This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json) Hash identifier: cY7PnqcxbsSg2AuQ1fkZOukF1SYdUBR4Zpj8Hccrhpo= Subject key identifier: D0:37:46:72:F0:C8:30:1F:69:03:69:6C:E7:A2:F3:1C:E3:F7:B0:A3 Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b Certificate serial: 019AF20943C17EFDB5FC758C0A60C4CFCF36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: ACGeVfRAPy/AaEu/vnhefAXvw7Y3wnjmiE0JHUJyr6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:43:c1:7e:fd:b5:fc:75:8c:0a:60:c4:cf:cf:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=d0374672f0c8301f6903696ce7a2f31ce3f7b0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:6d:52:a5:98:be:56:16:5b:b4:e5:43:77: 4e:9a:56:83:3c:9d:70:15:94:46:c3:35:13:eb:ce: b8:64:d6:70:dd:d1:97:69:20:aa:90:59:cc:1f:3c: 8b:c4:d2:44:b7:ab:2f:f4:ca:68:63:87:93:1c:f5: 13:05:76:0d:74:ea:88:9e:44:59:3c:ed:f2:fc:8d: 20:43:a9:04:f4:3c:42:93:40:48:36:b0:f0:51:f1: c1:87:d1:10:77:c9:a0:6f:26:99:95:99:2c:20:12: a6:a3:c9:9f:f2:59:02:17:2c:00:21:3d:84:17:50: 1e:72:6c:6c:a0:45:c6:67:cb:13:c8:40:28:c7:2e: a0:0e:13:e5:a0:fe:01:57:20:2a:40:ca:b6:34:f3: 8c:4a:7a:36:8a:4a:8f:0b:3e:f7:74:4c:c0:a4:d1: 88:33:ab:2f:4f:c4:ad:53:23:7f:5e:74:0a:95:02: b4:a5:72:df:18:e1:f0:ac:27:5d:76:d8:c0:24:a7: b2:9b:bb:29:f2:ff:c5:ea:7f:5f:1b:3c:2b:82:81: 35:b1:8c:47:3b:77:a0:50:71:f9:17:2d:1b:de:42: af:36:3b:37:26:ab:35:77:aa:d9:9e:7a:b7:e6:7d: 72:20:ba:99:ee:cf:8a:97:7b:62:7f:71:3d:52:f7: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:46:72:F0:C8:30:1F:69:03:69:6C:E7:A2:F3:1C:E3:F7:B0:A3 X509v3 Authority Key Identifier: keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b7:b2:e6:b9:bb:97:48:2d:36:ea:99:68:79:c6:5d:a1:f7: ce:ee:e9:c2:02:76:d4:07:ce:9b:be:b7:9c:64:11:fc:fb:df: 03:34:cb:63:6d:d0:72:69:5c:28:9f:30:8b:6c:e5:4e:7e:41: d2:0c:24:19:48:e2:7f:1a:b0:b9:01:e7:e6:fa:0d:ce:ae:8c: f8:f4:74:ed:59:92:87:31:3c:e0:38:94:f2:e7:7b:11:bb:f7: 56:70:b7:b4:ae:e2:1c:7c:8f:aa:fa:3d:74:81:30:5e:55:a1: 2a:e2:5a:43:1f:48:24:f1:5e:3e:9f:a7:c7:2a:d8:e2:a5:e5: 36:cb:4e:d6:d1:ec:dd:c0:d2:6d:73:7f:4a:81:80:3d:90:5c: f1:22:3a:1a:bc:3b:a7:c3:f1:5a:8f:40:b8:97:fc:fe:ae:82: ff:c6:dc:60:3b:02:cd:c5:3f:9e:9f:c9:18:b0:8c:03:b2:53: 21:c0:db:2f:0c:99:d6:dc:e4:de:4f:53:ba:23:64:0a:a1:b5: a5:7b:fa:3d:82:72:ee:85:30:07:19:90:7f:95:31:8c:c8:53: fd:f8:9f:d0:d7:95:5d:88:46:d5:83:0f:4d:92:db:df:4e:de: 30:f8:7b:af:e2:91:c8:ca:3c:fa:fc:b4:b1:65:29:8f:64:cd: 47:6f:5b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUPBfv21/HWMCmDEz882MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDYzY2EwNTQyODMyZTY0MjY0ZjNhY2IxNTYxOTkyMmZl Y2Y4M2IwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhkMDM3NDY3MmYwYzgzMDFmNjkwMzY5NmNlN2EyZjMxY2UzZjdiMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO9tUqWYvlYWW7TlQ3dOmlaDPJ1w FZRGwzUT6864ZNZw3dGXaSCqkFnMHzyLxNJEt6sv9MpoY4eTHPUTBXYNdOqInkRZ PO3y/I0gQ6kE9DxCk0BINrDwUfHBh9EQd8mgbyaZlZksIBKmo8mf8lkCFywAIT2E F1AecmxsoEXGZ8sTyEAoxy6gDhPloP4BVyAqQMq2NPOMSno2ikqPCz73dEzApNGI M6svT8StUyN/XnQKlQK0pXLfGOHwrCdddtjAJKeym7sp8v/F6n9fGzwrgoE1sYxH O3egUHH5Fy0b3kKvNjs3Jqs1d6rZnnq35n1yILqZ7s+Kl3tif3E9Uver/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA3RnLwyDAfaQNpbOei8xzj97CjMB8GA1UdIwQY MBaAFOLWPKBUKDLmQmTzrLFWGZIv7Pg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEt YzViMDBjYjhkOTE0LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEtYzViMDBjYjhkOTE0 LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbey5rm7 l0gtNuqZaHnGXaH3zu7pwgJ21AfOm763nGQR/PvfAzTLY23QcmlcKJ8wi2zlTn5B 0gwkGUjifxqwuQHn5voNzq6M+PR07VmShzE84DiU8ud7Ebv3VnC3tK7iHHyPqvo9 dIEwXlWhKuJaQx9IJPFePp+nxyrY4qXlNstO1tHs3cDSbXN/SoGAPZBc8SI6Grw7 p8PxWo9AuJf8/q6C/8bcYDsCzcU/np/JGLCMA7JTIcDbLwyZ1tzk3k9TuiNkCqG1 pXv6PYJy7oUwBxmQf5UxjMhT/fif0NeVXYhG1YMPTZLb307eMPh7r+KRyMo8+vy0 sWUpj2TNR29blA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:25 2025 by rpki-client