This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json) Hash identifier: 2fIJVCBcT8iNazwOuTfOxTM9Od6h8t1iNzQdLXqIg48= Subject key identifier: 7E:67:96:C8:89:4B:EE:2F:24:29:59:D4:41:E0:6B:61:A4:44:5F:22 Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Certificate serial: 019AF2094B2EB4687064BCE776341B523BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft Manifest number: 0436 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: rz9EVnnrhxweX9373ddtZlOuGRJkQ3T1X/i8Gf61l0o=) 2: 6CvazhQ-TchHGMOoGitdZcJhEs4.roa (hash: igPSm0jfypQMdE/eZVfZNp5wdbowi2Qa/IcHnzjteY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4b:2e:b4:68:70:64:bc:e7:76:34:1b:52:3b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=7e6796c8894bee2f242959d441e06b61a4445f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:12:8e:e4:38:8b:6c:23:a8:c2:67:be:24: bf:e6:f3:41:55:c1:22:31:63:12:31:0e:5f:ed:23: 81:00:8f:ed:93:43:85:35:a7:ad:6d:68:c4:88:66: f2:92:04:f3:b8:ce:64:b7:7b:b3:b8:c2:d9:1e:ee: 0b:5b:44:c1:7e:0c:67:f1:73:74:fa:44:19:89:c9: 56:e2:99:94:a6:75:30:ec:0c:f6:ae:74:d7:d4:61: db:25:3e:31:f0:9b:f2:6b:64:2a:8f:9e:82:a3:da: 70:d4:f2:30:d3:07:27:41:65:4a:5b:d5:1b:22:c3: dc:8c:5e:76:85:65:08:e8:db:1d:fd:d8:bd:f7:0d: 15:42:39:4c:ef:d6:34:bd:95:73:5d:12:dc:46:6e: 29:f7:b2:5f:d5:a2:09:3a:72:c8:57:aa:c2:f5:a2: f3:d4:13:2f:c9:e0:f2:ff:10:e8:94:f5:4f:ff:39: 8e:ca:f1:47:45:c9:e9:78:45:f1:e2:36:58:8e:8f: 8b:83:b3:cf:06:11:89:db:d7:17:ca:c9:e8:0d:8f: 40:8d:a2:70:c6:6f:24:d6:38:85:83:1b:98:5c:5f: f7:95:07:90:9a:fe:36:9a:7f:61:6b:9a:b6:92:34: b8:97:ff:ca:0f:1a:79:9e:b6:bc:5e:cc:b0:c0:fb: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:67:96:C8:89:4B:EE:2F:24:29:59:D4:41:E0:6B:61:A4:44:5F:22 X509v3 Authority Key Identifier: keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:d4:c7:ba:4e:09:53:ce:51:b4:25:6c:c0:5a:28:c8:37: a1:3d:12:97:cc:a3:8d:c7:f2:c8:9d:24:1f:79:31:2d:d6:b2: 5c:5d:37:9f:2f:cd:c4:97:f9:84:17:02:01:22:5a:b8:ee:47: 8d:d3:24:fd:88:c2:f6:22:0a:34:ae:d9:f3:dd:a9:53:db:22: d3:47:d3:12:5f:ea:35:6e:33:8c:a6:19:85:16:4a:8f:43:67: 4c:56:29:b5:92:be:52:4f:45:af:61:21:fa:dc:f2:81:6d:f0: 4f:dd:19:89:c3:95:18:a4:88:4c:65:ed:50:5d:3f:f9:af:02: 71:fd:b4:45:4e:85:29:f5:a1:d0:55:c3:08:2f:1a:d8:34:ec: f6:25:f4:84:11:86:5d:e9:07:b2:4a:90:28:8b:29:b9:ab:c7: bb:da:fa:d6:7e:0a:1c:a7:da:4c:87:0e:e4:47:c6:71:5b:b2: db:4d:01:e2:8b:00:fc:e5:df:61:f9:08:86:b8:a7:f9:25:85: bb:15:1b:fa:f7:e5:d9:18:08:16:8c:e5:9d:e8:18:fa:d8:cb: 89:6f:fd:6e:d8:ea:53:47:99:b8:8d:05:22:a5:24:21:17:f8: 97:16:0b:98:ac:36:12:b5:61:37:05:18:47:20:4c:2b:00:41: 1d:cd:ee:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUsutGhwZLzndjQbUjvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTIxZjg1ZjliZjE3YzAyMDk4N2VhMTMyMGQzZDYzYzU1 YWU0ODkwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg3ZTY3OTZjODg5NGJlZTJmMjQyOTU5ZDQ0MWUwNmI2MWE0NDQ1ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ASjuQ4i2wjqMJnviS/5vNBVcEi MWMSMQ5f7SOBAI/tk0OFNaetbWjEiGbykgTzuM5kt3uzuMLZHu4LW0TBfgxn8XN0 +kQZiclW4pmUpnUw7Az2rnTX1GHbJT4x8Jvya2Qqj56Co9pw1PIw0wcnQWVKW9Ub IsPcjF52hWUI6Nsd/di99w0VQjlM79Y0vZVzXRLcRm4p97Jf1aIJOnLIV6rC9aLz 1BMvyeDy/xDolPVP/zmOyvFHRcnpeEXx4jZYjo+Lg7PPBhGJ29cXysnoDY9AjaJw xm8k1jiFgxuYXF/3lQeQmv42mn9ha5q2kjS4l//KDxp5nra8XsywwPsgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5nlsiJS+4vJClZ1EHga2GkRF8iMB8GA1UdIwQY MBaAFOGiH4X5vxfAIJh+oTINPWPFWuSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUt ODYyNjg0ZWNlYjQ2LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUtODYyNjg0ZWNlYjQ2 LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUjUx7pO CVPOUbQlbMBaKMg3oT0Sl8yjjcfyyJ0kH3kxLdayXF03ny/NxJf5hBcCASJauO5H jdMk/YjC9iIKNK7Z892pU9si00fTEl/qNW4zjKYZhRZKj0NnTFYptZK+Uk9Fr2Eh +tzygW3wT90ZicOVGKSITGXtUF0/+a8Ccf20RU6FKfWh0FXDCC8a2DTs9iX0hBGG XekHskqQKIspuavHu9r61n4KHKfaTIcO5EfGcVuy200B4osA/OXfYfkIhrin+SWF uxUb+vfl2RgIFozlnegY+tjLiW/9btjqU0eZuI0FIqUkIRf4lxYLmKw2ErVhNwUY RyBMKwBBHc3u1g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:04 2025 by rpki-client