This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json) Hash identifier: +NZbuA2T/6cP51CUa6sZsUwR30oh8XUO6g0i7aaBhH8= Subject key identifier: 5B:5E:F5:DA:1E:E9:E0:75:0D:B2:57:E2:DF:D4:E8:6F:CA:ED:DA:B3 Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Certificate serial: 019B0DB72189B1BB26A964582413A541AE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 14:01:04 +0000 Manifest this update: Thu 11 Dec 2025 14:01:04 +0000 Manifest next update: Fri 12 Dec 2025 14:01:04 +0000 Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: vLFJrrlvPzLSy7E3zAGgiZ8MF12YChYHrrRZoPaAauo=) 2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=) 3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:21:89:b1:bb:26:a9:64:58:24:13:a5:41:ae:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Validity Not Before: Dec 11 14:01:04 2025 GMT Not After : Dec 12 14:01:04 2025 GMT Subject: CN=5b5ef5da1ee9e0750db257e2dfd4e86fcaeddab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:a9:58:6f:0c:64:08:c0:8f:ac:5e:31:fb: 80:0c:43:5c:8e:f6:e0:80:93:40:fd:23:40:f1:a5: 34:d3:af:7e:ce:e2:33:d8:ac:ad:f7:b5:c5:b3:af: 8b:62:ba:96:e9:58:e3:8f:7f:38:48:cb:5a:e4:49: 50:77:04:dc:43:b1:d7:6a:c2:08:4f:21:87:05:a2: 17:50:4b:5e:17:cd:fe:38:35:de:63:7a:cb:e9:18: 16:c8:5c:4e:f4:41:d8:03:55:11:14:48:da:a8:27: 6e:4f:f0:0d:3d:8e:77:96:96:b7:6c:9d:3d:97:dc: 63:65:cb:c5:1d:44:8f:e6:b1:f8:73:b6:b2:19:00: d1:95:5d:a1:fa:1d:1c:e2:36:4d:c9:f2:8d:15:b2: a1:6e:76:9e:a7:04:64:9b:b5:7d:4d:8c:2b:29:87: 56:aa:7e:62:80:5f:de:1e:a7:b4:4d:4f:d9:ae:47: d0:74:10:4d:0b:0b:f7:f7:ae:e2:4c:99:33:e5:3f: ff:4b:50:2b:09:79:8e:75:46:33:e9:13:0a:d9:eb: b0:a1:ea:4c:17:7d:b2:a5:a7:78:ea:55:7a:8e:92: 96:6e:66:01:f7:d8:50:d0:f7:73:a5:8f:5f:8d:6a: e9:8d:0d:83:6f:9b:64:b4:7b:fe:e8:4a:ae:6d:5f: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:F5:DA:1E:E9:E0:75:0D:B2:57:E2:DF:D4:E8:6F:CA:ED:DA:B3 X509v3 Authority Key Identifier: keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:51:a2:83:4e:82:22:2e:d4:c5:06:48:be:fd:78:10:ef:e9: 2e:95:ee:8f:dd:7c:cb:6a:5d:5f:42:fe:c9:26:4c:12:cf:61: f0:c9:a8:9f:a3:06:5c:7f:ca:d8:58:b7:86:03:04:12:25:15: 2b:87:4f:a2:71:58:14:63:52:e4:05:c7:40:8a:01:10:3d:4b: 30:b5:c1:02:a4:c9:64:a3:fe:59:fb:da:69:4d:eb:d8:3b:08: 8a:bd:fc:32:8d:be:a1:1e:ab:a5:66:8b:d6:69:04:32:c9:ef: 61:14:47:50:70:24:7c:fb:e7:d8:c1:39:0b:2b:a2:58:79:8e: c0:b9:28:73:50:6a:ac:6b:3b:4c:ca:ce:17:4c:b1:6b:b9:db: 37:17:35:67:58:c9:4d:33:f8:1d:95:b5:9d:24:4c:de:0f:c7: 31:2b:d7:1e:ea:50:cb:03:2a:81:6b:8c:ec:52:0f:21:28:bc: 6f:d2:6e:a4:40:84:bc:25:8f:49:85:e2:cc:46:d7:8f:e3:f5: 03:d8:04:f3:cb:ae:d8:ce:9b:13:56:b8:9b:38:ed:0f:d3:cd: 35:10:84:52:24:89:3b:f4:05:05:c2:0f:8c:38:ec:71:88:2b: 31:60:3f:15:68:49:11:f3:e7:44:a1:72:32:7c:75:1b:d4:72: d3:fe:59:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtyGJsbsmqWRYJBOlQa5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3 NDU4NDEwHhcNMjUxMjExMTQwMTA0WhcNMjUxMjEyMTQwMTA0WjAzMTEwLwYDVQQD Eyg1YjVlZjVkYTFlZTllMDc1MGRiMjU3ZTJkZmQ0ZTg2ZmNhZWRkYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjqpWG8MZAjAj6xeMfuADENcjvbg gJNA/SNA8aU0069+zuIz2Kyt97XFs6+LYrqW6Vjjj384SMta5ElQdwTcQ7HXasII TyGHBaIXUEteF83+ODXeY3rL6RgWyFxO9EHYA1URFEjaqCduT/ANPY53lpa3bJ09 l9xjZcvFHUSP5rH4c7ayGQDRlV2h+h0c4jZNyfKNFbKhbnaepwRkm7V9TYwrKYdW qn5igF/eHqe0TU/ZrkfQdBBNCwv3967iTJkz5T//S1ArCXmOdUYz6RMK2euwoepM F32ypad46lV6jpKWbmYB99hQ0PdzpY9fjWrpjQ2Db5tktHv+6EqubV9dMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFte9doe6eB1DbJX4t/U6G/K7dqzMB8GA1UdIwQY MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFGig06C Ii7UxQZIvv14EO/pLpXuj918y2pdX0L+ySZMEs9h8Mmon6MGXH/K2Fi3hgMEEiUV K4dPonFYFGNS5AXHQIoBED1LMLXBAqTJZKP+WfvaaU3r2DsIir38Mo2+oR6rpWaL 1mkEMsnvYRRHUHAkfPvn2ME5CyuiWHmOwLkoc1BqrGs7TMrOF0yxa7nbNxc1Z1jJ TTP4HZW1nSRM3g/HMSvXHupQywMqgWuM7FIPISi8b9JupECEvCWPSYXizEbXj+P1 A9gE88uu2M6bE1a4mzjtD9PNNRCEUiSJO/QFBcIPjDjscYgrMWA/FWhJEfPnRKFy Mnx1G9Ry0/5Z1Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:31:08 2025 by rpki-client