This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft File: 4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json) Hash identifier: O08ULRhc6UMm2f5AQOVjChxkTNHS/93JkWJfSJD9jhU= Subject key identifier: 84:DC:20:DE:B1:11:3F:36:B3:40:B0:42:BE:97:09:4D:08:CF:04:41 Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E Certificate issuer: /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e Certificate serial: 019AF088977F330CE96541F69EE62FE2C28C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft Manifest number: 06C0 Signing time: Fri 05 Dec 2025 22:01:14 +0000 Manifest this update: Fri 05 Dec 2025 22:01:14 +0000 Manifest next update: Sat 06 Dec 2025 22:01:14 +0000 Files and hashes: 1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: Q6g74DF0RAZfi12CLF2n8FfwEa1VPHTnetQmLXH6y0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:97:7f:33:0c:e9:65:41:f6:9e:e6:2f:e2:c2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e Validity Not Before: Dec 5 22:01:14 2025 GMT Not After : Dec 6 22:01:14 2025 GMT Subject: CN=84dc20deb1113f36b340b042be97094d08cf0441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:02:ad:2e:d3:ae:98:ec:83:60:15:6f:86: 14:cc:92:5a:1b:cd:60:47:94:f3:32:61:f0:09:aa: 12:27:8c:57:bb:f0:78:78:23:45:83:92:20:4a:ce: 2f:7f:d7:62:7a:35:5b:fd:1b:01:63:de:fb:4b:b7: de:39:91:8d:84:4b:48:15:38:1f:d9:5a:6e:42:d7: bb:dd:d9:00:92:13:40:54:9d:7e:52:c6:28:4b:26: e2:03:96:22:8e:93:1d:a6:80:2a:a6:87:fe:75:ad: d5:d0:b6:09:1c:9b:d9:58:40:50:20:94:fb:85:c4: 3f:c6:54:21:67:1e:40:0d:cd:6b:dd:60:3e:1e:44: 22:45:e6:cc:50:f6:41:b7:ce:45:d3:ac:51:bf:7c: 37:45:c5:bb:a7:a4:7b:d7:74:82:7d:c4:66:f7:ed: e8:d5:4f:2e:c1:1b:83:fd:6a:e0:2d:f6:62:5d:15: 2b:ff:83:0b:5b:d8:fb:77:e1:6d:28:74:68:8b:59: 5e:a8:bb:b3:ed:0e:a6:fa:ee:00:16:2f:47:a4:e4: b9:10:5a:91:64:69:63:5a:bf:47:11:1d:10:af:6f: 0f:f2:30:af:50:61:2c:50:94:86:7d:b7:c0:cd:b3: e5:80:39:0e:fd:e4:2d:33:b9:70:4c:5b:40:df:b6: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DC:20:DE:B1:11:3F:36:B3:40:B0:42:BE:97:09:4D:08:CF:04:41 X509v3 Authority Key Identifier: keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:94:65:8d:6e:a7:2e:7b:99:31:0a:77:15:6e:7c:94:fa:3c: 7b:86:27:a0:a4:94:59:70:44:a8:38:2a:7b:5a:cd:0a:1a:13: 78:77:1e:9b:72:6c:86:7a:fb:d4:e5:58:1c:f5:16:ec:b3:1e: 97:05:f4:b7:3e:c1:91:ac:64:6c:9b:e9:bb:a0:fd:78:f1:2f: a0:a8:88:cd:e4:9c:1a:4a:b2:59:b9:99:b6:b2:3c:1a:33:9e: 3e:4c:60:49:4e:42:33:a7:58:70:a7:9f:d8:56:a5:82:26:93: a7:c3:ad:a9:e1:05:44:c7:31:86:63:29:9d:36:3f:73:ad:55: 35:b8:64:e1:e4:d7:9f:4e:ed:c4:9b:26:99:c6:5e:5e:87:b9: af:ec:5b:ca:6e:b8:db:f1:62:e2:7d:26:1d:0e:14:36:53:0a: ff:cd:3a:98:2f:d0:7d:4c:2a:6c:c1:ac:ce:29:df:8e:93:a9: e3:02:af:b2:ae:8c:25:fc:f5:e6:bf:b2:69:4f:1b:e3:58:31: 29:87:10:3a:fc:a5:d1:65:ed:92:26:8d:22:91:68:e5:d8:e7: 6a:21:29:75:73:c2:a0:1f:9f:54:e6:0f:cd:93:25:9b:99:4d: c2:78:11:17:b7:b3:54:b6:ec:b5:14:d5:c0:e1:3a:e7:94:05: e2:66:07:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJd/MwzpZUH2nuYv4sKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNzZiYTRkMmI5ZTAwZmJiZjhlYzQzMzExZTkxYjk1NGFh YTUzNmUwHhcNMjUxMjA1MjIwMTE0WhcNMjUxMjA2MjIwMTE0WjAzMTEwLwYDVQQD Eyg4NGRjMjBkZWIxMTEzZjM2YjM0MGIwNDJiZTk3MDk0ZDA4Y2YwNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstsCrS7Trpjsg2AVb4YUzJJaG81g R5TzMmHwCaoSJ4xXu/B4eCNFg5IgSs4vf9diejVb/RsBY977S7feOZGNhEtIFTgf 2VpuQte73dkAkhNAVJ1+UsYoSybiA5YijpMdpoAqpof+da3V0LYJHJvZWEBQIJT7 hcQ/xlQhZx5ADc1r3WA+HkQiRebMUPZBt85F06xRv3w3RcW7p6R713SCfcRm9+3o 1U8uwRuD/WrgLfZiXRUr/4MLW9j7d+FtKHRoi1leqLuz7Q6m+u4AFi9HpOS5EFqR ZGljWr9HER0Qr28P8jCvUGEsUJSGfbfAzbPlgDkO/eQtM7lwTFtA37ZuLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITcIN6xET82s0CwQr6XCU0IzwRBMB8GA1UdIwQY MBaAFOF2uk0rngD7v47EMxHpG5VKqlNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEt ZDc4ZDhhYjZlNjY4LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEtZDc4ZDhhYjZlNjY4 LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZRljW6n LnuZMQp3FW58lPo8e4YnoKSUWXBEqDgqe1rNChoTeHcem3Jshnr71OVYHPUW7LMe lwX0tz7BkaxkbJvpu6D9ePEvoKiIzeScGkqyWbmZtrI8GjOePkxgSU5CM6dYcKef 2FalgiaTp8OtqeEFRMcxhmMpnTY/c61VNbhk4eTXn07txJsmmcZeXoe5r+xbym64 2/Fi4n0mHQ4UNlMK/806mC/QfUwqbMGszinfjpOp4wKvsq6MJfz15r+yaU8b41gx KYcQOvyl0WXtkiaNIpFo5djnaiEpdXPCoB+fVOYPzZMlm5lNwngRF7ezVLbstRTV wOE655QF4mYHjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:04 2025 by rpki-client