This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json) Hash identifier: egQ6FiiAmbNCod9T9I65vr4N5c87knC4B38hHCqRbfM= Subject key identifier: BE:BD:C0:7E:98:08:31:4A:DC:9B:E3:DD:57:DA:15:40:E6:22:E1:08 Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241 Certificate serial: 019B495DE4B7AA5DAA947E27C40C40AD0F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 04:00:48 +0000 Manifest this update: Tue 23 Dec 2025 04:00:48 +0000 Manifest next update: Wed 24 Dec 2025 04:00:48 +0000 Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: B8Mv6799QPmUYV+yuQizYdX3hJhZ/E/gPX2y+TlKXRk=) 2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:e4:b7:aa:5d:aa:94:7e:27:c4:0c:40:ad:0f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241 Validity Not Before: Dec 23 04:00:48 2025 GMT Not After : Dec 24 04:00:48 2025 GMT Subject: CN=bebdc07e9808314adc9be3dd57da1540e622e108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:92:97:fd:29:53:94:1b:5d:07:e8:b6:29: ea:36:ab:07:77:00:fb:29:79:ae:dd:b4:14:c0:38: 65:aa:d0:93:94:f7:58:4a:13:0d:96:2d:bc:96:fa: f4:87:21:f8:ed:bd:f0:43:6a:7c:ee:54:5a:d9:f2: d6:2d:9a:38:3a:05:aa:2a:b9:c3:78:ee:54:e4:ab: 04:98:32:ce:fc:94:a9:82:e2:b8:fe:e9:15:f6:a4: 56:1b:8f:f7:a5:3d:a3:59:18:60:4b:0b:9f:3a:14: 85:d0:16:18:57:ca:6c:e4:08:b1:49:96:bd:b0:13: fe:76:a1:37:c4:7c:19:45:9d:02:b1:44:09:2f:a8: c5:00:c8:fe:c9:85:b2:b5:ce:e4:74:ae:06:07:b3: d0:52:67:6f:0b:b1:80:da:d4:96:24:5a:88:02:fd: a7:db:a1:28:d5:95:5e:69:b1:aa:8d:32:e5:a3:b1: 4a:52:b9:88:4b:bd:45:e2:64:0c:32:5e:39:e2:15: 85:02:3a:ce:e2:e8:ac:c3:d0:94:a6:80:2b:f9:5b: 22:ab:32:69:b7:44:f9:04:8b:c0:97:c4:20:26:87: 4a:3c:99:6f:b4:fa:6e:85:da:1c:5a:7a:05:9c:68: dc:48:ef:9d:7f:c4:51:51:b1:b4:d6:56:fe:40:e9: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BD:C0:7E:98:08:31:4A:DC:9B:E3:DD:57:DA:15:40:E6:22:E1:08 X509v3 Authority Key Identifier: keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e3:70:7b:ff:3b:ac:ab:d4:05:38:4e:03:bb:05:c9:83:65: cd:5a:30:3f:e0:85:4d:0b:7f:25:cf:3e:12:f5:62:53:86:7e: 04:d7:0e:5b:df:ba:2f:cb:a1:cc:19:ef:4d:c3:29:05:96:97: 60:cd:30:53:96:a6:70:b5:fb:b3:78:61:12:37:0e:37:a4:c1: b2:32:1b:22:3f:ab:00:c5:b8:3e:14:10:1b:ef:99:41:5f:78: 88:b4:51:96:b3:50:1b:c8:b7:0f:20:38:8d:9f:53:89:4f:3f: 63:98:d6:6d:ad:6c:1f:5c:49:30:c1:d8:cb:bd:b7:e1:e8:10: 8e:df:ce:dc:1c:13:f0:cb:5d:c3:df:7c:5c:3a:05:6f:68:48: 6a:85:f7:1b:b2:ed:38:72:4d:6a:15:1a:45:54:e3:6b:3b:d5: a6:b7:14:5c:6e:d2:a7:a2:34:ab:b6:a8:4a:8b:ad:73:f6:72: a1:37:52:b7:62:4d:97:09:0c:9c:b6:0d:f2:e5:fd:81:dd:1a: 9c:d1:d5:be:d6:57:bd:26:ea:65:68:f4:25:98:3e:a0:3f:8b: 57:63:fc:e3:24:a1:18:2f:52:b4:08:0f:b7:0e:3b:49:6b:b9: 9f:a3:bd:3b:a2:7f:be:66:f9:1b:05:e7:be:b9:60:5a:34:f1: 3c:c5:5d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXeS3ql2qlH4nxAxArQ+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDBhMDI1ZTBlNjFhNDRkOTNlNGE4MDFlMzg4OGIyNmU3 YmQyNDEwHhcNMjUxMjIzMDQwMDQ4WhcNMjUxMjI0MDQwMDQ4WjAzMTEwLwYDVQQD EyhiZWJkYzA3ZTk4MDgzMTRhZGM5YmUzZGQ1N2RhMTU0MGU2MjJlMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkWSl/0pU5QbXQfotinqNqsHdwD7 KXmu3bQUwDhlqtCTlPdYShMNli28lvr0hyH47b3wQ2p87lRa2fLWLZo4OgWqKrnD eO5U5KsEmDLO/JSpguK4/ukV9qRWG4/3pT2jWRhgSwufOhSF0BYYV8ps5AixSZa9 sBP+dqE3xHwZRZ0CsUQJL6jFAMj+yYWytc7kdK4GB7PQUmdvC7GA2tSWJFqIAv2n 26Eo1ZVeabGqjTLlo7FKUrmIS71F4mQMMl454hWFAjrO4uisw9CUpoAr+VsiqzJp t0T5BIvAl8QgJodKPJlvtPpuhdocWnoFnGjcSO+df8RRUbG01lb+QOmzMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL69wH6YCDFK3Jvj3VfaFUDmIuEIMB8GA1UdIwQY MBaAFOJAoCXg5hpE2T5KgB44iLJue9JBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUt Yzc5ZDRlZWI1YWQ2LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUtYzc5ZDRlZWI1YWQ2 LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeNwe/87 rKvUBThOA7sFyYNlzVowP+CFTQt/Jc8+EvViU4Z+BNcOW9+6L8uhzBnvTcMpBZaX YM0wU5amcLX7s3hhEjcON6TBsjIbIj+rAMW4PhQQG++ZQV94iLRRlrNQG8i3DyA4 jZ9TiU8/Y5jWba1sH1xJMMHYy7234egQjt/O3BwT8Mtdw998XDoFb2hIaoX3G7Lt OHJNahUaRVTjazvVprcUXG7Sp6I0q7aoSoutc/ZyoTdSt2JNlwkMnLYN8uX9gd0a nNHVvtZXvSbqZWj0JZg+oD+LV2P84yShGC9StAgPtw47SWu5n6O9O6J/vmb5GwXn vrlgWjTxPMVd7w== -----END CERTIFICATE-----Generated at Tue Dec 23 08:23:05 2025 by rpki-client