This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft File: 4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json) Hash identifier: 8M4Z2kWxXTgExoGXk/xkHelNzfLB2WF00zYjpn/JRQs= Subject key identifier: 03:34:3B:7D:C3:AD:C5:38:43:6E:6A:79:37:9C:CB:58:E2:84:FB:BF Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B Certificate issuer: /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b Certificate serial: 019B23D0FFC53A038A0A2951967A258B6757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 21:00:58 +0000 Manifest this update: Mon 15 Dec 2025 21:00:58 +0000 Manifest next update: Tue 16 Dec 2025 21:00:58 +0000 Files and hashes: 1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: Rf2Q+FQuoFP13RNEcniqBwuf5fjYPnUGf0CHUKiUh8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:ff:c5:3a:03:8a:0a:29:51:96:7a:25:8b:67:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b Validity Not Before: Dec 15 21:00:58 2025 GMT Not After : Dec 16 21:00:58 2025 GMT Subject: CN=03343b7dc3adc538436e6a79379ccb58e284fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:5d:78:98:bf:d1:d3:7b:ef:63:63:d4:c6: 7d:04:44:21:10:cc:30:33:b6:bf:06:89:1f:c8:72: ad:34:dd:35:d7:46:fd:53:24:20:1e:ca:70:ed:17: de:24:85:0a:da:cd:5c:a9:5e:11:61:00:c3:1a:78: 47:c6:bb:24:b4:6b:73:8b:25:53:1a:4d:bc:dd:38: e3:cf:98:65:97:a0:cf:89:67:b4:9b:4b:be:2a:9f: 22:8a:91:87:66:06:50:29:9c:a5:c4:36:39:be:a3: 59:3f:31:a2:7d:00:da:c0:06:06:44:ca:a3:67:b7: 0c:14:cc:d4:3f:66:38:69:04:c6:6e:57:3f:a0:a4: 02:21:a4:17:7e:ff:ba:4f:7d:44:ff:08:b7:61:5f: 5b:d5:83:31:d3:e8:3f:f6:59:47:f0:ef:26:90:3c: 2e:c4:f9:e6:a6:86:19:43:1f:12:a4:18:69:4b:4e: 55:cb:bf:d7:97:d3:46:f9:73:26:a0:25:b4:58:f8: dc:6d:ed:6e:90:fb:1e:13:53:82:53:64:8f:b4:f7: 96:b2:5f:fc:d5:51:26:d1:ac:7c:d9:a3:e4:4c:34: 44:5a:12:6a:20:65:40:cc:c3:8c:a4:15:84:e7:c9: ab:50:09:04:26:cd:c6:40:2e:8f:a7:43:fc:d1:56: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:3B:7D:C3:AD:C5:38:43:6E:6A:79:37:9C:CB:58:E2:84:FB:BF X509v3 Authority Key Identifier: keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d2:2d:a4:1e:78:54:38:0f:d3:89:cf:d0:69:f4:34:89:78: 44:c6:2a:39:cf:e2:cc:3d:4f:6d:cc:85:3e:b1:29:ae:70:a7: 7c:9d:46:21:e4:11:47:e7:92:02:30:e8:39:1a:57:64:85:46: 50:92:19:84:9e:1d:ef:73:37:32:58:29:f4:63:3b:92:45:d4: b9:ea:1d:2b:16:c2:53:4f:0b:26:56:78:20:16:ba:24:24:81: 47:c9:9e:cf:8a:d1:7b:33:b1:85:ee:d9:9d:34:9b:e6:4d:fb: ec:29:f9:14:eb:13:fb:3a:83:5c:67:a0:c0:99:06:a2:bb:da: ef:81:af:d1:7e:92:78:c7:86:93:37:94:c2:fd:86:45:ff:1e: f8:ce:e1:a6:64:76:2d:02:ea:e7:06:1e:61:ac:7d:df:03:2d: 03:0a:fe:16:66:58:60:cd:50:28:8e:58:2b:87:c4:0e:a2:9a: f3:07:c0:b1:79:bf:ef:e1:b4:0c:82:2d:09:7e:7c:fc:d7:be: f4:9f:c2:ec:20:32:c3:4f:82:7e:1d:f4:f1:27:d9:b7:12:d9: 11:b5:34:a9:a7:65:d7:3c:bf:bb:33:5a:05:10:51:87:c6:74: 37:87:93:d7:34:39:db:ed:21:ea:22:e2:dd:58:aa:9b:d3:1d: 44:70:a0:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0P/FOgOKCilRlnoli2dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWRiZGRjYTU4MTY2OTdhZDEyNDVjMDBjYWI3NmFmMjFl YzJlM2IwHhcNMjUxMjE1MjEwMDU4WhcNMjUxMjE2MjEwMDU4WjAzMTEwLwYDVQQD EygwMzM0M2I3ZGMzYWRjNTM4NDM2ZTZhNzkzNzljY2I1OGUyODRmYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEVdeJi/0dN772Nj1MZ9BEQhEMww M7a/BokfyHKtNN0110b9UyQgHspw7RfeJIUK2s1cqV4RYQDDGnhHxrsktGtziyVT Gk283Tjjz5hll6DPiWe0m0u+Kp8iipGHZgZQKZylxDY5vqNZPzGifQDawAYGRMqj Z7cMFMzUP2Y4aQTGblc/oKQCIaQXfv+6T31E/wi3YV9b1YMx0+g/9llH8O8mkDwu xPnmpoYZQx8SpBhpS05Vy7/Xl9NG+XMmoCW0WPjcbe1ukPseE1OCU2SPtPeWsl/8 1VEm0ax82aPkTDREWhJqIGVAzMOMpBWE58mrUAkEJs3GQC6Pp0P80Vb6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM0O33DrcU4Q25qeTecy1jihPu/MB8GA1UdIwQY MBaAFOFdvdylgWaXrRJFwAyrdq8h7C47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEt NmIyYjcyYzI1ZWQxLzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEtNmIyYjcyYzI1ZWQx LzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdItpB54 VDgP04nP0Gn0NIl4RMYqOc/izD1PbcyFPrEprnCnfJ1GIeQRR+eSAjDoORpXZIVG UJIZhJ4d73M3Mlgp9GM7kkXUueodKxbCU08LJlZ4IBa6JCSBR8mez4rRezOxhe7Z nTSb5k377Cn5FOsT+zqDXGegwJkGorva74Gv0X6SeMeGkzeUwv2GRf8e+M7hpmR2 LQLq5wYeYax93wMtAwr+FmZYYM1QKI5YK4fEDqKa8wfAsXm/7+G0DIItCX58/Ne+ 9J/C7CAyw0+Cfh308SfZtxLZEbU0qadl1zy/uzNaBRBRh8Z0N4eT1zQ52+0h6iLi 3Viqm9MdRHCgpQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:57:34 2025 by rpki-client