This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json) Hash identifier: BApOVexy+yNOpMUtgbGG8vZphGcjNPA41TExKwvQ45M= Subject key identifier: 02:9E:F5:F7:55:B8:31:70:23:01:78:9E:29:41:4D:79:A4:73:DF:58 Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Certificate serial: 019AF12E29514DDD5A24AE18DF8CE40F5E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: 3OZ5EJBPx2W+hTKTXUdPeDwt8hC5kXU/PL4G99AxpcY=) 2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:51:4d:dd:5a:24:ae:18:df:8c:e4:0f:5e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=029ef5f755b831702301789e29414d79a473df58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:cc:56:6d:41:da:85:f6:3c:f6:cb:e3:a6: e1:a5:82:3c:a7:8c:93:9d:8d:a9:98:ef:10:0d:34: ec:4e:b5:db:f0:23:3a:9b:54:1d:d3:ef:74:d4:14: 7b:dc:aa:d9:40:c8:a1:0f:0c:c3:b7:a9:a1:de:e7: e5:99:65:24:3d:bd:f9:9b:33:35:77:5f:e6:67:22: b4:5b:c9:61:25:ff:b1:95:c5:d6:aa:56:6b:5e:0a: 49:0b:65:45:6f:47:da:3f:4f:8e:40:66:96:71:0b: 60:e1:09:a9:3e:85:b1:5d:b8:8e:6b:2b:9c:62:35: 85:ff:6b:fc:b1:31:46:cb:3b:70:72:24:d2:8e:69: c6:40:f9:2f:e9:ab:8c:29:23:af:ec:e0:72:cd:9d: bf:b8:92:fb:21:e1:5e:f3:60:ef:3d:17:1c:6b:a6: 38:b5:75:27:cb:af:86:5d:27:c8:49:30:fc:56:a7: 61:69:b8:27:bf:fe:65:b3:50:6b:1b:99:a2:ce:84: fb:26:a6:b3:f2:a8:9e:18:79:83:ea:28:a5:85:17: 32:16:a6:bc:2a:e5:af:12:d8:a0:1b:5a:3c:ec:13: 28:fc:6f:c6:c3:9a:0d:95:6b:8c:20:63:ea:b7:9e: 52:13:f8:47:78:60:16:e0:c4:bc:ba:86:93:1c:f7: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:F5:F7:55:B8:31:70:23:01:78:9E:29:41:4D:79:A4:73:DF:58 X509v3 Authority Key Identifier: keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:55:20:0a:54:6e:25:15:b1:62:2d:2c:1f:24:c2:77:18:b8: 32:72:d3:a0:b0:7d:63:f4:2e:04:2e:d9:e7:f6:26:ee:4c:76: a7:28:29:eb:94:6d:7e:c0:e0:8d:3b:57:71:37:c8:b3:7d:f7: 05:54:b2:6c:dc:b6:ca:70:b3:bf:72:d4:57:d1:f1:e1:bd:3e: 1e:e6:05:c2:61:0c:71:76:d7:6f:bc:e2:6b:ad:35:24:26:14: 48:bc:a7:93:ec:36:46:13:3a:da:45:00:82:26:71:41:5a:a6: 8b:3d:21:6e:f3:b7:50:7a:fc:c0:02:13:f6:c8:00:86:6f:b5: 46:1b:93:88:12:bf:b1:5f:53:8d:59:7d:72:37:6f:1b:bc:33: 54:e4:15:de:89:79:9a:47:90:12:ab:d4:bf:6d:65:b7:ff:f4: a6:2e:6a:f8:3f:66:73:4e:55:be:f7:d8:7a:3c:f7:91:5c:bd: 77:c9:cf:be:3c:bf:cc:13:08:6f:e4:89:da:f0:f1:0a:df:ba: 4b:08:24:3e:09:d6:f4:7c:d8:ee:42:c9:c8:05:d4:49:ed:5f: fa:e4:a9:f0:38:27:ab:4b:bc:3c:a3:af:fe:38:ca:89:f5:cb: 3f:60:cf:b8:ef:ec:77:41:a2:75:bf:5d:cd:b4:dc:b1:7a:fe: 47:0b:da:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLilRTd1aJK4Y34zkD15ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm ZmM0ZjgwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD EygwMjllZjVmNzU1YjgzMTcwMjMwMTc4OWUyOTQxNGQ3OWE0NzNkZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYHMVm1B2oX2PPbL46bhpYI8p4yT nY2pmO8QDTTsTrXb8CM6m1Qd0+901BR73KrZQMihDwzDt6mh3uflmWUkPb35mzM1 d1/mZyK0W8lhJf+xlcXWqlZrXgpJC2VFb0faP0+OQGaWcQtg4QmpPoWxXbiOayuc YjWF/2v8sTFGyztwciTSjmnGQPkv6auMKSOv7OByzZ2/uJL7IeFe82DvPRcca6Y4 tXUny6+GXSfISTD8Vqdhabgnv/5ls1BrG5mizoT7Jqaz8qieGHmD6iilhRcyFqa8 KuWvEtigG1o87BMo/G/Gw5oNlWuMIGPqt55SE/hHeGAW4MS8uoaTHPeU6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKe9fdVuDFwIwF4nilBTXmkc99YMB8GA1UdIwQY MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1UgClRu JRWxYi0sHyTCdxi4MnLToLB9Y/QuBC7Z5/Ym7kx2pygp65RtfsDgjTtXcTfIs333 BVSybNy2ynCzv3LUV9Hx4b0+HuYFwmEMcXbXb7zia601JCYUSLynk+w2RhM62kUA giZxQVqmiz0hbvO3UHr8wAIT9sgAhm+1RhuTiBK/sV9TjVl9cjdvG7wzVOQV3ol5 mkeQEqvUv21lt//0pi5q+D9mc05VvvfYejz3kVy9d8nPvjy/zBMIb+SJ2vDxCt+6 SwgkPgnW9HzY7kLJyAXUSe1f+uSp8Dgnq0u8PKOv/jjKifXLP2DPuO/sd0Gidb9d zbTcsXr+RwvaLg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:24 2025 by rpki-client