This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json) Hash identifier: 2qSfltEL9n2GEn/lYCcfPltSc3aBIkxNsawkshLOFDI= Subject key identifier: 6F:F7:F8:E5:B1:82:5C:8F:D7:14:96:77:18:A0:CB:74:29:34:A5:A7 Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019B36B344013293FD28537BD88B07F3D23D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft Manifest number: 11E7 Signing time: Fri 19 Dec 2025 13:01:16 +0000 Manifest this update: Fri 19 Dec 2025 13:01:16 +0000 Manifest next update: Sat 20 Dec 2025 13:01:16 +0000 Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: SvLmNirocdL83wvS1e/Zl2tCoCscTIXKZsCp1ezH8ro=) 2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:44:01:32:93:fd:28:53:7b:d8:8b:07:f3:d2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Dec 19 13:01:16 2025 GMT Not After : Dec 20 13:01:16 2025 GMT Subject: CN=6ff7f8e5b1825c8fd714967718a0cb742934a5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:01:26:61:18:5e:22:f7:cf:51:d9:27:f3: 39:75:d7:e0:e5:21:a9:ad:35:06:59:3c:31:cb:6f: 5b:e9:23:cc:ad:b3:b7:1b:c6:ec:39:35:68:e6:a7: 56:96:91:8c:d2:f8:3a:66:a4:65:8b:3f:ac:cf:3f: 15:55:72:1f:0e:32:de:85:fa:11:8f:73:07:81:09: 24:88:53:0e:23:91:c4:38:01:63:ca:bc:4e:b2:fd: 36:ee:1d:f6:20:49:81:ab:4c:a4:d8:0a:d8:13:c3: 04:15:32:c6:02:9c:f3:34:4e:46:b6:85:1a:25:a4: e7:b5:f6:80:a9:5b:7f:a0:20:ba:8d:1b:21:79:47: 63:e3:0b:e1:6e:20:6d:56:19:6e:43:25:03:00:38: 8b:b0:1a:ae:10:74:11:07:62:b2:ca:09:61:c4:f9: bd:6b:2d:ac:22:21:a5:13:fe:bd:54:11:5c:ed:68: 8a:c2:3c:5f:c7:8c:8f:17:81:53:53:3c:cf:1d:9b: 78:99:a9:04:0c:66:d7:39:a7:d5:e0:f5:d0:4e:1b: f4:e7:b6:23:3d:3c:f0:58:e4:0e:d7:32:52:17:39: 12:d6:be:24:8d:f7:da:d0:11:7b:bf:ee:6d:84:08: 9c:52:29:ae:bc:a9:d8:59:d6:58:81:df:b9:e5:5d: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F7:F8:E5:B1:82:5C:8F:D7:14:96:77:18:A0:CB:74:29:34:A5:A7 X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f6:e3:bd:0e:33:7e:1a:45:67:fa:ff:2a:c9:86:70:fd:3e: de:b0:7c:68:2f:bf:56:73:ce:02:be:b8:e4:e0:6d:34:9e:42: 60:c6:c0:a3:2a:be:09:80:43:06:78:0b:65:9a:81:51:3e:6d: 88:84:4e:a3:09:3a:22:b8:8c:73:63:8d:67:f3:25:98:c9:0b: 8c:7a:82:3b:0e:ac:50:84:2e:85:0d:73:16:ad:13:70:f0:dc: a1:03:72:9d:cc:02:62:1c:73:8f:3f:4f:dc:88:06:15:bd:9b: 4a:02:c2:ac:7b:a1:56:de:e2:7e:b8:bf:bb:04:ff:2a:9d:2c: 0b:30:fc:3f:10:9c:cd:41:f2:df:16:89:6e:71:43:c8:d9:c8: 98:a4:0c:82:21:6b:79:a3:e2:6e:89:c6:0d:4a:5c:ea:d2:40: b3:b6:c5:a9:66:f9:71:77:f3:c3:f9:08:ef:22:62:ee:32:52: 92:ff:f6:42:fb:e6:33:99:d0:cb:2c:83:b4:9d:ed:d3:9b:e2: cd:e2:cc:cc:9a:2b:d6:42:fa:29:b4:17:a2:b3:23:f4:64:17: b0:76:7f:d4:f3:2e:3e:18:6c:90:5e:84:ed:94:0c:77:6c:7f: 87:21:7c:3a:a3:4b:af:8b:2c:f1:9c:75:4a:b2:45:27:1b:96: cd:af:7d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s0QBMpP9KFN72IsH89I9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjUxMjE5MTMwMTE2WhcNMjUxMjIwMTMwMTE2WjAzMTEwLwYDVQQD Eyg2ZmY3ZjhlNWIxODI1YzhmZDcxNDk2NzcxOGEwY2I3NDI5MzRhNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4BJmEYXiL3z1HZJ/M5ddfg5SGp rTUGWTwxy29b6SPMrbO3G8bsOTVo5qdWlpGM0vg6ZqRliz+szz8VVXIfDjLehfoR j3MHgQkkiFMOI5HEOAFjyrxOsv027h32IEmBq0yk2ArYE8MEFTLGApzzNE5GtoUa JaTntfaAqVt/oCC6jRsheUdj4wvhbiBtVhluQyUDADiLsBquEHQRB2KyyglhxPm9 ay2sIiGlE/69VBFc7WiKwjxfx4yPF4FTUzzPHZt4makEDGbXOafV4PXQThv057Yj PTzwWOQO1zJSFzkS1r4kjffa0BF7v+5thAicUimuvKnYWdZYgd+55V2OLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/3+OWxglyP1xSWdxigy3QpNKWnMB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPbjvQ4z fhpFZ/r/KsmGcP0+3rB8aC+/VnPOAr645OBtNJ5CYMbAoyq+CYBDBngLZZqBUT5t iIROowk6IriMc2ONZ/MlmMkLjHqCOw6sUIQuhQ1zFq0TcPDcoQNyncwCYhxzjz9P 3IgGFb2bSgLCrHuhVt7ifri/uwT/Kp0sCzD8PxCczUHy3xaJbnFDyNnImKQMgiFr eaPibonGDUpc6tJAs7bFqWb5cXfzw/kI7yJi7jJSkv/2QvvmM5nQyyyDtJ3t05vi zeLMzJor1kL6KbQXorMj9GQXsHZ/1PMuPhhskF6E7ZQMd2x/hyF8OqNLr4ss8Zx1 SrJFJxuWza99Eg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:21:21 2025 by rpki-client