This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json) Hash identifier: HkuEa2/r6XLn4+YVYYCvAxCg2guV8O9mUYXUI5kPqGs= Subject key identifier: 50:EF:FB:35:2C:73:B0:BF:39:A4:A4:10:DF:81:ED:A6:7B:8F:8F:6C Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38 Certificate serial: 019B12A6A564122647F017C290CBDBE23297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft Manifest number: 0D8A Signing time: Fri 12 Dec 2025 13:01:09 +0000 Manifest this update: Fri 12 Dec 2025 13:01:09 +0000 Manifest next update: Sat 13 Dec 2025 13:01:09 +0000 Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: 6S94iP3VsYGQ10HuAWgdIjqpCw9M3MrouL0WSUuizZc=) 2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:a5:64:12:26:47:f0:17:c2:90:cb:db:e2:32:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Validity Not Before: Dec 12 13:01:09 2025 GMT Not After : Dec 13 13:01:09 2025 GMT Subject: CN=50effb352c73b0bf39a4a410df81eda67b8f8f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:34:25:88:46:46:ac:30:e5:29:29:b8:b7:1a: 2f:a5:ae:e9:b5:66:49:48:7f:e6:cc:f1:f5:dc:ed: b7:22:df:4d:85:5c:8e:43:28:e3:fd:0c:e8:7e:a8: 88:3e:0e:38:49:83:c7:8b:2f:19:a8:ee:22:dd:76: 39:0f:73:89:d3:69:12:c4:eb:03:f2:73:12:3c:fb: e7:da:2b:0f:4d:9b:84:6c:0d:ea:83:59:65:36:5f: cd:9c:5e:88:39:36:5e:ed:79:11:40:8d:3b:94:d9: 8c:3d:fd:4b:a3:e7:fa:2b:77:40:22:2f:84:14:8e: a4:cd:68:c0:19:ea:5f:53:1e:b8:c0:90:75:ba:66: cf:4e:c6:29:f7:cd:0c:15:a5:04:c0:76:5b:3f:41: 17:2f:e8:31:7f:a6:d2:f3:42:4b:83:7e:45:e5:fe: 23:d1:01:8a:03:b8:3b:3e:4f:db:1e:2f:99:b0:7c: 34:d1:c1:21:bf:db:d9:55:43:42:43:a5:cd:c0:16: 40:83:c8:dc:e8:df:f1:63:27:94:f1:bb:ea:ba:eb: 46:ae:26:40:2b:4c:11:7c:58:eb:4c:9b:dc:15:58: 95:f4:1b:2f:16:4a:5f:aa:3a:e4:cf:db:08:63:6e: a3:90:f3:54:43:9d:cd:8e:3d:65:42:c1:40:be:8b: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EF:FB:35:2C:73:B0:BF:39:A4:A4:10:DF:81:ED:A6:7B:8F:8F:6C X509v3 Authority Key Identifier: keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e6:91:df:3a:da:4b:c4:83:30:3f:9b:bd:81:60:4b:de:dc: a8:0c:99:ca:1f:45:d3:a5:da:5e:9e:21:c0:f0:0e:36:6e:db: c7:ba:15:d0:5d:0d:bc:a7:a5:c7:e0:4b:8e:74:f5:41:89:27: 67:9e:83:2c:d3:69:da:9f:e6:da:4e:dd:78:12:25:9d:18:06: 86:30:b2:d4:bf:c7:80:49:1e:31:cd:ec:35:40:52:4b:91:c2: 2a:24:ad:35:4d:6e:16:5c:54:b8:e7:60:8a:b0:61:d2:5e:53: fa:4b:e8:65:fe:fc:a4:04:b2:34:f2:ff:e6:8b:58:80:38:c6: 2d:1d:bd:c9:b8:c1:c2:64:e0:5e:30:ee:56:11:9d:41:d5:8e: e1:0c:ab:23:7c:f6:ee:3a:35:ec:66:9b:9c:1a:32:c6:a6:c2: 58:85:b5:84:88:f6:06:e1:e1:77:39:6a:a8:99:97:e5:23:35: 9e:e2:fd:d8:85:66:98:e1:ee:6c:85:9b:a1:c0:38:a0:b4:a6: 98:d4:1d:92:eb:18:00:ab:79:f0:2d:d2:9e:2d:e5:35:89:29: 24:79:03:1d:5f:c5:14:67:66:49:0d:02:78:9b:40:c1:4a:22: 82:06:ed:c8:d8:91:2b:58:92:d0:b2:47:1b:a6:e1:1c:31:fb: 4a:cc:d5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpqVkEiZH8BfCkMvb4jKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk ODFkMzgwHhcNMjUxMjEyMTMwMTA5WhcNMjUxMjEzMTMwMTA5WjAzMTEwLwYDVQQD Eyg1MGVmZmIzNTJjNzNiMGJmMzlhNGE0MTBkZjgxZWRhNjdiOGY4ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zQliEZGrDDlKSm4txovpa7ptWZJ SH/mzPH13O23It9NhVyOQyjj/QzofqiIPg44SYPHiy8ZqO4i3XY5D3OJ02kSxOsD 8nMSPPvn2isPTZuEbA3qg1llNl/NnF6IOTZe7XkRQI07lNmMPf1Lo+f6K3dAIi+E FI6kzWjAGepfUx64wJB1umbPTsYp980MFaUEwHZbP0EXL+gxf6bS80JLg35F5f4j 0QGKA7g7Pk/bHi+ZsHw00cEhv9vZVUNCQ6XNwBZAg8jc6N/xYyeU8bvquutGriZA K0wRfFjrTJvcFViV9BsvFkpfqjrkz9sIY26jkPNUQ53Njj1lQsFAvossvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDv+zUsc7C/OaSkEN+B7aZ7j49sMB8GA1UdIwQY MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3 LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+aR3zra S8SDMD+bvYFgS97cqAyZyh9F06XaXp4hwPAONm7bx7oV0F0NvKelx+BLjnT1QYkn Z56DLNNp2p/m2k7deBIlnRgGhjCy1L/HgEkeMc3sNUBSS5HCKiStNU1uFlxUuOdg irBh0l5T+kvoZf78pASyNPL/5otYgDjGLR29ybjBwmTgXjDuVhGdQdWO4QyrI3z2 7jo17GabnBoyxqbCWIW1hIj2BuHhdzlqqJmX5SM1nuL92IVmmOHubIWbocA4oLSm mNQdkusYAKt58C3Sni3lNYkpJHkDHV/FFGdmSQ0CeJtAwUoiggbtyNiRK1iS0LJH G6bhHDH7SszVqw== -----END CERTIFICATE-----Generated at Fri Dec 12 15:45:09 2025 by rpki-client