This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json) Hash identifier: wFdrwEhfYMZUOjSoavzVAy8Fp2Q7VujsUdcc8nlZegk= Subject key identifier: 81:C4:4B:B8:66:79:BC:25:36:57:4F:DD:F4:FB:81:97:F6:80:9F:1E Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Certificate serial: 019AF12DC32EA8BA5A12EE3121F9B4726C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft Manifest number: 078C Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: DMC53Y40RAWYphwBEOES95GUlvlFzmk8ddo029tL7kA=) 2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c3:2e:a8:ba:5a:12:ee:31:21:f9:b4:72:6c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=81c44bb86679bc2536574fddf4fb8197f6809f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:4d:02:9d:1f:72:97:e3:8f:63:31:f0:c1: b0:75:88:29:91:85:8b:92:6c:d0:70:63:c7:0f:e9: 67:2f:e6:24:b6:f7:3b:e5:59:58:05:27:bd:46:63: 0a:32:e8:52:46:02:d5:e2:e0:75:db:41:8a:80:f6: 1f:98:3a:2c:4e:63:0a:8e:48:10:dd:52:ee:38:2c: ce:f6:33:2a:c9:e3:6b:28:d0:c0:8e:9a:39:2a:f8: 94:88:92:8e:1b:fa:61:84:0e:ea:28:bd:80:d6:de: ed:ea:07:85:3d:13:54:48:37:4b:72:81:85:ce:7b: d3:fa:de:1b:21:1f:0b:2b:54:be:d5:6c:b4:bf:8d: 5e:42:11:04:f2:d1:5b:ba:e7:b4:26:10:dc:90:66: bf:c1:f1:4c:44:4d:de:4b:98:b1:01:87:cb:c4:d6: 66:a7:a6:3a:c6:6e:c6:26:26:e2:1d:12:e0:86:f8: 6c:ed:12:a0:44:5c:e1:68:76:fd:63:3f:52:6b:4a: 19:53:3f:da:52:56:2f:de:e4:db:6e:05:33:99:29: af:45:a5:3b:3a:d1:4e:67:40:9e:af:9b:8c:32:5b: 5a:a0:af:e1:cb:2b:0e:64:b2:3a:45:6f:84:e8:50: 50:17:df:47:04:e8:8b:e8:e8:b1:86:7c:ee:27:1e: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C4:4B:B8:66:79:BC:25:36:57:4F:DD:F4:FB:81:97:F6:80:9F:1E X509v3 Authority Key Identifier: keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7a:0a:d1:61:2e:19:9e:3a:f2:b1:c1:c8:c5:36:b4:51:30: 6b:cf:f3:6f:60:2b:be:9f:10:02:6b:c6:c1:6a:ea:3f:1b:7e: 16:cb:db:ec:f9:0b:c1:03:2a:ab:97:11:89:52:83:12:1d:e9: a4:f3:9b:89:3b:51:8d:2a:7e:54:5d:f0:86:42:7b:56:f1:46: 38:20:4e:92:68:ca:ba:7e:44:a3:ad:df:23:ec:ed:b4:6a:2a: 02:f3:6e:ca:c7:9f:37:7b:76:01:ac:5c:93:15:f0:78:2c:a4: 3c:c3:ff:4e:0c:29:57:99:b1:8c:84:36:83:f0:c6:15:98:0a: d9:56:e2:d2:7f:c3:13:27:56:04:4b:e7:cf:41:52:2d:f1:d3: 6c:d3:6c:54:19:b0:ec:9e:f7:f1:98:10:df:fd:82:5c:07:c4: 43:42:1e:35:17:2a:99:52:e4:bb:e3:96:e5:a3:00:e0:4e:cd: 92:43:cf:0a:9b:60:1c:f5:e3:54:40:bf:bf:71:27:6d:de:f9: e6:8b:17:07:94:54:1d:82:f5:92:b1:c8:36:ff:20:de:a1:53: 25:fd:19:db:70:6e:1b:3b:3c:92:db:81:3f:ba:7f:7e:16:78: c9:94:c2:07:3e:e1:28:22:3e:0c:d7:77:c6:25:df:56:c5:ab: 7f:18:90:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcMuqLpaEu4xIfm0cmwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5 ZTViZTAwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD Eyg4MWM0NGJiODY2NzliYzI1MzY1NzRmZGRmNGZiODE5N2Y2ODA5ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dNAp0fcpfjj2Mx8MGwdYgpkYWL kmzQcGPHD+lnL+Yktvc75VlYBSe9RmMKMuhSRgLV4uB120GKgPYfmDosTmMKjkgQ 3VLuOCzO9jMqyeNrKNDAjpo5KviUiJKOG/phhA7qKL2A1t7t6geFPRNUSDdLcoGF znvT+t4bIR8LK1S+1Wy0v41eQhEE8tFbuue0JhDckGa/wfFMRE3eS5ixAYfLxNZm p6Y6xm7GJibiHRLghvhs7RKgRFzhaHb9Yz9Sa0oZUz/aUlYv3uTbbgUzmSmvRaU7 OtFOZ0Cer5uMMltaoK/hyysOZLI6RW+E6FBQF99HBOiL6OixhnzuJx6RXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHES7hmebwlNldP3fT7gZf2gJ8eMB8GA1UdIwQY MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt OTNiNTc4ZDE4YzhjLzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnoK0WEu GZ468rHByMU2tFEwa8/zb2Arvp8QAmvGwWrqPxt+Fsvb7PkLwQMqq5cRiVKDEh3p pPObiTtRjSp+VF3whkJ7VvFGOCBOkmjKun5Eo63fI+zttGoqAvNuysefN3t2Aaxc kxXweCykPMP/TgwpV5mxjIQ2g/DGFZgK2Vbi0n/DEydWBEvnz0FSLfHTbNNsVBmw 7J738ZgQ3/2CXAfEQ0IeNRcqmVLku+OW5aMA4E7NkkPPCptgHPXjVEC/v3Enbd75 5osXB5RUHYL1krHINv8g3qFTJf0Z23BuGzs8ktuBP7p/fhZ4yZTCBz7hKCI+DNd3 xiXfVsWrfxiQyA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:14 2025 by rpki-client