This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json) Hash identifier: Wmh3Es/8SVc54nsmT+9M+4puorYGBOU0d2I96rn897g= Subject key identifier: 9D:CC:50:B3:2A:99:4D:3D:1D:1F:36:29:D3:20:E7:1D:E8:11:9D:9E Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965 Certificate serial: 019AF38968DF9E4762E90344F6DE8AF0E591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft Manifest number: 07E3 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: s+Goq2Ufu0+/jnT9sV0XIdWpK1fAjLHc7eO9Isv2ZBg=) 2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:68:df:9e:47:62:e9:03:44:f6:de:8a:f0:e5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=9dcc50b32a994d3d1d1f3629d320e71de8119d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:c1:86:a4:a5:72:6b:94:56:f6:b8:79:b3: 22:36:a4:ed:64:dc:0b:97:72:e9:55:f6:a8:28:ce: 35:5a:04:54:db:e4:5f:01:a6:07:62:bf:eb:ee:c6: 51:b6:4e:3b:50:74:dd:ae:93:26:89:61:b5:44:1b: ba:4c:cd:01:fa:a3:ac:6d:5d:8a:f3:70:f7:45:9e: 50:66:29:07:6b:08:7c:1d:9c:f5:0a:3a:26:b6:c5: f9:9f:83:69:22:60:d8:79:eb:ad:7a:d8:ef:18:66: a1:e4:9a:e3:7c:11:66:90:50:65:32:c6:b6:f9:df: 50:78:21:37:88:e9:5f:71:72:ae:38:69:c5:25:4f: cd:4a:55:78:dd:c3:b7:f2:2c:26:8f:44:1c:dd:6e: e8:4e:20:b8:93:79:30:69:9a:5a:35:72:77:8d:3b: 47:ae:e1:21:a9:df:dc:44:a3:61:de:38:c3:70:82: 2b:84:05:e2:67:be:cf:07:6f:ed:61:c7:32:49:40: 1d:c8:f9:5b:ab:fe:10:6a:53:ef:62:31:fc:2b:f3: d4:2b:6a:a6:55:56:a0:1d:81:5b:b6:b5:92:08:64: e0:d4:46:c4:6c:fe:ac:b7:7c:72:a3:84:4e:1c:f1: 3c:30:ac:ca:7c:56:a4:9a:75:41:76:06:f5:9c:21: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:50:B3:2A:99:4D:3D:1D:1F:36:29:D3:20:E7:1D:E8:11:9D:9E X509v3 Authority Key Identifier: keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ed:30:df:1f:fa:f4:1b:f0:ab:a0:f5:cf:93:31:ee:52:b4: 08:ca:15:1d:32:b3:c2:6c:a9:cd:33:eb:b9:dc:08:b6:c9:85: 20:56:77:01:af:d9:c3:cd:a5:88:15:b4:d3:b3:53:88:8a:bd: 4a:b2:09:70:26:70:b4:b6:cd:91:e7:0b:38:ed:5b:24:4d:ae: 0e:e8:6b:aa:66:a4:27:b7:16:57:25:b8:d5:7a:0b:8f:fa:71: 20:42:4d:02:31:51:a7:26:85:c9:5a:f0:46:2e:d1:79:70:1a: 2d:b8:a7:4c:8e:2f:af:de:f9:54:ea:22:8c:e0:0a:a3:71:39: f3:ea:4c:cc:61:b9:7b:78:89:ec:cb:30:64:ef:c4:db:ee:8c: f0:f2:cd:94:8f:6e:df:23:25:41:50:64:f5:58:ac:cb:7c:04: 26:0e:16:c3:44:fe:db:06:ce:eb:81:99:ee:7b:9c:e6:b6:2c: d3:44:1d:23:a3:68:66:15:2d:19:82:ab:ab:f2:c2:3b:4b:6f: 2a:f6:a3:18:60:09:5a:22:c1:44:66:4b:b3:36:cc:46:33:2f: 4f:36:4e:a8:4e:b4:04:11:09:36:28:67:ad:5e:e9:ce:bb:54: 04:35:7f:0e:29:6c:9b:a4:54:5e:ba:b1:b3:42:f7:d1:3c:26: b4:8e:16:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWjfnkdi6QNE9t6K8OWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMDEyYmNiOWU2ZTc0NzIzNzcyNDc4MWE0YzkxOWZjNWM5 NDE5NjUwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD Eyg5ZGNjNTBiMzJhOTk0ZDNkMWQxZjM2MjlkMzIwZTcxZGU4MTE5ZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTjBhqSlcmuUVva4ebMiNqTtZNwL l3LpVfaoKM41WgRU2+RfAaYHYr/r7sZRtk47UHTdrpMmiWG1RBu6TM0B+qOsbV2K 83D3RZ5QZikHawh8HZz1CjomtsX5n4NpImDYeeutetjvGGah5JrjfBFmkFBlMsa2 +d9QeCE3iOlfcXKuOGnFJU/NSlV43cO38iwmj0Qc3W7oTiC4k3kwaZpaNXJ3jTtH ruEhqd/cRKNh3jjDcIIrhAXiZ77PB2/tYccySUAdyPlbq/4QalPvYjH8K/PUK2qm VVagHYFbtrWSCGTg1EbEbP6st3xyo4ROHPE8MKzKfFakmnVBdgb1nCEnqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3MULMqmU09HR82KdMg5x3oEZ2eMB8GA1UdIwQY MBaAFOABK8uebnRyN3JHgaTJGfxclBllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMt MGRiODhlYzczNDJjLzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMtMGRiODhlYzczNDJj LzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe0w3x/6 9Bvwq6D1z5Mx7lK0CMoVHTKzwmypzTPrudwItsmFIFZ3Aa/Zw82liBW007NTiIq9 SrIJcCZwtLbNkecLOO1bJE2uDuhrqmakJ7cWVyW41XoLj/pxIEJNAjFRpyaFyVrw Ri7ReXAaLbinTI4vr975VOoijOAKo3E58+pMzGG5e3iJ7MswZO/E2+6M8PLNlI9u 3yMlQVBk9Visy3wEJg4Ww0T+2wbO64GZ7nuc5rYs00QdI6NoZhUtGYKrq/LCO0tv KvajGGAJWiLBRGZLszbMRjMvTzZOqE60BBEJNihnrV7pzrtUBDV/Dilsm6RUXrqx s0L30TwmtI4Wbw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:04 2025 by rpki-client