This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json) Hash identifier: S+J/kHrVpoKuUJ/hCZNbW3a4q+Ph9u6wX1kaWn02DZQ= Subject key identifier: 59:0B:5C:7F:CB:59:70:5C:8B:A1:64:17:D7:14:B3:CF:56:D1:49:41 Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c Certificate serial: 019AF31BA8F35BCB4CFAF3DD8CFAA51EDD59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft Manifest number: 0E93 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=) 2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: DHYRunXfCZ6UiDkmCFbASjIlDc872blt+Pop53y+08s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a8:f3:5b:cb:4c:fa:f3:dd:8c:fa:a5:1e:dd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=590b5c7fcb59705c8ba16417d714b3cf56d14941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:77:6e:c8:85:05:67:8a:56:12:ae:00:13: 31:7a:9d:eb:22:99:bb:8f:88:7b:60:1f:23:79:ad: c2:26:01:fa:9a:85:6b:ef:d5:c5:b1:d1:1b:00:72: 7a:7d:0e:91:8c:c1:9d:75:fb:11:ef:ba:76:9b:a4: ad:00:c9:ce:dc:b5:9e:3f:d6:7c:98:3f:8c:c2:43: 89:90:69:66:7d:6d:9a:4c:80:76:fb:cf:48:22:cd: f1:f1:ce:f8:89:13:15:c8:7e:d7:38:62:f5:d5:1f: 1b:78:0b:48:2b:8b:23:37:5d:d3:e2:21:29:a3:95: 66:2a:fa:70:8d:e3:41:07:27:4c:be:a2:25:aa:10: 12:ac:a0:04:6f:0e:88:89:bb:5d:cd:aa:82:04:78: bc:a8:1e:45:ac:fd:1c:3c:30:37:29:16:42:14:ac: 20:26:52:15:df:5c:1f:65:ea:28:58:03:fc:55:09: 6e:60:de:e2:2a:62:3e:7b:39:e4:75:b1:19:7d:8f: 45:77:fb:6e:db:1c:85:34:f2:7e:46:1a:3f:7a:61: 26:15:ec:3d:43:78:65:cf:b4:1a:70:b9:10:51:0a: 46:9b:23:9f:10:8a:79:51:ac:31:72:60:93:42:c3: 8a:ad:59:ed:94:5d:96:86:49:bb:16:04:9e:a5:d9: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:5C:7F:CB:59:70:5C:8B:A1:64:17:D7:14:B3:CF:56:D1:49:41 X509v3 Authority Key Identifier: keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8a:c4:2b:57:35:ba:15:80:09:33:23:35:ae:fb:11:6b:91: c6:8b:83:63:48:27:01:02:41:32:e7:0a:b6:c6:ed:5e:e1:55: 79:8b:90:ed:16:51:9c:92:46:3b:fe:ea:c1:db:ee:18:87:61: e6:34:ad:9d:d2:1e:b9:c3:38:c8:64:50:b0:89:55:23:43:dd: 2c:2f:a0:03:25:4c:aa:8f:5a:e6:0b:38:e1:63:6d:c7:cd:2c: 07:81:5e:b2:b6:e6:29:f3:06:06:b3:d1:c5:db:e7:4a:b3:84: 7c:58:30:23:28:1f:9a:d4:c2:81:8e:85:d1:39:66:8e:1a:50: 88:54:85:b3:75:01:12:85:ab:4d:98:bf:1d:8b:5c:cf:3a:61: cf:ab:0a:75:ed:eb:32:bf:60:e3:4f:4e:e9:bf:d0:37:f9:12: 88:69:39:63:22:02:3b:41:39:93:81:a5:07:c5:86:72:28:af: 1a:bd:c4:29:36:94:a4:26:54:b8:1a:ac:3c:93:f6:3f:46:4c: 07:70:09:c8:fd:8d:58:03:32:4c:cb:a4:27:a9:52:3f:7e:91: 39:d7:d3:29:8c:0e:a9:40:21:50:cb:1e:da:c0:c3:dd:84:13: d6:d5:dc:a9:ad:d3:3c:7c:ba:4b:df:e6:54:bb:38:32:55:1a: 65:c3:15:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6jzW8tM+vPdjPqlHt1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODBjNzU5ZjU1OGY5YzZiZTg4ZGQyMjZhNDM5ZDk5Yzll YWNmMGMwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD Eyg1OTBiNWM3ZmNiNTk3MDVjOGJhMTY0MTdkNzE0YjNjZjU2ZDE0OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Z3bsiFBWeKVhKuABMxep3rIpm7 j4h7YB8jea3CJgH6moVr79XFsdEbAHJ6fQ6RjMGddfsR77p2m6StAMnO3LWeP9Z8 mD+MwkOJkGlmfW2aTIB2+89IIs3x8c74iRMVyH7XOGL11R8beAtIK4sjN13T4iEp o5VmKvpwjeNBBydMvqIlqhASrKAEbw6IibtdzaqCBHi8qB5FrP0cPDA3KRZCFKwg JlIV31wfZeooWAP8VQluYN7iKmI+eznkdbEZfY9Fd/tu2xyFNPJ+Rho/emEmFew9 Q3hlz7QacLkQUQpGmyOfEIp5UawxcmCTQsOKrVntlF2Whkm7FgSepdnfWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkLXH/LWXBci6FkF9cUs89W0UlBMB8GA1UdIwQY MBaAFHOAx1n1WPnGvojdImpDnZnJ6s8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iODAwMDAtMDYwOS00ODhmLWEzNGEt MmNhNjI2Y2ZlZDQ1LzEvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iODAwMDAtMDYwOS00ODhmLWEzNGEtMmNhNjI2Y2ZlZDQ1 LzEvYzRESFdmVlktY2EtaU4waWFrT2RtY25xend3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYrEK1c1 uhWACTMjNa77EWuRxouDY0gnAQJBMucKtsbtXuFVeYuQ7RZRnJJGO/7qwdvuGIdh 5jStndIeucM4yGRQsIlVI0PdLC+gAyVMqo9a5gs44WNtx80sB4FesrbmKfMGBrPR xdvnSrOEfFgwIygfmtTCgY6F0TlmjhpQiFSFs3UBEoWrTZi/HYtczzphz6sKde3r Mr9g409O6b/QN/kSiGk5YyICO0E5k4GlB8WGciivGr3EKTaUpCZUuBqsPJP2P0ZM B3AJyP2NWAMyTMukJ6lSP36ROdfTKYwOqUAhUMse2sDD3YQT1tXcqa3TPHy6S9/m VLs4MlUaZcMVSg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:06 2025 by rpki-client