This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json) Hash identifier: eHayDZscXgTu1WeRMQMNvd/OVTy+FHVldklDhAydG5c= Subject key identifier: 42:67:6E:D0:C8:22:7C:97:78:36:91:65:C3:8A:58:0C:14:58:C6:1E Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98 Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498 Certificate serial: 019AF208BDD9B8F1ECF1EA81867A95B9226F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: TDlzxPf4QCXtBm1vfqDgsLt0UHzXyq0WB2dG1N4vViw=) 2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bd:d9:b8:f1:ec:f1:ea:81:86:7a:95:b9:22:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=42676ed0c8227c9778369165c38a580c1458c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:9d:0c:a7:70:2d:bd:2a:6e:45:c7:d7:7e: 51:ef:3e:ba:49:8e:35:30:ed:30:ae:cf:ad:d9:68: 2e:a5:eb:ee:73:01:d8:17:1d:af:8b:e1:79:32:64: 57:d7:25:07:b6:a7:eb:02:8b:60:38:b3:96:18:e0: d2:f0:01:08:52:71:58:82:63:e5:34:0f:5a:0c:0f: 9c:a5:0a:d2:1b:95:2b:47:89:1f:66:d6:ae:0f:b0: 47:0f:aa:49:16:0c:2f:dc:a1:fd:76:81:be:8a:47: 95:e0:69:37:ae:97:78:7d:04:80:bd:b0:82:13:08: 44:6b:3f:87:0d:a8:88:3d:38:4b:ee:61:91:f7:9d: 88:e0:2a:e2:dd:fd:ee:9d:98:81:fa:23:a4:85:ab: 26:20:32:80:bd:b1:a0:15:8e:d6:b5:ee:89:3a:4c: b1:fe:94:32:5b:3d:76:f2:75:45:d2:85:1b:88:ae: dd:92:5b:b6:42:94:57:d9:78:2b:b5:91:58:95:23: ad:f6:e6:de:8b:86:9d:d5:fb:0f:a2:25:f6:d9:df: 36:f2:84:b5:b6:49:fb:f2:c4:36:01:85:ff:a5:89: 83:fc:44:02:aa:14:d8:8d:7c:ee:96:99:b2:fc:42: 2b:f1:b7:fc:87:e5:2f:b8:48:92:7e:92:c0:f9:4c: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:67:6E:D0:C8:22:7C:97:78:36:91:65:C3:8A:58:0C:14:58:C6:1E X509v3 Authority Key Identifier: keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:83:6a:6f:86:50:6f:c4:f5:84:7f:6e:56:9c:b1:43:c2: da:0e:f3:b3:44:73:f8:da:dd:0e:bf:68:2d:e4:a7:61:d7:6f: 16:d7:56:0c:7e:0e:59:48:3b:9a:e6:0a:aa:38:8f:72:c1:85: 49:c0:ca:aa:a7:0b:a3:3a:a9:f3:db:e4:0d:2a:1f:48:71:9d: 59:58:27:01:c5:f2:43:c8:c8:97:66:ca:28:5f:a4:ca:90:18: aa:76:07:66:a9:4d:5e:f0:e0:be:5f:5a:65:c3:57:07:92:14: c1:33:a2:01:38:20:d7:3a:94:d6:5e:ee:0f:29:fd:2d:56:1f: 21:b6:93:b0:49:5e:ab:71:a5:d6:9a:10:20:bd:57:4b:f2:4a: ca:68:df:52:52:e2:a3:37:11:52:5d:de:dd:ad:0e:a5:87:05: 61:dd:18:57:c4:ff:c8:42:a7:c8:ef:0f:ce:98:9b:9a:72:3c: dc:60:aa:bc:9e:85:ef:5c:cc:a0:1b:ad:fe:33:7d:69:3e:e1: e9:cb:16:f4:c9:30:4d:2a:0f:e6:a1:ad:ba:f1:08:01:80:3a: 94:66:5d:36:1f:3f:78:d8:b9:c6:74:cb:1f:76:21:ee:5e:43: 0b:fc:bc:af:23:53:a0:61:81:ce:90:c8:9a:36:7f:9e:d8:58: 41:cc:78:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL3ZuPHs8eqBhnqVuSJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGYyNjRmYTRhNGM5MGRjYjRhOTljY2NlYzUwYzU1MDhm NDQ0OTgwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg0MjY3NmVkMGM4MjI3Yzk3NzgzNjkxNjVjMzhhNTgwYzE0NThjNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHWdDKdwLb0qbkXH135R7z66SY41 MO0wrs+t2WgupevucwHYFx2vi+F5MmRX1yUHtqfrAotgOLOWGODS8AEIUnFYgmPl NA9aDA+cpQrSG5UrR4kfZtauD7BHD6pJFgwv3KH9doG+ikeV4Gk3rpd4fQSAvbCC EwhEaz+HDaiIPThL7mGR952I4Cri3f3unZiB+iOkhasmIDKAvbGgFY7Wte6JOkyx /pQyWz128nVF0oUbiK7dklu2QpRX2XgrtZFYlSOt9ubei4ad1fsPoiX22d828oS1 tkn78sQ2AYX/pYmD/EQCqhTYjXzulpmy/EIr8bf8h+UvuEiSfpLA+UxovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJnbtDIInyXeDaRZcOKWAwUWMYeMB8GA1UdIwQY MBaAFOFPJk+kpMkNy0qZzM7FDFUI9ESYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1Mjct MTM5MDQzNzQ5YzQ4LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1MjctMTM5MDQzNzQ5YzQ4 LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaiDam+G UG/E9YR/blacsUPC2g7zs0Rz+NrdDr9oLeSnYddvFtdWDH4OWUg7muYKqjiPcsGF ScDKqqcLozqp89vkDSofSHGdWVgnAcXyQ8jIl2bKKF+kypAYqnYHZqlNXvDgvl9a ZcNXB5IUwTOiATgg1zqU1l7uDyn9LVYfIbaTsEleq3Gl1poQIL1XS/JKymjfUlLi ozcRUl3e3a0OpYcFYd0YV8T/yEKnyO8PzpibmnI83GCqvJ6F71zMoBut/jN9aT7h 6csW9MkwTSoP5qGtuvEIAYA6lGZdNh8/eNi5xnTLH3Yh7l5DC/y8ryNToGGBzpDI mjZ/nthYQcx4dg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:31 2025 by rpki-client