This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json) Hash identifier: E40TjJB0LOTgMEPWMAQOUP8FNqlIOz3/phr5Wh8PnJ0= Subject key identifier: F2:2C:20:78:14:FA:36:CE:5D:29:AF:8F:90:7F:BA:AE:4E:4A:63:B5 Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f Certificate serial: 019AF2ADA1699ED4C99C78915821C3CCB7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft Manifest number: 0352 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: J4aZOpPF48iQ/GvfupG9lkmNwsTO/R/KpuuJFHEUNmo=) 2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a1:69:9e:d4:c9:9c:78:91:58:21:c3:cc:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=f22c207814fa36ce5d29af8f907fbaae4e4a63b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:70:5f:a0:0c:ae:0f:d3:f4:8d:bb:a8:ee: 9d:46:02:0c:cc:07:88:aa:84:a4:99:e3:f6:f1:ea: a1:56:2f:e0:58:f1:43:f0:94:65:a7:5b:2d:0e:9f: a9:67:e6:18:6e:c3:82:19:04:91:b4:3e:ba:55:3d: b8:f5:82:8c:e3:52:77:43:e0:ce:67:5c:76:1e:1b: 26:de:84:d0:10:10:96:a0:7f:13:d2:a5:fd:96:c3: 66:15:95:20:52:f7:46:25:90:85:2e:b2:f8:5f:62: 5a:f6:b5:cd:5a:5e:ac:30:be:8a:72:48:af:b6:75: 65:db:4e:d6:3d:5e:7c:1e:be:17:9b:bb:bb:59:1a: ba:a6:3c:a3:f4:b9:21:ea:c3:03:31:40:b9:0a:b9: 2d:4b:4c:23:32:17:02:08:50:1f:db:44:a8:60:7c: c0:03:65:e9:1a:e2:f0:57:0f:26:12:9d:67:8c:1c: 41:20:06:12:a8:3b:49:21:2e:af:f9:0c:75:08:d7: e0:08:44:97:2e:60:40:af:0f:8e:de:96:b1:a4:43: 87:4c:fa:c6:eb:95:60:ce:20:0d:51:ac:e8:98:28: 6b:cd:ce:e5:88:0e:1e:8a:63:7d:14:ba:73:46:8e: cf:04:f2:e3:4d:7d:a2:0a:a0:e8:f7:b0:ec:a0:c7: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2C:20:78:14:FA:36:CE:5D:29:AF:8F:90:7F:BA:AE:4E:4A:63:B5 X509v3 Authority Key Identifier: keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d3:6c:a2:60:e8:4b:51:87:9b:64:5e:41:18:1c:66:a2:f9: d4:0c:3a:d0:d1:d1:8b:db:4b:a4:7c:54:10:db:e6:59:ad:e1: 08:f9:88:da:72:a1:95:ce:6c:3b:ad:ec:08:b3:c9:27:71:08: 9e:e8:9c:49:63:29:e1:e0:84:83:08:69:3e:1a:fa:07:9e:03: 08:09:86:b7:e7:fa:f9:d6:b4:be:77:1b:82:bc:e0:79:ff:d0: e2:2d:43:12:03:b9:77:f2:eb:dc:53:d1:1c:5f:48:5b:57:32: e0:b2:d9:a2:f0:0a:c9:81:9f:a4:a0:b8:65:7b:ac:7f:e0:8e: 52:3f:a3:67:24:b2:3c:e5:d1:95:30:e0:3e:14:95:4f:cf:62: d1:07:19:0b:69:06:a7:2c:14:d3:dc:5a:d1:3b:05:e6:be:7f: 7e:89:bb:f4:9c:14:3a:28:97:ce:7d:9a:26:ca:23:b3:0f:d4: 44:5e:16:4a:54:2b:f2:72:0e:91:16:52:16:50:8b:83:0c:11: 2e:bd:5f:49:fc:99:b8:26:9a:98:87:8d:3e:9c:2c:26:0f:e4: fc:f0:ac:01:04:9a:8d:ef:2b:c2:65:22:6f:5e:b1:5a:24:77: 60:bb:46:ea:e1:4d:f1:cb:73:28:0e:46:e3:4a:aa:06:7f:a6: c3:64:e5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraFpntTJnHiRWCHDzLevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx NGMxNWYwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhmMjJjMjA3ODE0ZmEzNmNlNWQyOWFmOGY5MDdmYmFhZTRlNGE2M2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/JwX6AMrg/T9I27qO6dRgIMzAeI qoSkmeP28eqhVi/gWPFD8JRlp1stDp+pZ+YYbsOCGQSRtD66VT249YKM41J3Q+DO Z1x2Hhsm3oTQEBCWoH8T0qX9lsNmFZUgUvdGJZCFLrL4X2Ja9rXNWl6sML6Kckiv tnVl207WPV58Hr4Xm7u7WRq6pjyj9Lkh6sMDMUC5CrktS0wjMhcCCFAf20SoYHzA A2XpGuLwVw8mEp1njBxBIAYSqDtJIS6v+Qx1CNfgCESXLmBArw+O3paxpEOHTPrG 65VgziANUazomChrzc7liA4eimN9FLpzRo7PBPLjTX2iCqDo97DsoMefdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIsIHgU+jbOXSmvj5B/uq5OSmO1MB8GA1UdIwQY MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2 LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdNsomDo S1GHm2ReQRgcZqL51Aw60NHRi9tLpHxUENvmWa3hCPmI2nKhlc5sO63sCLPJJ3EI nuicSWMp4eCEgwhpPhr6B54DCAmGt+f6+da0vncbgrzgef/Q4i1DEgO5d/Lr3FPR HF9IW1cy4LLZovAKyYGfpKC4ZXusf+COUj+jZySyPOXRlTDgPhSVT89i0QcZC2kG pywU09xa0TsF5r5/fom79JwUOiiXzn2aJsojsw/URF4WSlQr8nIOkRZSFlCLgwwR Lr1fSfyZuCaamIeNPpwsJg/k/PCsAQSaje8rwmUib16xWiR3YLtG6uFN8ctzKA5G 40qqBn+mw2TlJw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:08 2025 by rpki-client