This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json) Hash identifier: Fdnfjtjz2BGKONt+5ox9WlbQE7TG0PQJPXfRcGZUoSM= Subject key identifier: E6:83:C9:C8:D7:51:85:B4:79:17:4F:10:F1:35:BE:D9:71:3D:91:47 Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Certificate serial: 019B0DB6C42F02A54DE5423218A814639271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft Manifest number: 01B2 Signing time: Thu 11 Dec 2025 14:00:40 +0000 Manifest this update: Thu 11 Dec 2025 14:00:40 +0000 Manifest next update: Fri 12 Dec 2025 14:00:40 +0000 Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: UrTVShcpkLtNlMK8qJU1SuvgMCKVGfvgWBZYd8ufHlc=) 2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:c4:2f:02:a5:4d:e5:42:32:18:a8:14:63:92:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec Validity Not Before: Dec 11 14:00:40 2025 GMT Not After : Dec 12 14:00:40 2025 GMT Subject: CN=e683c9c8d75185b479174f10f135bed9713d9147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:83:19:37:d2:b4:a7:26:1f:88:51:60:7c: b1:02:df:08:ca:a3:8f:26:06:b5:ad:34:b6:91:0e: 23:8f:8a:40:18:62:d1:ca:c9:85:c0:0e:a5:df:27: 2f:fc:bc:cb:19:92:b4:fe:8d:8f:dc:e1:54:48:c4: 15:26:85:cc:3d:e5:e8:23:51:ca:c8:69:b6:e4:41: 55:f6:1a:a4:b7:ad:40:a0:f8:c1:89:bf:27:47:d3: 76:9c:2c:44:7e:2f:0d:a4:d5:cc:ae:00:51:1c:13: b4:34:f2:0d:e5:8f:1c:03:fa:52:0b:b8:58:20:d3: 97:7a:dc:f2:99:ca:99:d1:8a:c1:83:19:e0:0c:c4: 5a:4a:0f:d7:80:4e:c9:79:2a:70:e8:51:8f:61:1a: a1:0c:42:90:18:df:fc:ce:75:39:dc:85:d8:0a:ad: a4:87:4a:a6:b8:d7:2f:17:c0:fa:97:29:c1:93:8f: 46:87:6b:5a:72:81:38:b4:54:46:75:79:ef:be:54: 8d:12:cf:b4:76:92:5f:01:eb:05:62:f6:0d:bc:1e: 3d:68:73:db:18:94:60:1d:79:ea:0d:4a:70:48:af: e6:69:0b:f9:5b:1a:25:31:3d:3c:80:47:73:85:d7: 15:71:4f:99:dc:14:f4:c3:0c:ac:ad:37:94:a9:8c: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:C9:C8:D7:51:85:B4:79:17:4F:10:F1:35:BE:D9:71:3D:91:47 X509v3 Authority Key Identifier: keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:0c:2d:06:ee:b0:91:a7:91:0d:db:b6:95:00:b5:87:40: b0:a7:75:4b:59:27:97:61:80:14:43:91:1c:cc:2e:2b:15:db: 8e:3a:bd:d3:6a:8b:8d:5d:40:77:7f:c3:4d:ad:fd:e4:40:58: 0c:7f:58:49:00:30:9e:b3:05:28:81:48:ec:54:5c:60:41:e1: 7d:08:4e:af:c5:f4:d7:a4:43:fc:47:5d:4f:8b:34:b0:01:4a: a1:4b:90:76:6b:88:2e:82:6b:0e:85:5e:d2:16:4a:2d:29:b8: 18:8e:53:5e:0e:91:cb:d9:64:56:8a:06:0b:78:aa:93:17:42: 37:57:ca:ea:ee:52:cb:95:71:40:e3:08:93:c6:6c:72:77:4a: 2b:44:34:3f:20:64:d1:29:e0:96:e2:19:89:70:2a:c1:e8:72: 29:77:ff:af:c8:18:2a:5e:22:c5:1e:91:9e:33:93:a1:ef:e9: 58:84:fe:f2:7e:21:4a:4f:d7:90:b4:97:7d:ee:9a:6b:58:21: ee:e3:1e:d4:14:cc:a2:ef:c3:8e:dd:6a:0e:e8:35:91:38:31: 70:33:93:22:c8:57:58:d5:6e:d9:1a:ca:47:64:66:08:c0:c0: c8:59:c3:0e:9f:a1:65:9b:ed:f1:80:76:7e:a8:e5:c2:16:a7: 3f:5a:aa:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtsQvAqVN5UIyGKgUY5JxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw YTc4ZWMwHhcNMjUxMjExMTQwMDQwWhcNMjUxMjEyMTQwMDQwWjAzMTEwLwYDVQQD EyhlNjgzYzljOGQ3NTE4NWI0NzkxNzRmMTBmMTM1YmVkOTcxM2Q5MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEqDGTfStKcmH4hRYHyxAt8IyqOP Jga1rTS2kQ4jj4pAGGLRysmFwA6l3ycv/LzLGZK0/o2P3OFUSMQVJoXMPeXoI1HK yGm25EFV9hqkt61AoPjBib8nR9N2nCxEfi8NpNXMrgBRHBO0NPIN5Y8cA/pSC7hY INOXetzymcqZ0YrBgxngDMRaSg/XgE7JeSpw6FGPYRqhDEKQGN/8znU53IXYCq2k h0qmuNcvF8D6lynBk49Gh2tacoE4tFRGdXnvvlSNEs+0dpJfAesFYvYNvB49aHPb GJRgHXnqDUpwSK/maQv5WxolMT08gEdzhdcVcU+Z3BT0wwysrTeUqYwfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaDycjXUYW0eRdPEPE1vtlxPZFHMB8GA1UdIwQY MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheAMLQbu sJGnkQ3btpUAtYdAsKd1S1knl2GAFEORHMwuKxXbjjq902qLjV1Ad3/DTa395EBY DH9YSQAwnrMFKIFI7FRcYEHhfQhOr8X016RD/EddT4s0sAFKoUuQdmuILoJrDoVe 0hZKLSm4GI5TXg6Ry9lkVooGC3iqkxdCN1fK6u5Sy5VxQOMIk8ZscndKK0Q0PyBk 0SngluIZiXAqwehyKXf/r8gYKl4ixR6RnjOToe/pWIT+8n4hSk/XkLSXfe6aa1gh 7uMe1BTMou/Djt1qDug1kTgxcDOTIshXWNVu2RrKR2RmCMDAyFnDDp+hZZvt8YB2 fqjlwhanP1qq5A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:31 2025 by rpki-client