This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json) Hash identifier: lfFyyLMLJcjKkD7iK/6/ggQeN9TNFMP8A6fq8RyHALI= Subject key identifier: AA:C3:4F:96:26:46:03:D7:84:A1:FC:A8:8D:F6:9C:68:8C:0A:99:3C Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7 Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7 Certificate serial: 019B5975F69EDBAB3215BB2F00CCEB1AE2A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft Manifest number: 0693 Signing time: Fri 26 Dec 2025 07:01:01 +0000 Manifest this update: Fri 26 Dec 2025 07:01:01 +0000 Manifest next update: Sat 27 Dec 2025 07:01:01 +0000 Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: DWg1IGVnhRkwlBKnvSaWm4656ImUrBcY6D7et+lmf/0=) 2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f6:9e:db:ab:32:15:bb:2f:00:cc:eb:1a:e2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7 Validity Not Before: Dec 26 07:01:01 2025 GMT Not After : Dec 27 07:01:01 2025 GMT Subject: CN=aac34f96264603d784a1fca88df69c688c0a993c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:a7:e4:7d:b8:9f:e7:45:d9:5b:f6:1e:81: fb:3a:fa:6e:74:04:78:0c:64:8f:44:d4:38:5f:e0: b3:ff:db:8e:93:5d:15:9c:fd:cb:cc:cc:b4:b5:c1: 02:eb:3e:b6:12:13:93:cb:bf:b6:2f:fb:9e:a4:fc: b9:ad:c0:b4:5b:f8:c7:52:db:50:96:f2:18:9c:0f: 33:16:16:dd:9b:73:0f:3c:db:3f:cc:31:b2:2b:00: fa:28:62:21:70:36:f4:13:36:db:e8:69:89:3a:d0: 41:09:ee:64:1e:96:9e:3c:b3:b1:eb:d6:a9:fb:2b: e2:44:6b:a4:3f:27:f1:57:9d:ff:ab:3e:a8:4c:bd: 1e:b8:cd:72:7d:b4:b9:8a:a1:e9:94:7d:33:9c:eb: ea:cb:3e:77:ac:ea:c3:58:7a:86:a1:d0:b8:48:b6: b9:72:18:68:19:a3:08:f0:42:d9:4b:0d:d9:2d:c2: 8b:e7:72:c9:37:46:eb:0e:d9:20:65:51:b3:5e:43: 74:47:18:54:01:55:58:9d:b8:ca:a3:b9:dd:70:ac: ec:31:0a:2f:76:6d:dc:e0:9b:ad:58:2c:98:04:2c: 43:1d:3b:03:57:d7:b8:c0:d7:41:4e:49:e6:ca:e4: 54:a8:12:5b:46:bf:da:3e:d8:a6:cf:af:e0:4b:48: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:4F:96:26:46:03:D7:84:A1:FC:A8:8D:F6:9C:68:8C:0A:99:3C X509v3 Authority Key Identifier: keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:12:eb:6f:11:81:50:85:e3:94:85:a0:00:24:76:3c:9d:59: 4d:b9:78:07:9d:ef:57:c4:2b:f0:70:49:6b:14:43:cc:a4:ad: 2c:9f:d3:ab:70:2d:41:9f:10:d7:bd:5f:fc:14:33:d0:5d:50: 86:b9:63:68:eb:3b:b3:bc:87:b2:ed:c5:9a:20:35:12:4a:75: 4d:5e:ef:6c:16:24:40:b3:37:70:73:2a:3c:b8:55:5b:18:c4: d1:9d:12:ed:63:42:60:cd:de:39:56:1c:69:26:c7:0c:43:b7: 5b:a1:f1:e1:2b:8a:75:ab:f3:82:12:80:68:d8:0d:f3:f0:e3: 28:65:a3:19:b4:2d:06:1a:57:8e:66:f6:0c:a4:d8:25:6c:fb: b5:6a:cd:75:50:4e:9f:54:5d:fb:a0:b5:42:28:83:ff:3c:b4: f2:6f:d3:5b:c3:f6:4d:65:4b:2c:ce:f9:ec:00:7f:07:97:0c: 36:b3:e8:17:8a:6a:75:d5:9d:5c:73:73:14:51:af:f0:4b:49: 82:35:95:91:08:5c:29:81:a1:cc:aa:6b:39:39:27:ea:fd:f8: 61:b4:16:98:c7:43:b1:eb:81:8a:08:cb:c1:e0:d8:b7:99:cd: b8:9f:32:08:6a:ec:c0:fc:9a:4c:7e:f0:3e:b0:04:fb:a4:85: 31:4e:c7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfae26syFbsvAMzrGuKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYjUwOTY3MmI5ZDk5OGI0NjQ5Y2MzNzZhODI5ODc5ZTZm ZWFjYTcwHhcNMjUxMjI2MDcwMTAxWhcNMjUxMjI3MDcwMTAxWjAzMTEwLwYDVQQD EyhhYWMzNGY5NjI2NDYwM2Q3ODRhMWZjYTg4ZGY2OWM2ODhjMGE5OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/On5H24n+dF2Vv2HoH7OvpudAR4 DGSPRNQ4X+Cz/9uOk10VnP3LzMy0tcEC6z62EhOTy7+2L/uepPy5rcC0W/jHUttQ lvIYnA8zFhbdm3MPPNs/zDGyKwD6KGIhcDb0Ezbb6GmJOtBBCe5kHpaePLOx69ap +yviRGukPyfxV53/qz6oTL0euM1yfbS5iqHplH0znOvqyz53rOrDWHqGodC4SLa5 chhoGaMI8ELZSw3ZLcKL53LJN0brDtkgZVGzXkN0RxhUAVVYnbjKo7ndcKzsMQov dm3c4JutWCyYBCxDHTsDV9e4wNdBTknmyuRUqBJbRr/aPtimz6/gS0jdYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrDT5YmRgPXhKH8qI32nGiMCpk8MB8GA1UdIwQY MBaAFOG1CWcrnZmLRknMN2qCmHnm/qynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4Zjkt M2VjNTIyNzcxZjQwLzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4ZjktM2VjNTIyNzcxZjQw LzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxLrbxGB UIXjlIWgACR2PJ1ZTbl4B53vV8Qr8HBJaxRDzKStLJ/Tq3AtQZ8Q171f/BQz0F1Q hrljaOs7s7yHsu3FmiA1Ekp1TV7vbBYkQLM3cHMqPLhVWxjE0Z0S7WNCYM3eOVYc aSbHDEO3W6Hx4SuKdavzghKAaNgN8/DjKGWjGbQtBhpXjmb2DKTYJWz7tWrNdVBO n1Rd+6C1QiiD/zy08m/TW8P2TWVLLM757AB/B5cMNrPoF4pqddWdXHNzFFGv8EtJ gjWVkQhcKYGhzKprOTkn6v34YbQWmMdDseuBigjLweDYt5nNuJ8yCGrswPyaTH7w PrAE+6SFMU7Hug== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client