This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json) Hash identifier: 32idsXi3Wck5w6E8JJK2nQAyP8OK+XdAlTKJSPuiTPM= Subject key identifier: FC:BC:B8:94:D1:5D:A4:E0:FD:1A:AB:92:71:13:88:C2:14:FA:E8:D5 Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Certificate serial: 019B37206AC7EFFF56931B44A2B51A072BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 15:00:29 +0000 Manifest this update: Fri 19 Dec 2025 15:00:29 +0000 Manifest next update: Sat 20 Dec 2025 15:00:29 +0000 Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=) 2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: VPrM0gz8CEZfIokRltAxSH/y7sfSlNeRPXyLdZoQjdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:6a:c7:ef:ff:56:93:1b:44:a2:b5:1a:07:2b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Validity Not Before: Dec 19 15:00:29 2025 GMT Not After : Dec 20 15:00:29 2025 GMT Subject: CN=fcbcb894d15da4e0fd1aab92711388c214fae8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:ae:bb:65:1e:65:4c:c5:36:2c:dc:48:ca: d5:5e:a5:50:f9:01:62:e2:e9:8c:bd:e5:e7:db:16: 78:b0:a2:6f:31:0f:20:c9:e5:c1:f6:9f:48:51:09: 8c:e3:a1:5a:0a:dc:4b:b3:2f:f7:27:e4:5e:da:8c: 76:d2:2e:58:e4:ef:c9:54:ed:1c:7f:12:f8:f7:b8: 10:08:f4:11:6b:21:dd:7d:5c:4b:13:06:5f:0c:04: 0f:a7:16:6d:e4:9f:68:ed:95:8d:d4:15:b4:ce:88: 4a:b1:72:59:58:cb:ee:93:d6:41:5f:56:54:47:66: 17:69:37:ca:eb:91:12:7f:97:4f:b0:46:a6:b6:97: af:1d:da:e0:0d:7e:68:96:93:ae:cb:5e:cd:8a:b4: 1a:62:54:63:d5:d0:ce:6e:fe:fe:7a:3c:84:c2:ec: 34:04:b1:01:84:c1:9e:ce:c0:5c:7f:14:ec:09:8f: ed:2a:4e:8c:f4:48:cc:e4:92:8e:70:c6:9e:41:a3: dc:94:b9:20:ba:b8:9a:ff:e5:21:aa:79:81:05:25: bb:8c:a1:ad:59:fe:1b:91:30:c6:8e:5c:dc:b8:7e: 64:ef:b5:5d:46:70:2e:33:a2:e2:ae:96:85:ae:66: 71:b6:5d:36:e0:a7:54:3a:a8:da:33:92:98:de:42: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:B8:94:D1:5D:A4:E0:FD:1A:AB:92:71:13:88:C2:14:FA:E8:D5 X509v3 Authority Key Identifier: keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:63:da:6f:9a:e1:bd:1b:c3:6b:de:db:01:e1:6b:d3:4d:fa: 77:d7:24:14:3d:59:c6:d4:20:bb:d0:fc:4c:e4:98:6a:b6:47: eb:1e:40:5a:db:9b:57:80:60:a9:84:d5:15:b8:c7:cd:7c:63: cd:00:4a:1e:d6:ad:f8:42:69:cc:ff:35:37:13:6d:c5:40:aa: 68:3f:6d:11:06:93:ba:92:f6:c4:00:d0:6f:47:53:41:05:19: 97:71:0a:6d:10:49:b5:d1:b4:15:c6:3d:d9:67:56:b7:83:d2: 0d:bd:31:8e:f1:05:78:7b:70:73:9f:5a:cb:3b:e7:d0:48:78: f1:e1:89:42:b9:93:98:00:18:12:79:a6:0e:98:70:33:c0:10: 9f:6e:35:6d:3e:65:97:9c:ec:0d:01:57:bd:09:de:d1:44:32: c7:04:b3:2a:62:01:c8:e4:4b:a4:71:38:a4:12:97:ea:3e:7f: 1b:e5:ea:ca:91:aa:33:ff:f0:59:22:a0:43:a0:4c:8c:7b:5b: d1:ed:b7:c0:77:cf:43:6c:74:43:5f:c0:73:73:50:3a:c5:2a: ba:22:b3:28:22:4c:3d:4e:71:64:b8:2c:7e:7f:51:81:49:4f: 79:29:1e:65:52:f6:4d:e9:bf:4d:36:ed:d0:19:5e:b6:22:4d: 68:91:64:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IGrH7/9WkxtEorUaByvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTZjNDMzNjQwMDNlYzNmN2Y3YzZlYTgxNTdiOGE1MGY0 NDBlY2MwHhcNMjUxMjE5MTUwMDI5WhcNMjUxMjIwMTUwMDI5WjAzMTEwLwYDVQQD EyhmY2JjYjg5NGQxNWRhNGUwZmQxYWFiOTI3MTEzODhjMjE0ZmFlOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6auu2UeZUzFNizcSMrVXqVQ+QFi 4umMveXn2xZ4sKJvMQ8gyeXB9p9IUQmM46FaCtxLsy/3J+Re2ox20i5Y5O/JVO0c fxL497gQCPQRayHdfVxLEwZfDAQPpxZt5J9o7ZWN1BW0zohKsXJZWMvuk9ZBX1ZU R2YXaTfK65ESf5dPsEamtpevHdrgDX5olpOuy17NirQaYlRj1dDObv7+ejyEwuw0 BLEBhMGezsBcfxTsCY/tKk6M9EjM5JKOcMaeQaPclLkguria/+UhqnmBBSW7jKGt Wf4bkTDGjlzcuH5k77VdRnAuM6LirpaFrmZxtl024KdUOqjaM5KY3kKTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy8uJTRXaTg/RqrknETiMIU+ujVMB8GA1UdIwQY MBaAFOCWxDNkAD7D9/fG6oFXuKUPRA7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2Ut M2E4NWVlNGM4OWJjLzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2UtM2E4NWVlNGM4OWJj LzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmPab5rh vRvDa97bAeFr0036d9ckFD1ZxtQgu9D8TOSYarZH6x5AWtubV4BgqYTVFbjHzXxj zQBKHtat+EJpzP81NxNtxUCqaD9tEQaTupL2xADQb0dTQQUZl3EKbRBJtdG0FcY9 2WdWt4PSDb0xjvEFeHtwc59ayzvn0Eh48eGJQrmTmAAYEnmmDphwM8AQn241bT5l l5zsDQFXvQne0UQyxwSzKmIByORLpHE4pBKX6j5/G+XqypGqM//wWSKgQ6BMjHtb 0e23wHfPQ2x0Q1/Ac3NQOsUquiKzKCJMPU5xZLgsfn9RgUlPeSkeZVL2Tem/TTbt 0BletiJNaJFkvg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:55:18 2025 by rpki-client