This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json) Hash identifier: uDolvZ0K57N/gIBqJfySjTXhYsX6oTU5qNT1vPdQGOI= Subject key identifier: F3:48:ED:70:67:66:9E:50:4B:F6:2E:BC:8D:85:8D:C5:8C:5F:CE:04 Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Certificate serial: 019B7D822D1D553685A20FA530B52D44DCBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft Manifest number: 083B Signing time: Fri 02 Jan 2026 07:00:41 +0000 Manifest this update: Fri 02 Jan 2026 07:00:41 +0000 Manifest next update: Sat 03 Jan 2026 07:00:41 +0000 Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: eWWCbOHCJ+4RrBOqAC7vT2abSfOk7Jvg3qYK1mRrR5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:2d:1d:55:36:85:a2:0f:a5:30:b5:2d:44:dc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd Validity Not Before: Jan 2 07:00:41 2026 GMT Not After : Jan 3 07:00:41 2026 GMT Subject: CN=f348ed7067669e504bf62ebc8d858dc58c5fce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ea:c9:43:a8:84:7c:bc:54:d6:a6:59:2f:97: 14:d0:24:dc:ce:c8:cc:f0:85:93:9d:c8:56:10:32: ef:d7:8d:a1:f6:74:9f:f8:5a:4d:ad:a4:25:a1:0d: 21:73:3b:50:82:2b:5e:9a:65:87:e1:5c:ae:8f:12: be:05:49:7d:60:3e:df:7d:31:b7:85:d3:95:24:95: 87:2e:c1:54:ae:11:a6:7a:eb:d4:56:14:d0:94:aa: be:d8:6f:31:ef:15:15:7f:4e:4d:2c:76:e8:7a:fd: 0d:e9:fb:8c:4a:08:b6:2f:20:2b:ad:48:70:33:a9: c6:20:59:02:87:9e:e9:e9:22:4f:a5:7c:4a:13:33: b8:77:c2:72:15:06:f4:ed:b2:49:11:73:a0:72:31: 85:58:ae:0c:3a:31:83:77:56:0e:48:8a:5e:40:6f: 42:bd:c7:09:f9:ce:24:01:c3:b8:da:f8:e8:cf:52: cd:67:d2:b1:8f:50:ca:5b:88:78:cc:72:ad:f2:0d: 7a:1a:97:d5:06:7b:9f:1f:07:8e:60:8d:4b:fd:fd: 17:29:7c:a1:eb:84:52:8c:8b:84:8e:17:0c:35:1f: fc:a3:6e:1e:61:99:6f:4f:77:54:6b:0d:96:19:42: 90:c2:f3:21:4b:4b:c3:e2:f2:c1:c8:fa:16:a3:3f: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:ED:70:67:66:9E:50:4B:F6:2E:BC:8D:85:8D:C5:8C:5F:CE:04 X509v3 Authority Key Identifier: keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4b:ef:f0:bb:57:51:78:67:0d:b6:81:5a:2d:45:c4:0a:f1: 76:4c:7b:6e:2a:c1:4a:a2:b9:ee:63:0f:d2:e8:9f:9f:2b:46: b4:75:dd:a7:ea:e7:b5:b9:75:d2:92:ba:1d:18:d2:8d:2b:39: ab:d9:b6:f3:fc:aa:23:c7:b8:2f:8c:cc:3c:7e:c8:c6:30:d2: a8:c1:f7:8f:52:ce:b0:5c:ae:de:dd:a1:58:e9:a8:71:1c:e4: e6:3d:ef:ef:d8:75:b6:9a:15:86:53:e3:bf:af:d1:d9:df:d7: 2e:40:3b:a0:93:21:aa:0d:f8:24:c8:54:8c:d6:68:42:a3:75: 0c:f5:37:c5:f1:ec:50:16:88:25:cd:a6:05:19:84:4c:68:76: 3b:83:27:d8:45:57:10:54:cb:7b:75:d3:af:62:b2:51:46:48: f5:50:88:f4:6a:f5:49:36:46:4e:ce:ab:f1:d3:fb:4c:19:31: 64:f6:2a:db:e0:71:9d:20:39:db:99:eb:94:5d:28:3a:e1:18: b7:d3:90:25:0a:2a:3b:50:da:02:af:6e:ff:83:d9:68:fa:e3: b8:07:f8:cd:d7:22:e9:4a:f2:0c:01:8c:73:8d:15:ab:fd:0d: c4:e9:6e:40:74:66:e6:d6:d1:a1:ae:f7:a8:bd:eb:00:00:8d: 5f:0f:8b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9gi0dVTaFog+lMLUtRNy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYWUxNGU4NjNjMWIxNWExZWEyZTQ5YTJlYjUwNDg1M2Y3 NWI2YmQwHhcNMjYwMTAyMDcwMDQxWhcNMjYwMTAzMDcwMDQxWjAzMTEwLwYDVQQD EyhmMzQ4ZWQ3MDY3NjY5ZTUwNGJmNjJlYmM4ZDg1OGRjNThjNWZjZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6erJQ6iEfLxU1qZZL5cU0CTczsjM 8IWTnchWEDLv142h9nSf+FpNraQloQ0hcztQgitemmWH4VyujxK+BUl9YD7ffTG3 hdOVJJWHLsFUrhGmeuvUVhTQlKq+2G8x7xUVf05NLHboev0N6fuMSgi2LyArrUhw M6nGIFkCh57p6SJPpXxKEzO4d8JyFQb07bJJEXOgcjGFWK4MOjGDd1YOSIpeQG9C vccJ+c4kAcO42vjoz1LNZ9Kxj1DKW4h4zHKt8g16GpfVBnufHweOYI1L/f0XKXyh 64RSjIuEjhcMNR/8o24eYZlvT3dUaw2WGUKQwvMhS0vD4vLByPoWoz9vAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNI7XBnZp5QS/YuvI2FjcWMX84EMB8GA1UdIwQY MBaAFOCuFOhjwbFaHqLkmi61BIU/dba9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYt Yzc5MDVmYjM4NmE3LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYtYzc5MDVmYjM4NmE3 LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUvv8LtX UXhnDbaBWi1FxArxdkx7birBSqK57mMP0uifnytGtHXdp+rntbl10pK6HRjSjSs5 q9m28/yqI8e4L4zMPH7IxjDSqMH3j1LOsFyu3t2hWOmocRzk5j3v79h1tpoVhlPj v6/R2d/XLkA7oJMhqg34JMhUjNZoQqN1DPU3xfHsUBaIJc2mBRmETGh2O4Mn2EVX EFTLe3XTr2KyUUZI9VCI9Gr1STZGTs6r8dP7TBkxZPYq2+BxnSA525nrlF0oOuEY t9OQJQoqO1DaAq9u/4PZaPrjuAf4zdci6UryDAGMc40Vq/0NxOluQHRm5tbRoa73 qL3rAACNXw+L9w== -----END CERTIFICATE-----Generated at Fri Jan 2 11:31:02 2026 by rpki-client