This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json) Hash identifier: QCEFcWkwS5VsEAive/AjreS/tuWsLMs0Kegx6kmTiEY= Subject key identifier: 18:59:CB:B2:99:4F:E6:AC:EC:2E:10:41:41:0F:5E:16:2C:E2:80:3F Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da Certificate serial: 019B3A218C9976DC070127956416F224AB98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft Manifest number: 12B7 Signing time: Sat 20 Dec 2025 05:00:35 +0000 Manifest this update: Sat 20 Dec 2025 05:00:35 +0000 Manifest next update: Sun 21 Dec 2025 05:00:35 +0000 Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: k+soD5RMbk6WS3e01ncxAJK4COESmOlujf+kacGK8bU=) 2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:8c:99:76:dc:07:01:27:95:64:16:f2:24:ab:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da Validity Not Before: Dec 20 05:00:35 2025 GMT Not After : Dec 21 05:00:35 2025 GMT Subject: CN=1859cbb2994fe6acec2e1041410f5e162ce2803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:c3:2e:11:f9:64:75:5d:3f:63:55:bc:a3: 35:74:74:cd:e1:ac:ef:af:09:af:24:cb:19:f4:63: b9:c5:ab:67:39:32:dd:43:ce:a5:58:03:38:9e:24: 6e:48:41:56:86:ae:c1:be:fb:ee:9f:4e:89:07:47: dd:44:bd:ea:10:2a:da:cc:1a:02:86:db:8e:d3:3e: 95:44:44:6f:5f:53:cf:5e:36:c3:fe:49:f8:8f:11: 54:c8:76:cf:66:bd:fd:3d:5a:c1:3e:8c:f6:4c:b9: 8e:79:ed:52:55:ac:f9:e4:75:49:79:3e:61:91:52: 4f:73:fa:fc:40:74:f2:1e:05:75:7b:67:09:6f:89: 7c:66:06:38:9f:94:bd:fb:de:dc:b3:54:09:13:a7: 0c:d1:59:1d:f2:2f:6b:34:35:62:e2:5a:9d:00:2f: 12:cd:24:30:83:18:56:6b:47:ba:ef:98:b1:14:72: 40:d8:f8:b1:aa:ee:a1:06:67:d3:0f:05:4a:99:f6: 30:48:c2:aa:cc:9e:33:8e:37:03:c3:da:97:2b:c0: 5c:86:ee:c0:23:99:c5:ba:0f:d2:ee:90:0d:92:2b: f7:b7:68:34:53:11:c5:a9:33:8d:2d:8d:0b:9a:99: 47:af:82:1d:c3:54:c9:60:da:15:95:15:b8:03:b0: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:CB:B2:99:4F:E6:AC:EC:2E:10:41:41:0F:5E:16:2C:E2:80:3F X509v3 Authority Key Identifier: keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:94:13:4d:9f:e1:8b:bc:e2:bf:3e:e4:6c:91:cc:c9:06:f7: b8:ca:4f:75:7b:67:52:a4:6f:ae:6d:67:c3:33:d4:a6:7e:8e: 74:1c:14:f3:91:be:cd:a5:f4:e9:c6:83:69:e8:3e:83:dd:92: 5c:66:02:93:29:d4:42:42:ff:02:5c:e5:34:a6:4e:51:cf:d1: 95:6e:af:ca:15:99:e2:a7:76:9b:5b:a3:df:c3:30:98:d8:a1: 5a:2e:40:82:6b:c3:6f:b4:73:eb:ce:49:b0:d2:76:3a:65:74: 70:8f:fd:8b:e5:08:c9:d8:f9:40:00:e1:7c:0c:24:69:01:35: c9:bf:d0:bb:b6:4c:a8:d0:dc:4c:aa:b7:03:89:5d:50:e0:ec: 71:18:21:f9:14:6f:09:89:b1:a2:14:c1:57:1b:a6:e8:bb:fd: d6:e3:43:7b:b4:32:82:b7:6c:06:15:10:bf:96:7a:de:81:d6: 8a:5d:e0:00:5d:9e:10:a3:55:73:b2:14:12:02:48:0e:ed:a0: 95:91:54:4f:ee:5d:8b:e3:a5:a6:0a:5c:19:a8:9b:c1:6c:46: c2:75:58:05:3b:e8:2c:cb:ff:d7:df:dd:f5:4e:64:90:dc:2a: bb:4d:37:4e:c6:3f:56:d8:bb:c8:22:47:19:3a:4b:e7:aa:35: f7:62:b0:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYyZdtwHASeVZBbyJKuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw NmYzZGEwHhcNMjUxMjIwMDUwMDM1WhcNMjUxMjIxMDUwMDM1WjAzMTEwLwYDVQQD EygxODU5Y2JiMjk5NGZlNmFjZWMyZTEwNDE0MTBmNWUxNjJjZTI4MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoevDLhH5ZHVdP2NVvKM1dHTN4azv rwmvJMsZ9GO5xatnOTLdQ86lWAM4niRuSEFWhq7Bvvvun06JB0fdRL3qECrazBoC htuO0z6VRERvX1PPXjbD/kn4jxFUyHbPZr39PVrBPoz2TLmOee1SVaz55HVJeT5h kVJPc/r8QHTyHgV1e2cJb4l8ZgY4n5S9+97cs1QJE6cM0Vkd8i9rNDVi4lqdAC8S zSQwgxhWa0e675ixFHJA2Pixqu6hBmfTDwVKmfYwSMKqzJ4zjjcDw9qXK8Bchu7A I5nFug/S7pANkiv3t2g0UxHFqTONLY0LmplHr4Idw1TJYNoVlRW4A7AEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhZy7KZT+as7C4QQUEPXhYs4oA/MB8GA1UdIwQY MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJQTTZ/h i7zivz7kbJHMyQb3uMpPdXtnUqRvrm1nwzPUpn6OdBwU85G+zaX06caDaeg+g92S XGYCkynUQkL/AlzlNKZOUc/RlW6vyhWZ4qd2m1uj38MwmNihWi5AgmvDb7Rz685J sNJ2OmV0cI/9i+UIydj5QADhfAwkaQE1yb/Qu7ZMqNDcTKq3A4ldUODscRgh+RRv CYmxohTBVxum6Lv91uNDe7QygrdsBhUQv5Z63oHWil3gAF2eEKNVc7IUEgJIDu2g lZFUT+5di+OlpgpcGaibwWxGwnVYBTvoLMv/19/d9U5kkNwqu003TsY/Vti7yCJH GTpL56o192KwcA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:16 2025 by rpki-client