This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json) Hash identifier: /L/eKsmPy6trZULuD1usUA3RXSrVqThfh9CwBMWPHFE= Subject key identifier: DC:75:F0:B9:4B:C7:5C:A2:51:BB:08:8A:4C:7E:73:90:78:BC:26:53 Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Certificate serial: 019AF68A0C912CFF8F4885411865AE2024A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft Manifest number: 0DB7 Signing time: Sun 07 Dec 2025 02:00:33 +0000 Manifest this update: Sun 07 Dec 2025 02:00:33 +0000 Manifest next update: Mon 08 Dec 2025 02:00:33 +0000 Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: CFyfINLWVlFUVeC9gzSHukHd+EeZHeSxuN2VUUogrfQ=) 2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=) 3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=) 4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:0c:91:2c:ff:8f:48:85:41:18:65:ae:20:24:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Validity Not Before: Dec 7 02:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=dc75f0b94bc75ca251bb088a4c7e739078bc2653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:5c:c3:e2:6e:ce:5f:b9:18:06:ab:38:01: d9:5b:07:a5:ee:b6:ab:aa:a3:51:27:2d:cb:31:c1: da:01:79:1a:7f:f4:6b:9e:f6:a5:33:0f:cb:75:59: b2:6b:f7:42:3a:fb:a5:3f:a8:f8:20:ec:bd:12:26: 16:44:8b:99:53:a5:d3:84:62:66:57:f6:32:29:ef: ab:78:db:7a:ea:b1:d9:f7:01:96:6e:5d:18:4f:15: 24:95:80:93:33:a5:66:b8:14:e5:71:4f:a8:09:e1: 63:99:50:bb:f1:90:58:7c:8c:ed:cd:9c:cf:92:25: 3e:28:48:f9:9d:65:8f:92:9d:de:9d:05:d6:6d:e3: 21:25:e7:f4:3d:13:9e:76:ab:03:07:c6:c2:35:21: 50:dc:a2:1c:da:e6:d7:2c:51:f3:17:51:7e:e4:0a: 9f:08:66:7d:68:83:07:12:e6:36:53:c9:25:ac:86: ca:e1:3a:f5:fe:6d:30:78:6d:82:f4:91:27:ef:2a: 53:33:be:db:86:05:c6:ad:f7:d7:5c:5d:44:d2:f7: f2:58:89:16:03:ef:62:ed:bd:20:3b:e1:55:4e:7f: 94:23:53:80:9e:f2:85:9f:49:29:11:42:61:b7:7f: 36:26:60:cf:7e:d9:b6:23:31:03:3c:9d:70:b2:55: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:F0:B9:4B:C7:5C:A2:51:BB:08:8A:4C:7E:73:90:78:BC:26:53 X509v3 Authority Key Identifier: keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:31:ac:d8:3d:19:10:66:f3:f9:40:76:1d:39:53:29:5c:ba: ad:e8:f7:c1:93:47:cc:59:a6:75:96:64:49:14:28:b8:75:16: df:1a:f9:88:ae:fd:c8:4f:f5:4b:4c:42:4c:08:bf:41:ce:e7: 7c:ea:31:6e:2b:04:80:48:12:25:1d:63:f0:e1:ba:ed:f1:68: 22:f8:73:54:07:c9:e3:30:99:b7:1e:be:b7:6c:01:b8:93:54: eb:1a:4f:77:c6:fe:bb:15:22:20:37:2a:10:cf:4e:04:38:b3: ea:d0:21:c0:ee:1a:a4:53:4f:91:a1:1b:71:4f:b0:87:9d:e9: 48:94:28:fa:65:9b:96:d7:68:be:03:30:07:21:05:02:fd:8f: 62:d0:e7:e3:e5:d2:e1:f5:b7:d5:29:9d:59:36:d1:d0:2b:71: 7c:78:78:ab:50:1c:47:10:93:f9:cf:10:d2:8b:92:c5:fb:ec: 73:59:18:f9:c2:db:20:3d:be:cc:48:fe:b0:e0:16:2c:87:e3: e3:94:56:f6:e9:a4:7b:38:4b:06:7c:b6:2f:3e:99:f4:77:0e: d0:31:d8:72:8b:f5:75:f9:67:c5:47:bb:b3:b7:af:6c:73:cf: 54:fb:91:af:d2:16:f9:25:d9:d9:4a:fd:8c:5b:ab:09:62:bb: 49:55:a9:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2igyRLP+PSIVBGGWuICShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3 OTNlMmUwHhcNMjUxMjA3MDIwMDMzWhcNMjUxMjA4MDIwMDMzWjAzMTEwLwYDVQQD EyhkYzc1ZjBiOTRiYzc1Y2EyNTFiYjA4OGE0YzdlNzM5MDc4YmMyNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAZcw+Juzl+5GAarOAHZWwel7rar qqNRJy3LMcHaAXkaf/RrnvalMw/LdVmya/dCOvulP6j4IOy9EiYWRIuZU6XThGJm V/YyKe+reNt66rHZ9wGWbl0YTxUklYCTM6VmuBTlcU+oCeFjmVC78ZBYfIztzZzP kiU+KEj5nWWPkp3enQXWbeMhJef0PROedqsDB8bCNSFQ3KIc2ubXLFHzF1F+5Aqf CGZ9aIMHEuY2U8klrIbK4Tr1/m0weG2C9JEn7ypTM77bhgXGrffXXF1E0vfyWIkW A+9i7b0gO+FVTn+UI1OAnvKFn0kpEUJht382JmDPftm2IzEDPJ1wslXmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx18LlLx1yiUbsIikx+c5B4vCZTMB8GA1UdIwQY MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3 LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjGs2D0Z EGbz+UB2HTlTKVy6rej3wZNHzFmmdZZkSRQouHUW3xr5iK79yE/1S0xCTAi/Qc7n fOoxbisEgEgSJR1j8OG67fFoIvhzVAfJ4zCZtx6+t2wBuJNU6xpPd8b+uxUiIDcq EM9OBDiz6tAhwO4apFNPkaEbcU+wh53pSJQo+mWbltdovgMwByEFAv2PYtDn4+XS 4fW31SmdWTbR0CtxfHh4q1AcRxCT+c8Q0ouSxfvsc1kY+cLbID2+zEj+sOAWLIfj 45RW9umkezhLBny2Lz6Z9HcO0DHYcov1dflnxUe7s7evbHPPVPuRr9IW+SXZ2Ur9 jFurCWK7SVWp7w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:49 2025 by rpki-client