This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json) Hash identifier: IUznZqcgiASwofyeb7QozgOO00xXmaUR5yC12HbnoqY= Subject key identifier: 6C:FF:BD:7D:BB:5C:5A:C9:C6:9C:DD:E8:0F:51:D4:70:89:7B:FD:A3 Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c Certificate serial: 019B19BC461BA5E81359104C6A59A399E30E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 22:02:07 +0000 Manifest this update: Sat 13 Dec 2025 22:02:07 +0000 Manifest next update: Sun 14 Dec 2025 22:02:07 +0000 Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: dyN6w6NoOdJCMt817ygYYDqqhlFyEStX0skKDE3nVqc=) 2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:46:1b:a5:e8:13:59:10:4c:6a:59:a3:99:e3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c Validity Not Before: Dec 13 22:02:07 2025 GMT Not After : Dec 14 22:02:07 2025 GMT Subject: CN=6cffbd7dbb5c5ac9c69cdde80f51d470897bfda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:f6:40:8d:51:0d:b3:f3:dc:53:97:17:43: b9:2b:b3:74:e7:a7:65:f7:07:4b:c8:b4:1f:63:65: fb:ad:eb:09:32:bc:65:c7:e6:78:66:7a:29:6d:55: fa:f1:27:93:27:a8:e0:3d:8e:34:3b:ec:3e:b5:0a: c3:90:c6:b0:b7:0e:93:d6:4c:05:4b:69:a7:b9:4a: 0f:97:a0:24:97:87:42:d2:bf:ea:47:d6:cd:7e:97: 69:93:ff:95:ed:1b:da:17:6f:68:73:f2:0a:57:d5: 79:4d:73:dc:29:6a:37:d6:c2:58:04:3d:cc:d3:56: c9:8b:c0:31:5b:08:18:2a:71:64:67:a3:eb:dd:de: 70:a7:32:74:64:8d:a0:41:f6:4b:9c:de:68:92:b5: 23:b5:d0:52:63:c7:ce:3a:57:31:73:c6:fc:53:b2: cb:9d:2a:42:55:6f:f4:73:56:86:d0:eb:d6:9d:00: b9:f7:0d:1c:05:74:d2:1e:0a:bc:61:f4:c6:b9:22: 0e:c1:ab:82:79:ab:a6:3e:35:0e:07:c8:90:ca:9d: 91:d0:3a:75:36:74:82:74:d2:3a:0c:34:72:7b:0d: fd:0a:53:66:20:a7:77:6a:9e:51:40:63:c5:04:e5: 78:d8:c7:e6:e6:b3:ac:87:38:65:1d:e3:41:1a:a4: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FF:BD:7D:BB:5C:5A:C9:C6:9C:DD:E8:0F:51:D4:70:89:7B:FD:A3 X509v3 Authority Key Identifier: keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:88:94:c8:ae:0f:a8:1f:99:ab:d9:e5:73:9f:aa:16:1b:20: 54:1c:3e:d3:4e:53:01:a8:03:e1:9c:16:dd:11:ad:17:88:92: 8e:38:65:cc:62:76:ac:9c:ac:75:a8:d2:f9:d8:29:28:3a:a0: ed:e6:74:9e:72:52:55:25:66:f1:d1:16:84:d0:fe:91:04:cc: 2a:bb:c7:8e:c2:93:98:6c:5e:b6:b8:55:51:32:7e:52:56:4b: 33:f4:08:f4:01:da:b7:4b:87:38:34:fe:11:55:9e:8b:61:1f: e4:c5:76:39:13:6b:0a:8a:da:2b:85:ab:50:36:12:49:bf:a0: cb:37:2e:d2:13:03:ad:f7:81:1f:e1:1f:8b:12:ba:55:ed:f9: 7c:5f:dc:40:06:fb:64:2f:41:2f:e3:af:c2:a9:46:e0:a1:4c: 3d:24:26:41:a6:bb:41:d6:fa:e9:25:3a:34:81:64:1b:c7:38: 07:bd:ef:5b:4a:fe:6c:3b:02:b3:43:69:3a:0a:15:f8:71:b8: ae:83:03:e0:27:be:ab:72:1c:ea:fa:da:0a:58:ca:54:d0:7d: 66:ef:d7:68:b5:ab:81:50:ae:e9:12:36:fd:14:b4:ec:b5:3b: a2:2b:cc:9e:30:ce:98:5e:ce:6b:2f:70:62:47:ae:72:fb:68: ff:b0:eb:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvEYbpegTWRBMalmjmeMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzI4NjYzOTgxNDJhNTc0YmE0N2IxOTdkNzE3OTFiNWUy M2FmN2MwHhcNMjUxMjEzMjIwMjA3WhcNMjUxMjE0MjIwMjA3WjAzMTEwLwYDVQQD Eyg2Y2ZmYmQ3ZGJiNWM1YWM5YzY5Y2RkZTgwZjUxZDQ3MDg5N2JmZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg/2QI1RDbPz3FOXF0O5K7N056dl 9wdLyLQfY2X7resJMrxlx+Z4ZnopbVX68SeTJ6jgPY40O+w+tQrDkMawtw6T1kwF S2mnuUoPl6Akl4dC0r/qR9bNfpdpk/+V7RvaF29oc/IKV9V5TXPcKWo31sJYBD3M 01bJi8AxWwgYKnFkZ6Pr3d5wpzJ0ZI2gQfZLnN5okrUjtdBSY8fOOlcxc8b8U7LL nSpCVW/0c1aG0OvWnQC59w0cBXTSHgq8YfTGuSIOwauCeaumPjUOB8iQyp2R0Dp1 NnSCdNI6DDRyew39ClNmIKd3ap5RQGPFBOV42Mfm5rOshzhlHeNBGqSGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz/vX27XFrJxpzd6A9R1HCJe/2jMB8GA1UdIwQY MBaAFODChmOYFCpXS6R7GX1xeRteI698MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgt YTE2Y2Y3YWM3ZGQ4LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgtYTE2Y2Y3YWM3ZGQ4 LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIiUyK4P qB+Zq9nlc5+qFhsgVBw+005TAagD4ZwW3RGtF4iSjjhlzGJ2rJysdajS+dgpKDqg 7eZ0nnJSVSVm8dEWhND+kQTMKrvHjsKTmGxetrhVUTJ+UlZLM/QI9AHat0uHODT+ EVWei2Ef5MV2ORNrCoraK4WrUDYSSb+gyzcu0hMDrfeBH+EfixK6Ve35fF/cQAb7 ZC9BL+OvwqlG4KFMPSQmQaa7Qdb66SU6NIFkG8c4B73vW0r+bDsCs0NpOgoV+HG4 roMD4Ce+q3Ic6vraCljKVNB9Zu/XaLWrgVCu6RI2/RS07LU7oivMnjDOmF7Oay9w Ykeucvto/7Dr5Q== -----END CERTIFICATE-----Generated at Sun Dec 14 06:22:41 2025 by rpki-client