This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json) Hash identifier: pqfZrbzBa3PcMUMHNids+EeP/y36ZEmaK9gMvC724mA= Subject key identifier: 59:7C:BD:6E:B9:58:8F:FD:AC:E2:62:75:C0:D3:C0:80:BB:CF:ED:10 Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e Certificate serial: 019AF164589AF8933F0529D130D320E5DD96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft Manifest number: 05C5 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: JLhNSrHhpvSRGx9BRVfaVP2j2hjlxo+j8HpZM6iwKvc=) 2: OBVrhxJJoBc-VRBg3UgoLatO8jw.roa (hash: KCv58SPJtOd1CZuOt1f7SzknAaoYC3n9p/ssJu75MPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:58:9a:f8:93:3f:05:29:d1:30:d3:20:e5:dd:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=597cbd6eb9588ffdace26275c0d3c080bbcfed10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:9f:ea:d2:c9:fb:af:8a:e9:15:d6:3c:01: 29:eb:b0:24:2f:1d:6a:92:09:82:d0:45:13:73:0c: a9:8d:0e:09:9f:8a:16:79:c3:2a:71:2d:7c:15:97: c2:0b:38:01:c1:96:8e:b9:b5:86:6b:51:dd:60:a5: 9a:38:35:48:c2:96:fa:28:d1:95:fb:45:60:a2:a7: c2:a5:21:84:4c:4d:42:d1:d3:21:b0:32:ec:14:f6: ba:27:24:40:0e:60:01:14:c2:73:80:e6:3f:b7:c0: 38:c5:91:8d:8e:2b:7a:60:51:0d:ce:74:51:71:57: 24:bd:0b:7e:94:dd:be:d8:42:03:17:26:98:fb:58: 26:4f:4a:70:43:4b:80:a1:f7:8b:fd:43:e3:62:76: 3a:ee:7c:a4:3c:2d:e3:5c:70:0f:d4:82:c8:ba:10: 75:c9:5e:c7:84:54:9a:2f:45:24:f7:c1:c0:d6:99: b1:7e:8e:8b:94:4c:72:e9:c3:ea:d2:6d:46:b2:f2: d1:71:92:3f:06:92:0d:76:83:c3:ee:78:f3:1e:38: db:86:f1:4a:39:a4:75:8b:a2:96:33:33:09:c0:b6: ca:94:df:cb:4d:41:fc:6d:5e:e6:fb:ee:8c:95:6f: ce:bc:f9:d6:48:d0:c5:65:ca:62:7e:8d:39:65:50: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:BD:6E:B9:58:8F:FD:AC:E2:62:75:C0:D3:C0:80:BB:CF:ED:10 X509v3 Authority Key Identifier: keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:11:f0:19:75:e4:dd:83:4a:29:50:a2:5b:11:d4:22:97: 5d:fe:1c:82:0e:1f:61:94:ab:d0:99:9d:71:5d:a2:92:6e:fd: f0:19:d2:23:f9:c3:79:d2:fa:5e:a1:df:38:59:1f:5a:d7:a2: f6:f6:2b:67:0b:96:40:56:14:96:15:86:6e:6a:b6:eb:a0:48: 3a:a9:04:58:12:1a:97:5f:3f:d8:bc:37:a3:06:9b:aa:b6:ec: ac:95:e2:e0:15:d8:f8:ef:4e:0c:39:0a:5f:72:28:35:2a:06: 16:54:16:95:a5:15:9a:27:8a:bd:ea:5b:e2:13:7e:12:39:0a: d2:02:60:e1:8f:74:89:11:d1:d6:e5:ea:df:c8:86:ee:f9:e9: 16:97:99:a6:b3:b7:61:08:1c:a7:2e:e4:fa:b6:54:10:7d:81: 0c:79:f6:5f:35:a0:25:78:3d:cf:48:55:62:6d:41:4c:33:b2: 90:e4:05:42:16:ba:2c:b0:66:eb:0c:ad:1b:24:06:01:43:6c: f4:e0:42:61:63:95:24:1f:b6:1f:d2:b6:9a:67:0b:af:83:69: 0e:65:cd:ec:15:0a:5c:14:c3:96:ca:b5:6f:01:12:e9:76:64: 37:9b:15:c8:70:68:29:8d:8d:f6:02:2b:7b:78:86:f0:98:8d: 00:71:c4:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFia+JM/BSnRMNMg5d2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk NjYxNWUwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg1OTdjYmQ2ZWI5NTg4ZmZkYWNlMjYyNzVjMGQzYzA4MGJiY2ZlZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt6f6tLJ+6+K6RXWPAEp67AkLx1q kgmC0EUTcwypjQ4Jn4oWecMqcS18FZfCCzgBwZaOubWGa1HdYKWaODVIwpb6KNGV +0VgoqfCpSGETE1C0dMhsDLsFPa6JyRADmABFMJzgOY/t8A4xZGNjit6YFENznRR cVckvQt+lN2+2EIDFyaY+1gmT0pwQ0uAofeL/UPjYnY67nykPC3jXHAP1ILIuhB1 yV7HhFSaL0Uk98HA1pmxfo6LlExy6cPq0m1GsvLRcZI/BpINdoPD7njzHjjbhvFK OaR1i6KWMzMJwLbKlN/LTUH8bV7m++6MlW/OvPnWSNDFZcpifo05ZVAFlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl8vW65WI/9rOJidcDTwIC7z+0QMB8GA1UdIwQY MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt MWNmNzFkZjgyOGQ4LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4 LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSIR8Bl1 5N2DSilQolsR1CKXXf4cgg4fYZSr0JmdcV2ikm798BnSI/nDedL6XqHfOFkfWtei 9vYrZwuWQFYUlhWGbmq266BIOqkEWBIal18/2Lw3owabqrbsrJXi4BXY+O9ODDkK X3IoNSoGFlQWlaUVmieKvepb4hN+EjkK0gJg4Y90iRHR1uXq38iG7vnpFpeZprO3 YQgcpy7k+rZUEH2BDHn2XzWgJXg9z0hVYm1BTDOykOQFQha6LLBm6wytGyQGAUNs 9OBCYWOVJB+2H9K2mmcLr4NpDmXN7BUKXBTDlsq1bwES6XZkN5sVyHBoKY2N9gIr e3iG8JiNAHHEgA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:43 2025 by rpki-client