This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json) Hash identifier: N5+/B41Vd9bCgLO0+BX8lMPAYMejntILJ6FyHe287AQ= Subject key identifier: DD:53:B9:5C:FA:67:A5:EC:A5:B5:C5:D2:12:31:AB:B4:87:4B:A3:1E Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc Certificate serial: 019AF4659A43F6BADC0D6B35483A5067C08B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft Manifest number: 16C9 Signing time: Sat 06 Dec 2025 16:01:30 +0000 Manifest this update: Sat 06 Dec 2025 16:01:30 +0000 Manifest next update: Sun 07 Dec 2025 16:01:30 +0000 Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: 7X2jwTQ86rByj3mUdmTzMG7ASPHTxCn3elsi0NnxysU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9a:43:f6:ba:dc:0d:6b:35:48:3a:50:67:c0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc Validity Not Before: Dec 6 16:01:30 2025 GMT Not After : Dec 7 16:01:30 2025 GMT Subject: CN=dd53b95cfa67a5eca5b5c5d21231abb4874ba31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:ab:71:71:71:dc:19:02:3f:ff:16:6e:a1: b2:de:3b:00:6f:75:a2:84:e1:0d:c5:68:2b:a2:bc: c1:85:9d:7f:53:50:34:2f:32:57:06:e8:bc:b4:5e: b1:d8:1a:37:66:49:86:15:f6:32:92:9c:7a:4d:b4: e1:4a:54:49:17:11:79:8c:ad:2e:4b:4d:af:1e:b4: f5:06:7f:7d:29:7c:ae:66:c4:8b:ed:e7:7c:04:7d: ef:bf:77:2c:5e:21:14:51:1d:86:f0:53:e5:2e:52: d2:0b:5a:30:3d:3f:f0:5c:88:31:cc:37:02:49:84: 42:88:c8:24:fe:ae:2e:1b:04:47:36:e6:81:65:4f: 64:f6:8b:3e:b6:be:49:ee:8e:f9:b9:d8:e7:ad:b0: ae:8e:45:26:c5:96:c8:e6:c4:06:a2:20:07:1a:a1: de:3d:87:85:88:63:66:49:fb:3a:60:91:e4:18:36: 93:f7:3e:18:01:63:df:b8:1a:b7:c2:15:9b:73:c4: d7:eb:d5:0a:4b:0c:b7:b5:2f:b2:f2:8c:75:a9:9c: 2b:d0:67:5b:d1:67:30:91:40:b6:91:34:69:00:53: 6f:7a:88:e5:44:c8:e8:28:10:7b:63:d9:bc:ac:9b: 7f:1f:bf:85:ea:94:42:1a:28:c1:83:8a:1c:65:0c: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:B9:5C:FA:67:A5:EC:A5:B5:C5:D2:12:31:AB:B4:87:4B:A3:1E X509v3 Authority Key Identifier: keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a3:e8:a2:2d:af:5e:62:5b:04:8a:32:b8:42:86:70:f4:56: 94:ef:9c:69:0c:b1:8a:7c:ba:28:d7:0b:81:1d:ad:99:71:d6: 9b:0a:3c:ad:7b:7c:ed:d5:88:06:82:7d:da:6a:52:dd:23:c8: c1:a4:6a:b0:22:69:fd:f2:d4:40:6e:23:11:f2:9e:b6:f3:92: ec:8b:18:24:cf:36:ed:a1:04:80:a5:6e:77:3c:3a:47:d9:85: 5d:77:89:81:5a:22:38:b8:17:1b:71:34:6d:3a:3c:f9:42:aa: 3e:e0:74:26:04:11:4f:c4:cf:d0:80:64:11:34:34:31:45:22: 9b:ca:61:74:14:96:38:b0:1b:cb:41:55:a4:b2:e4:e8:33:0c: 49:a7:29:b3:54:65:3e:d8:be:48:16:54:b1:e2:b8:ad:96:2e: 91:0c:94:48:48:fc:ea:75:46:58:42:65:64:b6:97:7f:8a:f4: 5c:0d:3a:8c:1c:1e:69:f9:99:3b:bc:58:d2:d4:09:eb:3e:ba: dd:19:40:fb:50:90:ff:29:9b:cd:19:3b:c5:78:06:85:2a:f2: 20:dc:af:e3:a7:a7:7d:ae:92:1e:65:17:9b:92:43:95:40:57: bd:d2:3e:af:15:6d:6e:c4:a6:f4:00:96:43:43:12:71:22:7b: bd:f8:1f:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZpD9rrcDWs1SDpQZ8CLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj Y2VkZmMwHhcNMjUxMjA2MTYwMTMwWhcNMjUxMjA3MTYwMTMwWjAzMTEwLwYDVQQD EyhkZDUzYjk1Y2ZhNjdhNWVjYTViNWM1ZDIxMjMxYWJiNDg3NGJhMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc2rcXFx3BkCP/8WbqGy3jsAb3Wi hOENxWgrorzBhZ1/U1A0LzJXBui8tF6x2Bo3ZkmGFfYykpx6TbThSlRJFxF5jK0u S02vHrT1Bn99KXyuZsSL7ed8BH3vv3csXiEUUR2G8FPlLlLSC1owPT/wXIgxzDcC SYRCiMgk/q4uGwRHNuaBZU9k9os+tr5J7o75udjnrbCujkUmxZbI5sQGoiAHGqHe PYeFiGNmSfs6YJHkGDaT9z4YAWPfuBq3whWbc8TX69UKSwy3tS+y8ox1qZwr0Gdb 0WcwkUC2kTRpAFNveojlRMjoKBB7Y9m8rJt/H7+F6pRCGijBg4ocZQyHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1TuVz6Z6XspbXF0hIxq7SHS6MeMB8GA1UdIwQY MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5 LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaPooi2v XmJbBIoyuEKGcPRWlO+caQyxiny6KNcLgR2tmXHWmwo8rXt87dWIBoJ92mpS3SPI waRqsCJp/fLUQG4jEfKetvOS7IsYJM827aEEgKVudzw6R9mFXXeJgVoiOLgXG3E0 bTo8+UKqPuB0JgQRT8TP0IBkETQ0MUUim8phdBSWOLAby0FVpLLk6DMMSacps1Rl Pti+SBZUseK4rZYukQyUSEj86nVGWEJlZLaXf4r0XA06jBweafmZO7xY0tQJ6z66 3RlA+1CQ/ymbzRk7xXgGhSryINyv46enfa6SHmUXm5JDlUBXvdI+rxVtbsSm9ACW Q0MScSJ7vfgfwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:17 2025 by rpki-client