This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json) Hash identifier: Vm+UkM/OAek8cX181+ZhqvnctZwL/Q6aehV7xz7gADg= Subject key identifier: 71:4C:FB:87:7F:9A:C0:96:3A:5E:60:F2:0B:82:42:C7:4E:F9:BC:B8 Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Certificate serial: 019B44382273B50BF0BBEF3925F74BA67DE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:01:27 +0000 Manifest this update: Mon 22 Dec 2025 04:01:27 +0000 Manifest next update: Tue 23 Dec 2025 04:01:27 +0000 Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: dFxiseOyILrU0/uBA4HH5qSa2cw9tIFSANgHRyAKECg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:22:73:b5:0b:f0:bb:ef:39:25:f7:4b:a6:7d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6 Validity Not Before: Dec 22 04:01:27 2025 GMT Not After : Dec 23 04:01:27 2025 GMT Subject: CN=714cfb877f9ac0963a5e60f20b8242c74ef9bcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:58:b6:c0:fb:e8:67:71:4b:79:fb:c1:86: 07:fe:09:a8:4b:67:89:2f:62:45:80:25:46:e4:6a: 64:e4:6b:3f:5e:c7:67:51:1f:12:ef:33:cc:dd:7a: 70:78:7a:a9:7a:8a:27:df:18:04:1c:33:ce:b3:1a: 72:11:13:fe:fa:48:6e:b3:b6:42:72:e6:e0:bd:92: 37:05:e5:74:c0:1c:b2:2b:96:eb:79:84:a5:a0:19: 1d:34:b7:48:15:92:6a:59:f4:5a:86:55:eb:5c:72: 6f:8a:3a:45:1c:28:85:78:8d:52:f8:25:11:21:c0: e8:3c:31:c5:f8:bc:22:6a:91:93:8c:48:31:34:0e: 16:98:1a:75:d8:1a:cb:77:a0:5a:22:f2:cd:eb:ce: af:53:01:68:12:4c:21:6f:9e:54:88:f1:79:da:6c: 39:91:61:cc:df:ec:2b:5c:a1:94:f4:ee:c7:bb:45: 0c:79:2b:5b:b9:99:c5:29:69:e0:2e:e9:c6:82:8b: e9:76:02:57:94:cf:bf:c1:75:f2:6b:f5:3a:1c:dc: aa:07:40:f6:b9:45:e1:41:6c:6e:be:60:75:a0:f1: 0f:1c:cc:53:f4:49:df:37:c2:87:47:b1:95:e5:a3: 86:a4:9b:6d:95:f3:a7:d0:1d:45:b5:a8:aa:5b:e7: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4C:FB:87:7F:9A:C0:96:3A:5E:60:F2:0B:82:42:C7:4E:F9:BC:B8 X509v3 Authority Key Identifier: keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9a:96:80:c3:84:9e:0b:60:84:17:9e:96:16:d4:3e:03:b1: cd:b8:9f:fe:48:bf:1c:c5:09:cb:e6:31:bc:90:2e:cf:06:6f: c6:33:d4:d1:d5:fb:5d:0e:ee:ca:3f:e2:8f:20:d0:13:47:d5: dc:95:19:03:b8:7d:94:85:9a:a3:0d:18:c1:af:62:fa:d3:65: b0:94:34:bf:91:82:aa:66:f4:fa:98:eb:f2:e1:8b:76:56:08: 23:93:ad:5f:79:eb:85:3c:1a:35:1c:0c:16:9d:18:70:f7:95: f4:96:fc:13:cf:34:08:30:ef:96:5d:e0:39:c8:1c:5a:da:95: db:9e:68:72:e9:18:06:b4:b9:36:a9:4d:92:5d:a0:d2:9e:99: 51:62:89:65:ba:5f:6c:04:93:ad:bf:fd:a1:6f:46:1b:07:32: 27:1a:31:7c:d2:06:9c:84:af:17:1b:b4:8c:84:1c:cf:6c:23: 27:da:89:85:07:24:55:d0:a0:f1:5f:5d:fb:5c:98:9e:88:6e: a3:6b:ff:81:dc:8a:72:f2:33:39:e0:72:1a:2a:77:6b:d7:48: 52:1a:f7:4e:ac:e2:24:4f:96:73:41:96:db:e9:f3:1d:c3:07: 9c:05:0c:7e:3b:74:49:ff:ff:36:d6:d6:b5:d8:d2:80:a5:86: be:2e:a8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOCJztQvwu+85JfdLpn3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh NTY3ZjYwHhcNMjUxMjIyMDQwMTI3WhcNMjUxMjIzMDQwMTI3WjAzMTEwLwYDVQQD Eyg3MTRjZmI4NzdmOWFjMDk2M2E1ZTYwZjIwYjgyNDJjNzRlZjliY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9YtsD76GdxS3n7wYYH/gmoS2eJ L2JFgCVG5Gpk5Gs/XsdnUR8S7zPM3XpweHqpeoon3xgEHDPOsxpyERP++khus7ZC cubgvZI3BeV0wByyK5breYSloBkdNLdIFZJqWfRahlXrXHJvijpFHCiFeI1S+CUR IcDoPDHF+LwiapGTjEgxNA4WmBp12BrLd6BaIvLN686vUwFoEkwhb55UiPF52mw5 kWHM3+wrXKGU9O7Hu0UMeStbuZnFKWngLunGgovpdgJXlM+/wXXya/U6HNyqB0D2 uUXhQWxuvmB1oPEPHMxT9EnfN8KHR7GV5aOGpJttlfOn0B1FtaiqW+egtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFM+4d/msCWOl5g8guCQsdO+by4MB8GA1UdIwQY MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3 LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5qWgMOE ngtghBeelhbUPgOxzbif/ki/HMUJy+YxvJAuzwZvxjPU0dX7XQ7uyj/ijyDQE0fV 3JUZA7h9lIWaow0Ywa9i+tNlsJQ0v5GCqmb0+pjr8uGLdlYII5OtX3nrhTwaNRwM Fp0YcPeV9Jb8E880CDDvll3gOcgcWtqV255ocukYBrS5NqlNkl2g0p6ZUWKJZbpf bASTrb/9oW9GGwcyJxoxfNIGnISvFxu0jIQcz2wjJ9qJhQckVdCg8V9d+1yYnohu o2v/gdyKcvIzOeByGip3a9dIUhr3TqziJE+Wc0GW2+nzHcMHnAUMfjt0Sf//NtbW tdjSgKWGvi6oyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:07:43 2025 by rpki-client