This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json) Hash identifier: Hr2OMmvh4/lTp82UBAm5op3bAkA63Xt14L7Iso5AOFI= Subject key identifier: B7:38:E4:68:5B:28:03:0B:CB:B9:1C:99:AC:3D:07:F4:36:0D:A1:A2 Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Certificate serial: 019B34C56E64E91FA788C358E44D44E1C92E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft Manifest number: 0B29 Signing time: Fri 19 Dec 2025 04:01:52 +0000 Manifest this update: Fri 19 Dec 2025 04:01:52 +0000 Manifest next update: Sat 20 Dec 2025 04:01:52 +0000 Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: eK8zLBfw6PCS0pnmCwJqFb9iMohMRNI+8Peg3X/x5fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:6e:64:e9:1f:a7:88:c3:58:e4:4d:44:e1:c9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Validity Not Before: Dec 19 04:01:52 2025 GMT Not After : Dec 20 04:01:52 2025 GMT Subject: CN=b738e4685b28030bcbb91c99ac3d07f4360da1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:c5:e1:3d:07:01:a3:93:4d:10:1f:46:ee: d6:d8:e5:87:4b:5c:0a:bc:32:1b:a0:20:5b:da:a6: b8:a0:59:d2:a6:e3:39:79:78:9f:f3:ed:a9:d7:03: 9b:92:83:a8:70:17:07:70:70:98:de:36:aa:a2:90: 5b:ce:d2:88:e9:f5:36:24:df:40:0e:24:5d:b5:a6: 19:6f:bd:65:a6:e1:43:1b:ec:47:83:56:b1:9c:c8: 5d:36:a0:59:f2:8f:5d:57:f3:17:9f:14:ba:08:87: 22:33:c8:57:86:d9:8b:a5:36:a5:32:c4:a7:ce:cc: 4c:eb:bd:9f:92:ad:1e:39:b2:50:e8:75:7c:6f:a8: 28:58:f8:ed:ed:ad:da:ef:ef:da:b5:d3:3d:e1:88: a2:b2:8f:67:22:e4:aa:06:cd:41:57:75:0d:52:49: 72:14:64:d7:2e:2b:0d:3b:dc:44:33:f5:10:76:95: b0:57:31:e4:05:db:a6:6d:60:1f:17:b6:eb:fd:44: 96:23:1d:c9:22:30:4d:ff:58:e7:65:9b:db:f2:4f: a4:36:8f:0c:59:a0:dc:30:fd:29:ce:bf:06:17:a9: af:d7:7d:bc:71:de:b0:70:10:8c:b3:b7:41:95:92: 61:81:1f:ce:83:07:2c:2d:5d:a5:b1:5d:6c:d5:5f: 4d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:38:E4:68:5B:28:03:0B:CB:B9:1C:99:AC:3D:07:F4:36:0D:A1:A2 X509v3 Authority Key Identifier: keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4c:90:e5:c4:2a:1f:65:c7:56:10:2f:42:f9:a3:ab:a5:5b: 48:9e:bf:c9:20:e1:8c:05:c8:3f:a0:55:63:df:c4:79:77:9e: be:51:af:ca:37:9e:8a:14:ad:88:3d:a8:0d:48:86:93:c3:49: d1:f6:09:5d:96:9f:27:71:b7:3f:25:77:6a:2b:c5:ae:90:79: 1a:4c:c9:ae:9c:e7:2c:a7:0a:5d:9b:54:98:84:74:45:07:e5: a7:7c:22:c9:ca:aa:e4:d0:85:cf:4e:f7:41:df:ae:4d:d3:51: 81:9a:89:46:6f:cb:42:96:a5:60:02:e0:27:16:04:6e:9c:67: 82:1d:e1:e7:2a:9a:46:69:7c:b7:a2:fc:e5:c8:3b:3e:8e:40: 70:70:04:f1:86:78:38:64:96:be:8d:b6:18:1c:87:79:1e:c8: 26:82:fe:87:f3:90:3b:e3:71:9b:dc:1e:99:a6:12:5a:32:77: fa:da:12:96:83:4e:1b:fc:b1:c0:1a:a7:0f:ec:8b:d9:81:6c: 13:d1:ec:c5:c7:91:a7:d3:7d:64:7d:57:6e:ba:90:63:66:7a: b3:df:52:25:61:33:2d:d0:3a:bc:9d:23:38:dd:d3:41:5f:fe: cf:75:be:eb:51:2f:14:5f:8b:d5:2a:8f:15:5b:88:b0:e7:55: 52:80:85:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xW5k6R+niMNY5E1E4ckuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk YzkyZWMwHhcNMjUxMjE5MDQwMTUyWhcNMjUxMjIwMDQwMTUyWjAzMTEwLwYDVQQD EyhiNzM4ZTQ2ODViMjgwMzBiY2JiOTFjOTlhYzNkMDdmNDM2MGRhMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFnF4T0HAaOTTRAfRu7W2OWHS1wK vDIboCBb2qa4oFnSpuM5eXif8+2p1wObkoOocBcHcHCY3jaqopBbztKI6fU2JN9A DiRdtaYZb71lpuFDG+xHg1axnMhdNqBZ8o9dV/MXnxS6CIciM8hXhtmLpTalMsSn zsxM672fkq0eObJQ6HV8b6goWPjt7a3a7+/atdM94Yiiso9nIuSqBs1BV3UNUkly FGTXLisNO9xEM/UQdpWwVzHkBdumbWAfF7br/USWIx3JIjBN/1jnZZvb8k+kNo8M WaDcMP0pzr8GF6mv1328cd6wcBCMs7dBlZJhgR/OgwcsLV2lsV1s1V9NVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc45GhbKAMLy7kcmaw9B/Q2DaGiMB8GA1UdIwQY MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0yQ5cQq H2XHVhAvQvmjq6VbSJ6/ySDhjAXIP6BVY9/EeXeevlGvyjeeihStiD2oDUiGk8NJ 0fYJXZafJ3G3PyV3aivFrpB5GkzJrpznLKcKXZtUmIR0RQflp3wiycqq5NCFz073 Qd+uTdNRgZqJRm/LQpalYALgJxYEbpxngh3h5yqaRml8t6L85cg7Po5AcHAE8YZ4 OGSWvo22GByHeR7IJoL+h/OQO+Nxm9wemaYSWjJ3+toSloNOG/yxwBqnD+yL2YFs E9HsxceRp9N9ZH1XbrqQY2Z6s99SJWEzLdA6vJ0jON3TQV/+z3W+61EvFF+L1SqP FVuIsOdVUoCFxA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:59 2025 by rpki-client