This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json) Hash identifier: UfbsDhACzjNsxtwT6yoHufhcM7GIDjBl69bAIeqUcdY= Subject key identifier: 6A:0F:3E:DC:9F:1E:4A:4A:BC:D7:BD:08:39:1F:88:EE:D2:EC:23:81 Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Certificate serial: 019B5ABF24978AE7A45058094D4E7C58C07E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft Manifest number: 0829 Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: YDLgBN+QGiA/2eaSi9+/2BFtpzebetWcRrQKU5AT85I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:24:97:8a:e7:a4:50:58:09:4d:4e:7c:58:c0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=6a0f3edc9f1e4a4abcd7bd08391f88eed2ec2381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6f:81:22:7d:cb:aa:e6:e5:07:4e:df:ba:38: fe:4a:83:2b:0c:f6:40:39:c0:3c:d6:98:0e:e4:f5: 50:49:52:cd:23:71:5b:16:ea:ac:69:8d:2f:0b:08: e8:08:a8:02:4f:76:f7:b4:5a:c9:ef:cc:f7:02:db: a2:22:fd:c6:28:da:7f:a5:c8:32:41:11:cc:06:1a: 7a:2d:c8:ba:c9:76:dd:ad:5e:45:dd:e6:3a:68:f5: 0d:48:a3:20:c1:3f:4b:bd:ae:a1:a2:b9:a3:a9:4e: 8c:d1:2e:db:71:f7:2f:2c:43:78:b5:81:82:1d:9d: 2f:33:0e:fd:58:fb:65:a9:6e:35:7b:fa:5d:52:c4: 60:9a:97:98:5d:62:cb:8c:a4:4c:aa:0e:75:08:7f: 30:44:49:bb:2b:13:28:ed:3c:ea:c1:a1:16:80:d1: bb:3c:fc:dc:8c:0b:c3:24:8f:55:2f:63:51:90:b3: 08:28:12:fa:20:11:3f:a2:46:78:88:cc:7c:25:94: 21:91:52:d2:93:8b:53:73:1b:6c:4b:78:ca:09:64: 94:8c:74:88:8f:7a:20:4a:ce:ce:1e:88:43:3f:0f: 06:78:8d:de:e1:83:d6:82:df:f5:1b:ea:af:ca:70: 72:44:0d:19:1b:d0:dd:16:80:d3:58:f3:38:8b:c0: a5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:3E:DC:9F:1E:4A:4A:BC:D7:BD:08:39:1F:88:EE:D2:EC:23:81 X509v3 Authority Key Identifier: keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:05:90:f3:a5:6d:2f:63:52:49:b7:6d:4c:ea:a4:77:f0: 95:d0:16:15:0b:9c:3d:6c:ff:80:40:bf:ca:f0:e9:45:a0:e7: 49:18:ed:5a:50:c9:de:c5:19:26:d1:3b:ec:7e:87:99:24:16: 2e:67:27:fa:b6:85:b4:74:b1:60:0e:08:d1:2a:19:2e:99:6a: 1a:dc:a5:51:4c:e3:79:91:d4:55:80:73:db:97:cc:79:dd:aa: e4:4d:74:3a:b2:ce:a0:ed:21:81:d5:a5:82:3f:a5:4b:91:06: 03:74:3c:28:9a:45:52:94:4f:c8:53:f2:7d:2f:44:2a:5d:a9: 51:c0:12:9e:1c:63:88:2e:63:92:a1:05:11:1c:35:2f:c2:82: a0:cd:06:64:71:62:b5:d6:58:5e:9c:ae:87:2c:23:c6:bb:8b: 2e:fa:48:26:e8:05:3f:95:be:e0:f7:0d:2e:49:35:01:2e:ae: bd:dd:0d:cc:9a:1b:ca:6f:7c:72:6c:d0:de:1b:c8:f0:24:6b: d3:85:74:76:c2:76:b7:de:0f:8e:b0:8e:ec:74:6f:4a:9d:36: 34:e2:32:a3:be:31:f6:f4:02:64:ad:7e:bc:7d:50:2e:0e:1f: 57:d4:8e:7c:ea:cc:44:f4:6d:b8:5e:43:a8:0a:c6:20:75:1d: 21:89:ad:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavySXiuekUFgJTU58WMB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYWUxNGU4NjNjMWIxNWExZWEyZTQ5YTJlYjUwNDg1M2Y3 NWI2YmQwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD Eyg2YTBmM2VkYzlmMWU0YTRhYmNkN2JkMDgzOTFmODhlZWQyZWMyMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W+BIn3LqublB07fujj+SoMrDPZA OcA81pgO5PVQSVLNI3FbFuqsaY0vCwjoCKgCT3b3tFrJ78z3AtuiIv3GKNp/pcgy QRHMBhp6Lci6yXbdrV5F3eY6aPUNSKMgwT9Lva6hormjqU6M0S7bcfcvLEN4tYGC HZ0vMw79WPtlqW41e/pdUsRgmpeYXWLLjKRMqg51CH8wREm7KxMo7TzqwaEWgNG7 PPzcjAvDJI9VL2NRkLMIKBL6IBE/okZ4iMx8JZQhkVLSk4tTcxtsS3jKCWSUjHSI j3ogSs7OHohDPw8GeI3e4YPWgt/1G+qvynByRA0ZG9DdFoDTWPM4i8ClvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoPPtyfHkpKvNe9CDkfiO7S7COBMB8GA1UdIwQY MBaAFOCuFOhjwbFaHqLkmi61BIU/dba9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYt Yzc5MDVmYjM4NmE3LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYtYzc5MDVmYjM4NmE3 LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBQFkPOl bS9jUkm3bUzqpHfwldAWFQucPWz/gEC/yvDpRaDnSRjtWlDJ3sUZJtE77H6HmSQW Lmcn+raFtHSxYA4I0SoZLplqGtylUUzjeZHUVYBz25fMed2q5E10OrLOoO0hgdWl gj+lS5EGA3Q8KJpFUpRPyFPyfS9EKl2pUcASnhxjiC5jkqEFERw1L8KCoM0GZHFi tdZYXpyuhywjxruLLvpIJugFP5W+4PcNLkk1AS6uvd0NzJobym98cmzQ3hvI8CRr 04V0dsJ2t94PjrCO7HRvSp02NOIyo74x9vQCZK1+vH1QLg4fV9SOfOrMRPRtuF5D qArGIHUdIYmtcA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client