This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json) Hash identifier: V35sz+LBHT1HGqj/BG3H0V4/Zh9tC4AVQB2l6O+HOnY= Subject key identifier: 46:63:DA:FE:3F:47:3C:19:0F:22:23:B1:9B:1D:EE:D3:35:67:E8:75 Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b Certificate serial: 019B34C44752DF831032A7F96FB159B75990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:00:37 +0000 Manifest this update: Fri 19 Dec 2025 04:00:37 +0000 Manifest next update: Sat 20 Dec 2025 04:00:37 +0000 Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: qpaIGkwPK6TJI6PtgweT9Pltrk8TnUv227ugg0JBM/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:47:52:df:83:10:32:a7:f9:6f:b1:59:b7:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b Validity Not Before: Dec 19 04:00:37 2025 GMT Not After : Dec 20 04:00:37 2025 GMT Subject: CN=4663dafe3f473c190f2223b19b1deed33567e875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:09:56:a3:76:d0:79:e8:2e:c2:6f:85:8a: 9c:9e:66:46:6b:b1:a4:51:a7:91:fa:0b:12:df:d2: d9:c5:5c:25:bf:45:e3:1d:08:6c:f6:fb:c5:c3:07: 8c:b0:05:f2:dc:4c:97:5b:2a:f7:e2:e3:d3:5e:64: 34:38:88:42:51:fb:2f:c7:b3:d3:e6:12:3d:ef:81: 02:8c:c2:62:4f:eb:67:36:15:17:02:5d:f5:41:a8: 6d:95:28:26:d3:d7:77:9a:c4:3e:1f:54:cd:87:cd: 28:2b:60:5a:51:12:57:23:39:a0:a9:08:d0:e4:5d: 56:2b:92:5b:4e:2a:3a:ef:79:88:a0:ee:c2:3f:1a: bc:42:a0:27:33:23:c4:01:9c:67:a2:32:15:52:51: e8:ba:7c:fe:fc:f0:4f:f0:ad:38:7d:12:3b:ea:c4: 3c:2e:0b:d3:07:dc:8d:8d:b2:52:6b:af:40:b0:30: 55:03:37:77:82:2d:c5:1e:c2:1d:3e:f1:08:4b:ce: 56:66:f0:9b:eb:f9:0a:83:fd:08:c9:ab:bc:fd:a4: b8:de:76:39:28:27:7c:96:08:d4:3f:79:7c:d4:ad: f2:90:00:74:02:19:5e:86:33:17:e1:fd:84:9b:b1: 3f:61:97:25:3d:cd:64:a8:c8:94:7c:13:2f:74:e5: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:DA:FE:3F:47:3C:19:0F:22:23:B1:9B:1D:EE:D3:35:67:E8:75 X509v3 Authority Key Identifier: keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:40:6d:ed:d7:5c:77:da:6b:68:a9:85:45:14:44:04:b6:d6: 47:59:5e:aa:05:05:2d:27:f7:b4:d7:18:77:a3:e5:54:1e:0b: 31:09:d2:99:5a:e5:e8:a5:b1:b6:14:53:70:4f:99:d5:90:60: de:43:c8:0a:cb:18:73:bf:5f:cf:0e:37:04:cf:ab:45:ca:62: 39:93:05:f2:23:4a:18:80:08:c7:7b:54:db:8f:97:7d:2f:7c: 70:97:1a:ed:de:bf:71:9f:4a:c4:11:31:08:ad:4c:f4:2a:78: 70:73:51:73:3a:72:8b:9d:e8:52:48:9c:43:b2:08:2f:80:de: 0d:ba:23:10:91:ac:5b:aa:f2:51:57:16:7b:81:b9:6d:16:9c: 34:c2:d4:3e:98:79:75:2c:55:9f:09:95:27:e5:1e:ab:93:01: 5e:7e:5c:ae:a6:d5:45:5b:3d:db:10:f6:85:b4:8d:c0:ad:f5: 6e:6e:25:ac:9d:46:7c:f8:9b:9e:75:bc:17:a9:cc:fd:8f:c6: 87:7a:4a:94:19:37:08:ae:15:18:d2:56:f8:c8:7f:ab:2b:a1: c4:f3:8a:54:6e:eb:f0:25:18:4c:ce:4b:cd:41:20:6e:96:59: ad:b4:36:47:7c:94:b4:dc:42:e9:22:09:b2:c2:6a:69:84:83: 92:94:9e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEdS34MQMqf5b7FZt1mQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjJjYTk1MTgyMzMxNGE1ZjRkMTBhNjZhNzgyMjM5OGZi ODg5NmIwHhcNMjUxMjE5MDQwMDM3WhcNMjUxMjIwMDQwMDM3WjAzMTEwLwYDVQQD Eyg0NjYzZGFmZTNmNDczYzE5MGYyMjIzYjE5YjFkZWVkMzM1NjdlODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+oJVqN20HnoLsJvhYqcnmZGa7Gk UaeR+gsS39LZxVwlv0XjHQhs9vvFwweMsAXy3EyXWyr34uPTXmQ0OIhCUfsvx7PT 5hI974ECjMJiT+tnNhUXAl31QahtlSgm09d3msQ+H1TNh80oK2BaURJXIzmgqQjQ 5F1WK5JbTio673mIoO7CPxq8QqAnMyPEAZxnojIVUlHounz+/PBP8K04fRI76sQ8 LgvTB9yNjbJSa69AsDBVAzd3gi3FHsIdPvEIS85WZvCb6/kKg/0Iyau8/aS43nY5 KCd8lgjUP3l81K3ykAB0AhlehjMX4f2Em7E/YZclPc1kqMiUfBMvdOVByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZj2v4/RzwZDyIjsZsd7tM1Z+h1MB8GA1UdIwQY MBaAFOHyypUYIzFKX00Qpmp4IjmPuIlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTkt ZDI4ODRhMTliZTBhLzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTktZDI4ODRhMTliZTBh LzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkBt7ddc d9praKmFRRREBLbWR1leqgUFLSf3tNcYd6PlVB4LMQnSmVrl6KWxthRTcE+Z1ZBg 3kPICssYc79fzw43BM+rRcpiOZMF8iNKGIAIx3tU24+XfS98cJca7d6/cZ9KxBEx CK1M9Cp4cHNRczpyi53oUkicQ7IIL4DeDbojEJGsW6ryUVcWe4G5bRacNMLUPph5 dSxVnwmVJ+Ueq5MBXn5crqbVRVs92xD2hbSNwK31bm4lrJ1GfPibnnW8F6nM/Y/G h3pKlBk3CK4VGNJW+Mh/qyuhxPOKVG7r8CUYTM5LzUEgbpZZrbQ2R3yUtNxC6SIJ ssJqaYSDkpSePw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:56 2025 by rpki-client