This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json) Hash identifier: S2XZdi9p35HXYTV9VTdJ/kv7v/2eRx+XI4LZxZEobW0= Subject key identifier: 3F:0E:8C:C3:7B:D6:69:27:62:AC:B1:9A:37:97:52:F8:C2:4A:B5:B1 Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Certificate serial: 019B4814A47873A98714C57A32BDB3FDA76C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft Manifest number: 1761 Signing time: Mon 22 Dec 2025 22:01:10 +0000 Manifest this update: Mon 22 Dec 2025 22:01:10 +0000 Manifest next update: Tue 23 Dec 2025 22:01:10 +0000 Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: hbJR7BqNlLFotvGdYqZpd4buQNQiZUgS4yy3idksnZU=) 2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:a4:78:73:a9:87:14:c5:7a:32:bd:b3:fd:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Validity Not Before: Dec 22 22:01:10 2025 GMT Not After : Dec 23 22:01:10 2025 GMT Subject: CN=3f0e8cc37bd6692762acb19a379752f8c24ab5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:be:28:40:a2:8b:1d:2e:44:f6:b4:e7:91: f7:84:38:a5:dd:b2:4c:2a:53:77:57:1d:cb:5b:c4: 23:c3:8c:40:58:bc:07:33:36:69:41:37:a0:df:4e: 8f:db:69:f9:79:1f:d8:b9:07:74:62:e1:1b:c9:e8: a7:13:30:9e:43:f7:45:b3:24:77:a3:cf:e5:22:95: 74:67:0a:3a:b3:f5:a4:23:97:35:7c:15:c1:ef:1c: a9:23:f1:df:c0:f3:3c:2d:cd:51:2f:53:fe:52:0d: d2:66:10:4c:21:af:57:77:b4:f6:33:7d:52:d8:0b: 2e:6c:82:06:ae:74:90:f5:17:bd:dc:da:97:e2:44: 2f:f0:a2:a8:bb:72:7c:43:c2:2d:7f:38:d8:e4:24: 61:c2:d4:23:2a:05:6f:0a:2b:3d:29:4e:6d:ef:2d: 29:a3:2b:54:ea:f4:61:96:b1:68:a6:59:d6:4e:60: 23:6a:f6:1b:96:48:52:fc:7e:30:00:95:ac:dd:86: 79:4f:ad:53:aa:cc:54:f0:93:c6:81:9f:b2:8d:c1: 5d:bb:7d:dc:cf:4c:c4:3d:3e:96:54:f7:0e:a4:c2: 47:ec:4e:18:66:a9:2f:10:7a:fe:c9:6b:af:db:56: a4:6e:b6:ea:00:7b:69:5e:37:b5:ac:be:c6:80:a6: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0E:8C:C3:7B:D6:69:27:62:AC:B1:9A:37:97:52:F8:C2:4A:B5:B1 X509v3 Authority Key Identifier: keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:da:5e:a4:38:d2:4b:77:04:95:a1:14:8e:73:59:51:09: 6b:d7:31:60:58:ad:32:d7:0b:4e:c6:db:6d:4c:d1:d8:10:b6: 16:34:ea:d1:0e:48:b4:34:b9:88:a9:13:60:19:a4:0f:0f:5a: 7c:8f:a0:1c:c6:df:95:5a:7d:6e:9d:2b:8e:a9:cb:74:81:5e: 49:56:4d:a8:00:b3:87:66:64:c4:08:23:c9:3b:14:a1:22:2e: 13:1b:54:6c:52:f0:e7:37:75:0d:a5:ff:aa:a7:5c:3d:b4:20: 7b:90:ae:fb:f4:e8:73:38:64:d6:3f:61:04:3a:33:db:2b:35: ef:f7:d9:d7:13:69:10:30:47:0f:90:6e:3a:38:94:b0:e3:44: f0:4d:97:67:c7:9f:a8:d1:f2:9b:34:d3:f5:db:19:9e:ae:70: 97:a0:fb:06:99:e3:50:75:ee:ab:0c:64:bf:be:70:29:00:dc: 55:a6:dd:6a:e8:d4:36:c5:ec:10:53:79:40:2d:15:a5:ff:f2: 3c:1c:13:d6:6b:d3:ca:97:16:2e:4a:82:a6:70:67:d7:df:ea: dc:c1:31:fb:fb:80:b2:de:03:d1:78:57:fb:d3:cf:61:01:12: 76:ce:f8:4c:4d:44:8c:a6:08:f2:67:24:5f:23:29:b7:34:97: 91:1c:d6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFKR4c6mHFMV6Mr2z/adsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2 YmQ2MmQwHhcNMjUxMjIyMjIwMTEwWhcNMjUxMjIzMjIwMTEwWjAzMTEwLwYDVQQD EygzZjBlOGNjMzdiZDY2OTI3NjJhY2IxOWEzNzk3NTJmOGMyNGFiNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6++KECiix0uRPa055H3hDil3bJM KlN3Vx3LW8Qjw4xAWLwHMzZpQTeg306P22n5eR/YuQd0YuEbyeinEzCeQ/dFsyR3 o8/lIpV0Zwo6s/WkI5c1fBXB7xypI/HfwPM8Lc1RL1P+Ug3SZhBMIa9Xd7T2M31S 2AsubIIGrnSQ9Re93NqX4kQv8KKou3J8Q8ItfzjY5CRhwtQjKgVvCis9KU5t7y0p oytU6vRhlrFoplnWTmAjavYblkhS/H4wAJWs3YZ5T61TqsxU8JPGgZ+yjcFdu33c z0zEPT6WVPcOpMJH7E4YZqkvEHr+yWuv21akbrbqAHtpXje1rL7GgKbP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8OjMN71mknYqyxmjeXUvjCSrWxMB8GA1UdIwQY MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt MWRhMmFjYzc2ZTExLzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY/aXqQ4 0kt3BJWhFI5zWVEJa9cxYFitMtcLTsbbbUzR2BC2FjTq0Q5ItDS5iKkTYBmkDw9a fI+gHMbflVp9bp0rjqnLdIFeSVZNqACzh2ZkxAgjyTsUoSIuExtUbFLw5zd1DaX/ qqdcPbQge5Cu+/Toczhk1j9hBDoz2ys17/fZ1xNpEDBHD5BuOjiUsONE8E2XZ8ef qNHymzTT9dsZnq5wl6D7BpnjUHXuqwxkv75wKQDcVabdaujUNsXsEFN5QC0Vpf/y PBwT1mvTypcWLkqCpnBn19/q3MEx+/uAst4D0XhX+9PPYQESds74TE1EjKYI8mck XyMptzSXkRzWbg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:12 2025 by rpki-client