This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json) Hash identifier: XllMxhvwTJtac4wJ/3+0RIJoE+HnAa4FpaPRQu/J6b4= Subject key identifier: 91:D5:17:C6:71:4C:82:DE:C7:36:BC:D8:69:DE:2D:6D:A7:2D:46:B7 Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Certificate serial: 019B2F9E96449DB75B71B79331842FE0AF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft Manifest number: 167C Signing time: Thu 18 Dec 2025 04:01:20 +0000 Manifest this update: Thu 18 Dec 2025 04:01:20 +0000 Manifest next update: Fri 19 Dec 2025 04:01:20 +0000 Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: kPk2gvGPjCBpM5eQwGdoAyt6LJO1bYk4NEwh8+G9oZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:96:44:9d:b7:5b:71:b7:93:31:84:2f:e0:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Validity Not Before: Dec 18 04:01:20 2025 GMT Not After : Dec 19 04:01:20 2025 GMT Subject: CN=91d517c6714c82dec736bcd869de2d6da72d46b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:ea:98:7c:49:29:76:d5:e5:5f:ac:6a:f8: 6e:68:83:67:79:fe:ea:27:be:89:c9:d3:bb:f5:71: f0:39:3d:2a:88:4a:00:f0:b4:6b:74:70:a9:06:e3: 52:66:c9:dc:e4:2b:ac:36:f4:70:57:13:24:8a:51: 04:2b:83:1d:30:30:f5:fb:ff:1f:32:22:e1:62:22: 6c:85:cc:ac:d8:92:3a:25:a3:6d:34:07:8c:fb:53: b7:b1:cc:9b:0b:1b:05:04:af:63:57:09:62:71:b9: 56:fc:0c:14:40:5f:1a:c1:0b:d5:86:08:f6:74:59: f6:d7:46:e7:b7:22:15:94:ae:6f:36:4c:4d:0b:37: 7e:6d:4a:1d:62:d2:ef:af:3a:e3:cc:03:86:73:07: 16:5e:fe:15:eb:df:1b:86:13:cd:1a:85:c9:6d:38: 21:c6:a0:b2:59:ff:2e:56:ac:4e:b0:ad:b0:0c:68: 11:db:af:e4:a8:68:8a:e6:f2:3f:6c:94:dc:ff:a6: c7:14:54:e6:78:3a:09:fb:bb:05:4f:77:2d:fe:3e: c7:fa:58:81:86:36:7e:a0:a2:9d:d0:b7:4e:47:a2: 49:9b:8d:ed:21:d2:ec:13:d4:73:60:da:ca:d9:81: 19:6f:ae:98:ac:f0:99:b0:0a:e0:30:6e:ce:3d:9b: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:17:C6:71:4C:82:DE:C7:36:BC:D8:69:DE:2D:6D:A7:2D:46:B7 X509v3 Authority Key Identifier: keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:14:b7:c0:43:c8:07:85:85:3a:33:63:f7:fb:b6:54:86:ff: ef:25:71:65:76:e8:02:7c:48:6e:a7:1e:b7:43:99:06:ba:53: 24:a1:0e:ca:d0:72:59:cf:23:fa:27:d3:34:3a:45:7a:6b:19: ff:88:d5:b8:0b:c2:c4:60:1e:a5:96:95:4e:25:93:e4:5e:80: e1:f0:f5:a6:70:53:42:12:43:ac:b2:19:65:8c:bf:f1:db:bc: 00:6e:3d:e5:b7:0b:e2:a1:86:f5:ad:92:cf:0d:f8:03:43:09: 1a:9a:9d:3a:fa:c6:72:b1:1a:37:7e:5b:5f:ca:52:6e:12:e8: 39:db:5b:f9:c6:20:60:ec:15:e5:a3:76:94:44:97:df:61:39: c5:81:30:9f:d0:26:29:28:4b:0b:33:6b:c5:f3:f0:ca:a1:87: 91:32:35:09:18:d3:43:72:1e:e8:1e:b2:06:58:b0:ea:75:4b: 66:30:59:51:69:12:f3:33:75:e4:68:db:de:7c:bb:b0:4b:8b: 0f:ba:95:13:ba:dc:5b:9f:5d:ef:d7:dc:ff:fc:23:57:cf:6d: af:02:15:a4:60:a0:3d:6d:d3:3f:3c:5f:b6:cb:0a:af:54:a2: a7:71:b3:8e:79:4c:dd:4c:80:8c:92:e9:3e:86:c4:16:b3:6b: 43:82:ac:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpZEnbdbcbeTMYQv4K+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh YWVjODMwHhcNMjUxMjE4MDQwMTIwWhcNMjUxMjE5MDQwMTIwWjAzMTEwLwYDVQQD Eyg5MWQ1MTdjNjcxNGM4MmRlYzczNmJjZDg2OWRlMmQ2ZGE3MmQ0NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4jqmHxJKXbV5V+savhuaINnef7q J76JydO79XHwOT0qiEoA8LRrdHCpBuNSZsnc5CusNvRwVxMkilEEK4MdMDD1+/8f MiLhYiJshcys2JI6JaNtNAeM+1O3scybCxsFBK9jVwlicblW/AwUQF8awQvVhgj2 dFn210bntyIVlK5vNkxNCzd+bUodYtLvrzrjzAOGcwcWXv4V698bhhPNGoXJbTgh xqCyWf8uVqxOsK2wDGgR26/kqGiK5vI/bJTc/6bHFFTmeDoJ+7sFT3ct/j7H+liB hjZ+oKKd0LdOR6JJm43tIdLsE9RzYNrK2YEZb66YrPCZsArgMG7OPZvBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHVF8ZxTILexza82GneLW2nLUa3MB8GA1UdIwQY MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBS3wEPI B4WFOjNj9/u2VIb/7yVxZXboAnxIbqcet0OZBrpTJKEOytByWc8j+ifTNDpFemsZ /4jVuAvCxGAepZaVTiWT5F6A4fD1pnBTQhJDrLIZZYy/8du8AG495bcL4qGG9a2S zw34A0MJGpqdOvrGcrEaN35bX8pSbhLoOdtb+cYgYOwV5aN2lESX32E5xYEwn9Am KShLCzNrxfPwyqGHkTI1CRjTQ3Ie6B6yBliw6nVLZjBZUWkS8zN15Gjb3ny7sEuL D7qVE7rcW59d79fc//wjV89trwIVpGCgPW3TPzxftssKr1Sip3GzjnlM3UyAjJLp PobEFrNrQ4KspA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:13:21 2025 by rpki-client