This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json) Hash identifier: Q000R28qkcQcMFa4x5ti6ksnTwvJ5sNdP43lurfuf/8= Subject key identifier: 33:17:1E:F6:92:F0:96:94:01:84:CE:3A:CD:78:A7:C9:11:25:4E:EE Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5 Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5 Certificate serial: 019B4995030465E712E0AB9CF630EF25D86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 05:01:00 +0000 Manifest this update: Tue 23 Dec 2025 05:01:00 +0000 Manifest next update: Wed 24 Dec 2025 05:01:00 +0000 Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: MiLhaNeAerTpwgoa0JOqFEehMl2rf/q7SHpQDwkHf3A=) 2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:03:04:65:e7:12:e0:ab:9c:f6:30:ef:25:d8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5 Validity Not Before: Dec 23 05:01:00 2025 GMT Not After : Dec 24 05:01:00 2025 GMT Subject: CN=33171ef692f096940184ce3acd78a7c911254eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:b7:f0:19:31:93:4f:c4:b8:3e:4c:68:5e: d0:f2:1d:59:13:89:0e:e0:b8:64:8e:e8:01:9d:2f: 16:9d:c5:3f:ac:23:80:27:24:1b:4c:a4:dd:91:09: 42:71:e7:7f:1e:de:b9:cd:7e:0c:88:32:11:2b:ef: fb:2c:3b:e9:8f:80:02:80:00:b8:1c:60:4d:8b:b5: a6:c4:17:1d:26:c8:8e:2f:e6:cc:e1:eb:da:f5:21: 23:21:57:52:b3:b0:71:4b:af:17:e7:59:98:68:0b: 77:5f:67:98:b5:cf:86:eb:41:e0:29:28:07:d5:10: 8d:1a:7c:88:69:b1:e3:78:09:c7:dc:8e:1d:cf:5d: 55:7e:f0:be:9f:17:de:24:a1:42:92:7f:6d:e1:8d: b2:91:dc:de:2d:55:b0:cc:6c:0e:c1:fb:27:a2:61: d5:db:9b:e3:e3:15:a3:a8:dd:d6:6a:ba:23:64:05: 7a:e3:de:dc:a7:c9:8e:d8:25:b2:d8:d6:09:3b:5a: ea:e4:19:bf:95:82:13:6e:3a:6b:70:e1:e8:27:a3: a0:d5:f2:af:29:56:5d:46:fd:24:dc:ac:61:3c:58: 55:4f:53:04:9e:a3:66:f2:45:89:80:08:3d:06:91: ce:24:c1:44:76:43:ce:59:aa:31:71:53:9e:d7:53: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:1E:F6:92:F0:96:94:01:84:CE:3A:CD:78:A7:C9:11:25:4E:EE X509v3 Authority Key Identifier: keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:08:70:c2:2d:c6:eb:db:c2:a2:1b:82:f3:0c:45:fb:59:70: 8f:c3:73:69:78:e1:38:2a:eb:1d:a8:88:45:2d:d2:ee:33:d8: 32:d3:72:54:cc:5a:de:10:80:b1:0f:7c:01:5a:2a:8c:a5:08: 3d:4e:0f:8b:f1:47:c5:00:02:8c:20:78:26:9d:46:d0:62:fc: fc:15:3c:45:bc:35:af:85:46:fb:27:8a:09:aa:a3:4f:f5:d1: d1:e8:d2:11:ba:77:7b:55:ee:d4:85:d6:84:31:7b:86:02:78: 6a:c0:61:73:98:08:f6:7c:95:f7:30:8c:74:ea:18:91:21:2a: bb:ab:46:a7:cf:da:64:62:94:71:2f:8b:8b:5e:b7:d7:f2:41: 79:af:93:6a:af:bd:f0:29:d9:e0:7a:dd:21:a7:7b:65:36:a5: 65:75:3c:97:9e:6b:58:e2:f9:ae:9b:4d:41:74:38:a1:dd:42: 4b:0f:f7:40:4d:16:66:56:77:17:82:8d:b9:7e:8a:bd:fd:7d: 23:ce:a7:a1:dd:70:d7:ab:9e:11:f4:65:60:11:98:de:ab:eb: 93:77:5b:69:e6:b6:04:19:74:85:89:06:ed:9f:fb:00:0e:e3: 89:0c:fd:30:13:b0:bc:12:5e:56:8d:21:e1:75:95:87:5b:b0: 4f:7a:e7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlQMEZecS4Kuc9jDvJdhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxN2IxMGZkNjA3YWQ5MjcwMDZjNjJjZTM1NjkxZWJhYThm MDE4YjUwHhcNMjUxMjIzMDUwMTAwWhcNMjUxMjI0MDUwMTAwWjAzMTEwLwYDVQQD EygzMzE3MWVmNjkyZjA5Njk0MDE4NGNlM2FjZDc4YTdjOTExMjU0ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1m38Bkxk0/EuD5MaF7Q8h1ZE4kO 4LhkjugBnS8WncU/rCOAJyQbTKTdkQlCced/Ht65zX4MiDIRK+/7LDvpj4ACgAC4 HGBNi7WmxBcdJsiOL+bM4eva9SEjIVdSs7BxS68X51mYaAt3X2eYtc+G60HgKSgH 1RCNGnyIabHjeAnH3I4dz11VfvC+nxfeJKFCkn9t4Y2ykdzeLVWwzGwOwfsnomHV 25vj4xWjqN3WarojZAV6497cp8mO2CWy2NYJO1rq5Bm/lYITbjprcOHoJ6Og1fKv KVZdRv0k3KxhPFhVT1MEnqNm8kWJgAg9BpHOJMFEdkPOWaoxcVOe11OmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMXHvaS8JaUAYTOOs14p8kRJU7uMB8GA1UdIwQY MBaAFOF7EP1getknAGxizjVpHrqo8Bi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhzUV9XQjYyU2NBYkdMT05Xa2V1cWp3R0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDMyZWQtMmM5Ny00MWQzLTkyNmEt NmE0ZDA0YmE1ODk4LzEvNFhzUV9XQjYyU2NBYkdMT05Xa2V1cWp3R0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDMyZWQtMmM5Ny00MWQzLTkyNmEtNmE0ZDA0YmE1ODk4 LzEvNFhzUV9XQjYyU2NBYkdMT05Xa2V1cWp3R0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAhwwi3G 69vCohuC8wxF+1lwj8NzaXjhOCrrHaiIRS3S7jPYMtNyVMxa3hCAsQ98AVoqjKUI PU4Pi/FHxQACjCB4Jp1G0GL8/BU8Rbw1r4VG+yeKCaqjT/XR0ejSEbp3e1Xu1IXW hDF7hgJ4asBhc5gI9nyV9zCMdOoYkSEqu6tGp8/aZGKUcS+Li1631/JBea+Taq+9 8CnZ4HrdIad7ZTalZXU8l55rWOL5rptNQXQ4od1CSw/3QE0WZlZ3F4KNuX6Kvf19 I86nod1w16ueEfRlYBGY3qvrk3dbaea2BBl0hYkG7Z/7AA7jiQz9MBOwvBJeVo0h 4XWVh1uwT3rnpw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:48 2025 by rpki-client