This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json) Hash identifier: Z2x11yp9k8a1dTzH7ySCwfxK0VpX6pad1KabRqighpk= Subject key identifier: 38:DC:D0:4A:B8:DB:17:8B:B7:F1:6C:BC:38:77:77:89:CB:09:75:8A Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Certificate serial: 019B285246281EFD2554F758A47916ECAA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft Manifest number: 0A03 Signing time: Tue 16 Dec 2025 18:00:39 +0000 Manifest this update: Tue 16 Dec 2025 18:00:39 +0000 Manifest next update: Wed 17 Dec 2025 18:00:39 +0000 Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=) 2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: c23jSRX7/L0FsFgYG4AWCkB94N12HECvbMS6z0U3qRg=) 3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:46:28:1e:fd:25:54:f7:58:a4:79:16:ec:aa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8 Validity Not Before: Dec 16 18:00:39 2025 GMT Not After : Dec 17 18:00:39 2025 GMT Subject: CN=38dcd04ab8db178bb7f16cbc38777789cb09758a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:96:73:2d:f7:0d:8a:00:e9:96:14:35:32: 31:02:92:94:cd:c2:3b:1b:fd:dd:7e:41:d1:b6:e8: 3d:da:03:96:98:81:7d:b3:b0:93:db:e1:e3:36:07: 3f:eb:a8:d2:58:d7:30:95:23:e0:64:0b:e3:ba:28: ad:d9:f9:c5:45:4a:e3:17:df:f0:c9:20:e7:66:8f: 91:b8:ff:7a:0b:25:58:65:5a:ec:cc:7a:f6:7e:51: d0:c4:0b:0c:32:20:64:c4:17:74:97:e1:28:45:88: 80:2d:5f:df:44:76:59:b9:b9:76:23:10:b3:f4:ae: f1:89:fd:34:ce:d5:a2:5f:5d:1a:69:df:21:6d:9d: b1:7c:a1:23:45:f1:e7:44:52:22:35:75:3e:f4:74: 8d:b0:c4:a3:37:cb:b1:37:21:51:6b:dc:b3:8b:db: 3d:5a:62:0f:10:2d:09:f7:0a:bd:1b:cc:d7:15:ef: 78:68:12:f3:22:51:73:dc:32:f9:ad:fa:64:f1:3e: df:00:c7:9a:63:93:8e:e6:32:23:bd:74:3b:d2:a4: 51:62:78:c5:39:c0:4c:c0:14:71:82:02:35:16:94: 40:24:b3:ac:bb:d6:39:0c:15:b6:9b:c3:75:94:ca: 83:06:68:cc:8b:34:1b:aa:48:d4:26:53:f9:6f:ee: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:D0:4A:B8:DB:17:8B:B7:F1:6C:BC:38:77:77:89:CB:09:75:8A X509v3 Authority Key Identifier: keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b0:4b:43:d3:16:32:5c:9e:d4:d1:7f:30:e9:da:5c:bb:09: 90:75:68:a9:0c:9a:09:44:74:39:84:f2:b2:ba:90:cd:9a:c5: 8d:34:da:94:2a:a1:82:7c:27:86:c1:9f:e1:5c:3f:69:05:92: f6:40:61:e3:79:2f:d0:22:f4:33:1f:83:a4:48:73:2c:5b:cc: 1a:1e:b3:a1:cf:e4:2b:41:cf:3b:d6:fa:9d:c5:8a:c1:aa:67: 89:86:90:85:4f:93:2b:7e:1d:a9:18:62:f2:34:50:6f:33:0b: 14:16:eb:fc:36:19:60:ff:71:3d:8a:87:3a:2f:9b:88:98:9d: 9d:bc:b4:13:d3:46:b2:96:40:58:e5:e8:05:67:61:7b:2a:29: e3:3e:7e:79:c3:09:5e:fd:05:2e:7b:be:40:08:60:8d:57:56: 8e:09:fd:de:03:3b:05:87:21:fe:f2:6a:8c:6a:d0:07:7a:ec: 95:7a:97:23:d2:b7:9c:d5:f3:71:3b:6f:6d:31:58:dc:34:60: b0:ea:43:2e:27:7d:f9:a5:99:a1:e0:6d:b4:58:f6:11:d1:11: 67:3f:42:8d:3e:81:5b:66:18:e8:74:0f:35:89:98:5a:99:59: 11:68:eb:f6:f2:59:56:68:fe:61:87:47:a5:94:4d:c5:aa:5c: 53:9d:4e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUkYoHv0lVPdYpHkW7KoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0 YTdiYTgwHhcNMjUxMjE2MTgwMDM5WhcNMjUxMjE3MTgwMDM5WjAzMTEwLwYDVQQD EygzOGRjZDA0YWI4ZGIxNzhiYjdmMTZjYmMzODc3Nzc4OWNiMDk3NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseiWcy33DYoA6ZYUNTIxApKUzcI7 G/3dfkHRtug92gOWmIF9s7CT2+HjNgc/66jSWNcwlSPgZAvjuiit2fnFRUrjF9/w ySDnZo+RuP96CyVYZVrszHr2flHQxAsMMiBkxBd0l+EoRYiALV/fRHZZubl2IxCz 9K7xif00ztWiX10aad8hbZ2xfKEjRfHnRFIiNXU+9HSNsMSjN8uxNyFRa9yzi9s9 WmIPEC0J9wq9G8zXFe94aBLzIlFz3DL5rfpk8T7fAMeaY5OO5jIjvXQ70qRRYnjF OcBMwBRxggI1FpRAJLOsu9Y5DBW2m8N1lMqDBmjMizQbqkjUJlP5b+680QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjc0Eq42xeLt/FsvDh3d4nLCXWKMB8GA1UdIwQY MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7BLQ9MW Mlye1NF/MOnaXLsJkHVoqQyaCUR0OYTysrqQzZrFjTTalCqhgnwnhsGf4Vw/aQWS 9kBh43kv0CL0Mx+DpEhzLFvMGh6zoc/kK0HPO9b6ncWKwapniYaQhU+TK34dqRhi 8jRQbzMLFBbr/DYZYP9xPYqHOi+biJidnby0E9NGspZAWOXoBWdheyop4z5+ecMJ Xv0FLnu+QAhgjVdWjgn93gM7BYch/vJqjGrQB3rslXqXI9K3nNXzcTtvbTFY3DRg sOpDLid9+aWZoeBttFj2EdERZz9CjT6BW2YY6HQPNYmYWplZEWjr9vJZVmj+YYdH pZRNxapcU51O2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 23:21:36 2025 by rpki-client