This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json) Hash identifier: wxnq0h/EEEqnn2FvzyC/uWG0/OYli4EB+aYd/PuytXU= Subject key identifier: AD:0B:3E:55:56:01:50:7B:F1:8D:2D:F4:D2:05:95:61:9E:71:1A:F0 Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3 Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3 Certificate serial: 019B34FB9E90FC34C837F4D21FBC4D3C7147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft Manifest number: 106C Signing time: Fri 19 Dec 2025 05:01:03 +0000 Manifest this update: Fri 19 Dec 2025 05:01:03 +0000 Manifest next update: Sat 20 Dec 2025 05:01:03 +0000 Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: VuSj2uPIxy7nlHqQKwSUmRNVe67NyICJPvQ/NMGUAZw=) 2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:9e:90:fc:34:c8:37:f4:d2:1f:bc:4d:3c:71:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3 Validity Not Before: Dec 19 05:01:03 2025 GMT Not After : Dec 20 05:01:03 2025 GMT Subject: CN=ad0b3e555601507bf18d2df4d20595619e711af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:08:33:a8:30:66:91:ff:ae:57:87:43:9e: 7c:29:4b:e2:8c:62:07:85:37:98:e2:02:6c:ae:8b: 93:16:70:89:4c:26:89:80:a8:71:ba:c6:5d:c5:12: 48:68:9a:fb:a0:06:a5:62:06:b7:a9:3d:29:66:71: ff:55:b9:04:09:ea:36:b6:a4:8e:97:41:f8:a2:2c: 72:f9:79:59:dd:2b:c6:a1:7a:22:1d:ec:bd:92:8f: 6e:9a:84:05:46:ca:0b:19:29:23:b0:55:d2:59:75: fa:ac:96:d0:16:8e:b2:bb:54:0a:8a:06:0f:c6:23: c6:f9:20:c2:00:7c:2f:0e:4a:2e:27:00:a6:8d:44: ab:dc:55:97:bd:c0:cf:3e:ff:8e:80:15:ce:e4:8c: 43:49:5f:ae:6d:39:97:86:f0:64:03:32:53:9c:85: 91:e8:55:2a:e6:74:e7:71:29:4c:a5:12:17:df:da: 09:0f:b1:fb:59:9b:50:92:6a:7f:0c:9f:a4:d5:ba: 4a:d3:72:80:dd:de:e7:c9:c2:82:c7:ec:60:dd:64: 16:f2:88:fb:a3:0d:6f:05:ba:ce:b9:f3:3a:f7:7d: 3f:70:a0:58:16:81:1d:65:47:07:27:35:9b:dc:30: 2b:cb:71:3f:7c:98:16:7d:61:6a:07:2b:86:cd:ec: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:3E:55:56:01:50:7B:F1:8D:2D:F4:D2:05:95:61:9E:71:1A:F0 X509v3 Authority Key Identifier: keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3c:07:90:93:7e:89:82:48:a7:b7:61:b5:90:a6:40:f9:05: d2:46:83:53:f6:5f:a3:01:36:00:f8:eb:c1:9e:84:e7:65:53: 3d:6f:dd:fb:0e:08:79:f9:d4:cb:c8:46:49:16:35:e6:86:47: d7:a6:2c:c4:56:ec:c4:c7:ca:36:b8:cf:b6:7c:13:fc:e1:c0: e8:de:e8:ea:9d:ea:ad:8f:68:ed:00:17:9b:56:94:11:9f:7b: a6:3c:93:55:82:c6:bb:a4:99:33:34:86:bb:aa:92:25:47:27: 62:86:94:90:f8:2d:43:e4:fb:60:5c:6f:5c:8c:0b:93:22:51: 39:91:02:56:5e:89:7a:cc:9d:1c:25:cb:e4:eb:d8:10:b6:2a: 55:1c:90:bf:9a:9e:49:1d:95:5f:4d:e5:39:9f:e6:0a:3e:dc: 6d:ac:cd:e9:d6:d2:ba:a0:c6:b8:7f:6e:a7:fe:be:d1:8c:4e: 20:13:ab:09:0d:77:b2:85:f1:97:38:43:27:0d:f1:eb:09:42: b2:43:92:81:bd:8f:02:e3:e3:0a:7f:4f:97:74:81:17:3a:f1: c6:3d:b4:e4:83:cb:bd:a3:07:b2:5b:10:9d:78:52:2d:ac:1a: e2:ba:81:07:89:d2:90:a5:f9:90:74:0d:6e:9e:ab:c5:5a:1b: eb:d2:1e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+56Q/DTIN/TSH7xNPHFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmRjY2IyNDUwYTFhMDUzYzg5Y2MyMTNlNGFlOWI4NjQ3 ODJkZTMwHhcNMjUxMjE5MDUwMTAzWhcNMjUxMjIwMDUwMTAzWjAzMTEwLwYDVQQD EyhhZDBiM2U1NTU2MDE1MDdiZjE4ZDJkZjRkMjA1OTU2MTllNzExYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM0IM6gwZpH/rleHQ558KUvijGIH hTeY4gJsrouTFnCJTCaJgKhxusZdxRJIaJr7oAalYga3qT0pZnH/VbkECeo2tqSO l0H4oixy+XlZ3SvGoXoiHey9ko9umoQFRsoLGSkjsFXSWXX6rJbQFo6yu1QKigYP xiPG+SDCAHwvDkouJwCmjUSr3FWXvcDPPv+OgBXO5IxDSV+ubTmXhvBkAzJTnIWR 6FUq5nTncSlMpRIX39oJD7H7WZtQkmp/DJ+k1bpK03KA3d7nycKCx+xg3WQW8oj7 ow1vBbrOufM6930/cKBYFoEdZUcHJzWb3DAry3E/fJgWfWFqByuGzexzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0LPlVWAVB78Y0t9NIFlWGecRrwMB8GA1UdIwQY MBaAFOG9zLJFChoFPInMIT5K6bhkeC3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQt ZWVkNTU2YWYyYzdmLzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQtZWVkNTU2YWYyYzdm LzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzwHkJN+ iYJIp7dhtZCmQPkF0kaDU/ZfowE2APjrwZ6E52VTPW/d+w4IefnUy8hGSRY15oZH 16YsxFbsxMfKNrjPtnwT/OHA6N7o6p3qrY9o7QAXm1aUEZ97pjyTVYLGu6SZMzSG u6qSJUcnYoaUkPgtQ+T7YFxvXIwLkyJROZECVl6JesydHCXL5OvYELYqVRyQv5qe SR2VX03lOZ/mCj7cbazN6dbSuqDGuH9up/6+0YxOIBOrCQ13soXxlzhDJw3x6wlC skOSgb2PAuPjCn9Pl3SBFzrxxj205IPLvaMHslsQnXhSLawa4rqBB4nSkKX5kHQN bp6rxVob69IeLQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:36:53 2025 by rpki-client