This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json) Hash identifier: R8o7ZE16r5SrMdyIDJUhS45cihh85UctzQ02+A7Qz/E= Subject key identifier: 38:49:60:C1:F3:D7:0D:79:B5:F8:10:AF:9A:63:BD:40:4C:8B:C3:7F Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411 Certificate serial: 019B2C2F678F834353A1AF2E8F5500FD21FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 12:01:02 +0000 Manifest this update: Wed 17 Dec 2025 12:01:02 +0000 Manifest next update: Thu 18 Dec 2025 12:01:02 +0000 Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: cyTazdXUBReybC0ew7zSin51AFgJ0PI+TdgCmRObTCk=) 2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:67:8f:83:43:53:a1:af:2e:8f:55:00:fd:21:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411 Validity Not Before: Dec 17 12:01:02 2025 GMT Not After : Dec 18 12:01:02 2025 GMT Subject: CN=384960c1f3d70d79b5f810af9a63bd404c8bc37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:c2:ff:6a:01:ac:3c:91:b9:e3:52:b5:08: 9f:df:8a:01:87:26:93:7d:bf:fb:49:6a:ec:2e:ce: 84:b6:be:89:9c:14:82:d2:52:b0:f7:cf:68:45:eb: e7:da:5f:d3:07:9b:81:16:a7:2b:37:49:8e:98:52: cd:d5:9b:ed:66:37:ad:ee:76:97:a3:dd:b7:9c:8f: 97:96:11:f5:1c:14:99:f6:d1:9f:d7:e4:27:f1:77: b6:33:0e:ec:1a:78:7e:8c:e0:eb:84:43:5e:db:ce: b9:45:b0:f3:d0:3f:dd:3d:16:e1:a1:e6:1b:e8:ea: f5:bb:79:4c:d4:ac:30:48:f5:4c:95:d8:08:5f:70: 98:f4:a3:ed:04:d1:c4:88:7e:2b:26:f0:d1:c6:0c: 89:e6:9b:93:ee:85:19:32:40:5b:ed:6d:a7:0e:64: 2b:49:23:f0:3e:87:5e:f7:b4:7a:63:98:e1:69:fe: 76:e0:66:7d:30:76:f1:1e:78:88:60:62:a4:91:54: c9:42:a5:5b:48:3b:a8:0f:9c:6d:6a:5f:a1:bc:4d: 67:74:d8:f1:1a:f9:c7:54:60:81:17:d7:b9:84:28: b2:51:c7:69:a3:18:b0:3b:b1:0a:f2:3c:ad:8f:8d: 7f:b8:c0:8d:4c:9b:cd:5d:c9:ed:20:39:48:f2:85: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:49:60:C1:F3:D7:0D:79:B5:F8:10:AF:9A:63:BD:40:4C:8B:C3:7F X509v3 Authority Key Identifier: keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9e:17:00:0d:7b:59:1f:6a:04:5b:fd:17:81:e5:e9:49:f5: a5:40:af:17:5e:c5:5a:fd:18:fb:b3:4e:b9:f6:45:93:de:1e: 07:ae:4e:8e:3e:cb:23:b3:c2:f2:3c:62:53:a0:83:22:cd:46: 04:aa:65:83:70:72:4b:77:34:92:51:f2:eb:19:34:19:4a:26: 17:b6:c3:2c:7d:f7:ce:28:fa:85:c9:2d:44:eb:0f:63:68:49: cc:3b:d6:49:48:1a:55:ef:20:20:19:2f:ab:ee:98:a7:2b:ee: f4:64:93:e3:82:d9:ff:bc:f6:33:55:76:d6:5e:4c:31:57:f2: 0b:c4:03:4b:69:8f:f4:42:c1:50:ad:28:7c:52:f4:c0:13:c3: a4:d5:75:91:89:bb:cc:1e:e4:a2:af:29:ae:41:35:4d:8a:b5: 6a:1d:a3:4f:6a:b2:5c:3c:07:68:f2:fa:95:cd:3f:45:0c:85: 04:d8:2b:b3:b3:ab:b2:32:ef:6d:31:63:04:17:5b:65:b8:be: d7:97:2a:30:13:3f:c9:3d:e2:b2:81:16:5a:71:df:82:ae:4e: ca:2c:66:f5:6a:95:5f:42:79:3a:e9:de:d5:df:b4:a0:fc:19: ed:08:d5:fc:04:85:4e:2c:26:6c:07:7d:88:3f:b4:e6:ff:ac: ed:5f:c2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2ePg0NToa8uj1UA/SH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODI3YWNjNjgwYWEyOWRkYWM4MjM4ODlkODc4NjNlNDE0 YjI0MTEwHhcNMjUxMjE3MTIwMTAyWhcNMjUxMjE4MTIwMTAyWjAzMTEwLwYDVQQD EygzODQ5NjBjMWYzZDcwZDc5YjVmODEwYWY5YTYzYmQ0MDRjOGJjMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmLC/2oBrDyRueNStQif34oBhyaT fb/7SWrsLs6Etr6JnBSC0lKw989oRevn2l/TB5uBFqcrN0mOmFLN1ZvtZjet7naX o923nI+XlhH1HBSZ9tGf1+Qn8Xe2Mw7sGnh+jODrhENe2865RbDz0D/dPRbhoeYb 6Or1u3lM1KwwSPVMldgIX3CY9KPtBNHEiH4rJvDRxgyJ5puT7oUZMkBb7W2nDmQr SSPwPode97R6Y5jhaf524GZ9MHbxHniIYGKkkVTJQqVbSDuoD5xtal+hvE1ndNjx GvnHVGCBF9e5hCiyUcdpoxiwO7EK8jytj41/uMCNTJvNXcntIDlI8oXfwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhJYMHz1w15tfgQr5pjvUBMi8N/MB8GA1UdIwQY MBaAFHuCesxoCqKd2sgjiJ2Hhj5BSyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUt ZTRkNDU5NzFiMTNkLzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUtZTRkNDU5NzFiMTNk LzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZ4XAA17 WR9qBFv9F4Hl6Un1pUCvF17FWv0Y+7NOufZFk94eB65Ojj7LI7PC8jxiU6CDIs1G BKplg3ByS3c0klHy6xk0GUomF7bDLH33zij6hcktROsPY2hJzDvWSUgaVe8gIBkv q+6Ypyvu9GST44LZ/7z2M1V21l5MMVfyC8QDS2mP9ELBUK0ofFL0wBPDpNV1kYm7 zB7koq8prkE1TYq1ah2jT2qyXDwHaPL6lc0/RQyFBNgrs7OrsjLvbTFjBBdbZbi+ 15cqMBM/yT3isoEWWnHfgq5Oyixm9WqVX0J5Oune1d+0oPwZ7QjV/ASFTiwmbAd9 iD+05v+s7V/CoQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:47 2025 by rpki-client