This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json) Hash identifier: HY8k8+JsYNLoI2vTY9sn8EmVR79qhJBhaduUz+mrrz4= Subject key identifier: 34:A0:F0:93:A6:F2:F6:16:7F:26:E5:08:67:92:78:E3:B3:21:00:B1 Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019B39EA955071670CD830C5EB77A3A0A42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft Manifest number: 0721 Signing time: Sat 20 Dec 2025 04:00:33 +0000 Manifest this update: Sat 20 Dec 2025 04:00:33 +0000 Manifest next update: Sun 21 Dec 2025 04:00:33 +0000 Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: BMJCoYRfN87ATLpjjaIVfELuQRpChiInXOWCUTUTC5c=) 2: Z5XRZtUC9s3CbIed4tLwk0brsf0.roa (hash: r/qCqYJ4chyv7nOwsypdjNGGILNa7ltYYU9q4PuuHw4=) 3: _Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa (hash: 3ALoIGbxmP+kByubWHulq2NFwTA/LOztSuk+rMQPM34=) 4: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:95:50:71:67:0c:d8:30:c5:eb:77:a3:a0:a4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Dec 20 04:00:33 2025 GMT Not After : Dec 21 04:00:33 2025 GMT Subject: CN=34a0f093a6f2f6167f26e508679278e3b32100b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:54:ab:c3:c6:d8:45:d1:13:b9:7a:92:b3: 51:df:34:2e:23:72:12:dd:b6:fd:96:46:b2:79:25: e5:af:cc:f8:19:8b:db:56:f9:31:15:b7:43:24:a7: 0d:c0:ac:8c:49:37:67:97:bb:c7:c9:e3:23:aa:5f: 84:f3:57:14:d5:64:3c:42:9d:bd:78:89:e6:4a:d8: 9c:79:5a:16:02:cb:9b:00:ab:96:34:97:3f:fe:2f: 08:2d:dc:12:f8:0b:74:fe:fa:6c:ac:f6:74:6d:a7: 12:f0:e9:2c:24:90:1a:70:6e:23:c4:ad:a4:29:66: 96:50:0b:12:99:c3:62:7d:1a:ce:60:d3:db:cb:00: 5d:66:f5:76:ae:c5:85:a6:0d:a8:c0:86:2a:36:f6: f4:80:03:72:11:5e:ba:fc:df:e0:82:3e:ca:92:25: cc:c2:54:03:2d:7f:85:18:bf:b0:6f:8c:6e:1f:5c: 41:9e:ce:91:74:af:3d:c8:37:d1:40:b8:39:36:2f: 54:86:02:30:50:7a:04:09:84:39:be:e4:b4:90:77: fe:38:00:0d:5b:8f:7a:89:66:53:c3:65:b4:7c:9a: 05:35:04:73:90:18:70:8e:27:67:91:52:21:ca:d8: bd:92:7c:cc:ac:0f:a2:14:85:b5:6c:18:2c:08:d6: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:F0:93:A6:F2:F6:16:7F:26:E5:08:67:92:78:E3:B3:21:00:B1 X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6e:92:f6:7c:5c:e7:81:d4:67:de:cb:93:0e:30:11:b8:70: 86:f0:a6:80:88:7d:ff:d2:0b:7f:af:66:ee:4d:92:10:c0:c6: c5:5b:6b:19:45:ce:84:21:95:0f:4d:dc:58:3f:26:80:05:5e: 80:15:ba:07:af:ec:47:57:e6:0d:88:5d:92:30:0c:02:46:bb: e7:da:f2:57:db:95:ef:25:d0:fc:42:66:e4:d2:48:01:ab:8d: e8:4d:df:8d:1c:4e:20:7b:63:39:da:22:35:d5:74:15:b2:d9: 57:68:81:54:2b:43:b7:0a:df:9d:04:b8:dd:ba:0e:ae:9d:ba: 31:fc:47:e6:db:bd:49:e9:f9:c0:27:b9:29:63:1d:c3:ea:2e: c7:0e:39:4b:b0:bc:8d:6d:be:9a:44:82:cf:25:38:ae:9a:a5: 6a:6b:2c:58:64:7a:72:c2:34:04:31:94:d6:4f:26:c9:07:a5: f9:c3:3f:05:1e:55:50:fb:21:f2:29:5e:f4:d0:2b:96:17:8f: 44:8b:99:bf:52:fa:b6:7b:5b:53:3a:e9:2e:79:6c:29:c9:30: ee:ad:b1:39:dd:3a:5c:be:9a:3d:11:69:70:e6:92:c9:38:4d: 94:c9:dc:9c:07:2c:bc:29:3b:c2:ae:dd:49:ce:05:af:f4:11: 0e:3d:8b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56pVQcWcM2DDF63ejoKQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjUxMjIwMDQwMDMzWhcNMjUxMjIxMDQwMDMzWjAzMTEwLwYDVQQD EygzNGEwZjA5M2E2ZjJmNjE2N2YyNmU1MDg2NzkyNzhlM2IzMjEwMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1Uq8PG2EXRE7l6krNR3zQuI3IS 3bb9lkayeSXlr8z4GYvbVvkxFbdDJKcNwKyMSTdnl7vHyeMjql+E81cU1WQ8Qp29 eInmSticeVoWAsubAKuWNJc//i8ILdwS+At0/vpsrPZ0bacS8OksJJAacG4jxK2k KWaWUAsSmcNifRrOYNPbywBdZvV2rsWFpg2owIYqNvb0gANyEV66/N/ggj7KkiXM wlQDLX+FGL+wb4xuH1xBns6RdK89yDfRQLg5Ni9UhgIwUHoECYQ5vuS0kHf+OAAN W496iWZTw2W0fJoFNQRzkBhwjidnkVIhyti9knzMrA+iFIW1bBgsCNZ5kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSg8JOm8vYWfyblCGeSeOOzIQCxMB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm6S9nxc 54HUZ97Lkw4wEbhwhvCmgIh9/9ILf69m7k2SEMDGxVtrGUXOhCGVD03cWD8mgAVe gBW6B6/sR1fmDYhdkjAMAka759ryV9uV7yXQ/EJm5NJIAauN6E3fjRxOIHtjOdoi NdV0FbLZV2iBVCtDtwrfnQS43boOrp26MfxH5tu9Sen5wCe5KWMdw+ouxw45S7C8 jW2+mkSCzyU4rpqlamssWGR6csI0BDGU1k8myQel+cM/BR5VUPsh8ile9NArlheP RIuZv1L6tntbUzrpLnlsKckw7q2xOd06XL6aPRFpcOaSyThNlMncnAcsvCk7wq7d Sc4Fr/QRDj2Lcw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:12 2025 by rpki-client