This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json) Hash identifier: iuK+1z+9KQSFFurlrTgNHP/18tbCEEus/2NPByCOWak= Subject key identifier: EB:6E:9F:5C:A5:3D:DE:E7:EE:4B:B8:BC:78:00:D4:15:AA:54:98:0B Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Certificate serial: 019B0E9297273627B30DA2E2DC1665146BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:00:46 +0000 Manifest this update: Thu 11 Dec 2025 18:00:46 +0000 Manifest next update: Fri 12 Dec 2025 18:00:46 +0000 Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: egiv2fwd6xR+OrF09x9tufq4/1IuqNdj+iFsb48RnBg=) 2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:97:27:36:27:b3:0d:a2:e2:dc:16:65:14:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178 Validity Not Before: Dec 11 18:00:46 2025 GMT Not After : Dec 12 18:00:46 2025 GMT Subject: CN=eb6e9f5ca53ddee7ee4bb8bc7800d415aa54980b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:45:c1:d1:00:1e:2b:2b:41:63:95:60:fc: 6b:7e:3a:0b:16:e1:1e:fd:e4:df:c7:d3:46:5d:de: 72:90:c0:fc:98:e4:fc:9f:30:d1:1f:f2:64:11:22: 4e:11:13:2d:94:6d:9f:39:5c:d1:7d:33:2c:b6:71: c6:d8:84:5a:1a:0d:7e:26:dd:2d:8e:a8:29:d1:e2: 5a:c3:51:9d:2d:1c:4f:61:87:60:7c:8c:c1:14:58: a4:60:0d:fa:ec:e2:2c:d2:f3:11:86:45:7b:b8:1e: b3:46:bb:18:07:f2:0e:dd:65:cc:8b:e9:1f:a5:20: b6:71:5a:51:df:de:20:4f:ae:56:3c:e7:cc:ea:e5: 08:36:9c:a3:3f:31:99:b6:5a:1d:25:a6:32:29:b9: be:f8:40:4f:ed:bb:23:c8:36:dd:09:2a:1d:c1:10: d8:00:55:68:c3:1e:e9:1e:e7:88:9f:18:d6:bb:02: 3c:e0:3b:e9:34:8d:ef:43:ee:48:8d:0d:65:6f:22: be:e0:d5:4a:fb:97:67:bb:c3:c0:d3:63:7b:15:ae: 95:f5:57:1c:0c:71:47:2b:83:4b:cf:a7:16:d4:42: 3a:24:26:9d:de:7e:d6:69:5e:56:72:de:34:19:1a: 7b:69:2c:c6:1f:33:b6:32:f3:7c:b5:c6:e8:33:46: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6E:9F:5C:A5:3D:DE:E7:EE:4B:B8:BC:78:00:D4:15:AA:54:98:0B X509v3 Authority Key Identifier: keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:cd:51:ea:5a:99:b6:0e:86:08:a7:30:8f:79:04:b4:3e: a9:00:f3:de:24:b4:17:cc:22:f6:f7:03:cc:b8:6b:94:ff:5e: c2:b2:9c:0a:cc:c8:98:50:e4:ec:b4:c4:b2:3d:11:44:b4:7d: 33:8b:4f:bd:c8:12:06:d3:1c:d8:a5:f6:c8:82:35:dd:98:43: 86:59:1d:95:48:11:ef:08:85:53:e9:a8:e4:ce:2a:03:0c:8f: 10:f1:a6:82:9b:8d:2f:e9:d6:88:66:1f:5e:c4:3b:dd:92:03: 32:c2:15:db:66:9e:79:65:49:a3:ad:d5:35:7a:c5:eb:61:0b: 26:5f:90:69:9a:6e:12:b1:53:8b:4d:8e:a0:1c:c8:cc:3b:75: 0a:5a:2b:6a:db:9f:83:7a:0c:6d:6e:27:19:a0:d5:a4:c9:a7: 9a:ea:be:90:1d:45:7f:32:0b:d9:c4:dd:28:e0:49:aa:32:69: a2:51:d7:bf:07:a1:ec:be:e8:53:8b:aa:d1:3e:0f:d0:2f:00: e4:6b:be:05:55:54:a3:4b:2a:21:0e:82:0b:af:8f:e6:36:a8: 0b:c7:41:c7:27:e1:7f:07:db:f9:33:73:2d:6d:9a:75:ae:eb: a8:7e:b7:7e:70:c8:2a:c4:a5:04:18:32:ac:78:57:eb:c5:86: 06:c7:a5:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpcnNiezDaLi3BZlFGvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz ZGQxNzgwHhcNMjUxMjExMTgwMDQ2WhcNMjUxMjEyMTgwMDQ2WjAzMTEwLwYDVQQD EyhlYjZlOWY1Y2E1M2RkZWU3ZWU0YmI4YmM3ODAwZDQxNWFhNTQ5ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVdFwdEAHisrQWOVYPxrfjoLFuEe /eTfx9NGXd5ykMD8mOT8nzDRH/JkESJOERMtlG2fOVzRfTMstnHG2IRaGg1+Jt0t jqgp0eJaw1GdLRxPYYdgfIzBFFikYA367OIs0vMRhkV7uB6zRrsYB/IO3WXMi+kf pSC2cVpR394gT65WPOfM6uUINpyjPzGZtlodJaYyKbm++EBP7bsjyDbdCSodwRDY AFVowx7pHueInxjWuwI84DvpNI3vQ+5IjQ1lbyK+4NVK+5dnu8PA02N7Fa6V9Vcc DHFHK4NLz6cW1EI6JCad3n7WaV5Wct40GRp7aSzGHzO2MvN8tcboM0aHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtun1ylPd7n7ku4vHgA1BWqVJgLMB8GA1UdIwQY MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2 LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATujNUepa mbYOhginMI95BLQ+qQDz3iS0F8wi9vcDzLhrlP9ewrKcCszImFDk7LTEsj0RRLR9 M4tPvcgSBtMc2KX2yII13ZhDhlkdlUgR7wiFU+mo5M4qAwyPEPGmgpuNL+nWiGYf XsQ73ZIDMsIV22aeeWVJo63VNXrF62ELJl+QaZpuErFTi02OoBzIzDt1Cloratuf g3oMbW4nGaDVpMmnmuq+kB1FfzIL2cTdKOBJqjJpolHXvweh7L7oU4uq0T4P0C8A 5Gu+BVVUo0sqIQ6CC6+P5jaoC8dBxyfhfwfb+TNzLW2ada7rqH63fnDIKsSlBBgy rHhX68WGBselQQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:12:24 2025 by rpki-client