This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json) Hash identifier: eCFMxfRPNQWKDt4oN5W7NocxbcJzoo/GokkErtQ5lhg= Subject key identifier: 0E:32:F9:30:9B:1B:B1:22:B6:43:20:28:4D:03:8A:BB:62:17:0F:16 Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Certificate serial: 019B49950059C3D812B53FF29A566B54DCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft Manifest number: 0E77 Signing time: Tue 23 Dec 2025 05:01:00 +0000 Manifest this update: Tue 23 Dec 2025 05:01:00 +0000 Manifest next update: Wed 24 Dec 2025 05:01:00 +0000 Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: V4M2YdTwX4xH4f6oMZOs9gHg6D8ERqDswhw7r398gDw=) 2: nmDQ5sn6P7ecn55KSWAGIphgo6U.roa (hash: fC95GsgDpVAuW+5RC4Zgw8UvFD2E/5JtR14wL2gAYEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:00:59:c3:d8:12:b5:3f:f2:9a:56:6b:54:dc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77 Validity Not Before: Dec 23 05:01:00 2025 GMT Not After : Dec 24 05:01:00 2025 GMT Subject: CN=0e32f9309b1bb122b64320284d038abb62170f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:96:c3:97:bb:f9:27:32:66:f7:af:1e:21: bc:4e:b3:dd:89:86:7b:e0:e0:3b:46:62:0a:23:1d: 32:d4:b8:ef:a8:c4:0f:bb:5d:15:5f:4a:59:d4:e1: 09:0d:e3:78:a9:e2:3c:fc:2e:04:81:70:5d:01:a1: b3:a0:22:d9:46:4d:70:df:59:98:0b:03:9d:7f:9f: bd:ca:7b:f1:58:91:e9:79:48:f6:ee:aa:51:c9:2f: 4f:9e:93:d2:1f:6b:a5:e6:35:72:09:eb:e0:9d:f6: 1a:40:67:70:d5:ae:c4:11:0b:90:22:a6:31:ad:3e: 8b:7a:54:32:9d:79:a8:87:7d:62:4a:71:0c:ac:e1: 93:e3:b1:45:d9:48:58:a3:37:07:6c:1c:68:4d:75: 4c:be:f5:1d:36:00:58:bf:f3:11:11:04:31:59:1e: 30:85:9c:dd:91:cf:22:42:2d:ba:88:cf:ec:07:e9: 0c:d2:f9:21:eb:f4:97:04:61:24:33:bb:29:8a:08: 20:cc:cf:df:fa:fc:13:0e:3c:81:d5:67:5c:6d:6d: b7:ed:21:62:80:7d:ff:ac:9f:60:c2:4c:20:f9:59: 83:ba:de:fe:85:79:7d:22:74:21:b3:fd:14:66:1b: 20:0d:44:ea:67:76:7b:de:ee:b1:23:85:ed:02:08: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:F9:30:9B:1B:B1:22:B6:43:20:28:4D:03:8A:BB:62:17:0F:16 X509v3 Authority Key Identifier: keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:84:da:66:ef:db:08:9c:fc:fb:9c:3d:8e:fd:13:ee:c8: 36:a6:8d:4f:36:b7:dc:f0:49:c5:11:58:89:60:ba:b4:37:dd: 86:c0:3a:68:60:4d:7d:13:16:43:23:ab:5d:ec:5b:c7:11:f6: d9:88:74:3d:44:9f:74:9d:f8:87:c1:be:89:9e:07:0b:10:b4: c0:de:6a:bf:ed:f3:5d:6c:f6:19:ef:3d:bf:14:22:94:ab:97: 1c:fa:f9:8d:62:47:27:97:5e:15:7b:d4:16:5a:e1:6d:74:28: 96:6d:93:28:02:80:2b:fd:33:e3:27:6b:8c:0a:54:bc:fd:89: 2e:b7:b9:67:34:05:93:d5:9b:56:22:00:78:7e:31:83:9f:88: c8:ad:dc:0a:32:68:69:fb:df:78:9a:c9:b1:a5:48:d1:03:b9: 4b:7f:34:9a:e9:47:47:6e:06:e9:54:35:77:dd:50:70:2e:b8: a4:02:f8:32:78:82:c0:ea:68:87:e3:9b:de:07:8c:c6:13:b5: c5:49:bb:e5:dc:10:93:ad:72:eb:d8:d7:2b:4b:d1:a5:2b:97: 01:1c:94:f0:91:6e:99:8b:e5:ec:4e:24:85:96:58:9f:18:fc: c3:bc:73:87:c8:d3:2f:75:e2:ad:a6:8b:69:26:b3:b5:c5:61: 46:b5:57:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlQBZw9gStT/ymlZrVNzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2 MDVkNzcwHhcNMjUxMjIzMDUwMTAwWhcNMjUxMjI0MDUwMTAwWjAzMTEwLwYDVQQD EygwZTMyZjkzMDliMWJiMTIyYjY0MzIwMjg0ZDAzOGFiYjYyMTcwZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbuWw5e7+ScyZvevHiG8TrPdiYZ7 4OA7RmIKIx0y1LjvqMQPu10VX0pZ1OEJDeN4qeI8/C4EgXBdAaGzoCLZRk1w31mY CwOdf5+9ynvxWJHpeUj27qpRyS9PnpPSH2ul5jVyCevgnfYaQGdw1a7EEQuQIqYx rT6LelQynXmoh31iSnEMrOGT47FF2UhYozcHbBxoTXVMvvUdNgBYv/MREQQxWR4w hZzdkc8iQi26iM/sB+kM0vkh6/SXBGEkM7spigggzM/f+vwTDjyB1WdcbW237SFi gH3/rJ9gwkwg+VmDut7+hXl9InQhs/0UZhsgDUTqZ3Z73u6xI4XtAgiFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4y+TCbG7EitkMgKE0DirtiFw8WMB8GA1UdIwQY MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0 LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXSE2mbv 2wic/PucPY79E+7INqaNTza33PBJxRFYiWC6tDfdhsA6aGBNfRMWQyOrXexbxxH2 2Yh0PUSfdJ34h8G+iZ4HCxC0wN5qv+3zXWz2Ge89vxQilKuXHPr5jWJHJ5deFXvU FlrhbXQolm2TKAKAK/0z4ydrjApUvP2JLre5ZzQFk9WbViIAeH4xg5+IyK3cCjJo afvfeJrJsaVI0QO5S380mulHR24G6VQ1d91QcC64pAL4MniCwOpoh+Ob3geMxhO1 xUm75dwQk61y69jXK0vRpSuXARyU8JFumYvl7E4khZZYnxj8w7xzh8jTL3XiraaL aSaztcVhRrVXvQ== -----END CERTIFICATE-----Generated at Tue Dec 23 08:23:20 2025 by rpki-client