This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json) Hash identifier: v5Kv+/QvGn2Uk9/TBUroYQQBEQ7HOm2KDyBghUhRPp0= Subject key identifier: B4:0E:2C:71:33:9D:92:61:DC:F1:EA:B1:D6:09:91:9B:67:1C:84:7F Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Certificate serial: 019B2D7940290726E4013F7880A1099D388E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 18:01:19 +0000 Manifest this update: Wed 17 Dec 2025 18:01:19 +0000 Manifest next update: Thu 18 Dec 2025 18:01:19 +0000 Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: 6Rh6gCnabMSMwS6KBnBozSPRwpoBEVNDMhAVSyykK8E=) 2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:40:29:07:26:e4:01:3f:78:80:a1:09:9d:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Validity Not Before: Dec 17 18:01:19 2025 GMT Not After : Dec 18 18:01:19 2025 GMT Subject: CN=b40e2c71339d9261dcf1eab1d609919b671c847f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:e5:5b:3e:2f:66:8e:49:1f:78:f2:83:be: 24:41:3a:ff:0a:4f:04:ed:a1:f2:fa:94:a1:1e:a1: 9f:e5:3c:35:9a:2d:2a:f8:e1:7a:81:0f:09:83:0e: 96:eb:23:3d:57:82:b4:01:ef:5f:28:f3:aa:d4:c8: 9f:51:f7:be:21:cb:b4:35:0e:d4:45:37:32:13:d7: c6:34:ab:70:bd:8a:ca:05:85:67:83:98:0c:d4:ee: 26:a2:ae:60:b0:97:8f:82:d3:73:76:3d:62:0e:09: 05:29:1c:05:62:6b:6d:98:4e:1a:13:33:82:bc:ba: ab:67:67:6e:26:38:e2:58:b8:14:da:ac:32:a3:5b: 2f:fa:28:fd:6b:a6:88:3f:dd:e1:54:b5:c9:af:c8: 30:3a:ed:13:cc:fe:a6:78:9c:91:c7:8b:41:a7:f0: ba:17:dd:af:d9:8f:b6:55:51:1a:09:44:a3:db:53: 26:b7:5c:4a:66:57:53:64:16:db:f4:a3:ef:86:b5: 3d:0a:ae:2b:42:a7:b2:46:3f:e9:c7:fb:a8:f3:fb: 02:0f:e5:51:56:2f:59:2c:40:ab:08:7c:57:0f:66: ce:1e:e8:ab:c9:62:a4:6e:74:d3:01:51:46:02:9c: 2d:1c:40:78:8d:d9:f6:f8:97:58:d0:3c:f0:d5:82: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:2C:71:33:9D:92:61:DC:F1:EA:B1:D6:09:91:9B:67:1C:84:7F X509v3 Authority Key Identifier: keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:b1:b9:fe:65:f9:23:9a:82:11:f8:49:5b:97:b8:12:c7: fc:0d:df:a5:d8:ce:9f:45:03:36:6c:83:8c:78:f4:60:8f:57: ff:31:78:13:85:7f:da:9a:2b:30:ba:9c:89:a3:cf:bb:05:97: f6:fd:8b:e8:1f:57:ed:16:b2:5d:f1:d0:50:0d:e2:dd:58:a0: f8:1b:99:b4:54:2e:1d:c6:20:be:2b:a6:6c:f2:a0:e2:b3:1d: 12:11:ea:09:4a:f8:d8:a1:74:07:e9:05:05:63:29:39:3e:58: 91:10:03:f5:d2:6e:93:fb:91:82:d9:55:57:dc:e0:c6:ca:17: 6c:a3:02:ba:65:4f:a2:88:a3:42:9f:53:40:65:8f:c0:c0:b2: 9a:23:dd:2c:50:22:c2:68:51:f0:95:ad:78:e2:55:b7:d1:f9: 08:27:be:bb:3d:6a:c5:e6:b1:cc:52:e4:30:39:2f:97:40:72: 13:d8:f9:fe:3e:55:9a:1b:29:c5:0d:b0:35:65:b4:81:92:70: 71:c9:b8:6d:60:fa:06:78:e9:ab:66:4e:ad:c5:54:d9:aa:45: 2d:ad:79:5f:56:7f:a5:29:dd:b7:34:20:4a:5b:bf:f3:f7:12: 12:78:4c:cf:03:57:bf:14:a6:b6:fd:37:58:63:81:70:91:55: 38:3c:9f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteUApBybkAT94gKEJnTiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzNmYzE5OGM3NzJmNTliOGVkZTUyOTg1NmI1MmVhMTc5 YTRlMzgwHhcNMjUxMjE3MTgwMTE5WhcNMjUxMjE4MTgwMTE5WjAzMTEwLwYDVQQD EyhiNDBlMmM3MTMzOWQ5MjYxZGNmMWVhYjFkNjA5OTE5YjY3MWM4NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRTlWz4vZo5JH3jyg74kQTr/Ck8E 7aHy+pShHqGf5Tw1mi0q+OF6gQ8Jgw6W6yM9V4K0Ae9fKPOq1MifUfe+Icu0NQ7U RTcyE9fGNKtwvYrKBYVng5gM1O4moq5gsJePgtNzdj1iDgkFKRwFYmttmE4aEzOC vLqrZ2duJjjiWLgU2qwyo1sv+ij9a6aIP93hVLXJr8gwOu0TzP6meJyRx4tBp/C6 F92v2Y+2VVEaCUSj21Mmt1xKZldTZBbb9KPvhrU9Cq4rQqeyRj/px/uo8/sCD+VR Vi9ZLECrCHxXD2bOHuiryWKkbnTTAVFGApwtHEB4jdn2+JdY0Dzw1YJ0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQOLHEznZJh3PHqsdYJkZtnHIR/MB8GA1UdIwQY MBaAFOLD/BmMdy9ZuO3lKYVrUuoXmk44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2Et NWYyOWM5ZjU0OWU4LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2EtNWYyOWM5ZjU0OWU4 LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuOxuf5l +SOaghH4SVuXuBLH/A3fpdjOn0UDNmyDjHj0YI9X/zF4E4V/2porMLqciaPPuwWX 9v2L6B9X7RayXfHQUA3i3Vig+BuZtFQuHcYgviumbPKg4rMdEhHqCUr42KF0B+kF BWMpOT5YkRAD9dJuk/uRgtlVV9zgxsoXbKMCumVPooijQp9TQGWPwMCymiPdLFAi wmhR8JWteOJVt9H5CCe+uz1qxeaxzFLkMDkvl0ByE9j5/j5VmhspxQ2wNWW0gZJw ccm4bWD6Bnjpq2ZOrcVU2apFLa15X1Z/pSndtzQgSlu/8/cSEnhMzwNXvxSmtv03 WGOBcJFVODyf8A== -----END CERTIFICATE-----Generated at Thu Dec 18 02:11:50 2025 by rpki-client