This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json) Hash identifier: gzPdlaPTjl/rAHS7kcXl5vKovCqwSm/fg0yd1TOZoPk= Subject key identifier: 61:AE:1E:90:13:85:D6:9F:11:F4:21:03:84:10:34:15:67:60:E5:26 Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54 Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154 Certificate serial: 019AF509D551CABB5BA2E17B4AF1136DADF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft Manifest number: 0B4F Signing time: Sat 06 Dec 2025 19:00:53 +0000 Manifest this update: Sat 06 Dec 2025 19:00:53 +0000 Manifest next update: Sun 07 Dec 2025 19:00:53 +0000 Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: qFculIJyLAiOmPY5CcHNblWV+4RpGN2txKFEdWrE2+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d5:51:ca:bb:5b:a2:e1:7b:4a:f1:13:6d:ad:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154 Validity Not Before: Dec 6 19:00:53 2025 GMT Not After : Dec 7 19:00:53 2025 GMT Subject: CN=61ae1e901385d69f11f42103841034156760e526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:42:7b:2d:c4:c2:76:5d:18:0d:dd:00:97: b7:c4:7f:25:08:97:9a:83:18:6b:b7:6c:00:2c:40: 3b:71:d2:b8:d3:60:cb:cd:33:22:90:98:7e:9e:e3: 73:a4:c7:4f:39:29:e4:3a:96:52:96:97:62:e8:e7: 5c:e8:70:18:c7:e1:8c:02:dc:a2:75:5c:01:92:29: ad:07:17:0c:c7:e8:0e:78:2b:34:43:20:a0:7c:70: 7c:01:dd:52:28:30:88:74:22:2c:ac:f1:f1:49:60: d9:a3:ae:56:df:cf:14:39:af:be:b8:f1:25:94:31: 81:c1:ce:c7:88:43:0d:9d:41:b9:b3:9a:b9:a2:bc: b9:40:a7:a2:10:62:a6:55:d9:f8:21:81:77:eb:31: 4a:c7:a7:1e:2c:0b:08:46:d8:03:8e:bd:2d:5d:17: fd:0f:86:07:7b:8a:29:ec:e5:ad:23:d2:a1:58:f6: 81:0b:1a:fe:45:41:17:67:2e:8a:41:94:c9:d4:5b: c7:d0:3c:16:d4:da:60:9e:5c:00:6e:34:d3:c9:ab: e0:ea:87:c0:61:01:bb:35:78:1c:40:7e:ef:7f:22: f4:b5:da:0e:1c:ce:5d:03:19:f6:2a:eb:9f:0e:5e: 7e:23:2a:34:3e:d0:bb:cc:e4:25:5c:79:8f:d6:15: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:1E:90:13:85:D6:9F:11:F4:21:03:84:10:34:15:67:60:E5:26 X509v3 Authority Key Identifier: keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:01:60:fe:bd:8b:78:ac:09:f9:c8:51:e4:41:66:ba:22:26: 95:b3:9b:aa:a1:7a:94:2b:d6:de:f8:9b:68:ff:2d:21:26:94: bc:23:ce:9d:43:12:57:ab:54:e1:ee:8b:d1:fe:f2:41:32:b7: 92:1d:fc:63:34:e9:31:a8:4e:77:51:25:ad:2b:ff:9b:6e:3f: bd:97:5f:2f:7d:e8:75:9c:09:e4:65:eb:59:f7:e5:8c:a4:96: 39:6a:86:f4:bc:57:e0:f3:f9:38:83:dc:27:94:4a:a4:ee:b2: e1:04:56:6a:3e:0f:12:a9:ff:a7:bb:c8:43:1d:71:1e:5e:57: 18:40:de:82:29:a4:53:66:c0:2d:4f:ab:0b:cb:15:6f:65:d5: 5f:29:a7:19:e3:d5:65:20:9d:0c:d9:bc:c2:fc:ac:a7:d0:19: 4f:fe:e2:47:21:73:bf:bc:0a:53:c1:ad:84:b5:20:c3:90:65: 43:07:17:b5:61:3b:ee:23:4d:0f:ec:08:8b:a9:f9:ba:8a:fe: e4:97:08:eb:5e:8e:73:b5:3e:e8:ae:dd:8b:df:97:34:12:54: 90:76:f1:5c:53:4b:fd:3b:7e:42:68:d1:ee:99:31:9a:56:68: 9a:36:8f:e6:57:2e:33:86:e2:4f:56:c2:23:a6:d7:15:29:f0: 83:41:f0:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdVRyrtbouF7SvETba32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw YWQxNTQwHhcNMjUxMjA2MTkwMDUzWhcNMjUxMjA3MTkwMDUzWjAzMTEwLwYDVQQD Eyg2MWFlMWU5MDEzODVkNjlmMTFmNDIxMDM4NDEwMzQxNTY3NjBlNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI1Cey3EwnZdGA3dAJe3xH8lCJea gxhrt2wALEA7cdK402DLzTMikJh+nuNzpMdPOSnkOpZSlpdi6Odc6HAYx+GMAtyi dVwBkimtBxcMx+gOeCs0QyCgfHB8Ad1SKDCIdCIsrPHxSWDZo65W388UOa++uPEl lDGBwc7HiEMNnUG5s5q5ory5QKeiEGKmVdn4IYF36zFKx6ceLAsIRtgDjr0tXRf9 D4YHe4op7OWtI9KhWPaBCxr+RUEXZy6KQZTJ1FvH0DwW1NpgnlwAbjTTyavg6ofA YQG7NXgcQH7vfyL0tdoOHM5dAxn2KuufDl5+Iyo0PtC7zOQlXHmP1hWQxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGuHpAThdafEfQhA4QQNBVnYOUmMB8GA1UdIwQY MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wFg/r2L eKwJ+chR5EFmuiImlbObqqF6lCvW3vibaP8tISaUvCPOnUMSV6tU4e6L0f7yQTK3 kh38YzTpMahOd1ElrSv/m24/vZdfL33odZwJ5GXrWffljKSWOWqG9LxX4PP5OIPc J5RKpO6y4QRWaj4PEqn/p7vIQx1xHl5XGEDegimkU2bALU+rC8sVb2XVXymnGePV ZSCdDNm8wvysp9AZT/7iRyFzv7wKU8GthLUgw5BlQwcXtWE77iNND+wIi6n5uor+ 5JcI616Oc7U+6K7di9+XNBJUkHbxXFNL/Tt+QmjR7pkxmlZomjaP5lcuM4biT1bC I6bXFSnwg0HwpQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:08:42 2025 by rpki-client