This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json) Hash identifier: fhsci9fTbNlxM4JXb7iH9bnaFxJzAtaHQNW94Xq5S/c= Subject key identifier: C5:CB:A4:89:E2:86:00:6B:56:82:DB:F7:9C:4B:1E:8B:08:8A:6F:4C Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Certificate serial: 019B1C4DF8D745ADC833AC869EEEE7388A5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft Manifest number: 0BA4 Signing time: Sun 14 Dec 2025 10:00:30 +0000 Manifest this update: Sun 14 Dec 2025 10:00:30 +0000 Manifest next update: Mon 15 Dec 2025 10:00:30 +0000 Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: tBss2qypugY8b8jyZSADC/xazyMSrHR/00i3pBQw8fU=) 2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4d:f8:d7:45:ad:c8:33:ac:86:9e:ee:e7:38:8a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55 Validity Not Before: Dec 14 10:00:30 2025 GMT Not After : Dec 15 10:00:30 2025 GMT Subject: CN=c5cba489e286006b5682dbf79c4b1e8b088a6f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:18:d6:b9:58:37:71:6a:4a:67:b5:a4:69: 65:dc:e8:14:a1:7c:d9:16:80:6e:0a:33:aa:3b:ec: 09:4a:78:bf:26:5a:53:73:43:d0:ea:88:da:64:39: 19:b4:45:68:a2:62:43:88:6d:6e:e0:02:df:1b:ff: fa:34:5a:59:09:88:6b:2a:9a:fb:b8:1a:b0:e7:b4: 2c:f6:61:33:61:92:6c:02:95:57:80:00:b9:8c:05: 85:fe:ff:ee:1a:ad:2f:80:6a:9f:45:a5:7a:14:f0: 9a:6f:06:bf:58:ad:bb:d2:02:14:8f:03:d4:1b:48: 38:ce:07:74:22:83:5e:58:d9:15:ab:03:2e:58:3c: 99:6a:82:21:4f:bd:fd:91:51:74:ce:f4:54:d3:99: 94:7e:a4:83:22:49:ac:d4:a5:84:c3:fd:24:1b:b8: e3:53:da:00:b0:96:c0:05:74:e8:14:13:bb:d4:5a: 96:d2:57:57:33:5e:c0:53:ec:cd:f1:56:7e:a1:72: 8d:54:75:3e:df:0f:17:99:3d:55:9e:39:cc:0d:bb: 1a:f0:16:de:1d:6c:ca:6e:19:fe:23:0a:0f:65:47: 96:a9:3f:6e:2e:6d:9f:e7:4f:ee:7f:2b:b3:76:a3: 86:1f:b7:67:99:34:e0:5f:54:28:75:60:b3:20:e9: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CB:A4:89:E2:86:00:6B:56:82:DB:F7:9C:4B:1E:8B:08:8A:6F:4C X509v3 Authority Key Identifier: keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:5d:6a:57:f8:18:7d:0a:75:bf:f6:9e:bc:6b:0c:25:89: 52:68:4e:99:5c:54:9a:6e:21:9c:d7:d9:b8:c9:0a:19:01:14: d7:76:f3:1a:a0:d7:2a:f9:b6:76:e3:74:a0:31:63:6d:c6:6b: 5b:ec:59:5b:5b:86:c4:39:60:e6:1e:66:0a:12:61:40:55:a4: 93:f1:99:93:6a:b4:69:25:d4:c5:77:f3:71:f8:93:09:ae:d8: 25:81:30:53:b0:40:f3:30:43:2c:9e:dc:de:77:7c:59:e4:28: 51:63:f8:aa:87:ff:e7:09:8e:f3:28:86:a4:4d:61:bf:df:0b: 94:3a:ad:b9:82:0f:dd:37:0e:7e:c8:8e:e2:5c:da:07:95:7a: 81:f5:cb:4a:6c:04:b2:18:2f:8b:5e:82:95:dd:bb:8f:dc:9b: 0c:20:ce:cc:c3:7f:78:4a:df:3d:37:58:1f:70:91:d4:48:9b: 46:62:37:b0:85:8e:3f:c2:ce:fc:f8:cb:41:b2:34:80:89:1a: b9:a0:a6:bb:02:e9:02:e5:a2:50:18:3f:fe:55:ec:6f:b0:58: 2e:25:30:00:ba:56:55:ef:e5:1e:41:77:bf:6b:cb:69:07:d0: e0:12:e5:b9:ab:08:4b:30:34:4f:92:88:a1:c9:60:a8:ae:ed: 72:5f:02:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTfjXRa3IM6yGnu7nOIpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw YmFlNTUwHhcNMjUxMjE0MTAwMDMwWhcNMjUxMjE1MTAwMDMwWjAzMTEwLwYDVQQD EyhjNWNiYTQ4OWUyODYwMDZiNTY4MmRiZjc5YzRiMWU4YjA4OGE2ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GYY1rlYN3FqSme1pGll3OgUoXzZ FoBuCjOqO+wJSni/JlpTc0PQ6ojaZDkZtEVoomJDiG1u4ALfG//6NFpZCYhrKpr7 uBqw57Qs9mEzYZJsApVXgAC5jAWF/v/uGq0vgGqfRaV6FPCabwa/WK270gIUjwPU G0g4zgd0IoNeWNkVqwMuWDyZaoIhT739kVF0zvRU05mUfqSDIkms1KWEw/0kG7jj U9oAsJbABXToFBO71FqW0ldXM17AU+zN8VZ+oXKNVHU+3w8XmT1VnjnMDbsa8Bbe HWzKbhn+IwoPZUeWqT9uLm2f50/ufyuzdqOGH7dnmTTgX1QodWCzIOmGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXLpInihgBrVoLb95xLHosIim9MMB8GA1UdIwQY MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTNdalf4 GH0Kdb/2nrxrDCWJUmhOmVxUmm4hnNfZuMkKGQEU13bzGqDXKvm2duN0oDFjbcZr W+xZW1uGxDlg5h5mChJhQFWkk/GZk2q0aSXUxXfzcfiTCa7YJYEwU7BA8zBDLJ7c 3nd8WeQoUWP4qof/5wmO8yiGpE1hv98LlDqtuYIP3TcOfsiO4lzaB5V6gfXLSmwE shgvi16Cld27j9ybDCDOzMN/eErfPTdYH3CR1EibRmI3sIWOP8LO/PjLQbI0gIka uaCmuwLpAuWiUBg//lXsb7BYLiUwALpWVe/lHkF3v2vLaQfQ4BLluasISzA0T5KI oclgqK7tcl8Ckw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:08:30 2025 by rpki-client