This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json) Hash identifier: G3ihbidM8QWu+t+LG9+E59qSH959wl9W7N3eEHvt0oo= Subject key identifier: 9D:6C:C2:74:51:A0:75:FB:42:45:71:A5:AA:81:7C:E2:25:F0:35:83 Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e Certificate serial: 019B0E5BE5F22FEF18459A2FF443DD6C798A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft Manifest number: 05D4 Signing time: Thu 11 Dec 2025 17:01:02 +0000 Manifest this update: Thu 11 Dec 2025 17:01:02 +0000 Manifest next update: Fri 12 Dec 2025 17:01:02 +0000 Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: GFZXwGUnFrAL3rue6eojmcvlNpKA59+/mzXu/LDg4f4=) 2: OBVrhxJJoBc-VRBg3UgoLatO8jw.roa (hash: KCv58SPJtOd1CZuOt1f7SzknAaoYC3n9p/ssJu75MPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:e5:f2:2f:ef:18:45:9a:2f:f4:43:dd:6c:79:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e Validity Not Before: Dec 11 17:01:02 2025 GMT Not After : Dec 12 17:01:02 2025 GMT Subject: CN=9d6cc27451a075fb424571a5aa817ce225f03583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:14:bd:ee:da:bc:a1:d5:cd:ec:ae:75:b3:43: 26:6c:c5:38:fc:96:aa:19:26:ef:72:12:a7:b8:49: fe:2e:ab:df:57:f3:14:20:dc:53:17:6f:56:7b:52: a3:46:50:33:06:8f:e2:ee:f7:65:e5:d0:2e:58:0b: 70:c2:42:96:46:ae:57:6f:79:54:33:68:4f:59:96: d2:47:67:1a:37:92:0c:93:99:fe:e3:f4:36:00:f5: c3:19:b5:98:36:f3:97:98:72:49:69:89:1d:68:16: 26:d2:bc:a0:be:20:db:a1:df:69:a5:ce:04:52:15: b6:fe:04:59:3d:1c:b1:57:5b:0d:66:a5:75:59:10: a0:c7:0d:9c:7c:89:2c:80:70:59:ba:16:00:18:26: 24:74:0d:d8:a7:f1:8e:40:0b:db:9d:ec:4f:19:3b: ee:bc:be:3a:bd:c0:5a:f8:b7:cf:ee:fc:3f:8f:7d: 23:4d:ec:75:bb:6c:4c:d9:8f:a5:10:36:8a:62:5c: 5e:eb:cb:5d:aa:5f:83:2c:08:e0:a7:76:64:05:4d: 86:40:de:21:66:10:53:82:a1:ed:49:d1:16:b9:02: f8:9e:25:9d:0f:06:f4:29:63:37:9b:47:5e:86:e4: d4:bd:e3:a4:f8:2e:45:a4:ca:00:7f:3b:96:be:63: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6C:C2:74:51:A0:75:FB:42:45:71:A5:AA:81:7C:E2:25:F0:35:83 X509v3 Authority Key Identifier: keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:c1:12:4c:cf:92:27:2c:f9:19:7c:81:3f:bd:8e:71:9c: 65:7b:42:a4:46:23:63:7f:09:39:19:c3:34:e7:f4:9d:db:29: 9f:f0:61:3f:53:77:d9:75:0f:e0:88:56:0c:49:c3:90:e6:a1: ce:3b:53:87:09:dd:fd:0f:56:4c:4e:b5:a4:eb:50:45:1d:d4: 29:1e:8a:20:93:0b:bf:5a:71:65:ee:64:60:bb:4e:ba:a2:7d: 19:4b:aa:9e:c9:c4:32:61:c1:b2:f4:20:64:e0:d9:36:c6:26: 80:1a:68:ad:5d:67:d9:e9:4f:d1:e9:fb:d4:50:99:76:ae:c7: af:83:9a:80:2f:df:d4:0e:39:fa:41:cf:d5:0d:07:33:dd:31: bd:85:d9:c7:e5:ca:12:03:89:4e:35:a4:5e:73:41:e8:ab:f1: 6a:d0:e0:ea:63:f4:74:97:16:62:3e:4a:bc:92:7c:20:eb:3d: 59:33:78:31:7c:c1:18:be:cc:05:96:da:8a:52:2e:d3:81:48: 78:73:1d:a6:a4:2f:34:5c:38:50:24:4a:53:47:5f:2d:46:70: 5e:24:a5:a9:fe:22:00:c1:58:e4:59:46:c2:14:ae:58:1c:08: 14:97:77:b7:06:24:2a:d0:57:e5:3c:a6:99:31:22:da:03:75: e3:3a:c3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+XyL+8YRZov9EPdbHmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk NjYxNWUwHhcNMjUxMjExMTcwMTAyWhcNMjUxMjEyMTcwMTAyWjAzMTEwLwYDVQQD Eyg5ZDZjYzI3NDUxYTA3NWZiNDI0NTcxYTVhYTgxN2NlMjI1ZjAzNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hS97tq8odXN7K51s0MmbMU4/Jaq GSbvchKnuEn+LqvfV/MUINxTF29We1KjRlAzBo/i7vdl5dAuWAtwwkKWRq5Xb3lU M2hPWZbSR2caN5IMk5n+4/Q2APXDGbWYNvOXmHJJaYkdaBYm0rygviDbod9ppc4E UhW2/gRZPRyxV1sNZqV1WRCgxw2cfIksgHBZuhYAGCYkdA3Yp/GOQAvbnexPGTvu vL46vcBa+LfP7vw/j30jTex1u2xM2Y+lEDaKYlxe68tdql+DLAjgp3ZkBU2GQN4h ZhBTgqHtSdEWuQL4niWdDwb0KWM3m0dehuTUveOk+C5FpMoAfzuWvmPuJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1swnRRoHX7QkVxpaqBfOIl8DWDMB8GA1UdIwQY MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt MWNmNzFkZjgyOGQ4LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4 LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOHBEkzP kics+Rl8gT+9jnGcZXtCpEYjY38JORnDNOf0ndspn/BhP1N32XUP4IhWDEnDkOah zjtThwnd/Q9WTE61pOtQRR3UKR6KIJMLv1pxZe5kYLtOuqJ9GUuqnsnEMmHBsvQg ZODZNsYmgBporV1n2elP0en71FCZdq7Hr4OagC/f1A45+kHP1Q0HM90xvYXZx+XK EgOJTjWkXnNB6KvxatDg6mP0dJcWYj5KvJJ8IOs9WTN4MXzBGL7MBZbailIu04FI eHMdpqQvNFw4UCRKU0dfLUZwXiSlqf4iAMFY5FlGwhSuWBwIFJd3twYkKtBX5Tym mTEi2gN14zrDGw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:38 2025 by rpki-client