This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json) Hash identifier: ZmXWOJkMmmotPHHMr01zZ3eEHgE3ZVEXj1rNad26wZE= Subject key identifier: 26:BA:51:72:D7:ED:84:B0:CA:B2:42:4A:24:97:78:15:85:BB:30:85 Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Certificate serial: 019AF31C406765746CEEEA75F58E40E2F6AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft Manifest number: 0A99 Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: Sl76wvYjqSWQbAH9aa9kWX/Y3N3mF6bzvhHQ59cjAzQ=) 2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:40:67:65:74:6c:ee:ea:75:f5:8e:40:e2:f6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0 Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=26ba5172d7ed84b0cab2424a2497781585bb3085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:5d:cb:3f:03:9b:78:dc:c8:b2:81:d2:c2: 4f:94:5c:e2:83:a8:fc:2b:3e:53:23:10:1b:57:76: a4:b3:15:72:72:73:94:6c:ca:4e:fe:ff:d4:f6:66: 40:20:b3:0b:68:d3:f9:21:45:3a:d3:05:52:d7:b4: 69:6a:ec:49:09:28:5e:c9:3a:b1:fa:b4:8a:76:63: f5:23:07:f9:04:3e:3f:9b:fe:d7:7d:be:c2:8b:4b: 88:5f:10:80:87:ad:fd:b4:e5:ab:aa:c0:bb:3b:42: 04:85:7a:e6:9f:26:e8:cf:e1:78:97:dc:76:84:27: ac:ac:b3:01:3b:5a:5e:a4:7e:b5:40:3a:02:f3:73: f8:fb:35:2c:4b:51:9c:f9:ac:51:ae:6c:d4:c2:ac: 15:42:31:ce:0e:9f:ef:1e:19:1a:66:97:92:42:bf: f9:2e:67:f2:06:d9:b4:e7:ba:ef:74:02:59:1a:a0: f1:87:00:d5:a3:9a:de:62:52:fb:d0:83:80:97:69: fb:57:ae:cd:a0:d7:e3:1a:44:d1:50:0d:0c:2f:4e: dc:c3:b9:12:b1:e1:68:65:b9:80:f0:b3:4b:78:a3: f7:8b:bf:a2:79:93:16:8a:4e:d2:7e:43:da:25:ab: 0b:22:e9:ea:6e:90:36:3c:88:41:47:77:6e:4e:ed: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:51:72:D7:ED:84:B0:CA:B2:42:4A:24:97:78:15:85:BB:30:85 X509v3 Authority Key Identifier: keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:4e:d2:da:0b:b5:cb:82:39:e6:ab:0d:8f:70:9e:90:1e: 13:ee:11:61:19:96:67:2f:c0:b1:6b:c1:c9:66:44:b4:7e:7b: ea:53:e1:56:16:d9:88:59:56:a8:eb:90:2e:94:1b:eb:56:e4: 52:55:01:08:69:65:33:1d:b4:2c:62:05:90:e9:84:08:81:65: 9c:80:bb:b1:d9:09:bd:97:9a:22:99:3c:91:56:9a:c8:67:ae: 80:05:13:75:e6:78:04:01:55:4b:12:ad:c8:5e:2d:cd:5a:17: c4:05:92:9f:71:ad:f8:d6:07:28:3e:64:ae:6b:ac:47:aa:25: ff:76:5a:cf:e5:be:a6:55:16:d3:52:87:1b:cf:1f:88:15:0d: 26:cd:f4:92:94:07:be:4c:07:c0:64:b7:36:38:27:a8:a0:f2: 85:08:43:ea:cd:5b:04:7e:95:be:92:4d:90:b6:b5:41:3e:70: a3:db:43:bf:ff:b3:cc:4a:4b:07:dc:c1:cd:6a:ad:a7:e7:a1: d1:83:0b:8f:27:87:bf:80:9b:44:24:0e:ca:9d:46:50:15:78: cf:3e:56:69:1d:8c:13:2c:e1:05:8c:bd:4e:ac:29:b9:3e:f1: b5:c1:89:a4:8c:c9:b7:4d:a1:11:66:f3:e0:b4:0a:b1:dc:f5: f4:a1:26:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEBnZXRs7up19Y5A4varMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi ZmUwZTAwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD EygyNmJhNTE3MmQ3ZWQ4NGIwY2FiMjQyNGEyNDk3NzgxNTg1YmIzMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Vdyz8Dm3jcyLKB0sJPlFzig6j8 Kz5TIxAbV3aksxVycnOUbMpO/v/U9mZAILMLaNP5IUU60wVS17RpauxJCSheyTqx +rSKdmP1Iwf5BD4/m/7Xfb7Ci0uIXxCAh639tOWrqsC7O0IEhXrmnyboz+F4l9x2 hCesrLMBO1pepH61QDoC83P4+zUsS1Gc+axRrmzUwqwVQjHODp/vHhkaZpeSQr/5 LmfyBtm057rvdAJZGqDxhwDVo5reYlL70IOAl2n7V67NoNfjGkTRUA0ML07cw7kS seFoZbmA8LNLeKP3i7+ieZMWik7SfkPaJasLIunqbpA2PIhBR3duTu29vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa6UXLX7YSwyrJCSiSXeBWFuzCFMB8GA1UdIwQY MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt ZWE2ZjcwNWQyYzBkLzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMBO0toL tcuCOearDY9wnpAeE+4RYRmWZy/AsWvByWZEtH576lPhVhbZiFlWqOuQLpQb61bk UlUBCGllMx20LGIFkOmECIFlnIC7sdkJvZeaIpk8kVaayGeugAUTdeZ4BAFVSxKt yF4tzVoXxAWSn3Gt+NYHKD5krmusR6ol/3Zaz+W+plUW01KHG88fiBUNJs30kpQH vkwHwGS3NjgnqKDyhQhD6s1bBH6VvpJNkLa1QT5wo9tDv/+zzEpLB9zBzWqtp+eh 0YMLjyeHv4CbRCQOyp1GUBV4zz5WaR2MEyzhBYy9TqwpuT7xtcGJpIzJt02hEWbz 4LQKsdz19KEmtg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:33 2025 by rpki-client