This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json) Hash identifier: PZ41xBP4QJS0vt/NoTibfpyEKzBVHjk1cshXl85sdy0= Subject key identifier: 54:41:D2:74:D9:6C:30:87:99:99:4E:88:63:1A:E9:26:47:97:B7:25 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019B1081B92A7F733F720BD8ACA77B487F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft Manifest number: 0E7F Signing time: Fri 12 Dec 2025 03:01:35 +0000 Manifest this update: Fri 12 Dec 2025 03:01:35 +0000 Manifest next update: Sat 13 Dec 2025 03:01:35 +0000 Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: JvmDRY4vBNrSEJMAFtqz/TReFPzk/oLI2BL3AlgqlOU=) 2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=) 3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:b9:2a:7f:73:3f:72:0b:d8:ac:a7:7b:48:7f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Dec 12 03:01:35 2025 GMT Not After : Dec 13 03:01:35 2025 GMT Subject: CN=5441d274d96c308799994e88631ae9264797b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:aa:f3:ee:57:2b:7b:6e:95:c9:85:9b:e8: f2:6f:d9:c7:b2:44:30:39:db:52:7e:e8:05:29:48: 1b:ee:ec:62:6a:94:33:0f:8f:09:c1:ae:c4:d8:f8: c6:c8:26:0b:51:e4:85:44:dc:eb:4f:d0:d2:0e:9e: 1f:ee:9d:71:31:c8:5d:55:a9:35:1c:b1:75:c8:21: 76:1a:e2:8a:0f:46:56:ee:8f:a4:1d:c8:a4:20:d2: 07:0c:69:85:e4:18:fc:69:99:d3:18:e3:2b:3d:a5: 50:11:f5:c0:2b:5b:25:71:5e:c0:c2:2d:9c:87:4f: 8e:91:01:14:04:a2:8b:45:de:46:cb:26:77:71:67: 83:52:5e:65:a4:84:30:5e:0b:1e:83:87:6b:d2:c8: a0:31:b0:fb:bf:24:1b:75:df:3d:65:db:9b:61:af: b9:22:57:d2:d2:3b:01:6d:74:16:cd:0b:b8:62:0d: 73:31:8c:d5:13:ed:46:d7:0e:85:3e:0b:3d:e9:46: c6:28:6d:05:ec:7a:4f:1f:18:e9:b8:06:d2:c2:78: 37:e6:9c:6f:a5:48:8c:16:9f:2c:ff:69:59:e7:d4: ba:ac:ef:c3:5a:1f:f7:60:20:3e:ef:da:73:4a:10: 88:3b:39:6e:e2:ae:d9:7a:2f:7d:45:e8:54:e9:04: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:D2:74:D9:6C:30:87:99:99:4E:88:63:1A:E9:26:47:97:B7:25 X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4f:5e:e2:a9:37:40:06:4d:0f:92:67:5f:a4:1e:b7:ad:cd: 8f:3b:5e:f3:3a:0c:30:9d:2f:d8:e4:73:de:13:eb:79:c3:70: 01:ab:bf:d9:6f:62:0e:f7:b1:e7:1a:55:06:da:87:86:39:ff: a5:d2:53:18:f7:67:c8:b4:b5:0f:22:fb:d8:7c:9b:d6:90:32: 70:a6:79:a4:99:78:c4:00:3b:b9:36:27:69:49:31:54:e4:15: 48:27:01:04:ea:05:d4:fb:3f:fc:1f:1c:1f:96:19:aa:3d:6e: 48:04:e5:0f:e4:8a:55:67:17:f0:1b:71:a3:d1:11:34:dd:78: 5b:67:c8:5e:14:ca:62:7e:6f:45:8b:f3:65:31:83:c9:36:04: 36:15:d4:63:9a:64:86:69:79:9f:0e:1a:91:4d:4e:53:09:e0: 53:c2:d9:3a:40:24:bc:58:2d:b5:0b:a6:66:e8:6f:9d:a2:d8: 84:17:45:26:0d:d8:7c:00:d9:15:de:c2:cb:fb:bf:34:eb:3d: 8f:35:d1:f7:ff:eb:09:22:78:6f:95:d1:77:12:07:c4:00:51: e4:4c:9e:49:a1:b6:84:58:29:45:5d:cd:ef:ff:6e:9d:6f:7e: a0:83:cd:dd:6d:ab:16:cf:2d:2d:e9:ce:e2:ce:72:20:30:70: 2b:8c:c7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgbkqf3M/cgvYrKd7SH+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjUxMjEyMDMwMTM1WhcNMjUxMjEzMDMwMTM1WjAzMTEwLwYDVQQD Eyg1NDQxZDI3NGQ5NmMzMDg3OTk5OTRlODg2MzFhZTkyNjQ3OTdiNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfGq8+5XK3tulcmFm+jyb9nHskQw OdtSfugFKUgb7uxiapQzD48Jwa7E2PjGyCYLUeSFRNzrT9DSDp4f7p1xMchdVak1 HLF1yCF2GuKKD0ZW7o+kHcikINIHDGmF5Bj8aZnTGOMrPaVQEfXAK1slcV7Awi2c h0+OkQEUBKKLRd5GyyZ3cWeDUl5lpIQwXgseg4dr0sigMbD7vyQbdd89ZdubYa+5 IlfS0jsBbXQWzQu4Yg1zMYzVE+1G1w6FPgs96UbGKG0F7HpPHxjpuAbSwng35pxv pUiMFp8s/2lZ59S6rO/DWh/3YCA+79pzShCIOzlu4q7Zei99RehU6QRXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRB0nTZbDCHmZlOiGMa6SZHl7clMB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU9e4qk3 QAZND5JnX6Qet63Njzte8zoMMJ0v2ORz3hPrecNwAau/2W9iDvex5xpVBtqHhjn/ pdJTGPdnyLS1DyL72Hyb1pAycKZ5pJl4xAA7uTYnaUkxVOQVSCcBBOoF1Ps//B8c H5YZqj1uSATlD+SKVWcX8Btxo9ERNN14W2fIXhTKYn5vRYvzZTGDyTYENhXUY5pk hml5nw4akU1OUwngU8LZOkAkvFgttQumZuhvnaLYhBdFJg3YfADZFd7Cy/u/NOs9 jzXR9//rCSJ4b5XRdxIHxABR5EyeSaG2hFgpRV3N7/9unW9+oIPN3W2rFs8tLenO 4s5yIDBwK4zHjg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:19:43 2025 by rpki-client