This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json) Hash identifier: zY3OpAouJWCLXtS0Ul0JMhF2U6mkrGgDvwkb3WRdv8A= Subject key identifier: 3B:F0:00:84:A9:BE:B5:3D:BF:72:B5:16:7E:9F:E9:3D:2E:C1:F8:B8 Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Certificate serial: 019B2BC1BFCE6A9E3FC88308F3445405D932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft Manifest number: 167A Signing time: Wed 17 Dec 2025 10:01:16 +0000 Manifest this update: Wed 17 Dec 2025 10:01:16 +0000 Manifest next update: Thu 18 Dec 2025 10:01:16 +0000 Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: Yronq3ClJsYjeMKsXdiupzSRq1FUg7Tdhg9qkhLTvVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:bf:ce:6a:9e:3f:c8:83:08:f3:44:54:05:d9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Validity Not Before: Dec 17 10:01:16 2025 GMT Not After : Dec 18 10:01:16 2025 GMT Subject: CN=3bf00084a9beb53dbf72b5167e9fe93d2ec1f8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:41:3b:60:90:f9:02:07:5f:8c:88:a5:11: a1:14:6c:d5:d6:c2:0e:ca:67:0d:64:c2:8b:11:ec: 17:0f:cb:ff:9c:38:ad:ed:11:f4:26:82:5b:31:4d: 0a:d7:d3:23:00:ac:a0:5a:cd:6c:f4:0a:54:de:99: 79:12:cd:cf:75:6b:b6:e4:2d:69:c1:10:c0:bc:1d: fb:97:2f:c2:8a:3e:a0:0c:00:97:cc:66:5f:33:28: 8c:5f:bd:77:76:b2:4f:30:86:a0:a5:89:c4:fc:2a: c1:f4:a1:ff:9d:37:cd:7c:35:a4:3f:b6:f6:88:cb: 99:e1:bd:bd:ab:0a:b8:35:db:67:08:03:66:60:16: 27:ef:14:ed:a7:57:ab:f6:f7:38:76:3e:9a:9c:26: c2:38:96:07:bd:bd:4f:1a:57:ce:ce:c2:8b:47:d9: db:e9:cd:e5:7c:c1:ea:03:49:99:1c:ac:d9:a4:57: 3d:47:35:54:a6:b3:6f:88:ef:c3:99:ec:dd:12:ee: b5:9e:c6:2a:ec:59:cf:93:c4:cf:1f:b9:ec:87:98: ba:39:a8:07:aa:74:00:f5:cf:9f:b9:63:87:50:08: 58:c8:5f:f9:3e:8f:c4:b3:6a:c0:17:4f:c6:86:2f: d3:a8:0d:66:90:b0:3b:8d:92:d4:b4:c9:f4:f2:af: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:00:84:A9:BE:B5:3D:BF:72:B5:16:7E:9F:E9:3D:2E:C1:F8:B8 X509v3 Authority Key Identifier: keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2c:c5:09:51:c6:52:da:e8:6f:0b:34:e9:77:2c:33:39:18: c9:ba:10:c6:c6:0c:29:b9:51:72:5d:5c:36:fb:2b:41:23:f8: c9:c2:07:44:17:b8:da:ff:1f:7a:8a:19:6b:4c:f5:e6:e8:2c: eb:2f:74:f2:b0:bf:13:c9:3a:c1:80:6f:0e:6c:45:61:cf:2e: d0:aa:d2:c1:6c:5e:9a:1d:51:0a:ba:10:39:9b:5f:17:af:fd: 82:b8:13:bd:8e:c0:8b:94:bc:ca:ef:00:26:81:5e:31:e5:36: 94:1b:1a:b1:49:ae:0a:69:56:3e:31:36:d3:e6:2a:a1:f7:b6: 5b:b6:aa:46:e0:d1:14:1d:09:21:60:7d:d2:b4:bc:d3:72:96: aa:dd:1d:02:01:fb:f6:84:25:f3:3c:6f:ee:f4:98:97:10:83: 9b:b5:b8:0c:8a:e1:45:1e:c8:04:f6:8a:82:fe:41:33:7b:d0: b5:72:1f:43:ac:fc:fd:2d:17:f9:b6:24:3a:91:56:4b:66:89: 96:fe:9f:06:08:2d:72:7e:d5:15:e1:fc:0a:4a:ff:c2:14:6b: 03:54:13:a9:0e:84:bb:fd:69:64:04:4b:c0:6d:8f:84:e4:8d: 97:ba:5c:3d:c7:9b:6c:4c:25:8a:9e:59:84:bb:bb:53:5a:a2: 75:ef:ba:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwb/Oap4/yIMI80RUBdkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh YWVjODMwHhcNMjUxMjE3MTAwMTE2WhcNMjUxMjE4MTAwMTE2WjAzMTEwLwYDVQQD EygzYmYwMDA4NGE5YmViNTNkYmY3MmI1MTY3ZTlmZTkzZDJlYzFmOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50RBO2CQ+QIHX4yIpRGhFGzV1sIO ymcNZMKLEewXD8v/nDit7RH0JoJbMU0K19MjAKygWs1s9ApU3pl5Es3PdWu25C1p wRDAvB37ly/Cij6gDACXzGZfMyiMX713drJPMIagpYnE/CrB9KH/nTfNfDWkP7b2 iMuZ4b29qwq4NdtnCANmYBYn7xTtp1er9vc4dj6anCbCOJYHvb1PGlfOzsKLR9nb 6c3lfMHqA0mZHKzZpFc9RzVUprNviO/DmezdEu61nsYq7FnPk8TPH7nsh5i6OagH qnQA9c+fuWOHUAhYyF/5Po/Es2rAF0/Ghi/TqA1mkLA7jZLUtMn08q8qiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvwAISpvrU9v3K1Fn6f6T0uwfi4MB8GA1UdIwQY MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYizFCVHG Utrobws06XcsMzkYyboQxsYMKblRcl1cNvsrQSP4ycIHRBe42v8feooZa0z15ugs 6y908rC/E8k6wYBvDmxFYc8u0KrSwWxemh1RCroQOZtfF6/9grgTvY7Ai5S8yu8A JoFeMeU2lBsasUmuCmlWPjE20+Yqofe2W7aqRuDRFB0JIWB90rS803KWqt0dAgH7 9oQl8zxv7vSYlxCDm7W4DIrhRR7IBPaKgv5BM3vQtXIfQ6z8/S0X+bYkOpFWS2aJ lv6fBggtcn7VFeH8Ckr/whRrA1QTqQ6Eu/1pZARLwG2PhOSNl7pcPcebbEwlip5Z hLu7U1qide+6LQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:39:25 2025 by rpki-client