This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json) Hash identifier: 3RP5JXUuUo5v5I4LhJ0Sf72bLHBYYZ77KHEz5BbsCrc= Subject key identifier: A2:31:6A:1F:22:97:67:B5:CF:13:67:38:7F:F2:0A:5E:F0:5B:2C:7A Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278 Certificate serial: 019AF2768C908CBAABE6D705409F3CF8B4C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft Manifest number: 04AD Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: BXZMpyIvG1t0rfSRingwso4FvO3sVb9KesRDDEN8SpU=) 2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8c:90:8c:ba:ab:e6:d7:05:40:9f:3c:f8:b4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38049be801a136e387abc14498e486044d96278 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=a2316a1f229767b5cf1367387ff20a5ef05b2c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:bd:b9:56:e4:4d:8a:a7:2f:37:63:22:65: 3a:d1:cd:27:84:a5:f4:36:46:da:14:ac:75:51:b7: 65:40:f6:12:dd:1b:cc:23:ae:c2:dc:94:06:2a:69: d8:c6:71:23:b1:6e:76:b7:e8:d8:c4:39:75:2f:09: 23:eb:b6:e0:27:1f:f9:26:51:48:45:21:28:fc:9d: 86:cb:e9:6c:26:10:85:7d:c0:35:55:52:37:9e:c1: 1b:c0:07:93:aa:74:4f:4c:6d:57:fe:63:96:d7:b0: bf:e0:95:b5:2c:f3:58:4b:36:a0:90:1f:17:7d:17: 6d:59:69:7b:d0:89:a6:6c:65:21:b7:da:c5:f9:68: 93:8e:0c:65:2d:39:45:ef:0e:e8:51:7e:05:17:b1: db:95:b2:66:0e:e0:ba:0f:56:3a:90:b7:7d:64:46: 56:5b:f4:b6:dc:63:5a:8b:19:56:5e:c5:91:88:26: 96:c2:a5:c1:9f:50:03:19:a4:39:16:c2:fa:5d:6a: f9:65:d4:4a:62:3c:4d:c8:a2:36:e9:ce:4a:75:41: a3:de:1b:50:0f:62:26:55:51:b4:a4:ab:0e:ef:d4: 2e:4e:db:5e:de:54:ea:73:16:c3:d5:45:d3:3e:fe: 21:98:d9:d2:20:3c:c2:3c:d6:b1:85:d0:7e:f3:20: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:6A:1F:22:97:67:B5:CF:13:67:38:7F:F2:0A:5E:F0:5B:2C:7A X509v3 Authority Key Identifier: keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:05:5b:27:ff:fb:91:b1:8f:9b:b1:a6:45:e9:a6:84:75:06: 95:1f:72:f9:e3:05:23:f8:d7:00:1b:57:d3:45:06:bf:c5:82: 98:ad:67:09:8b:53:dc:92:fc:b8:c0:35:75:7f:55:2c:50:ec: 16:79:c9:2f:aa:4d:a6:70:71:96:29:66:42:05:2e:a3:fb:eb: 13:a2:ae:7e:1a:e7:70:0c:17:23:c6:65:28:d1:e0:81:0d:2a: 52:25:07:3c:f3:f0:ea:c3:61:07:a7:a1:a8:dc:a0:82:63:ab: b7:62:6c:b8:09:dd:2a:8a:7c:1a:19:48:77:13:ec:e3:36:14: d3:37:d3:b4:bd:21:36:81:c8:85:37:4b:d8:5b:e5:f6:dc:49: 56:82:36:3d:9e:e9:36:7e:c1:35:b7:b6:1a:af:ab:ad:4a:6d: a3:d5:83:e6:4b:2f:65:59:2d:f8:95:98:32:3d:8f:08:69:7b: a2:84:4c:9b:54:07:c0:31:ae:9b:0e:3e:48:d9:1e:3a:4a:5f: 1f:23:e3:87:35:bc:9c:02:42:59:fb:15:53:76:8a:bb:7c:4e: 5f:35:99:b4:b7:62:77:03:42:31:4e:f0:b6:cc:9c:18:a3:c9: ec:27:87:79:10:58:dd:10:bc:fd:b0:f0:8b:ab:46:33:b6:4d: 20:c4:89:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoyQjLqr5tcFQJ88+LTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk OTYyNzgwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EyhhMjMxNmExZjIyOTc2N2I1Y2YxMzY3Mzg3ZmYyMGE1ZWYwNWIyYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgS9uVbkTYqnLzdjImU60c0nhKX0 NkbaFKx1UbdlQPYS3RvMI67C3JQGKmnYxnEjsW52t+jYxDl1Lwkj67bgJx/5JlFI RSEo/J2Gy+lsJhCFfcA1VVI3nsEbwAeTqnRPTG1X/mOW17C/4JW1LPNYSzagkB8X fRdtWWl70ImmbGUht9rF+WiTjgxlLTlF7w7oUX4FF7HblbJmDuC6D1Y6kLd9ZEZW W/S23GNaixlWXsWRiCaWwqXBn1ADGaQ5FsL6XWr5ZdRKYjxNyKI26c5KdUGj3htQ D2ImVVG0pKsO79QuTtte3lTqcxbD1UXTPv4hmNnSIDzCPNaxhdB+8yBfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIxah8il2e1zxNnOH/yCl7wWyx6MB8GA1UdIwQY MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt MjhmNGRhZDM3OGZjLzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQVbJ//7 kbGPm7GmRemmhHUGlR9y+eMFI/jXABtX00UGv8WCmK1nCYtT3JL8uMA1dX9VLFDs FnnJL6pNpnBxlilmQgUuo/vrE6KufhrncAwXI8ZlKNHggQ0qUiUHPPPw6sNhB6eh qNyggmOrt2JsuAndKop8GhlIdxPs4zYU0zfTtL0hNoHIhTdL2Fvl9txJVoI2PZ7p Nn7BNbe2Gq+rrUpto9WD5ksvZVkt+JWYMj2PCGl7ooRMm1QHwDGumw4+SNkeOkpf HyPjhzW8nAJCWfsVU3aKu3xOXzWZtLdidwNCMU7wtsycGKPJ7CeHeRBY3RC8/bDw i6tGM7ZNIMSJxA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:44 2025 by rpki-client