This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json) Hash identifier: tjatXppcyAvFHugLxDlrbqTjelzSWbAUat8gMbAwD3c= Subject key identifier: D1:46:03:63:BF:CB:81:42:A6:03:C7:B7:44:92:AA:E2:56:82:0D:36 Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944 Certificate serial: 019AF19B65083A1893E9C5F6BF07A92D6B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft Manifest number: 11DB Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: Onw68oxHw2jFoLISCndpr/IjNab08wZ1PW3w+4Ef/bA=) 2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:65:08:3a:18:93:e9:c5:f6:bf:07:a9:2d:6b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=d1460363bfcb8142a603c7b74492aae256820d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:9d:60:62:eb:42:1d:66:8d:f3:94:34:db: 7b:7b:fb:9a:90:54:69:8b:dd:f7:4b:77:56:c6:ea: a1:71:27:d1:1c:74:44:03:52:2a:18:e9:88:31:d5: 94:7e:a3:d1:53:d4:9c:54:45:f8:9b:fa:20:42:9a: 3a:9b:f0:0e:b8:ac:46:8b:98:b9:38:36:fc:04:fb: 31:83:33:2b:80:99:ea:43:82:86:f8:72:da:99:6b: 2d:1b:96:a4:62:ad:06:5c:cf:9d:27:34:66:62:2f: 45:33:57:91:78:46:9c:06:26:f5:6e:23:91:6d:0a: be:5c:56:c6:12:cf:43:04:c8:55:af:f7:e9:d6:06: b8:47:0f:0b:37:f6:ca:5b:58:5b:1d:12:13:a0:78: 22:e4:43:37:90:e0:99:da:44:a3:29:a1:14:7a:d3: 18:eb:41:01:a1:e9:3e:74:d2:f2:83:c6:a1:70:50: 3e:3b:61:60:1e:c3:57:6c:60:50:4c:c8:48:26:5d: 2c:b9:4a:82:6e:6c:75:e6:c2:d6:7d:5e:5b:de:8c: 25:3a:b3:8d:e6:f8:59:7c:e3:cf:66:4e:ea:05:66: 6d:13:78:c4:7a:0b:13:74:fe:fc:32:d3:9e:65:ae: b0:76:f0:bd:6b:e7:69:af:2f:93:af:ed:80:ad:0f: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:03:63:BF:CB:81:42:A6:03:C7:B7:44:92:AA:E2:56:82:0D:36 X509v3 Authority Key Identifier: keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:93:e2:22:d5:b0:1a:0c:dc:30:11:b3:78:50:f3:85:9a:5d: 6a:b0:3d:c0:35:b8:5c:99:cb:4f:82:8b:0b:9d:dd:9b:0f:87: bc:60:b7:be:a0:2b:4d:31:da:d2:ee:06:d3:60:e4:e9:67:94: b3:2f:7c:d6:01:ad:48:6a:30:cb:1b:95:7d:1b:41:2b:d2:f7: a7:33:3e:24:a9:ce:c3:7c:bf:85:19:fb:5c:5f:f3:36:5f:cf: ae:2a:c3:bb:24:90:bf:ba:32:8d:c3:2b:10:8e:88:c2:74:d4: 6b:99:7e:43:85:ab:e7:c7:58:f5:60:25:62:b0:7e:50:71:49: 98:7f:23:c4:35:66:43:bb:53:3b:1d:fb:b4:26:05:a4:c4:7d: 25:f8:39:bb:af:b0:f3:cc:38:85:d1:3b:91:69:e3:36:b9:db: f4:7a:74:72:09:58:dc:e0:4c:14:94:31:38:3e:3d:af:94:ff: 21:17:9b:f6:46:79:db:b1:9d:c0:be:79:7e:bd:1f:70:a0:b9: 4b:45:70:16:1f:e6:0c:9b:b1:a7:06:93:c7:03:a3:d0:98:0b: a7:10:ad:dc:82:28:23:19:47:f4:c1:92:8b:1b:26:3a:4f:1e: dd:3b:f3:07:d5:f2:e1:b6:65:75:cc:04:2b:0d:78:d9:56:87: ca:4c:f8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2UIOhiT6cX2vwepLWtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDNjOWFmNmNmNTJiOGEzOTBiNThmMDBiMTRhODg3MTAz MzY5NDQwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhkMTQ2MDM2M2JmY2I4MTQyYTYwM2M3Yjc0NDkyYWFlMjU2ODIwZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphmdYGLrQh1mjfOUNNt7e/uakFRp i933S3dWxuqhcSfRHHREA1IqGOmIMdWUfqPRU9ScVEX4m/ogQpo6m/AOuKxGi5i5 ODb8BPsxgzMrgJnqQ4KG+HLamWstG5akYq0GXM+dJzRmYi9FM1eReEacBib1biOR bQq+XFbGEs9DBMhVr/fp1ga4Rw8LN/bKW1hbHRIToHgi5EM3kOCZ2kSjKaEUetMY 60EBoek+dNLyg8ahcFA+O2FgHsNXbGBQTMhIJl0suUqCbmx15sLWfV5b3owlOrON 5vhZfOPPZk7qBWZtE3jEegsTdP78MtOeZa6wdvC9a+dpry+Tr+2ArQ/0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFGA2O/y4FCpgPHt0SSquJWgg02MB8GA1UdIwQY MBaAFOHTya9s9SuKOQtY8AsUqIcQM2lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQt Y2M3Njc5ZjE4MDJmLzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQtY2M3Njc5ZjE4MDJm LzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApPiItWw GgzcMBGzeFDzhZpdarA9wDW4XJnLT4KLC53dmw+HvGC3vqArTTHa0u4G02Dk6WeU sy981gGtSGowyxuVfRtBK9L3pzM+JKnOw3y/hRn7XF/zNl/PrirDuySQv7oyjcMr EI6IwnTUa5l+Q4Wr58dY9WAlYrB+UHFJmH8jxDVmQ7tTOx37tCYFpMR9Jfg5u6+w 88w4hdE7kWnjNrnb9Hp0cglY3OBMFJQxOD49r5T/IReb9kZ527GdwL55fr0fcKC5 S0VwFh/mDJuxpwaTxwOj0JgLpxCt3IIoIxlH9MGSixsmOk8e3TvzB9Xy4bZldcwE Kw142VaHykz4uA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:36 2025 by rpki-client