This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json) Hash identifier: XaIH+dfNQCh/DNrQ8KI4cGzkCSkVo6RF6cf9mwFh6sU= Subject key identifier: 12:BD:30:81:88:C0:14:21:73:A6:6F:D3:D8:A0:F2:23:5B:DB:D4:19 Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Certificate serial: 019B0BFF3D641CCEBEF248AF2131BD8F7BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 06:00:35 +0000 Manifest this update: Thu 11 Dec 2025 06:00:35 +0000 Manifest next update: Fri 12 Dec 2025 06:00:35 +0000 Files and hashes: 1: 22wVvYqfysfBaYOhYbGdPQUpw1I.roa (hash: FtF0xfCRr+CFbBuExeP2kC84eEIje6JYGOJe1D6MqPk=) 2: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: c4xrAxG6ubFOA7sDF3fd4E7s8y6XTNvwOc2dM39oWRg=) 3: 4riCGHi3vw5cyBXdYggmG3yakjU.roa (hash: A/skujedjujhYf3+uRyasfG7Uyl+RTN8KOVauD7RAjY=) 4: 6Ds5RVmgnVhibq3q_o76tyxqGF0.roa (hash: ZaNEOkNbzSY+y1rnsqLobnF8H5v0hgQ/dfmbwaaeZnc=) 5: Cv8Q_peVRf64Y1ffl4Mm-dEwtA4.roa (hash: JMed3eKfX/IuEsmyZ1/hdxmL+TW6bqbpaU7++Ek9hC8=) 6: ooXXO8OQWNg8QEaR5aKghUKIeYs.roa (hash: ILCE/LCGaI5afO3rmo9l7gFkr7RayhGTkBNHUuWC4aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:ff:3d:64:1c:ce:be:f2:48:af:21:31:bd:8f:7b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Validity Not Before: Dec 11 06:00:35 2025 GMT Not After : Dec 12 06:00:35 2025 GMT Subject: CN=12bd308188c0142173a66fd3d8a0f2235bdbd419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:80:20:c8:b9:20:7f:1d:0e:d2:28:b7:d6: 40:70:2d:cf:6c:74:59:35:6b:9d:a0:6c:75:e1:4b: 88:61:b8:8e:02:76:ce:28:49:e2:83:bb:b9:b1:e5: 5e:97:d6:b6:d9:2c:a8:4a:6d:5a:b8:50:2d:ca:c6: 19:6c:80:7b:3f:2f:24:a8:68:16:8d:fe:84:8e:ff: 1f:7f:2c:c8:ac:fa:91:f8:b1:a4:b7:96:5e:c6:c7: 3d:fe:23:93:32:59:5d:4a:ef:c3:25:3a:27:4f:93: e3:d8:e6:68:66:36:6d:b5:13:27:c5:80:3d:a0:22: 7f:a1:0a:8c:fd:c9:51:54:4e:17:b0:4c:a8:fb:b4: 4b:fd:70:80:c6:4f:5f:22:03:5f:87:0b:5e:eb:11: 83:52:48:c5:74:59:50:86:dc:fd:41:00:04:86:de: 16:d5:1d:a6:ca:ef:6b:30:ec:79:72:fd:d1:c0:53: db:5c:91:f7:66:2f:7c:10:36:52:81:fd:c6:6f:93: 4d:da:e2:8c:d7:3b:38:c5:a0:c6:62:87:51:72:6f: f2:17:a8:9a:3d:1a:c5:ed:9a:91:4b:3d:36:1c:93: ec:4d:73:ac:c2:07:ad:0a:c1:07:07:11:77:42:82: aa:ac:f0:f7:20:23:c8:be:af:49:07:51:65:89:3e: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:30:81:88:C0:14:21:73:A6:6F:D3:D8:A0:F2:23:5B:DB:D4:19 X509v3 Authority Key Identifier: keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:91:f5:ee:66:c8:db:38:d8:12:ec:fc:ab:71:f3:55:0f:8d: 86:d5:06:6e:ad:17:80:94:12:9d:a5:fa:59:24:23:f8:21:1c: 7c:42:2e:c7:d3:51:2d:3a:63:d4:fe:00:cd:87:cb:07:64:1d: 90:37:73:65:97:4e:09:f1:42:de:bd:68:09:b0:d6:db:09:81: 79:f5:55:1e:f8:cb:68:3a:68:70:3b:b0:e9:0d:fb:93:22:01: 88:ab:45:1e:d8:49:da:d6:c3:55:f0:c2:35:ed:06:f5:55:ea: ca:0d:0b:a2:79:20:25:75:98:f6:03:b4:a6:94:2b:08:76:ea: 7b:5e:6c:dd:65:5f:91:3e:5f:1e:1b:6b:8a:52:51:9f:3e:80: bd:c8:9c:60:52:63:12:94:06:6a:71:90:49:c1:74:93:41:16: 3b:5d:55:40:ed:4c:41:8c:07:56:7d:99:0c:22:f8:c0:3f:aa: f3:6b:c4:7e:04:08:81:87:89:cb:17:47:4a:11:11:ea:0f:9b: a4:7c:7e:ba:55:ea:4f:ff:3a:ca:78:09:86:b6:5c:f8:bc:48: 08:f1:7d:96:e8:8a:a8:7e:a2:ab:d2:e9:5d:fb:62:06:64:1f: fa:6c:45:b2:a5:b4:de:d6:22:82:9a:28:eb:a5:17:4b:a0:29: c9:7d:9d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsL/z1kHM6+8kivITG9j3vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi ZTFiMTEwHhcNMjUxMjExMDYwMDM1WhcNMjUxMjEyMDYwMDM1WjAzMTEwLwYDVQQD EygxMmJkMzA4MTg4YzAxNDIxNzNhNjZmZDNkOGEwZjIyMzViZGJkNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyluAIMi5IH8dDtIot9ZAcC3PbHRZ NWudoGx14UuIYbiOAnbOKEnig7u5seVel9a22SyoSm1auFAtysYZbIB7Py8kqGgW jf6Ejv8ffyzIrPqR+LGkt5Zexsc9/iOTMlldSu/DJTonT5Pj2OZoZjZttRMnxYA9 oCJ/oQqM/clRVE4XsEyo+7RL/XCAxk9fIgNfhwte6xGDUkjFdFlQhtz9QQAEht4W 1R2myu9rMOx5cv3RwFPbXJH3Zi98EDZSgf3Gb5NN2uKM1zs4xaDGYodRcm/yF6ia PRrF7ZqRSz02HJPsTXOswgetCsEHBxF3QoKqrPD3ICPIvq9JB1FliT6oMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK9MIGIwBQhc6Zv09ig8iNb29QZMB8GA1UdIwQY MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpH17mbI 2zjYEuz8q3HzVQ+NhtUGbq0XgJQSnaX6WSQj+CEcfEIux9NRLTpj1P4AzYfLB2Qd kDdzZZdOCfFC3r1oCbDW2wmBefVVHvjLaDpocDuw6Q37kyIBiKtFHthJ2tbDVfDC Ne0G9VXqyg0LonkgJXWY9gO0ppQrCHbqe15s3WVfkT5fHhtrilJRnz6AvcicYFJj EpQGanGQScF0k0EWO11VQO1MQYwHVn2ZDCL4wD+q82vEfgQIgYeJyxdHShER6g+b pHx+ulXqT/86yngJhrZc+LxICPF9luiKqH6iq9LpXftiBmQf+mxFsqW03tYigpoo 66UXS6ApyX2ddA== -----END CERTIFICATE-----Generated at Thu Dec 11 15:11:36 2025 by rpki-client