWFmMDIxMzE5ZDFiYTEyYzY2ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hsC2FaTJKBcsYyv+5gaIHsvx2Nr chU/EHFbt5BYCf2kl3o89nxUApMPXitInRfHzVOrC/RXzdt+/2ppei5ZdBaF/EIR vAeDUXKzdo5rU9YQlh/wVXOZzHWHXxwEn3D3Apy6SiHQ0WGbJU67Sa6uAeYP6BSD 8KHFPXzRETFcB/fwl7hFXC+pXwBUajxtT7mm8U2fYAPnodEDLYZ8QFJHfKpG4Ah6 vomE76kCwQaKB0d6Zf8d4WQo8fktlfwjqEAlf87pKxGaYqQpnj7yVe06IsXytKqX ECTlneWkMWEYWS2XfB02D60hucORp5OBDSvxdHyXp7sJyxNdkWIh0ByTfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnY2HJcj9SDZ8mvAhMZ0boSxm6iMB8GA1UdIwQY MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMazHV+W p7hbQM2Okr8cmVdgLgRZisbZKHH/E5bJYJDPExXov1CZPmEya2YBkM7G0IWTaHdz nfZS/HvDTJgxDTValws3/rKXbiiuZ8PpbP59MfOm+xEEhNZP/dxH180KhCHyR08W 9wd/xEUjoh+Kp+bd3L4dl54eTtdK/Zc7M6EL/Z75AkAGZa5HOVmxh398BWbniz8T Fn7FU0G4ZWPZQ69fLV+zZPKHoMz8tvQ2eHhdpq7mx1DWD/nKtrz7hgyfASs9wE9M vot3DjLoQxa4SKJJghDamyv4Xivjx2+PjvJMAFAOxZJ+vJgqj8jAcSg0nvwijqit ep/ZaZlFw+DXIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:01 2025 by rpki-client