This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json) Hash identifier: XHPOeCb0RvcdjJzFVlrvxdCLUoDCZsTCb+2oFgsSkU8= Subject key identifier: 62:CE:4C:80:13:25:34:E4:E2:15:57:E7:3B:FC:60:66:48:2F:5A:7F Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52 Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52 Certificate serial: 019AF352508466FADA677B725E9A722148CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft Manifest number: 0FE0 Signing time: Sat 06 Dec 2025 11:00:49 +0000 Manifest this update: Sat 06 Dec 2025 11:00:49 +0000 Manifest next update: Sun 07 Dec 2025 11:00:49 +0000 Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: wL4sZ2+0UgTZeWzaRZtvTPtYR13FKaPbebFOi8DDEPY=) 2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:50:84:66:fa:da:67:7b:72:5e:9a:72:21:48:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52 Validity Not Before: Dec 6 11:00:49 2025 GMT Not After : Dec 7 11:00:49 2025 GMT Subject: CN=62ce4c80132534e4e21557e73bfc6066482f5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:93:31:2b:40:7b:cd:d0:e8:5e:1f:d9:26: 1a:50:b2:dd:07:5e:94:70:18:51:35:eb:3b:e3:50: d3:7a:6e:c9:ea:29:4a:2f:25:08:bf:4d:91:ba:60: 24:33:5f:f4:d7:07:71:0d:14:0d:35:59:33:ec:a5: c3:0c:78:e1:b3:29:0a:c0:4a:8c:b5:f8:1f:4a:b7: 0e:08:b9:51:37:14:e4:27:ca:51:f4:2a:2a:4e:bf: c4:16:83:75:8c:24:f5:73:e1:9d:f4:1b:75:61:ab: 4c:98:9b:5a:80:fa:7f:1e:92:b5:de:ef:11:f8:ce: 8a:d1:78:35:24:55:d5:00:91:c8:31:96:f0:ec:79: 58:f9:4e:0b:d4:ae:c0:05:da:2f:52:49:ef:52:05: 5d:79:c5:4e:ba:c1:f2:bc:a1:00:ad:cc:2e:db:c2: 43:e3:3b:9f:d0:03:fc:45:8c:9e:e4:5d:f0:71:26: b6:7e:e8:54:74:e8:89:99:b9:81:32:d3:32:87:2d: 3f:1e:16:44:e0:73:94:d5:ee:28:6b:ce:be:ba:a4: e3:a1:7f:0d:fd:11:dc:a4:dd:7f:e1:7b:dc:cc:47: 00:3c:30:f8:55:b8:bb:a3:b7:4d:95:4c:bd:48:0c: e0:85:fb:2f:a2:33:ff:64:32:a3:42:7e:79:18:a6: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:4C:80:13:25:34:E4:E2:15:57:E7:3B:FC:60:66:48:2F:5A:7F X509v3 Authority Key Identifier: keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:91:61:be:7c:20:25:44:09:c5:b8:38:48:f3:b9:b8:3e:c1: 3d:ea:de:f9:26:00:c9:41:f7:f4:63:72:5e:8c:5f:63:b3:ad: 6c:2d:f7:38:33:91:0f:36:78:f8:a0:4c:87:1b:92:7f:4d:a6: 66:f1:93:34:70:df:a7:6a:f7:4c:22:89:8a:5a:c7:63:c9:16: 8f:5a:16:be:3d:38:04:30:84:f8:40:91:6e:73:f0:39:b8:a7: 96:d8:2a:89:65:f5:0f:5b:7d:cf:d5:fd:98:ac:20:d4:38:b6: 2b:22:4b:37:5f:a3:44:32:cd:d8:21:4f:92:8e:7c:10:dd:66: ca:88:45:e2:0b:bb:d2:af:55:ed:d7:78:50:d1:c7:17:a0:19: 1d:bc:60:37:36:96:59:e4:0a:33:7d:a4:ef:6a:7c:73:c7:db: a1:e6:56:a3:18:ea:3a:b3:b4:33:9f:a9:ed:65:1f:d1:24:8e: 60:d7:3b:0a:a5:6a:31:b7:05:d4:7c:9c:de:4b:80:65:5d:0f: 2e:81:b5:15:67:c1:94:0a:c7:b8:a5:9e:cd:63:69:aa:8e:d0: 0e:28:93:c8:23:11:ed:a8:9c:1a:f0:39:7d:de:9e:bb:df:35: 75:d0:24:fc:68:4a:e8:3f:96:f5:1a:bf:31:90:eb:3f:db:27: fd:29:92:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlCEZvraZ3tyXppyIUjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZWQ2NDMwOTVmZmE2NTdkZTA1Y2VlY2E1ZDIwYjI2NWMx YjdmNTIwHhcNMjUxMjA2MTEwMDQ5WhcNMjUxMjA3MTEwMDQ5WjAzMTEwLwYDVQQD Eyg2MmNlNGM4MDEzMjUzNGU0ZTIxNTU3ZTczYmZjNjA2NjQ4MmY1YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eyTMStAe83Q6F4f2SYaULLdB16U cBhRNes741DTem7J6ilKLyUIv02RumAkM1/01wdxDRQNNVkz7KXDDHjhsykKwEqM tfgfSrcOCLlRNxTkJ8pR9CoqTr/EFoN1jCT1c+Gd9Bt1YatMmJtagPp/HpK13u8R +M6K0Xg1JFXVAJHIMZbw7HlY+U4L1K7ABdovUknvUgVdecVOusHyvKEArcwu28JD 4zuf0AP8RYye5F3wcSa2fuhUdOiJmbmBMtMyhy0/HhZE4HOU1e4oa86+uqTjoX8N /RHcpN1/4XvczEcAPDD4Vbi7o7dNlUy9SAzghfsvojP/ZDKjQn55GKaILQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLOTIATJTTk4hVX5zv8YGZIL1p/MB8GA1UdIwQY MBaAFOLtZDCV/6ZX3gXO7KXSCyZcG39SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZWU2ZjQtNTQ4ZS00Y2VmLThmYTQt OTNiMDIwZmU4ZmYxLzEvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lZWU2ZjQtNTQ4ZS00Y2VmLThmYTQtOTNiMDIwZmU4ZmYx LzEvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5Fhvnwg JUQJxbg4SPO5uD7BPere+SYAyUH39GNyXoxfY7OtbC33ODORDzZ4+KBMhxuSf02m ZvGTNHDfp2r3TCKJilrHY8kWj1oWvj04BDCE+ECRbnPwObinltgqiWX1D1t9z9X9 mKwg1Di2KyJLN1+jRDLN2CFPko58EN1myohF4gu70q9V7dd4UNHHF6AZHbxgNzaW WeQKM32k72p8c8fboeZWoxjqOrO0M5+p7WUf0SSOYNc7CqVqMbcF1Hyc3kuAZV0P LoG1FWfBlArHuKWezWNpqo7QDiiTyCMR7aicGvA5fd6eu981ddAk/GhK6D+W9Rq/ MZDrP9sn/SmSLA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:57 2025 by rpki-client