This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: eUgZw3Yw12bmaDTq8+kyAAzPkOfoxTaEXB7QAEfsv7E=
Subject key identifier: EA:45:42:B2:FC:EA:2E:DD:BB:E3:BA:05:83:F9:09:8C:89:75:2A:CB
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019B2B1DB14EA4A4736E09A033C6FC097192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 12A7
Signing time: Wed 17 Dec 2025 07:02:04 +0000
Manifest this update: Wed 17 Dec 2025 07:02:04 +0000
Manifest next update: Thu 18 Dec 2025 07:02:04 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: MfCwb7xGK9dKI34O8wIj4A52zyD+huGPNqayln0k7Ug=)
2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:1d:b1:4e:a4:a4:73:6e:09:a0:33:c6:fc:09:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Dec 17 07:02:04 2025 GMT
Not After : Dec 18 07:02:04 2025 GMT
Subject: CN=ea4542b2fcea2eddbbe3ba0583f9098c89752acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:74:eb:78:9e:ac:37:f1:f7:24:a8:e1:fd:
ca:8d:04:5d:e4:91:c1:7c:e2:b0:ff:e1:54:45:c1:
e7:e8:62:e0:85:07:ef:dd:d3:b4:54:e0:63:b8:ad:
a6:23:04:e9:3c:71:87:2d:20:c8:b6:05:c5:34:88:
7d:fc:fd:33:de:83:ca:b6:18:e5:cb:16:82:69:c5:
dc:b1:ce:5d:40:80:a6:12:ec:ae:14:92:6a:a1:77:
40:5a:9c:d8:3e:0f:86:5f:91:c9:e7:58:d6:c8:aa:
bd:4a:52:68:8b:ad:58:f0:f5:52:79:b0:37:01:b6:
aa:0f:03:1b:78:1c:09:c2:f7:70:e9:b9:b1:d2:ae:
47:de:67:c0:5a:cf:1c:46:24:e3:84:0d:c6:40:64:
ae:e4:1d:66:0b:c3:4b:31:42:39:25:32:66:a7:31:
84:72:18:8d:ba:e6:d3:aa:48:cc:3e:00:26:81:1b:
a4:ef:82:94:99:22:09:f2:68:da:dc:c6:58:08:6f:
73:d5:2a:00:59:72:bb:ea:fc:70:23:e4:56:08:cb:
e2:04:0a:60:e9:82:ef:59:fe:7f:99:a4:e2:c8:b4:
1d:5e:3e:af:89:6c:a5:a2:2a:d8:d8:ba:37:62:25:
3a:36:a8:72:f5:89:6e:1b:27:f5:ea:ca:0f:22:da:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:42:B2:FC:EA:2E:DD:BB:E3:BA:05:83:F9:09:8C:89:75:2A:CB
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:51:13:99:29:a1:05:11:64:18:5a:71:81:bc:86:27:6d:
4a:a4:2b:ac:51:f8:ef:80:1d:37:7a:e3:c2:fc:21:34:e9:70:
96:af:13:41:58:33:c4:9f:d6:07:5e:3a:08:23:ae:16:8f:28:
3c:d0:8a:c6:af:8f:af:82:43:fe:d7:fc:da:60:a5:07:68:e8:
aa:6e:56:d4:a2:48:38:bc:69:d3:74:13:bc:89:76:6c:c8:94:
fd:50:9d:ec:5b:f2:b2:90:a8:9c:80:8e:71:c7:89:59:82:98:
a6:71:3f:8b:8c:85:c0:82:7b:9c:28:8a:c9:45:7f:c1:9d:b9:
45:04:fd:b8:02:50:fd:a9:76:1a:d6:ba:27:7f:7b:04:f8:49:
09:2b:fb:50:92:b3:aa:e8:41:76:30:49:b8:2a:84:6e:88:9e:
fd:5c:91:b2:9e:66:d8:ce:18:88:8c:ad:ee:46:ad:f9:cc:69:
09:dd:92:93:4b:9c:7e:6e:fb:c3:b0:c5:46:db:e7:34:35:2e:
46:4e:5a:38:fb:25:b2:25:7e:1a:60:86:e3:b1:e9:8f:92:52:
47:b2:5f:f3:90:06:a1:00:f5:79:18:c5:e8:28:86:1e:6b:07:
9a:56:3b:6d:96:32:de:5a:f5:fe:9d:42:cd:96:86:e0:7f:b1:
bd:c0:ce:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsrHbFOpKRzbgmgM8b8CXGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm
M2FlYzkwHhcNMjUxMjE3MDcwMjA0WhcNMjUxMjE4MDcwMjA0WjAzMTEwLwYDVQQD
EyhlYTQ1NDJiMmZjZWEyZWRkYmJlM2JhMDU4M2Y5MDk4Yzg5NzUyYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqR063ierDfx9ySo4f3KjQRd5JHB
fOKw/+FURcHn6GLghQfv3dO0VOBjuK2mIwTpPHGHLSDItgXFNIh9/P0z3oPKthjl
yxaCacXcsc5dQICmEuyuFJJqoXdAWpzYPg+GX5HJ51jWyKq9SlJoi61Y8PVSebA3
AbaqDwMbeBwJwvdw6bmx0q5H3mfAWs8cRiTjhA3GQGSu5B1mC8NLMUI5JTJmpzGE
chiNuubTqkjMPgAmgRuk74KUmSIJ8mja3MZYCG9z1SoAWXK76vxwI+RWCMviBApg
6YLvWf5/maTiyLQdXj6viWyloirY2Lo3YiU6Nqhy9YluGyf16soPItreTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpFQrL86i7du+O6BYP5CYyJdSrLMB8GA1UdIwQY
MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt
N2JkMGNmYTIzOWY2LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2
LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2FRE5kp
oQURZBhacYG8hidtSqQrrFH474AdN3rjwvwhNOlwlq8TQVgzxJ/WB146CCOuFo8o
PNCKxq+Pr4JD/tf82mClB2joqm5W1KJIOLxp03QTvIl2bMiU/VCd7FvyspConICO
cceJWYKYpnE/i4yFwIJ7nCiKyUV/wZ25RQT9uAJQ/al2Gta6J397BPhJCSv7UJKz
quhBdjBJuCqEboie/VyRsp5m2M4YiIyt7kat+cxpCd2Sk0ucfm77w7DFRtvnNDUu
Rk5aOPslsiV+GmCG47Hpj5JSR7Jf85AGoQD1eRjF6CiGHmsHmlY7bZYy3lr1/p1C
zZaG4H+xvcDObw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 09:46:53 2025 by rpki-client