This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json) Hash identifier: L5rEuZEnU+FFDSr8B9T5LHvfNQlp28fJt4m7r9bTud8= Subject key identifier: 69:49:7D:4B:F9:BE:8F:FB:EA:7F:8C:1E:A0:4E:FD:E2:5C:98:7E:2D Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f Certificate serial: 019AF23FC6FA5F12352BD03ECB8A00FA0149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft Manifest number: 50 Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: vbHvF/wi94JO/qCZQC7kW5wvUh0Swsh8bXd6OdFxW1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c6:fa:5f:12:35:2b:d0:3e:cb:8a:00:fa:01:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=69497d4bf9be8ffbea7f8c1ea04efde25c987e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:1d:e4:9b:0f:a0:da:1d:d2:9b:b7:f8:31: 68:8a:72:fa:34:d0:f8:52:7a:85:90:73:58:17:ea: e1:a0:2b:83:07:eb:41:c5:6a:ed:2d:db:72:df:f0: 77:c7:80:c5:8e:fc:90:2d:b3:3a:ba:d6:78:1f:26: ee:4d:8c:d4:da:68:8e:e1:6c:43:00:43:19:fa:06: 24:5b:19:f5:d5:9b:6d:1d:f8:b7:6b:51:f2:71:0c: df:ee:9d:c7:7e:66:ae:bd:4e:95:80:fc:25:71:37: 89:61:63:53:46:98:5e:52:6e:b2:c7:23:f4:40:b3: c7:eb:c9:32:23:0b:d9:9d:14:3e:12:70:f9:f2:8e: 71:ca:a9:a4:b0:10:60:da:b0:0a:69:56:54:19:d4: a0:e1:4f:ca:6e:ca:64:11:98:44:ec:cd:6b:1c:ff: 4f:18:cd:1d:31:d2:0c:60:e5:9d:f4:e5:cf:a1:8f: 4e:c8:1a:2e:5f:23:53:6c:c2:73:8f:84:81:f5:3b: c1:fc:df:db:f8:95:f5:ef:bb:0f:54:93:ab:21:e6: f6:e5:47:d3:2a:73:4d:cc:e6:8b:7a:9f:27:3d:35: a5:96:48:b0:22:32:de:83:b8:cb:ec:a2:f7:50:4e: 3e:77:37:29:9f:de:33:46:99:c2:01:fd:f9:cf:a1: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:49:7D:4B:F9:BE:8F:FB:EA:7F:8C:1E:A0:4E:FD:E2:5C:98:7E:2D X509v3 Authority Key Identifier: keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5d:13:c5:a0:48:50:de:aa:bf:da:63:f2:52:57:21:bb:c9: 95:a3:80:21:19:00:02:f7:3b:cf:55:da:8f:13:fc:41:e6:92: 08:8e:31:dc:57:17:88:24:03:23:3b:b4:87:11:2b:1c:82:f5: 82:47:32:f0:df:56:2c:04:e6:d3:58:af:75:81:c7:0d:d9:b8: 2c:cf:ea:b3:02:d7:59:dc:a8:a3:ff:5d:b0:aa:a9:19:6e:34: ee:d4:47:70:eb:7f:da:8f:c9:2a:d8:10:df:2f:ff:4b:ef:de: fa:4a:a1:70:b5:9c:c8:ac:2b:23:20:dd:cb:3a:07:37:28:b4: 2c:84:0c:f3:6e:74:2e:74:f6:a8:7b:5f:eb:78:4f:e7:1a:0a: c5:cb:ac:6e:3a:97:aa:12:df:af:6e:08:cb:fc:97:fd:a4:d2: 6b:f5:e3:2d:e2:cc:9e:e0:20:9e:48:36:bd:94:56:81:40:3e: 69:20:05:08:ec:fe:46:08:98:36:da:33:99:38:ac:5c:d0:43: 13:71:65:03:cb:2e:15:ee:b3:68:18:79:75:ae:b3:43:3c:84: 7f:44:79:40:42:b4:ec:45:82:50:e4:f1:d9:74:26:b5:76:9f: e4:d3:bb:71:ad:9c:58:57:41:5d:3b:17:32:c4:87:3f:0d:cb: 8a:2b:06:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8b6XxI1K9A+y4oA+gFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzY0OWI2NmExOWRhMmZlYzIzNmIwNDlkZDEyMmEwZWYz NjhiMGYwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD Eyg2OTQ5N2Q0YmY5YmU4ZmZiZWE3ZjhjMWVhMDRlZmRlMjVjOTg3ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+kd5JsPoNod0pu3+DFoinL6NND4 UnqFkHNYF+rhoCuDB+tBxWrtLdty3/B3x4DFjvyQLbM6utZ4HybuTYzU2miO4WxD AEMZ+gYkWxn11ZttHfi3a1HycQzf7p3HfmauvU6VgPwlcTeJYWNTRpheUm6yxyP0 QLPH68kyIwvZnRQ+EnD58o5xyqmksBBg2rAKaVZUGdSg4U/KbspkEZhE7M1rHP9P GM0dMdIMYOWd9OXPoY9OyBouXyNTbMJzj4SB9TvB/N/b+JX177sPVJOrIeb25UfT KnNNzOaLep8nPTWllkiwIjLeg7jL7KL3UE4+dzcpn94zRpnCAf35z6GDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlJfUv5vo/76n+MHqBO/eJcmH4tMB8GA1UdIwQY MBaAFODGSbZqGdov7CNrBJ3RIqDvNosPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMt OGY1NDQ4NDdiZTc0LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMtOGY1NDQ4NDdiZTc0 LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF0TxaBI UN6qv9pj8lJXIbvJlaOAIRkAAvc7z1XajxP8QeaSCI4x3FcXiCQDIzu0hxErHIL1 gkcy8N9WLATm01ivdYHHDdm4LM/qswLXWdyoo/9dsKqpGW407tRHcOt/2o/JKtgQ 3y//S+/e+kqhcLWcyKwrIyDdyzoHNyi0LIQM8250LnT2qHtf63hP5xoKxcusbjqX qhLfr24Iy/yX/aTSa/XjLeLMnuAgnkg2vZRWgUA+aSAFCOz+RgiYNtozmTisXNBD E3FlA8suFe6zaBh5da6zQzyEf0R5QEK07EWCUOTx2XQmtXaf5NO7ca2cWFdBXTsX MsSHPw3LiisGmw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:22 2025 by rpki-client