This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json) Hash identifier: he8NhrbdDCBQoIg6RPUwwq4qsQC5FIlsf5IVheew/Z8= Subject key identifier: CC:46:91:25:79:EE:01:65:6B:00:71:19:AC:A3:9F:D6:9C:A2:1C:AF Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8 Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8 Certificate serial: 019AF68A3ECB2A3639804DA5DDCF71957DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft Manifest number: 033E Signing time: Sun 07 Dec 2025 02:00:46 +0000 Manifest this update: Sun 07 Dec 2025 02:00:46 +0000 Manifest next update: Mon 08 Dec 2025 02:00:46 +0000 Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=) 2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: O7/3BuabQ2DuKYYjUaPTDpz/Dxo+cozGV1qP5hWor8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:3e:cb:2a:36:39:80:4d:a5:dd:cf:71:95:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8 Validity Not Before: Dec 7 02:00:46 2025 GMT Not After : Dec 8 02:00:46 2025 GMT Subject: CN=cc46912579ee01656b007119aca39fd69ca21caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:87:fb:95:d8:aa:ee:53:38:ef:43:05:1d: ce:c7:10:fd:b3:01:9d:54:15:12:f2:70:ce:35:c9: b3:fb:6a:f4:11:c5:f2:7c:d9:7f:30:76:c6:cf:19: 83:af:ff:18:7d:f8:f2:36:89:db:75:8c:74:2a:59: 84:8f:38:ff:73:59:81:ca:44:d7:25:46:97:6b:ee: c9:88:c5:77:ca:b3:bd:24:08:38:ba:18:50:1b:d2: 5f:9d:82:30:e3:2f:0a:9d:f0:c5:5a:eb:3b:3c:f9: c8:fd:67:bb:13:b1:f2:dc:0c:5c:1b:27:14:cc:7b: 90:80:bf:15:65:f8:1e:94:a4:e7:76:16:8f:b4:c5: 63:6c:4f:35:7b:ea:77:d3:15:23:88:a2:0f:c9:db: 07:c3:83:84:19:75:7f:aa:be:56:3c:22:fd:1a:74: 37:e3:c5:ad:40:37:f5:7c:ec:c3:5c:6d:9f:81:a9: e7:9e:43:ad:00:1a:3b:62:4b:94:86:52:cc:98:5d: b1:38:ab:dd:32:ba:42:47:0f:51:a0:9d:72:5d:68: 56:54:e9:fe:26:11:f2:b4:65:a0:81:7d:8d:d3:e8: f9:35:07:2f:36:ce:31:d9:03:21:23:16:f4:95:4e: 46:27:ab:a6:d9:f2:59:2a:03:c8:94:83:d5:a6:f6: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:91:25:79:EE:01:65:6B:00:71:19:AC:A3:9F:D6:9C:A2:1C:AF X509v3 Authority Key Identifier: keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d6:82:9e:45:b0:d9:89:7b:07:bc:d3:04:00:63:8f:cc:7e: 65:13:43:38:1a:6f:a2:9c:96:87:4c:1d:3a:92:a0:78:e9:22: 12:02:a2:d3:ca:5d:d2:19:36:c2:dd:7b:58:89:f1:09:0b:29: b2:14:a5:c2:17:01:2e:5b:2c:d4:39:3a:f4:64:7d:38:bb:97: 2b:f7:2f:11:f4:b8:cf:03:b3:7a:84:7a:18:6b:4d:f5:4b:a2: e9:b7:bd:cc:c7:00:db:fe:d8:6e:70:94:44:ab:e3:87:c4:52: 38:a7:14:7e:da:3c:f2:32:1d:d0:58:90:c7:af:fc:c2:9b:a9: f1:c5:a4:e5:fc:b4:ba:bb:f1:fe:03:3f:38:0c:99:3c:97:77: 5c:e1:d5:b4:ce:4d:95:d9:fd:0e:e1:ce:90:96:fc:e7:59:cc: 87:e2:9f:2e:e5:65:bc:bb:2e:c5:67:73:8b:bf:ef:26:8b:45: 0b:1f:02:25:41:1f:5d:f3:57:8e:ff:c8:6e:d1:21:b5:40:0e: 2d:94:92:3c:99:87:e0:c9:62:b3:32:08:53:c2:0b:49:72:47: 41:c8:c0:d1:52:f4:08:7c:0e:62:3f:71:2b:3c:84:e8:dd:e9: ee:98:43:27:cc:a0:a0:98:19:fc:89:f6:53:d6:dc:c2:fb:f8: b8:37:a7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ij7LKjY5gE2l3c9xlX39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODEzNzg3NWRhZmZlMDE4ZmEzOGFkNDNjYzY4YTFmYWIz MzVlZjgwHhcNMjUxMjA3MDIwMDQ2WhcNMjUxMjA4MDIwMDQ2WjAzMTEwLwYDVQQD EyhjYzQ2OTEyNTc5ZWUwMTY1NmIwMDcxMTlhY2EzOWZkNjljYTIxY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr+H+5XYqu5TOO9DBR3OxxD9swGd VBUS8nDONcmz+2r0EcXyfNl/MHbGzxmDr/8YffjyNonbdYx0KlmEjzj/c1mBykTX JUaXa+7JiMV3yrO9JAg4uhhQG9JfnYIw4y8KnfDFWus7PPnI/We7E7Hy3AxcGycU zHuQgL8VZfgelKTndhaPtMVjbE81e+p30xUjiKIPydsHw4OEGXV/qr5WPCL9GnQ3 48WtQDf1fOzDXG2fgannnkOtABo7YkuUhlLMmF2xOKvdMrpCRw9RoJ1yXWhWVOn+ JhHytGWggX2N0+j5NQcvNs4x2QMhIxb0lU5GJ6um2fJZKgPIlIPVpvaj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxGkSV57gFlawBxGayjn9acohyvMB8GA1UdIwQY MBaAFG+BN4ddr/4Bj6OK1DzGih+rM174MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjIt ODg4OWVmMTMxZDg5LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjItODg4OWVmMTMxZDg5 LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNaCnkWw 2Yl7B7zTBABjj8x+ZRNDOBpvopyWh0wdOpKgeOkiEgKi08pd0hk2wt17WInxCQsp shSlwhcBLlss1Dk69GR9OLuXK/cvEfS4zwOzeoR6GGtN9Uui6be9zMcA2/7YbnCU RKvjh8RSOKcUfto88jId0FiQx6/8wpup8cWk5fy0urvx/gM/OAyZPJd3XOHVtM5N ldn9DuHOkJb851nMh+KfLuVlvLsuxWdzi7/vJotFCx8CJUEfXfNXjv/IbtEhtUAO LZSSPJmH4MliszIIU8ILSXJHQcjA0VL0CHwOYj9xKzyE6N3p7phDJ8ygoJgZ/In2 U9bcwvv4uDennQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:10 2025 by rpki-client