This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json) Hash identifier: LkZq9ePBb0FP4OD6zFxObdFMjMGYwfWTD60Gd0tAOyg= Subject key identifier: 13:23:6D:07:A6:97:F2:1A:3A:21:54:18:90:7D:85:AA:8F:A0:2F:01 Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Certificate serial: 019B2EF9143727807DE38363B3A32D3010E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 01:00:34 +0000 Manifest this update: Thu 18 Dec 2025 01:00:34 +0000 Manifest next update: Fri 19 Dec 2025 01:00:34 +0000 Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: t4Z1A1DNPx+iW7CnOxQ61R1CdXinGPn/8AhKrSeFOwM=) 2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:14:37:27:80:7d:e3:83:63:b3:a3:2d:30:10:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Validity Not Before: Dec 18 01:00:34 2025 GMT Not After : Dec 19 01:00:34 2025 GMT Subject: CN=13236d07a697f21a3a215418907d85aa8fa02f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:ef:37:90:4b:f8:66:79:f9:ae:88:8d:22: 33:c4:3e:0c:81:c9:06:2b:9e:72:4a:86:38:a1:51: 15:1c:d7:f5:a8:14:36:bb:e6:b2:28:12:9a:fe:2e: 9c:ea:62:52:9a:14:22:a9:07:12:da:a3:32:35:bf: 9a:a0:d9:6a:53:47:84:2a:b2:cc:55:de:e7:17:f5: 78:72:23:d2:3c:81:1d:15:54:44:be:f4:28:ce:d6: 07:79:17:73:c9:f2:34:08:e0:3d:6d:7b:45:07:c0: a3:f9:36:4e:ee:75:4c:75:b2:3c:03:fd:b0:b6:5d: cf:56:8d:28:50:05:1e:b6:63:25:09:f8:19:8c:bb: 50:8c:e9:30:bd:61:fe:7d:d4:95:68:c0:fe:6f:d2: a0:30:d6:2f:6e:da:c0:7a:c6:4b:c3:09:b1:f6:ab: e3:a7:41:06:97:75:2b:bb:30:a8:82:df:2f:0d:44: 53:ce:76:20:49:09:96:dc:82:af:33:8f:a8:87:c0: be:7e:68:62:d9:0f:98:5d:76:6e:cd:23:5d:cb:89: 84:dc:9a:9e:f6:b7:f7:42:7a:a3:b7:b3:31:35:18: 82:55:6b:c9:9b:91:a1:4d:3b:36:7b:81:39:97:94: 67:ac:f1:63:15:1b:d3:1c:f9:c6:5e:2b:f0:bb:3f: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:23:6D:07:A6:97:F2:1A:3A:21:54:18:90:7D:85:AA:8F:A0:2F:01 X509v3 Authority Key Identifier: keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:02:4b:16:c8:d3:c0:f3:91:ed:97:42:33:9d:0b:ac:1e:dd: 5f:d7:0c:af:17:b9:0e:d5:b3:52:2d:e7:82:2b:38:b2:d5:1b: 8d:1d:3f:d2:ae:e6:da:7b:ba:f8:22:b6:05:f2:e8:71:9d:5e: 41:26:61:e4:41:3c:c0:40:15:b5:dc:85:ec:20:42:0b:e2:69: 88:9b:99:6f:c8:19:c6:0e:dd:84:ea:08:19:37:14:de:dc:ee: 32:45:da:5f:b0:59:f4:db:ca:aa:eb:da:ab:03:38:be:64:eb: f6:75:80:e3:6f:2a:60:a9:f2:72:dc:98:b3:c6:f5:40:d2:d3: 5e:e5:89:ba:43:05:67:c3:e8:a0:e3:64:de:4d:b9:4f:b2:64: fa:76:de:37:93:9a:fa:f8:e6:75:5d:5f:15:cf:92:a0:7c:60: b8:63:1e:18:f0:24:36:c4:a2:6b:77:1c:26:5d:fe:ae:e5:5c: 61:c6:3a:5a:7d:f8:10:dc:19:dc:64:dc:52:8a:3d:98:75:c2: 59:1c:d3:ed:f3:70:3a:f0:df:a6:a9:41:88:0c:31:86:25:f0: 67:b7:2c:4f:a3:ed:b0:25:da:47:e2:49:f3:8a:3c:32:56:2d: 3d:83:d9:27:2c:93:6b:89:44:fc:67:20:1f:de:b3:e0:6c:4c: 7c:f1:2d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+RQ3J4B944Njs6MtMBDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0 ZDM5MTcwHhcNMjUxMjE4MDEwMDM0WhcNMjUxMjE5MDEwMDM0WjAzMTEwLwYDVQQD EygxMzIzNmQwN2E2OTdmMjFhM2EyMTU0MTg5MDdkODVhYThmYTAyZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrvN5BL+GZ5+a6IjSIzxD4MgckG K55ySoY4oVEVHNf1qBQ2u+ayKBKa/i6c6mJSmhQiqQcS2qMyNb+aoNlqU0eEKrLM Vd7nF/V4ciPSPIEdFVREvvQoztYHeRdzyfI0COA9bXtFB8Cj+TZO7nVMdbI8A/2w tl3PVo0oUAUetmMlCfgZjLtQjOkwvWH+fdSVaMD+b9KgMNYvbtrAesZLwwmx9qvj p0EGl3UruzCogt8vDURTznYgSQmW3IKvM4+oh8C+fmhi2Q+YXXZuzSNdy4mE3Jqe 9rf3Qnqjt7MxNRiCVWvJm5GhTTs2e4E5l5RnrPFjFRvTHPnGXivwuz9v/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMjbQeml/IaOiFUGJB9haqPoC8BMB8GA1UdIwQY MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAJLFsjT wPOR7ZdCM50LrB7dX9cMrxe5DtWzUi3ngis4stUbjR0/0q7m2nu6+CK2BfLocZ1e QSZh5EE8wEAVtdyF7CBCC+JpiJuZb8gZxg7dhOoIGTcU3tzuMkXaX7BZ9NvKquva qwM4vmTr9nWA428qYKnyctyYs8b1QNLTXuWJukMFZ8PooONk3k25T7Jk+nbeN5Oa +vjmdV1fFc+SoHxguGMeGPAkNsSia3ccJl3+ruVcYcY6Wn34ENwZ3GTcUoo9mHXC WRzT7fNwOvDfpqlBiAwxhiXwZ7csT6PtsCXaR+JJ84o8MlYtPYPZJyyTa4lE/Gcg H96z4GxMfPEtBw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:08 2025 by rpki-client