This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: 1LHl89SRxmvCNyWcKVT7PpH1QM03QFSzPPvDDHUpIiQ= Subject key identifier: 2E:EE:DE:AF:46:97:C9:DB:12:47:D8:FF:57:32:24:7C:62:34:C1:C4 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B0D801E7BCACCEC7F4912B76D056303B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 17CB Signing time: Thu 11 Dec 2025 13:00:58 +0000 Manifest this update: Thu 11 Dec 2025 13:00:58 +0000 Manifest next update: Fri 12 Dec 2025 13:00:58 +0000 Files and hashes: 1: 0zUctL52J_kpeotUgg_3OfpEKpM.roa (hash: arTUke7n2xZYHzAOrNJlpFltADfEev/gf1naczn2GEI=) 2: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: UR19M5IPxqv0Qu8Zm6GdalUioTnJmXy+wRkVXNy+nh8=) 3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=) 4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=) 5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=) 6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=) 7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:1e:7b:ca:cc:ec:7f:49:12:b7:6d:05:63:03:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Dec 11 13:00:58 2025 GMT Not After : Dec 12 13:00:58 2025 GMT Subject: CN=2eeedeaf4697c9db1247d8ff5732247c6234c1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:a7:f9:e4:f0:0c:02:0c:59:aa:b0:4f:47: 50:27:7a:3f:73:53:d0:d3:7f:b6:d5:f9:83:87:09: d3:23:a2:82:d8:2c:70:db:8c:71:ea:88:e2:b0:84: 72:79:e2:a3:50:bb:4e:27:46:61:be:29:72:59:2a: e9:95:49:fd:13:69:18:4d:ad:a1:ea:76:18:53:fe: fd:07:fb:68:9d:69:bb:fc:3a:77:37:88:70:a9:ff: f1:5a:57:8f:93:9c:41:33:f1:ee:26:74:5b:ea:46: 7d:49:36:5c:35:0b:2c:dc:f7:2f:f9:aa:f8:5f:f1: 02:1d:c3:e5:1f:5b:b6:10:72:08:85:31:e8:f5:3c: ae:5f:2d:09:87:1f:97:c8:8c:68:75:95:58:a6:2b: 6a:96:65:b1:b4:af:3c:da:ea:e8:ab:09:3e:58:4e: 9b:2c:8a:d9:0a:ae:00:31:46:cd:f7:ab:26:43:b9: 65:7f:09:2d:03:f4:53:f3:a9:50:11:e4:be:0b:77: 8e:c8:b1:57:2d:12:9d:f3:de:35:58:c0:88:a8:e3: c9:68:3f:54:a4:27:ca:e7:82:20:0c:ed:c7:0f:9e: f4:64:58:4d:21:1a:fc:b6:47:3f:96:e2:b3:d8:d0: 49:e5:f0:e1:f2:1f:65:65:a1:a9:87:c4:58:6e:83: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:DE:AF:46:97:C9:DB:12:47:D8:FF:57:32:24:7C:62:34:C1:C4 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8b:ba:82:14:f8:9c:24:f9:44:4e:2d:73:ae:ea:60:d9:da: 06:a9:36:d8:ab:84:f2:23:93:83:00:b9:20:a7:3f:0d:86:40: c5:a1:8b:24:53:9b:79:a1:e3:a5:35:78:41:e5:ce:76:95:57: a7:0a:13:8e:d6:01:b4:af:34:36:8a:68:06:60:dd:15:4a:f4: 2f:c9:45:c6:f5:47:91:10:0e:51:c6:8a:b5:93:b9:48:6d:33: 83:6e:50:dd:2f:78:57:12:2f:47:cb:d3:8c:e1:4c:66:52:fd: 29:0a:aa:b3:5a:98:d1:23:47:55:a1:d3:de:22:cc:e7:51:1e: 3b:4a:74:af:4c:20:eb:30:00:fa:bf:a7:e3:a1:89:e6:2e:49: dd:3f:b8:3e:f5:61:e9:26:d4:42:5f:52:da:7c:70:e8:33:f7: be:44:46:74:ae:49:9d:8d:c6:54:2f:8f:50:53:0e:46:47:42: b6:f6:15:ba:9a:06:65:ee:67:5a:50:d5:54:58:ae:a7:6d:e2: 41:82:f4:11:72:bb:07:cc:6a:c0:5d:35:c4:45:28:c3:6a:e6: da:7a:d1:69:03:5a:2e:e0:b0:7f:5e:f1:c3:0a:a2:12:fd:bb: ce:62:d8:56:39:6c:6e:68:d6:1f:95:c5:fb:01:4e:b8:e8:b0: 50:c1:a3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgB57yszsf0kSt20FYwO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjUxMjExMTMwMDU4WhcNMjUxMjEyMTMwMDU4WjAzMTEwLwYDVQQD EygyZWVlZGVhZjQ2OTdjOWRiMTI0N2Q4ZmY1NzMyMjQ3YzYyMzRjMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGn+eTwDAIMWaqwT0dQJ3o/c1PQ 03+21fmDhwnTI6KC2Cxw24xx6ojisIRyeeKjULtOJ0ZhvilyWSrplUn9E2kYTa2h 6nYYU/79B/tonWm7/Dp3N4hwqf/xWlePk5xBM/HuJnRb6kZ9STZcNQss3Pcv+ar4 X/ECHcPlH1u2EHIIhTHo9TyuXy0Jhx+XyIxodZVYpitqlmWxtK882uroqwk+WE6b LIrZCq4AMUbN96smQ7llfwktA/RT86lQEeS+C3eOyLFXLRKd8941WMCIqOPJaD9U pCfK54IgDO3HD570ZFhNIRr8tkc/luKz2NBJ5fDh8h9lZaGph8RYboNy/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7u3q9Gl8nbEkfY/1cyJHxiNMHEMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIu6ghT4 nCT5RE4tc67qYNnaBqk22KuE8iOTgwC5IKc/DYZAxaGLJFObeaHjpTV4QeXOdpVX pwoTjtYBtK80NopoBmDdFUr0L8lFxvVHkRAOUcaKtZO5SG0zg25Q3S94VxIvR8vT jOFMZlL9KQqqs1qY0SNHVaHT3iLM51EeO0p0r0wg6zAA+r+n46GJ5i5J3T+4PvVh 6SbUQl9S2nxw6DP3vkRGdK5JnY3GVC+PUFMORkdCtvYVupoGZe5nWlDVVFiup23i QYL0EXK7B8xqwF01xEUow2rm2nrRaQNaLuCwf17xwwqiEv27zmLYVjlsbmjWH5XF +wFOuOiwUMGjMg== -----END CERTIFICATE-----Generated at Thu Dec 11 20:02:32 2025 by rpki-client