This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json) Hash identifier: nHgHxYA+izUzgxkHglbM0BmLBfVfomA+ppdhXIFAQ14= Subject key identifier: F2:12:76:F8:94:47:99:44:56:4C:DB:D2:46:04:28:C5:10:B5:80:CF Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Certificate serial: 019B4A70CADAFD9EADF12DAC70069E9CB683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft Manifest number: 0E74 Signing time: Tue 23 Dec 2025 09:01:04 +0000 Manifest this update: Tue 23 Dec 2025 09:01:04 +0000 Manifest next update: Wed 24 Dec 2025 09:01:04 +0000 Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: X+AMH6AbWBgr3RTr7+Jt64AjLrGwJFq33k2f9NKyJVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:ca:da:fd:9e:ad:f1:2d:ac:70:06:9e:9c:b6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Validity Not Before: Dec 23 09:01:04 2025 GMT Not After : Dec 24 09:01:04 2025 GMT Subject: CN=f21276f894479944564cdbd2460428c510b580cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:9d:5c:04:b5:d5:be:09:a3:87:e9:f5:68: ec:94:4c:a9:62:bc:ee:6d:f4:dd:eb:32:05:df:4a: 0c:22:18:bc:2d:4f:5f:04:7b:4c:1a:7d:9f:63:10: 4a:03:37:c4:14:7f:c7:4b:59:8b:ae:a2:79:9a:68: b5:02:54:b1:32:5b:67:ea:85:6c:49:25:fd:08:00: 57:13:6f:3a:6b:a9:97:0b:d9:72:f4:9c:e9:10:b4: 1c:b3:e6:6c:97:4d:1f:9c:41:49:f2:07:d5:bb:c6: 6c:01:0d:c1:15:d7:f1:06:84:7f:03:7d:12:fe:6e: 8c:13:f3:5a:68:af:f2:70:74:db:a9:3d:89:a4:f4: 6a:aa:e5:b5:4c:f6:e2:5b:b9:31:b3:9b:c4:cf:13: d2:18:b8:53:09:c8:92:9f:65:4d:30:12:b3:ff:d3: c0:02:9a:08:20:4d:ce:5b:e5:a8:9d:10:60:0b:ac: 63:a3:fd:61:7d:0a:b5:86:f2:80:b7:04:15:83:fe: 67:ed:f0:b7:42:2c:31:7a:ad:0d:ac:a2:98:60:98: 0e:46:1f:01:2b:15:90:9e:4f:33:3f:fd:0d:d1:1c: 26:2c:15:8e:b0:9b:d9:98:2d:c7:58:a6:84:73:99: df:7b:0c:9c:04:82:69:d8:bf:18:db:e4:b7:68:fa: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:76:F8:94:47:99:44:56:4C:DB:D2:46:04:28:C5:10:B5:80:CF X509v3 Authority Key Identifier: keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4a:68:fc:3d:ba:24:af:f8:4b:c8:94:d5:52:e1:8d:07:b9: 2a:a7:e1:7f:4e:9a:34:c4:db:47:dc:fa:30:16:ff:48:6f:21: ec:53:b4:7e:e7:3c:24:ed:ab:a6:7b:37:44:fc:c2:ac:59:52: eb:b4:e5:4a:14:84:b1:fb:22:54:a2:9e:2d:98:db:bb:07:c2: 53:9a:f8:c3:d6:39:7c:f1:c0:d1:d6:95:97:8b:f4:43:31:58: 6a:4c:6a:c3:aa:08:8d:73:f5:a8:df:39:1b:47:4f:6e:72:a0: dc:3d:0e:4d:60:a9:4f:bd:67:e7:e5:ce:31:49:f8:58:9b:b4: 36:b9:13:e0:c4:e4:b3:22:07:b0:9e:bc:b1:b3:25:f3:0d:b0: 78:3a:43:2c:38:02:79:b9:00:6f:2d:c2:b1:5f:63:35:5c:6a: 85:d7:37:69:33:ee:56:be:bb:26:e7:e4:b1:b8:cc:f3:02:66: 6f:0f:2d:44:eb:63:fe:41:d8:72:5b:d9:e4:49:ff:6d:d3:57: 87:69:96:79:0a:34:1e:94:b2:c6:86:19:37:8a:95:82:a7:0b: 9a:09:85:e8:ab:d7:81:c5:24:1a:eb:cd:48:fa:2b:d6:26:e4: 28:45:6f:63:91:7b:01:3c:a7:ac:b2:1a:ef:45:61:bd:ae:da: e5:4b:ee:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcMra/Z6t8S2scAaenLaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5 MDc2MzYwHhcNMjUxMjIzMDkwMTA0WhcNMjUxMjI0MDkwMTA0WjAzMTEwLwYDVQQD EyhmMjEyNzZmODk0NDc5OTQ0NTY0Y2RiZDI0NjA0MjhjNTEwYjU4MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4mdXAS11b4Jo4fp9WjslEypYrzu bfTd6zIF30oMIhi8LU9fBHtMGn2fYxBKAzfEFH/HS1mLrqJ5mmi1AlSxMltn6oVs SSX9CABXE286a6mXC9ly9JzpELQcs+Zsl00fnEFJ8gfVu8ZsAQ3BFdfxBoR/A30S /m6ME/NaaK/ycHTbqT2JpPRqquW1TPbiW7kxs5vEzxPSGLhTCciSn2VNMBKz/9PA ApoIIE3OW+WonRBgC6xjo/1hfQq1hvKAtwQVg/5n7fC3Qiwxeq0NrKKYYJgORh8B KxWQnk8zP/0N0RwmLBWOsJvZmC3HWKaEc5nfewycBIJp2L8Y2+S3aPoG5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPISdviUR5lEVkzb0kYEKMUQtYDPMB8GA1UdIwQY MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0po/D26 JK/4S8iU1VLhjQe5Kqfhf06aNMTbR9z6MBb/SG8h7FO0fuc8JO2rpns3RPzCrFlS 67TlShSEsfsiVKKeLZjbuwfCU5r4w9Y5fPHA0daVl4v0QzFYakxqw6oIjXP1qN85 G0dPbnKg3D0OTWCpT71n5+XOMUn4WJu0NrkT4MTksyIHsJ68sbMl8w2weDpDLDgC ebkAby3CsV9jNVxqhdc3aTPuVr67JufksbjM8wJmbw8tROtj/kHYclvZ5En/bdNX h2mWeQo0HpSyxoYZN4qVgqcLmgmF6KvXgcUkGuvNSPor1ibkKEVvY5F7ATynrLIa 70Vhva7a5Uvukg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:45:46 2025 by rpki-client