This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json) Hash identifier: OsmHcL8712VsKSRwScEOWmvuXBbx6BVyLUcwV5DIB4A= Subject key identifier: 19:6F:87:81:A9:B4:36:7D:72:F6:02:8A:69:4C:60:98:24:35:F6:63 Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd Certificate serial: 019AF240166688F039AAC213ED79A4D9B867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: xcXlqh21BHQPx6Vf0lcuWOe23tn0mhcap5tfJjPU3Nc=) 2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:16:66:88:f0:39:aa:c2:13:ed:79:a4:d9:b8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=196f8781a9b4367d72f6028a694c60982435f663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:55:d4:9d:c3:6c:4b:cd:33:d1:db:19:dc: 8e:8b:a6:1a:36:ee:5d:f4:d3:3e:92:10:6d:57:5a: 44:94:28:52:5e:32:5f:bd:af:ef:50:86:be:c9:4d: 09:55:4c:15:27:cb:6e:48:04:7a:c5:36:79:89:15: 6b:e4:98:10:5b:56:bb:8b:68:04:96:8f:ab:49:c9: c8:67:2a:68:2e:38:0b:2a:ae:cd:c2:96:09:fa:67: 11:16:b7:c2:5a:35:c7:a9:7c:65:e3:3d:33:13:6c: e3:bb:d5:32:1e:ad:9c:c2:05:25:7c:ca:bb:be:bf: 3d:e6:71:ef:bf:6b:82:82:9a:95:85:25:5d:1f:68: 68:46:54:6c:a2:a3:e0:fd:20:b8:be:d2:a3:81:4d: b0:3e:92:e6:8d:91:e9:b5:e7:02:e0:a4:fc:e7:c6: 6c:52:75:ae:54:72:d0:21:de:8e:29:53:81:67:a9: 51:e0:d5:93:57:ce:27:78:65:20:f0:04:31:ce:51: b3:34:19:9e:b0:30:7f:ec:36:b1:e8:ed:93:76:85: de:e4:6c:19:19:8e:0f:77:b9:f0:0a:f1:2a:5a:14: 69:5a:7a:08:a1:7f:e4:79:01:b7:4a:5d:79:f4:08: b0:ac:33:16:57:70:51:ec:9f:1b:a2:df:d7:28:67: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6F:87:81:A9:B4:36:7D:72:F6:02:8A:69:4C:60:98:24:35:F6:63 X509v3 Authority Key Identifier: keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3a:24:82:17:e8:b3:93:d8:68:e8:97:3f:be:8a:37:f2:ae: 08:d1:98:1e:9a:12:7f:3b:d2:93:cb:d9:c2:e0:b2:3b:41:d2: 36:bf:0d:ac:58:74:f3:27:87:48:4b:2b:2d:4d:31:4c:02:94: 74:8b:aa:25:74:97:e2:34:9d:58:ca:cb:60:90:b9:16:b3:97: 70:82:88:54:22:f5:ab:e3:5e:fd:f9:b0:88:c1:a7:2f:ab:83: 74:aa:23:52:9f:ca:6c:f2:89:79:33:d2:2b:93:d2:24:be:f0: f0:ae:3d:cf:97:e4:43:8e:8a:cc:e8:b8:9e:3f:40:c7:56:4f: 91:9c:58:08:48:e2:44:38:55:3e:d9:5b:0b:97:0e:4c:3b:85: 33:75:c9:37:1a:73:c0:b5:9c:aa:55:a9:c6:14:61:1e:0d:49: b8:e0:bd:35:e5:e6:13:19:5f:38:8c:af:49:3e:03:82:f3:52: 5e:d2:ef:6f:cc:68:d1:8d:21:9b:2e:90:44:b3:7b:76:e6:5a: f8:c8:8d:22:9c:d9:61:d3:bc:cc:12:91:2a:35:de:70:b7:8c: 86:bc:3f:80:8e:e9:e2:b2:a0:6a:5a:c6:64:08:12:95:36:37: 90:e0:8e:6d:ea:8d:c4:37:c0:14:25:d4:b5:aa:cb:69:74:24: 46:79:97:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBZmiPA5qsIT7Xmk2bhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh ODRiZGQwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygxOTZmODc4MWE5YjQzNjdkNzJmNjAyOGE2OTRjNjA5ODI0MzVmNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB5V1J3DbEvNM9HbGdyOi6YaNu5d 9NM+khBtV1pElChSXjJfva/vUIa+yU0JVUwVJ8tuSAR6xTZ5iRVr5JgQW1a7i2gE lo+rScnIZypoLjgLKq7NwpYJ+mcRFrfCWjXHqXxl4z0zE2zju9UyHq2cwgUlfMq7 vr895nHvv2uCgpqVhSVdH2hoRlRsoqPg/SC4vtKjgU2wPpLmjZHptecC4KT858Zs UnWuVHLQId6OKVOBZ6lR4NWTV84neGUg8AQxzlGzNBmesDB/7Dax6O2TdoXe5GwZ GY4Pd7nwCvEqWhRpWnoIoX/keQG3Sl159AiwrDMWV3BR7J8bot/XKGdJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlvh4GptDZ9cvYCimlMYJgkNfZjMB8GA1UdIwQY MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt MzI5YTk5ZjBmMWI1LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1 LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzokghfo s5PYaOiXP76KN/KuCNGYHpoSfzvSk8vZwuCyO0HSNr8NrFh08yeHSEsrLU0xTAKU dIuqJXSX4jSdWMrLYJC5FrOXcIKIVCL1q+Ne/fmwiMGnL6uDdKojUp/KbPKJeTPS K5PSJL7w8K49z5fkQ46KzOi4nj9Ax1ZPkZxYCEjiRDhVPtlbC5cOTDuFM3XJNxpz wLWcqlWpxhRhHg1JuOC9NeXmExlfOIyvST4DgvNSXtLvb8xo0Y0hmy6QRLN7duZa +MiNIpzZYdO8zBKRKjXecLeMhrw/gI7p4rKgalrGZAgSlTY3kOCObeqNxDfAFCXU tarLaXQkRnmXQg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:26 2025 by rpki-client