This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json) Hash identifier: LCIQFaT5xGbs8nTRkCszU9inWSHS32Pas7XLkHeNja4= Subject key identifier: 22:2B:8F:E6:32:14:C6:74:DF:97:9B:8E:65:BE:FD:E9:E9:17:E6:D5 Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be Certificate serial: 019B353313A932E421AD84906A0C10EC2E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft Manifest number: 16C2 Signing time: Fri 19 Dec 2025 06:01:38 +0000 Manifest this update: Fri 19 Dec 2025 06:01:38 +0000 Manifest next update: Sat 20 Dec 2025 06:01:38 +0000 Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: g2CS6ebv+heyZC9fOL/kIB3qVTFm/W/lYG9GAqE2DnY=) 2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:13:a9:32:e4:21:ad:84:90:6a:0c:10:ec:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be Validity Not Before: Dec 19 06:01:38 2025 GMT Not After : Dec 20 06:01:38 2025 GMT Subject: CN=222b8fe63214c674df979b8e65befde9e917e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:9a:d9:90:46:36:15:36:3a:15:4d:78:d5: 89:15:cb:74:dd:b3:5f:74:a3:f3:ce:fa:e5:c1:80: 1f:2d:1c:14:4a:5b:82:4c:75:2c:b4:a1:15:a1:c5: 8a:2a:b6:d9:86:0e:fd:c0:01:87:13:71:0f:37:8e: ec:89:93:09:0a:6e:d8:1f:9d:81:a6:50:76:78:6d: 16:f4:c1:e5:ab:36:89:b8:3a:19:fb:73:8f:02:c2: 85:66:89:01:82:cc:91:31:88:ed:fb:ed:8a:d3:2d: 0c:55:ae:c5:49:b3:4c:71:98:73:b0:cd:1a:7f:5c: 96:fe:a6:fe:63:c1:a0:b9:8b:c1:67:31:1e:83:4b: 13:3d:1b:69:1d:9c:17:4e:25:dc:56:8b:b9:cc:9e: f0:97:7d:9c:76:5f:6a:d9:74:02:89:18:65:21:a1: 42:3e:28:f4:64:d0:a6:5b:16:0a:7e:b3:0c:d6:d7: cd:58:e4:65:70:3c:32:0d:06:77:95:00:3c:8d:f9: 91:52:a6:44:e2:f8:20:a4:8b:fe:1c:97:59:67:3a: 7d:ac:5f:68:b0:d2:17:0a:9e:cf:2d:a8:90:75:03: 86:f7:37:63:c9:6a:58:6b:ee:a2:e8:ed:ce:96:ba: 98:8d:3e:8d:8b:9b:1d:26:25:ae:4d:3c:5f:8c:e0: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:8F:E6:32:14:C6:74:DF:97:9B:8E:65:BE:FD:E9:E9:17:E6:D5 X509v3 Authority Key Identifier: keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5c:a4:4e:e1:be:a5:da:c1:58:2e:3c:54:77:8c:f8:8d:12: 09:b1:16:78:10:64:27:0e:5b:f4:4a:ad:dc:9a:e7:dd:3f:45: 24:33:3f:6f:92:72:2c:82:46:3a:46:e7:35:6b:d2:26:4a:7b: b5:c4:19:3d:f5:7a:54:15:f5:b8:78:c2:d9:91:a5:01:d4:80: 02:10:af:81:3d:26:1d:f4:49:bc:6e:66:32:6f:3b:58:ea:3f: 4c:74:90:b0:27:76:58:b0:92:6b:5b:59:cf:bc:d7:c5:53:04: dc:99:0a:26:c4:6d:15:e5:8f:0f:e8:fa:46:24:13:a7:73:59: 37:cd:fd:e6:20:f2:86:9b:eb:0b:70:6e:25:c7:16:82:53:4b: 35:ef:ad:f9:90:a1:7c:9b:9b:4f:27:6a:ee:39:17:16:56:0f: e4:0e:e4:08:70:d2:6e:dc:94:93:25:bf:d1:58:25:8c:48:58: 2d:44:bc:17:a9:19:80:0d:3c:8c:ba:4d:cc:20:d3:95:49:16: 3d:dd:23:0e:95:f0:66:9b:a5:40:18:31:a4:45:90:0d:d5:3e: dc:c5:15:c5:d1:fa:57:52:39:fb:73:da:83:31:dd:12:7b:96: 1b:27:71:33:a7:94:bb:56:6f:b9:41:95:92:e8:c9:f0:1a:e0: 65:86:5f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MxOpMuQhrYSQagwQ7C4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3 MWE2YmUwHhcNMjUxMjE5MDYwMTM4WhcNMjUxMjIwMDYwMTM4WjAzMTEwLwYDVQQD EygyMjJiOGZlNjMyMTRjNjc0ZGY5NzliOGU2NWJlZmRlOWU5MTdlNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVua2ZBGNhU2OhVNeNWJFct03bNf dKPzzvrlwYAfLRwUSluCTHUstKEVocWKKrbZhg79wAGHE3EPN47siZMJCm7YH52B plB2eG0W9MHlqzaJuDoZ+3OPAsKFZokBgsyRMYjt++2K0y0MVa7FSbNMcZhzsM0a f1yW/qb+Y8GguYvBZzEeg0sTPRtpHZwXTiXcVou5zJ7wl32cdl9q2XQCiRhlIaFC Pij0ZNCmWxYKfrMM1tfNWORlcDwyDQZ3lQA8jfmRUqZE4vggpIv+HJdZZzp9rF9o sNIXCp7PLaiQdQOG9zdjyWpYa+6i6O3OlrqYjT6Ni5sdJiWuTTxfjOB4bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIrj+YyFMZ035ebjmW+/enpF+bVMB8GA1UdIwQY MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFykTuG+ pdrBWC48VHeM+I0SCbEWeBBkJw5b9Eqt3Jrn3T9FJDM/b5JyLIJGOkbnNWvSJkp7 tcQZPfV6VBX1uHjC2ZGlAdSAAhCvgT0mHfRJvG5mMm87WOo/THSQsCd2WLCSa1tZ z7zXxVME3JkKJsRtFeWPD+j6RiQTp3NZN8395iDyhpvrC3BuJccWglNLNe+t+ZCh fJubTydq7jkXFlYP5A7kCHDSbtyUkyW/0VgljEhYLUS8F6kZgA08jLpNzCDTlUkW Pd0jDpXwZpulQBgxpEWQDdU+3MUVxdH6V1I5+3PagzHdEnuWGydxM6eUu1ZvuUGV kujJ8BrgZYZfyw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:07:14 2025 by rpki-client