This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json) Hash identifier: BMsS7U7tzOkJ022TLYird3eukADSik5yBlhnmm4bJNY= Subject key identifier: EA:BA:B2:71:F0:94:CE:A0:74:F8:C2:24:C1:0F:00:A0:C8:1E:17:65 Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c Certificate serial: 019AF50A1BB172BD6C8D4F728F66B3AAEC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: lWocxCGnF6u8sHVSmGZ7RVIWFRF5+tnDSHUYM2sQZjs=) 2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1b:b1:72:bd:6c:8d:4f:72:8f:66:b3:aa:ec:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=eabab271f094cea074f8c224c10f00a0c81e1765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:d4:6c:cd:4a:7a:ff:06:83:c7:27:05:7f: e4:8d:f5:25:7b:61:76:ec:3f:87:4f:30:bf:b3:e3: b1:68:f8:64:11:a7:73:fb:11:34:16:68:fc:ea:8b: 5f:16:cb:b1:f8:b7:88:43:62:b9:14:fd:21:fb:a6: 00:28:3b:28:b8:a6:31:b4:8a:b0:e7:e1:ef:d3:81: 22:34:a5:f2:47:b4:7b:39:67:b1:6a:62:11:dc:65: f0:ee:fa:2f:3f:17:f9:2b:7e:17:0d:a8:31:3c:76: 9b:40:37:ed:09:fa:69:93:a0:31:81:71:01:16:df: 35:3f:86:32:8f:d4:d4:45:d4:af:7c:c8:98:a2:72: c8:37:9a:6c:93:28:35:01:c7:e8:b8:15:4e:f2:ea: 42:27:cc:76:be:45:20:e4:27:63:2f:0e:b2:2a:1c: 4f:4c:d0:2a:c2:78:e9:67:c8:af:38:2f:91:cc:ab: 85:d6:2c:33:35:da:b1:41:4b:89:8c:50:59:65:8e: bc:9e:83:e5:dd:6d:f1:56:ae:1a:ad:fb:c3:89:17: 4c:1f:67:e4:50:b1:fe:4c:e8:11:20:29:1c:dc:64: 19:58:d6:7c:1f:0c:79:42:6c:cf:e5:2a:71:e0:9f: 44:ee:6f:73:5a:7f:6d:e9:ff:99:19:8b:1a:2e:b3: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BA:B2:71:F0:94:CE:A0:74:F8:C2:24:C1:0F:00:A0:C8:1E:17:65 X509v3 Authority Key Identifier: keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:20:24:61:d5:ee:fd:75:ec:61:69:61:7e:29:2c:db:c8:c1: 2b:12:ee:af:5b:f5:ba:91:df:25:2f:e5:51:73:8b:33:ea:9f: 6f:07:cf:ff:a4:dc:21:13:9d:a4:72:2e:25:18:12:2e:5c:44: ed:ab:a3:80:80:b0:4a:69:86:1a:f7:0a:99:96:d1:53:d8:8e: 1e:df:63:55:75:75:a0:e2:25:98:18:39:a3:42:c1:db:45:9f: 0c:c3:b6:ca:3b:87:58:fd:cf:80:ec:ea:af:43:49:c1:5b:af: 87:7a:d4:a1:cd:ef:f0:59:27:d8:90:bb:3f:6f:ae:26:e6:f1: f5:30:59:02:72:e6:0e:26:7b:63:98:a2:cf:fc:3d:e6:1c:13: 8a:cc:7c:32:28:e0:ce:17:f0:2e:17:bc:25:ed:e0:3f:cf:6b: 60:86:fb:69:07:26:b7:4a:28:66:7b:e5:da:ef:09:ce:4b:5d: 92:4d:7e:b0:49:cc:73:0b:3f:55:e0:d4:84:12:70:33:87:78: 9a:d8:27:c5:aa:c7:2e:d9:11:5c:35:04:33:23:4a:ef:99:58: 41:02:ac:ad:fd:87:fd:2c:f9:1e:68:f7:4e:b5:5d:00:37:e3: c7:29:6b:c5:b0:2b:c9:36:b4:4d:8a:20:7e:ba:af:76:72:ce: c3:9c:68:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Chuxcr1sjU9yj2azquwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzI4NjYzOTgxNDJhNTc0YmE0N2IxOTdkNzE3OTFiNWUy M2FmN2MwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD EyhlYWJhYjI3MWYwOTRjZWEwNzRmOGMyMjRjMTBmMDBhMGM4MWUxNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3UbM1Kev8Gg8cnBX/kjfUle2F2 7D+HTzC/s+OxaPhkEadz+xE0Fmj86otfFsux+LeIQ2K5FP0h+6YAKDsouKYxtIqw 5+Hv04EiNKXyR7R7OWexamIR3GXw7vovPxf5K34XDagxPHabQDftCfppk6AxgXEB Ft81P4Yyj9TURdSvfMiYonLIN5pskyg1AcfouBVO8upCJ8x2vkUg5CdjLw6yKhxP TNAqwnjpZ8ivOC+RzKuF1iwzNdqxQUuJjFBZZY68noPl3W3xVq4arfvDiRdMH2fk ULH+TOgRICkc3GQZWNZ8Hwx5QmzP5Spx4J9E7m9zWn9t6f+ZGYsaLrO9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq6snHwlM6gdPjCJMEPAKDIHhdlMB8GA1UdIwQY MBaAFODChmOYFCpXS6R7GX1xeRteI698MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgt YTE2Y2Y3YWM3ZGQ4LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgtYTE2Y2Y3YWM3ZGQ4 LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiAkYdXu /XXsYWlhfiks28jBKxLur1v1upHfJS/lUXOLM+qfbwfP/6TcIROdpHIuJRgSLlxE 7aujgICwSmmGGvcKmZbRU9iOHt9jVXV1oOIlmBg5o0LB20WfDMO2yjuHWP3PgOzq r0NJwVuvh3rUoc3v8Fkn2JC7P2+uJubx9TBZAnLmDiZ7Y5iiz/w95hwTisx8Mijg zhfwLhe8Je3gP89rYIb7aQcmt0ooZnvl2u8Jzktdkk1+sEnMcws/VeDUhBJwM4d4 mtgnxarHLtkRXDUEMyNK75lYQQKsrf2H/Sz5Hmj3TrVdADfjxylrxbAryTa0TYog frqvdnLOw5xoQg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:43 2025 by rpki-client