This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json) Hash identifier: 0nK+O3SxPaZ0+IuMexvHnOPwL7PGUY3BwPteshNdsgg= Subject key identifier: 21:E5:61:81:28:C5:97:1B:43:FE:3C:26:FE:A8:16:AD:AE:23:85:0E Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50 Certificate serial: 019B23643A5F0BC5E7D2600ED0F8A8D44809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft Manifest number: 0BF2 Signing time: Mon 15 Dec 2025 19:02:09 +0000 Manifest this update: Mon 15 Dec 2025 19:02:09 +0000 Manifest next update: Tue 16 Dec 2025 19:02:09 +0000 Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: vsijjmH6Nhc8iTTNqmmcVD6+TbDqNngc7ebMf+unGRU=) 2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:3a:5f:0b:c5:e7:d2:60:0e:d0:f8:a8:d4:48:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50 Validity Not Before: Dec 15 19:02:09 2025 GMT Not After : Dec 16 19:02:09 2025 GMT Subject: CN=21e5618128c5971b43fe3c26fea816adae23850e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:82:c7:5a:fb:2d:8c:b7:3c:50:a2:06:b8: 2f:2c:7e:fb:9b:9a:72:6b:4c:ea:e4:18:3e:85:75: 34:6c:6b:3c:09:28:e9:8b:f1:a4:df:fd:3f:a7:b7: 04:53:ea:90:2c:a9:3d:63:b9:00:53:37:03:7b:39: b2:ce:d9:e3:ec:ba:75:f6:ea:a5:f8:73:80:a9:f6: b8:4a:9a:48:9b:57:36:68:d9:83:c1:f5:fb:08:b2: da:d9:78:3f:79:c2:e1:25:f9:09:b5:66:b7:3d:37: 41:16:f8:20:80:a7:d1:a1:92:c4:87:fe:ac:02:65: 2e:39:41:80:51:f9:cf:ff:6a:10:46:e3:00:d4:3e: ac:c3:64:92:a7:b2:b1:3b:fc:bd:ed:a4:43:a5:89: 5b:32:ba:7e:0e:08:17:3b:37:a3:b1:97:42:49:b7: 8e:cd:c8:42:72:2f:44:aa:fd:cf:43:21:16:b4:e1: f6:90:0c:f1:d2:2e:f8:ca:b3:94:42:06:a1:05:81: 3c:f9:f1:ba:7b:0f:61:7a:89:e7:45:04:41:3f:63: f7:7c:7d:29:63:5d:e8:31:c8:61:83:61:e4:e5:90: bd:70:15:30:be:d2:05:a8:c4:eb:1b:da:a3:16:9d: b0:c6:15:a8:65:1d:d8:ea:39:19:73:d7:d6:19:1e: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E5:61:81:28:C5:97:1B:43:FE:3C:26:FE:A8:16:AD:AE:23:85:0E X509v3 Authority Key Identifier: keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:fe:92:20:22:58:0d:2f:d0:c3:c7:90:f1:a3:8a:cd:13: 74:da:00:06:50:7b:e5:53:36:d8:bb:c0:ba:4c:10:f9:c0:50: b9:b1:fc:ae:f7:46:39:bd:9d:e2:bb:48:d2:e0:3c:0c:20:e0: e5:fb:6b:20:89:43:7c:b6:c4:e8:e1:b7:3b:e5:4a:90:71:d0: 05:62:c5:c0:5c:92:5b:ab:58:7d:c6:a4:3d:fe:ea:9a:de:7b: 1d:18:50:8c:44:23:13:e5:b6:45:a2:3a:b5:92:7b:f1:73:ea: c7:27:5a:db:21:f3:3a:d2:eb:5b:aa:53:98:b5:c6:23:04:3e: 12:94:28:49:48:85:ec:74:70:a8:17:57:47:f2:1b:de:99:c6: f4:80:ae:85:3a:ca:5f:5f:ba:ca:0b:b0:f4:f9:b9:6a:21:6c: 4e:cb:d0:60:13:3d:0f:59:7f:51:dc:0f:2b:c8:01:01:42:85: d2:b0:2d:8f:31:90:38:ec:92:45:dc:74:be:00:ab:a2:38:ea: 49:a5:42:32:e5:9a:09:9a:93:97:a6:30:bc:76:79:ee:9d:ef: 0c:04:9b:ff:0b:09:0b:5f:b6:60:0e:7a:7d:27:5c:0c:bc:27: df:4b:db:42:26:78:b6:85:ee:45:79:3a:bf:63:6c:f5:54:31: 1e:af:91:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZDpfC8Xn0mAO0Pio1EgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx YzFkNTAwHhcNMjUxMjE1MTkwMjA5WhcNMjUxMjE2MTkwMjA5WjAzMTEwLwYDVQQD EygyMWU1NjE4MTI4YzU5NzFiNDNmZTNjMjZmZWE4MTZhZGFlMjM4NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMmCx1r7LYy3PFCiBrgvLH77m5py a0zq5Bg+hXU0bGs8CSjpi/Gk3/0/p7cEU+qQLKk9Y7kAUzcDezmyztnj7Lp19uql +HOAqfa4SppIm1c2aNmDwfX7CLLa2Xg/ecLhJfkJtWa3PTdBFvgggKfRoZLEh/6s AmUuOUGAUfnP/2oQRuMA1D6sw2SSp7KxO/y97aRDpYlbMrp+DggXOzejsZdCSbeO zchCci9Eqv3PQyEWtOH2kAzx0i74yrOUQgahBYE8+fG6ew9heonnRQRBP2P3fH0p Y13oMchhg2Hk5ZC9cBUwvtIFqMTrG9qjFp2wxhWoZR3Y6jkZc9fWGR6K/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHlYYEoxZcbQ/48Jv6oFq2uI4UOMB8GA1UdIwQY MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1z+kiAi WA0v0MPHkPGjis0TdNoABlB75VM22LvAukwQ+cBQubH8rvdGOb2d4rtI0uA8DCDg 5ftrIIlDfLbE6OG3O+VKkHHQBWLFwFySW6tYfcakPf7qmt57HRhQjEQjE+W2RaI6 tZJ78XPqxyda2yHzOtLrW6pTmLXGIwQ+EpQoSUiF7HRwqBdXR/Ib3pnG9ICuhTrK X1+6yguw9Pm5aiFsTsvQYBM9D1l/UdwPK8gBAUKF0rAtjzGQOOySRdx0vgCrojjq SaVCMuWaCZqTl6YwvHZ57p3vDASb/wsJC1+2YA56fSdcDLwn30vbQiZ4toXuRXk6 v2Ns9VQxHq+RSQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:27 2025 by rpki-client