This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json) Hash identifier: ChDFRP5ia5w/w73KIzMFKaNjYc5BJOPHBdyX453p9K8= Subject key identifier: 05:05:6C:B0:92:0D:48:86:AE:8D:C1:06:CB:82:DB:64:AA:49:92:FB Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c Certificate serial: 019B476FC1FB5D400C78C1C4DA4D9061915D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft Manifest number: 1225 Signing time: Mon 22 Dec 2025 19:01:05 +0000 Manifest this update: Mon 22 Dec 2025 19:01:05 +0000 Manifest next update: Tue 23 Dec 2025 19:01:05 +0000 Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: 37T80ZvZkngKLgQmbcyscYI6MFOw+wdSiijIANv9zBI=) 2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:c1:fb:5d:40:0c:78:c1:c4:da:4d:90:61:91:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c Validity Not Before: Dec 22 19:01:05 2025 GMT Not After : Dec 23 19:01:05 2025 GMT Subject: CN=05056cb0920d4886ae8dc106cb82db64aa4992fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:f4:0b:7b:93:6a:25:4a:13:f9:57:21:57: 33:02:3b:1d:58:da:6e:33:7a:e5:57:2a:e9:82:2b: 2d:75:00:cb:6b:8b:a1:56:72:cc:26:10:ca:9c:0b: 1c:70:01:9d:da:10:b6:89:d6:c9:4c:48:45:3a:81: 64:16:0c:34:01:11:ad:99:2e:60:c6:cc:69:0b:cf: 73:89:09:d6:40:75:bd:7b:98:b6:71:4b:e0:97:81: e9:4e:fd:69:2c:db:52:bb:ad:0c:8d:ea:fd:9b:c0: 19:66:75:39:d8:f7:a9:e2:a9:7f:cf:f9:7b:1a:8e: 3e:09:5a:be:16:16:cc:47:88:a9:8b:53:85:55:40: ac:28:0e:9a:a6:28:c3:ea:67:89:b2:ec:83:1e:09: f6:fd:fe:1c:d9:a8:e9:c7:94:f0:35:30:f5:fc:fe: c6:f8:40:d7:0b:87:cb:e5:44:7e:90:b3:3d:26:3a: c1:80:f8:6d:25:19:c0:66:85:ce:62:08:ad:66:c2: b0:6b:01:53:7e:50:47:02:0c:79:24:7c:61:49:34: f1:a8:9f:e4:33:f9:0d:41:66:08:52:ca:f6:ba:f5: 7c:4a:25:9a:c7:9e:e7:19:16:df:c4:af:db:c3:29: b4:b5:b7:53:d4:f5:f2:b5:47:f9:4e:13:4d:ef:d1: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:05:6C:B0:92:0D:48:86:AE:8D:C1:06:CB:82:DB:64:AA:49:92:FB X509v3 Authority Key Identifier: keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:4b:6b:1b:0f:bc:35:ad:97:db:5e:ea:91:57:b3:47:9c: 11:0f:a7:83:5e:4f:46:af:5f:4d:28:3e:27:06:7a:68:1f:96: 4e:d4:4c:11:56:49:3d:b7:4f:72:3d:6c:38:7c:14:cb:02:0d: 0e:fd:44:06:80:59:af:70:2b:24:f0:31:1c:26:44:f4:8a:8c: ee:2c:e5:40:ef:17:a1:99:e3:f5:7d:64:13:3c:25:09:49:11: e3:cc:e9:03:d7:68:b1:19:65:62:7e:b9:9b:ca:99:c1:65:8a: 3f:e7:f2:17:36:8a:57:ba:19:54:c2:fd:3b:37:a3:34:6e:b6: 4b:ab:b8:5a:6c:fd:0a:25:f3:ae:1e:80:18:8e:e0:12:db:84: a0:76:b5:3b:63:9e:14:24:d6:71:85:63:9b:5a:42:cf:a2:71: 51:ca:55:55:fa:8c:75:e3:96:ea:de:af:c8:63:c3:e9:b7:f9: d4:27:63:65:20:50:6a:99:ac:b2:09:7f:62:24:8e:05:aa:21: b7:55:77:d3:88:d6:07:86:20:93:8a:72:d0:14:0a:a8:a2:62: fc:7f:eb:3d:e4:7a:06:0a:b4:f5:9f:9b:03:3d:2f:eb:0f:90: 82:6e:16:b3:2f:b5:a7:4a:55:0e:7f:f6:63:b1:59:1c:0b:96: 19:6d:a8:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb8H7XUAMeMHE2k2QYZFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3 ZDczMmMwHhcNMjUxMjIyMTkwMTA1WhcNMjUxMjIzMTkwMTA1WjAzMTEwLwYDVQQD EygwNTA1NmNiMDkyMGQ0ODg2YWU4ZGMxMDZjYjgyZGI2NGFhNDk5MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkT0C3uTaiVKE/lXIVczAjsdWNpu M3rlVyrpgistdQDLa4uhVnLMJhDKnAsccAGd2hC2idbJTEhFOoFkFgw0ARGtmS5g xsxpC89ziQnWQHW9e5i2cUvgl4HpTv1pLNtSu60Mjer9m8AZZnU52Pep4ql/z/l7 Go4+CVq+FhbMR4ipi1OFVUCsKA6apijD6meJsuyDHgn2/f4c2ajpx5TwNTD1/P7G +EDXC4fL5UR+kLM9JjrBgPhtJRnAZoXOYgitZsKwawFTflBHAgx5JHxhSTTxqJ/k M/kNQWYIUsr2uvV8SiWax57nGRbfxK/bwym0tbdT1PXytUf5ThNN79HnTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUFbLCSDUiGro3BBsuC22SqSZL7MB8GA1UdIwQY MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0 LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROJLaxsP vDWtl9te6pFXs0ecEQ+ng15PRq9fTSg+JwZ6aB+WTtRMEVZJPbdPcj1sOHwUywIN Dv1EBoBZr3ArJPAxHCZE9IqM7izlQO8XoZnj9X1kEzwlCUkR48zpA9dosRllYn65 m8qZwWWKP+fyFzaKV7oZVML9OzejNG62S6u4Wmz9CiXzrh6AGI7gEtuEoHa1O2Oe FCTWcYVjm1pCz6JxUcpVVfqMdeOW6t6vyGPD6bf51CdjZSBQapmssgl/YiSOBaoh t1V304jWB4Ygk4py0BQKqKJi/H/rPeR6Bgq09Z+bAz0v6w+Qgm4Wsy+1p0pVDn/2 Y7FZHAuWGW2ovw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:19 2025 by rpki-client