This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json) Hash identifier: gYHDJ1PivGGhbckVDZ5eOSIenY3OJwdkqlz5XAT8ek4= Subject key identifier: B6:80:C6:39:80:1A:F2:BE:30:BF:3B:2F:AC:17:62:1F:D0:A7:58:8B Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Certificate serial: 019AF1D1F1EED7198303C614B72F26BD7357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft Manifest number: 13E7 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: QFzbJgu5/nw7KNUfbCMVrsEruIF3DTVDWqgm0hxdxEw=) 2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f1:ee:d7:19:83:03:c6:14:b7:2f:26:bd:73:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=b680c639801af2be30bf3b2fac17621fd0a7588b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:10:06:c0:c4:0b:34:a6:c7:16:8b:a7:b4: 0a:9a:73:52:d7:ae:1f:70:3d:56:21:b6:4b:26:dd: 3a:b3:c7:f5:c9:8a:a5:62:f4:01:1f:93:c2:5c:6e: a9:10:0e:e4:bb:41:b4:5c:89:a8:db:c7:7f:14:4f: 80:60:06:40:9c:23:17:b1:fa:7c:17:da:90:5e:12: e4:68:2c:63:ad:ef:d9:0e:4c:e3:b2:05:07:1e:e8: fd:8b:25:10:17:c6:62:da:9e:60:e5:51:8b:09:43: 5d:b4:3d:2b:a5:24:ae:d3:c5:25:06:08:a5:b4:c0: a0:ce:5f:b8:2b:6c:92:65:7b:1c:56:bf:0f:af:06: 13:a9:69:27:fa:74:b0:6a:6b:bc:7e:f2:fc:8a:53: aa:95:d5:19:e5:be:3e:6a:27:d6:7a:94:b1:23:ad: fc:77:8e:48:28:89:27:d4:7d:72:ee:ab:ed:36:dc: f3:57:1d:d0:1b:16:3e:d1:c0:88:a5:05:be:c0:4a: e5:2c:0f:7c:22:66:53:2a:c8:ba:31:20:19:65:bb: 38:77:05:5f:08:56:38:72:31:1f:af:36:43:e0:be: f4:be:0d:b2:32:2b:cc:35:44:f9:6f:00:47:59:c9: d5:56:0d:08:62:51:24:72:b9:e6:00:95:be:3b:d6: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:80:C6:39:80:1A:F2:BE:30:BF:3B:2F:AC:17:62:1F:D0:A7:58:8B X509v3 Authority Key Identifier: keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a3:74:fc:d6:26:bf:46:d1:5e:c2:0f:4c:6a:48:ec:1f:f7: 2a:1c:8c:e8:4c:e6:4c:d3:be:a9:96:96:93:96:f6:33:8e:aa: ca:52:ea:91:78:17:6d:12:7f:21:07:01:f4:9c:4a:38:06:14: d7:8c:9f:cf:d4:f6:3b:96:52:3e:ee:4a:74:f8:52:f9:a5:bf: dc:97:b9:5f:b7:08:54:fb:68:74:a6:2d:4a:06:bf:f5:75:bb: 67:df:09:12:8f:d3:a2:e7:49:30:ee:d7:8f:c2:37:69:ac:c8: 9c:35:c6:bc:69:e2:25:76:22:61:de:2d:64:5f:b0:9c:8c:67: 92:0e:62:ff:e5:75:3d:d9:b8:8d:04:89:ac:66:6e:a3:29:c7: 89:dc:43:7f:05:5a:ed:e0:d1:0c:4e:b4:88:8b:c5:8d:04:a7: 36:0b:80:46:6e:37:04:30:8f:c5:d3:ea:56:2a:99:50:36:b7: 72:be:d4:49:f8:a6:63:38:ad:10:64:5f:3e:a3:d2:1a:99:cb: cc:bd:99:82:fc:3a:11:83:36:61:8f:7d:b5:07:bc:a4:cd:a8: 66:c3:a2:57:c4:e9:fa:80:da:35:aa:18:8a:69:1e:29:48:65: 7f:fd:1e:77:c2:d2:b9:d8:62:b9:50:cc:ae:4f:27:5b:e8:ad: e4:7f:dc:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fHu1xmDA8YUty8mvXNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj ZjRhOTcwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EyhiNjgwYzYzOTgwMWFmMmJlMzBiZjNiMmZhYzE3NjIxZmQwYTc1ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7AQBsDECzSmxxaLp7QKmnNS164f cD1WIbZLJt06s8f1yYqlYvQBH5PCXG6pEA7ku0G0XImo28d/FE+AYAZAnCMXsfp8 F9qQXhLkaCxjre/ZDkzjsgUHHuj9iyUQF8Zi2p5g5VGLCUNdtD0rpSSu08UlBgil tMCgzl+4K2ySZXscVr8PrwYTqWkn+nSwamu8fvL8ilOqldUZ5b4+aifWepSxI638 d45IKIkn1H1y7qvtNtzzVx3QGxY+0cCIpQW+wErlLA98ImZTKsi6MSAZZbs4dwVf CFY4cjEfrzZD4L70vg2yMivMNUT5bwBHWcnVVg0IYlEkcrnmAJW+O9b4IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaAxjmAGvK+ML87L6wXYh/Qp1iLMB8GA1UdIwQY MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt MGJmNTM5YjNiNzE0LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0 LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaN0/NYm v0bRXsIPTGpI7B/3KhyM6EzmTNO+qZaWk5b2M46qylLqkXgXbRJ/IQcB9JxKOAYU 14yfz9T2O5ZSPu5KdPhS+aW/3Je5X7cIVPtodKYtSga/9XW7Z98JEo/ToudJMO7X j8I3aazInDXGvGniJXYiYd4tZF+wnIxnkg5i/+V1Pdm4jQSJrGZuoynHidxDfwVa 7eDRDE60iIvFjQSnNguARm43BDCPxdPqViqZUDa3cr7USfimYzitEGRfPqPSGpnL zL2Zgvw6EYM2YY99tQe8pM2oZsOiV8Tp+oDaNaoYimkeKUhlf/0ed8LSudhiuVDM rk8nW+it5H/c6A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:35 2025 by rpki-client