This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: EP4OpSc3CkXreK1wCQn7uvSjJcCINDhjfTcBxe1mnfA=
Subject key identifier: 76:89:48:DC:97:65:63:73:A7:80:07:8C:3E:95:FE:F4:4B:78:B0:0F
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019B32313BCBD71443BBD13FB99B22A0001D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 1785
Signing time: Thu 18 Dec 2025 16:00:45 +0000
Manifest this update: Thu 18 Dec 2025 16:00:45 +0000
Manifest next update: Fri 19 Dec 2025 16:00:45 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: e/9sf4H/KdprkcR2+UfCvaEjCJHLX9D7jetb1eZGUIY=)
2: E91jvk64DSRhm8AVd6hF7uJr2Pw.roa (hash: aX6JYe6Vw1Lp+xGzuH3h+WZ1ze63bqdxs+b3skdG9/A=)
3: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:31:3b:cb:d7:14:43:bb:d1:3f:b9:9b:22:a0:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Dec 18 16:00:45 2025 GMT
Not After : Dec 19 16:00:45 2025 GMT
Subject: CN=768948dc97656373a780078c3e95fef44b78b00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:4b:52:36:b8:08:2c:ab:20:bd:85:26:50:
85:e8:96:75:60:e8:12:76:9f:14:bc:c5:f4:87:52:
2a:d4:48:b1:26:66:e1:42:12:5a:ac:5d:c5:53:64:
77:b6:27:e3:a7:ed:9e:5f:cf:20:39:b2:dd:10:de:
e1:4a:2d:66:d4:f2:0f:20:83:59:16:49:c2:0c:92:
fc:2c:23:dd:5c:03:0c:62:aa:ba:7e:ad:2a:7a:01:
c3:14:7c:e1:c4:87:4e:52:fc:ad:5d:b7:61:6f:6c:
6f:68:a5:2c:be:9b:30:16:ab:2e:e2:5a:2d:ec:66:
f1:c4:7a:6a:68:55:af:83:cb:95:8a:86:f7:07:a2:
f6:a9:3d:89:00:2f:96:8f:fe:7d:5d:13:4c:b5:a0:
b4:51:03:74:7d:6b:e9:53:0e:f7:70:06:8e:b3:57:
e4:4e:cf:8a:a7:26:e0:7e:b7:2a:21:0f:01:2c:b4:
93:a0:af:50:2c:46:1d:aa:ac:42:3a:fc:31:31:45:
58:8c:df:41:0e:cd:88:3a:e6:96:01:f3:a1:bf:92:
89:55:20:4f:33:4a:06:63:44:41:65:d7:e9:9d:10:
1e:d0:35:82:aa:cd:85:77:dc:2e:e1:c3:b5:e0:79:
1d:8e:72:06:81:af:db:f7:d7:ce:52:5d:b4:2a:78:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:48:DC:97:65:63:73:A7:80:07:8C:3E:95:FE:F4:4B:78:B0:0F
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:62:ed:71:3c:18:d2:2e:3c:3d:c2:6a:5b:f4:07:8f:20:77:
c5:9c:62:3b:8b:81:26:4c:ac:7b:bc:c1:5b:d1:11:81:20:ce:
19:e7:37:04:6c:5c:c3:39:f1:40:89:bc:61:de:45:15:94:31:
c2:07:c8:d9:93:54:e7:6d:5a:45:53:14:5e:5a:43:fa:68:be:
5f:03:fc:40:ba:e0:94:9d:2b:22:e6:a2:17:46:a5:8d:1a:aa:
df:17:df:ee:10:8f:1b:53:d6:c7:69:c3:f1:76:d9:7e:67:b2:
38:38:29:0b:c0:72:c7:d8:df:1e:77:fd:81:22:fb:d1:56:65:
5a:65:d7:6b:81:96:6d:ec:14:3e:1b:fe:89:6e:12:af:3d:84:
fc:ec:3b:d2:d6:f0:4e:fc:42:04:24:c2:2c:c9:46:95:21:e9:
75:68:2c:a0:dc:9b:36:a9:4c:62:f7:24:c2:67:19:2f:5c:0b:
20:f8:30:d7:c2:8f:56:2c:e9:3c:1d:44:7c:d7:e0:65:0c:b7:
51:a3:95:dc:a2:8f:84:9f:83:41:cc:31:62:4e:32:26:a0:61:
82:16:75:e9:8a:c3:98:ea:44:2f:9d:74:a5:9b:0c:35:36:92:
bb:80:2f:a4:68:b4:70:53:11:80:65:51:26:4b:a0:43:c8:8b:
58:10:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:57:13 2025 by rpki-client