This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json) Hash identifier: z0ISU/hVBCaI6D/Mk5X2gqT5zdQzsHtyknwxnFdGiiE= Subject key identifier: 44:C3:49:02:78:49:F9:18:5C:EA:FC:4F:D4:D8:71:00:46:06:36:43 Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Certificate serial: 019AF68A46B2BBE45101F0042CD58D620C51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft Manifest number: 02AE Signing time: Sun 07 Dec 2025 02:00:48 +0000 Manifest this update: Sun 07 Dec 2025 02:00:48 +0000 Manifest next update: Mon 08 Dec 2025 02:00:48 +0000 Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: AvfY0cbut3SHcZUijZKwYXVDHuIB/UdePeiP8Tv3KOE=) 2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:46:b2:bb:e4:51:01:f0:04:2c:d5:8d:62:0c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Validity Not Before: Dec 7 02:00:48 2025 GMT Not After : Dec 8 02:00:48 2025 GMT Subject: CN=44c349027849f9185ceafc4fd4d8710046063643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:63:ba:e7:b9:9c:53:e7:a6:39:81:f8:7c: be:86:58:84:19:30:35:e4:db:c6:00:42:02:44:5e: 9c:32:c4:f4:45:5a:40:d4:03:20:d3:38:44:49:32: ab:b8:9d:00:86:46:43:11:52:a5:31:ff:2b:d8:91: f1:5f:9b:38:53:b4:70:7d:0e:4f:f1:f5:6a:e9:e0: d8:14:c4:0d:59:f9:12:34:24:32:2e:6a:aa:e9:f2: 24:1d:77:ab:f0:c4:f4:5e:13:1d:f5:92:30:f3:64: 14:7a:82:c7:cc:57:cd:c8:e1:58:d3:3b:f5:6e:14: 14:67:0d:7a:52:09:36:6b:11:1f:52:86:e6:54:9c: 13:4e:e7:51:80:1a:1e:57:d2:e9:48:75:50:00:76: 15:15:a8:73:05:3c:ac:a8:94:1a:b6:a6:b4:cf:c2: de:ef:3d:ed:5a:de:8e:20:16:05:4d:d8:08:b4:88: af:38:28:e1:1d:d5:cc:32:84:00:ed:d3:5f:93:fa: 33:b9:c7:de:c0:e1:b6:c3:7b:5a:0e:0a:ed:ff:71: f1:b7:1f:f0:7d:03:38:13:f8:b4:14:30:c2:a2:d2: 6f:c0:39:6b:5f:63:52:0a:6e:bf:fb:c4:4f:0c:28: f9:75:ac:3b:c4:0d:74:7c:44:44:58:b7:81:47:12: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:49:02:78:49:F9:18:5C:EA:FC:4F:D4:D8:71:00:46:06:36:43 X509v3 Authority Key Identifier: keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d9:da:2e:98:21:cd:37:5b:bb:2a:49:59:1c:fa:cc:1d:82: 92:d0:1c:8e:79:14:86:67:bc:23:3e:2a:ab:be:08:ca:5f:e2: e7:18:3a:bc:5b:84:60:eb:c0:c5:27:c3:19:bf:58:98:a9:78: 67:ef:f7:59:c4:23:24:c1:a5:3f:35:21:cb:1b:6d:32:06:6c: 74:58:26:dd:9f:e7:0c:2a:cd:d8:20:31:ba:99:ec:f2:6a:e2: b0:51:32:58:08:5a:9c:9f:c2:e7:3f:46:0c:e1:dd:34:6a:2a: 09:55:c0:35:62:6c:6e:93:46:a9:6c:b6:a7:24:f7:13:76:9d: c3:95:82:76:80:54:be:a5:f0:ad:60:3e:25:1c:f1:ce:d5:80: 83:5f:ef:b1:c4:23:77:9e:8b:f2:47:2c:03:5e:56:84:3b:ee: 7f:f8:01:4e:0b:cf:bc:0b:f5:d1:11:3e:58:e1:7b:a0:ae:fb: 26:1b:d7:e3:84:5f:82:03:d5:1d:6c:99:97:97:14:94:e0:e5: 26:52:42:fd:7c:77:18:3b:20:e3:e9:24:a5:d7:48:d9:83:8a: 42:4d:1b:bc:88:0f:05:75:c8:85:bd:1c:71:e1:92:bb:25:57: cc:61:e3:e2:1f:9f:bc:3d:09:5e:01:2e:23:37:2f:97:6c:2c: 24:1d:e5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ikayu+RRAfAELNWNYgxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm YzBiOTkwHhcNMjUxMjA3MDIwMDQ4WhcNMjUxMjA4MDIwMDQ4WjAzMTEwLwYDVQQD Eyg0NGMzNDkwMjc4NDlmOTE4NWNlYWZjNGZkNGQ4NzEwMDQ2MDYzNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9juue5nFPnpjmB+Hy+hliEGTA1 5NvGAEICRF6cMsT0RVpA1AMg0zhESTKruJ0AhkZDEVKlMf8r2JHxX5s4U7RwfQ5P 8fVq6eDYFMQNWfkSNCQyLmqq6fIkHXer8MT0XhMd9ZIw82QUeoLHzFfNyOFY0zv1 bhQUZw16Ugk2axEfUobmVJwTTudRgBoeV9LpSHVQAHYVFahzBTysqJQatqa0z8Le 7z3tWt6OIBYFTdgItIivOCjhHdXMMoQA7dNfk/ozucfewOG2w3taDgrt/3Hxtx/w fQM4E/i0FDDCotJvwDlrX2NSCm6/+8RPDCj5daw7xA10fEREWLeBRxIuIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETDSQJ4SfkYXOr8T9TYcQBGBjZDMB8GA1UdIwQY MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdnaLpgh zTdbuypJWRz6zB2CktAcjnkUhme8Iz4qq74Iyl/i5xg6vFuEYOvAxSfDGb9YmKl4 Z+/3WcQjJMGlPzUhyxttMgZsdFgm3Z/nDCrN2CAxupns8mrisFEyWAhanJ/C5z9G DOHdNGoqCVXANWJsbpNGqWy2pyT3E3adw5WCdoBUvqXwrWA+JRzxztWAg1/vscQj d56L8kcsA15WhDvuf/gBTgvPvAv10RE+WOF7oK77JhvX44RfggPVHWyZl5cUlODl JlJC/Xx3GDsg4+kkpddI2YOKQk0bvIgPBXXIhb0cceGSuyVXzGHj4h+fvD0JXgEu Izcvl2wsJB3lcA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:55:02 2025 by rpki-client