This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json) Hash identifier: FMnJiOzpXMNs5Zw1n2PKniHwXF5mpUqTZ0f3w25T3P4= Subject key identifier: 06:9B:8E:0B:34:92:EB:4F:AB:50:7E:41:2E:6E:AE:D3:BC:0B:21:00 Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Certificate serial: 019B273F876C8939C2E6E28E29BB2DFAE83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 13:00:33 +0000 Manifest this update: Tue 16 Dec 2025 13:00:33 +0000 Manifest next update: Wed 17 Dec 2025 13:00:33 +0000 Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: Tn8w3sTlf5bd8WPy95GVob0CSsQzYUEPzc8uUbPDe20=) 2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:87:6c:89:39:c2:e6:e2:8e:29:bb:2d:fa:e8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Validity Not Before: Dec 16 13:00:33 2025 GMT Not After : Dec 17 13:00:33 2025 GMT Subject: CN=069b8e0b3492eb4fab507e412e6eaed3bc0b2100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:43:76:d7:85:4f:bb:6d:87:da:6e:57:b4: 33:c9:77:e7:4d:da:9b:a7:b7:19:6f:ab:7d:5b:ea: 58:fd:e7:61:f3:54:03:f7:8d:3a:3d:dd:b9:2f:09: 8c:5e:a2:f5:74:de:b4:3f:43:7f:7f:e0:19:0d:e2: 74:8d:6a:ee:1c:d6:7f:d9:d8:59:25:db:bf:08:43: 58:31:9e:a8:48:78:f8:4b:7d:3c:65:e2:1c:b3:99: 2b:ae:37:84:94:a3:cc:8d:7e:b8:4c:78:a5:66:2c: f8:cc:c3:fc:ff:e0:be:9f:72:bc:74:a6:9a:22:a1: 1e:8b:34:09:97:22:a2:20:0f:c2:7f:9b:01:fe:e5: 68:dc:2b:93:1b:39:ac:87:f9:3c:6d:04:68:18:7a: 7d:1c:27:d5:be:84:b9:5e:59:55:23:c8:d1:55:6c: 5f:f2:81:7b:ba:60:c0:f3:ed:b3:8c:4e:e6:16:fb: 5c:05:5d:78:95:28:cf:c8:c2:b0:8f:39:1e:14:7e: 3f:01:c7:06:af:7e:94:90:08:ab:93:91:73:e7:cf: 55:4d:f4:0e:3f:02:45:07:18:27:99:39:8f:c9:d9: 43:02:26:e0:de:84:0d:27:70:d1:bc:04:7a:a4:a4: 49:7a:30:42:1c:11:75:54:76:2f:48:87:9a:d0:df: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:8E:0B:34:92:EB:4F:AB:50:7E:41:2E:6E:AE:D3:BC:0B:21:00 X509v3 Authority Key Identifier: keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:71:16:2b:86:6a:2f:1f:a6:00:d3:ac:77:1d:40:43:6a:db: 1e:41:45:24:a0:fe:17:7b:fc:bc:21:e2:63:5c:1f:54:bb:4e: cf:b4:31:07:bf:04:49:e8:38:90:83:e8:28:7e:31:d5:93:0d: 80:d7:52:14:24:c3:91:21:cc:e2:e4:62:52:95:01:0a:bd:cf: 81:51:55:09:24:64:35:ea:25:2f:e0:e9:a0:2a:4e:9f:bc:f5: 88:1e:fd:fd:e6:a8:41:9c:4b:e9:24:1f:b5:14:e1:0e:12:62: 42:8f:20:6c:83:1e:74:6e:e2:85:4f:a8:0b:3f:1f:62:06:70: ef:3e:cb:e0:a6:e1:33:d4:4e:3a:c3:4b:fc:6c:34:3b:8c:66: 06:79:23:46:2f:18:4c:cb:e4:e0:be:db:b2:e6:dc:96:81:83: c2:e4:e0:62:cf:dc:d6:ec:37:d0:0b:e2:f4:1f:82:b4:78:b7: b3:f8:dc:e3:55:df:96:2f:39:73:66:ba:a6:20:01:3c:60:03: 75:5e:ed:d0:8e:a4:9c:21:ae:b3:6e:fe:3b:96:6c:c9:67:df: db:fc:59:19:c4:1d:35:b3:db:6b:f4:ea:36:8b:e7:cb:57:5e: ca:9b:d8:13:7b:13:c6:60:92:e9:2a:c7:ef:f8:aa:14:37:11: 2b:c9:36:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP4dsiTnC5uKOKbst+ug8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0 ZDM5MTcwHhcNMjUxMjE2MTMwMDMzWhcNMjUxMjE3MTMwMDMzWjAzMTEwLwYDVQQD EygwNjliOGUwYjM0OTJlYjRmYWI1MDdlNDEyZTZlYWVkM2JjMGIyMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ihDdteFT7tth9puV7QzyXfnTdqb p7cZb6t9W+pY/edh81QD9406Pd25LwmMXqL1dN60P0N/f+AZDeJ0jWruHNZ/2dhZ Jdu/CENYMZ6oSHj4S308ZeIcs5krrjeElKPMjX64THilZiz4zMP8/+C+n3K8dKaa IqEeizQJlyKiIA/Cf5sB/uVo3CuTGzmsh/k8bQRoGHp9HCfVvoS5XllVI8jRVWxf 8oF7umDA8+2zjE7mFvtcBV14lSjPyMKwjzkeFH4/AccGr36UkAirk5Fz589VTfQO PwJFBxgnmTmPydlDAibg3oQNJ3DRvAR6pKRJejBCHBF1VHYvSIea0N+HNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAabjgs0kutPq1B+QS5urtO8CyEAMB8GA1UdIwQY MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHEWK4Zq Lx+mANOsdx1AQ2rbHkFFJKD+F3v8vCHiY1wfVLtOz7QxB78ESeg4kIPoKH4x1ZMN gNdSFCTDkSHM4uRiUpUBCr3PgVFVCSRkNeolL+DpoCpOn7z1iB79/eaoQZxL6SQf tRThDhJiQo8gbIMedG7ihU+oCz8fYgZw7z7L4KbhM9ROOsNL/Gw0O4xmBnkjRi8Y TMvk4L7bsubcloGDwuTgYs/c1uw30Avi9B+CtHi3s/jc41Xfli85c2a6piABPGAD dV7t0I6knCGus27+O5ZsyWff2/xZGcQdNbPba/TqNovny1deypvYE3sTxmCS6SrH 7/iqFDcRK8k2MA== -----END CERTIFICATE-----Generated at Tue Dec 16 20:02:20 2025 by rpki-client