This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json) Hash identifier: czptI3qVfUqW2uwPZj3L5HKs/JvjfT/FJVWp3mn7nkg= Subject key identifier: 8B:DA:05:F7:71:33:64:16:72:47:1A:F1:8F:37:C5:00:2B:AF:F5:09 Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Certificate serial: 019AF5AED847411ABE325F5B7B6D15BF904B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:01:07 +0000 Manifest this update: Sat 06 Dec 2025 22:01:07 +0000 Manifest next update: Sun 07 Dec 2025 22:01:07 +0000 Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: 1im3YPyVC4cC0JNVeGJcKeMoXP3N9WtZH9l4CRt/sKM=) 2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d8:47:41:1a:be:32:5f:5b:7b:6d:15:bf:90:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Validity Not Before: Dec 6 22:01:07 2025 GMT Not After : Dec 7 22:01:07 2025 GMT Subject: CN=8bda05f77133641672471af18f37c5002baff509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:79:f9:a7:2c:ce:09:81:b7:56:fd:d1:7e: 9d:fa:f5:67:29:37:a7:f3:a8:05:58:36:fc:d5:b4: ac:fe:db:18:14:d2:a7:6a:d1:1e:66:62:07:15:07: 71:e8:e8:23:35:73:01:cc:03:42:85:81:b9:14:6a: 93:f1:f2:d2:1c:f5:34:27:09:78:74:20:30:aa:f7: 9d:2f:7b:0c:73:74:d6:81:38:ab:81:3f:01:c5:12: 7e:6a:3b:7a:f2:40:f6:eb:8d:bf:d7:c3:e0:c6:91: e1:94:ac:9a:c6:22:db:87:80:c9:90:79:c7:43:72: 6c:8d:3f:57:47:7e:ea:03:f8:86:ca:9e:1e:cc:ca: 9a:6d:5f:30:50:57:68:e7:7c:e3:69:96:67:4c:de: 7c:0c:d4:ab:98:e2:9d:14:50:b3:0d:51:1e:61:61: 72:f0:fd:3b:2f:02:90:f4:e8:e0:e9:74:b2:d8:43: e6:dd:22:2d:ee:38:3e:1e:7a:63:fc:03:45:7a:fd: 85:aa:87:a3:0b:70:ee:1c:9e:24:4f:81:38:c2:e4: b3:76:8a:75:c4:21:b9:32:61:74:8e:2d:54:08:e7: 2d:f5:2d:d9:a7:36:36:05:e7:48:37:75:ae:35:f5: cf:6a:85:53:d3:41:ba:df:7c:14:a3:2f:ed:04:be: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DA:05:F7:71:33:64:16:72:47:1A:F1:8F:37:C5:00:2B:AF:F5:09 X509v3 Authority Key Identifier: keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:54:58:41:b7:96:33:89:e5:d8:a6:69:70:71:a4:c0:18: 22:20:4d:5f:64:d8:ed:f3:48:07:c9:09:50:4a:cb:0d:d4:95: 5d:6f:1f:6b:52:72:e4:cf:43:71:8d:4e:88:d2:f5:ea:59:75: 1a:76:5c:a6:f2:b8:43:7d:5f:82:5f:04:a9:56:c5:de:9d:86: 71:ef:b2:f8:99:b1:d3:05:b9:80:fa:11:51:8e:ac:ce:b3:0c: 6f:bb:f4:e4:c1:9f:fd:aa:a5:41:23:b9:87:2c:d2:1e:1c:b4: 5f:fe:a8:dd:ec:62:da:ce:b5:b8:c1:ac:f0:7f:62:ef:ab:41: 77:22:47:a3:c2:9f:f1:29:e3:8a:e5:fe:41:ac:84:0e:66:11: e3:c2:b8:1d:f4:83:52:30:d4:cb:af:83:98:96:c8:a0:79:21: 80:e2:16:df:88:6e:0f:c9:6e:84:63:e7:b1:c9:e8:9a:89:ef: a5:a5:c8:fc:45:29:b7:1c:b3:e9:d9:0d:f6:6d:ea:ad:de:bd: 10:7a:a9:4b:b8:a9:ee:ba:56:8b:02:a9:de:5c:3f:8c:1f:3a: 2a:d1:08:91:d9:9b:be:8b:a3:65:23:80:f6:89:e6:98:e8:e8: 5d:46:f5:64:c5:88:98:35:02:84:21:49:7a:a4:b4:ef:ed:93: c1:0e:64:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rthHQRq+Ml9be20Vv5BLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3 OWY2ZjUwHhcNMjUxMjA2MjIwMTA3WhcNMjUxMjA3MjIwMTA3WjAzMTEwLwYDVQQD Eyg4YmRhMDVmNzcxMzM2NDE2NzI0NzFhZjE4ZjM3YzUwMDJiYWZmNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+V5+acszgmBt1b90X6d+vVnKTen 86gFWDb81bSs/tsYFNKnatEeZmIHFQdx6OgjNXMBzANChYG5FGqT8fLSHPU0Jwl4 dCAwqvedL3sMc3TWgTirgT8BxRJ+ajt68kD2642/18PgxpHhlKyaxiLbh4DJkHnH Q3JsjT9XR37qA/iGyp4ezMqabV8wUFdo53zjaZZnTN58DNSrmOKdFFCzDVEeYWFy 8P07LwKQ9Ojg6XSy2EPm3SIt7jg+Hnpj/ANFev2FqoejC3DuHJ4kT4E4wuSzdop1 xCG5MmF0ji1UCOct9S3ZpzY2BedIN3WuNfXPaoVT00G633wUoy/tBL6x9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvaBfdxM2QWckca8Y83xQArr/UJMB8GA1UdIwQY MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt Y2Q2MzBkYmMxZDE4LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4 LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOFUWEG3 ljOJ5dimaXBxpMAYIiBNX2TY7fNIB8kJUErLDdSVXW8fa1Jy5M9DcY1OiNL16ll1 GnZcpvK4Q31fgl8EqVbF3p2Gce+y+Jmx0wW5gPoRUY6szrMMb7v05MGf/aqlQSO5 hyzSHhy0X/6o3exi2s61uMGs8H9i76tBdyJHo8Kf8SnjiuX+QayEDmYR48K4HfSD UjDUy6+DmJbIoHkhgOIW34huD8luhGPnscnomonvpaXI/EUptxyz6dkN9m3qrd69 EHqpS7ip7rpWiwKp3lw/jB86KtEIkdmbvoujZSOA9onmmOjoXUb1ZMWImDUChCFJ eqS07+2TwQ5ktA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:14:17 2025 by rpki-client