This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json) Hash identifier: mhBw9seCCAlwAvVK/HeGlsVxubmRfdbS8x04QPjlutY= Subject key identifier: C1:85:B8:07:2A:8F:E4:4F:15:88:14:F4:94:AF:65:53:07:E1:AD:2E Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Certificate serial: 019B2551712C915B9F9E9FB8E5E2D28BF241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft Manifest number: 066E Signing time: Tue 16 Dec 2025 04:00:52 +0000 Manifest this update: Tue 16 Dec 2025 04:00:52 +0000 Manifest next update: Wed 17 Dec 2025 04:00:52 +0000 Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: xD1zjKpvtH6wBUT94ULTCkb/sxVNH/RN2ofHHmB1I/Y=) 2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:71:2c:91:5b:9f:9e:9f:b8:e5:e2:d2:8b:f2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c Validity Not Before: Dec 16 04:00:52 2025 GMT Not After : Dec 17 04:00:52 2025 GMT Subject: CN=c185b8072a8fe44f158814f494af655307e1ad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:5f:f7:fa:94:89:3b:bb:a1:f9:43:d4:67: 17:29:b7:5c:10:d7:d8:ca:e8:c0:0f:76:1d:62:88: a0:10:86:01:38:a0:ab:82:62:84:dc:5b:68:a6:0f: 0a:2c:37:bd:f9:95:8b:66:dd:cf:85:f9:09:d2:1c: b7:83:cf:1e:c0:e9:56:42:ca:b6:4d:c9:da:dd:cf: eb:d4:a0:a4:46:44:7b:34:95:33:fe:7d:19:ca:c9: 7c:e9:5e:e4:af:4f:9e:84:98:49:fb:49:cb:76:a2: 40:24:89:94:72:2e:bd:b1:9b:e6:b0:47:04:a0:5e: 9f:c7:42:6b:e7:b3:72:31:9c:e4:db:52:4e:79:93: dd:2a:cf:42:b9:9f:60:59:94:b0:ee:df:a3:a3:97: 0f:4e:da:13:df:50:46:d1:25:29:8a:d6:66:d3:a4: 29:bd:70:43:db:96:7e:9c:64:2f:f5:21:96:9c:5d: 03:24:11:d6:1b:0d:0c:de:a7:ec:f4:b2:af:5a:11: 6c:cd:0e:97:c9:3c:f6:06:a9:04:ea:52:10:2d:57: 49:70:4d:0a:46:a1:9f:83:3b:b1:a2:7c:64:70:dd: e9:39:e7:39:da:ce:fb:10:4c:97:79:97:e8:f8:e8: 6a:f6:b7:62:a5:f8:f4:fc:3f:fa:d0:a7:4a:bc:f6: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:85:B8:07:2A:8F:E4:4F:15:88:14:F4:94:AF:65:53:07:E1:AD:2E X509v3 Authority Key Identifier: keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:70:aa:30:48:e7:4f:f0:ec:9f:2d:ce:54:0c:12:ea:b5:b2: 50:83:3a:7b:bd:0b:c3:b2:d3:77:76:9d:9a:c7:d5:7e:6c:99: bd:67:c4:59:cb:c6:0e:13:ef:10:f8:92:4f:40:7f:3f:63:1b: da:6b:70:3e:a5:d7:86:48:35:b2:e7:58:60:bc:6e:bd:d1:61: e2:10:06:8f:b5:28:05:d5:9b:6f:67:6e:6c:82:fc:12:96:a7: a0:17:b9:9d:66:db:10:18:bc:4e:c9:40:45:49:3a:66:bb:32: b7:aa:f9:ea:00:7b:b3:d1:61:e3:76:51:ab:d7:6a:77:95:85: d4:df:a7:de:bd:26:eb:aa:59:11:5f:c9:b0:e5:f9:b6:9b:61: ed:fc:e3:80:2a:61:e1:1f:89:20:15:51:73:6b:4b:b2:45:0b: a4:df:6c:68:23:ac:45:05:5a:f7:78:15:87:b5:ef:a2:29:b6: 78:0e:e4:e4:87:f3:ca:3e:52:b4:37:eb:26:81:9d:d0:f7:39: db:75:67:3e:6e:6e:38:53:86:b6:cc:06:69:4a:07:d4:c2:8c: 86:bf:06:9b:41:9b:b0:e5:f3:5b:6a:04:dd:2f:6f:1e:67:4e: 6c:1e:c3:cf:d7:ed:24:82:d7:ec:0f:a5:59:a0:8c:9e:24:da: 43:92:88:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUXEskVufnp+45eLSi/JBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3 OTA5N2MwHhcNMjUxMjE2MDQwMDUyWhcNMjUxMjE3MDQwMDUyWjAzMTEwLwYDVQQD EyhjMTg1YjgwNzJhOGZlNDRmMTU4ODE0ZjQ5NGFmNjU1MzA3ZTFhZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hf9/qUiTu7oflD1GcXKbdcENfY yujAD3YdYoigEIYBOKCrgmKE3Ftopg8KLDe9+ZWLZt3PhfkJ0hy3g88ewOlWQsq2 Tcna3c/r1KCkRkR7NJUz/n0Zysl86V7kr0+ehJhJ+0nLdqJAJImUci69sZvmsEcE oF6fx0Jr57NyMZzk21JOeZPdKs9CuZ9gWZSw7t+jo5cPTtoT31BG0SUpitZm06Qp vXBD25Z+nGQv9SGWnF0DJBHWGw0M3qfs9LKvWhFszQ6XyTz2BqkE6lIQLVdJcE0K RqGfgzuxonxkcN3pOec52s77EEyXeZfo+Ohq9rdipfj0/D/60KdKvPZDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGFuAcqj+RPFYgU9JSvZVMH4a0uMB8GA1UdIwQY MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnCqMEjn T/Dsny3OVAwS6rWyUIM6e70Lw7LTd3admsfVfmyZvWfEWcvGDhPvEPiST0B/P2Mb 2mtwPqXXhkg1sudYYLxuvdFh4hAGj7UoBdWbb2dubIL8EpanoBe5nWbbEBi8TslA RUk6Zrsyt6r56gB7s9Fh43ZRq9dqd5WF1N+n3r0m66pZEV/JsOX5tpth7fzjgCph 4R+JIBVRc2tLskULpN9saCOsRQVa93gVh7Xvoim2eA7k5Ifzyj5StDfrJoGd0Pc5 23VnPm5uOFOGtswGaUoH1MKMhr8Gm0GbsOXzW2oE3S9vHmdObB7Dz9ftJILX7A+l WaCMniTaQ5KIiA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:52 2025 by rpki-client