This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json) Hash identifier: Isumyjg2YzCW5IfgN7OGYHAJ0q2OGAHnPQF9G3J6ymI= Subject key identifier: 4A:9A:F4:9D:79:5B:90:4C:26:FF:9E:77:E4:32:17:F6:2F:0B:6B:D7 Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90 Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190 Certificate serial: 019B522A1B39314B9E18DF8E78ECFFEDC68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft Manifest number: 1722 Signing time: Wed 24 Dec 2025 21:00:49 +0000 Manifest this update: Wed 24 Dec 2025 21:00:49 +0000 Manifest next update: Thu 25 Dec 2025 21:00:49 +0000 Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: 6qSLiLS7opsmu1aQoDXZU9g39+uetCFwLkBWKvCBvnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:1b:39:31:4b:9e:18:df:8e:78:ec:ff:ed:c6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190 Validity Not Before: Dec 24 21:00:49 2025 GMT Not After : Dec 25 21:00:49 2025 GMT Subject: CN=4a9af49d795b904c26ff9e77e43217f62f0b6bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:df:c0:f6:32:39:1a:45:8b:bb:39:1a:8b: e4:60:88:d2:eb:69:7e:a9:64:9e:19:bf:85:49:5c: 5e:26:12:38:e9:03:41:ce:5b:1b:9e:fa:9a:c2:f8: f0:56:b8:a5:ba:f2:91:c6:c7:af:37:4a:f8:47:c3: 77:a0:c3:18:43:26:9e:d1:03:38:5a:9b:57:5b:99: 06:3e:53:95:8a:e0:56:d6:e1:97:1a:17:1d:67:6e: c2:6c:1f:cf:14:0c:5a:93:83:10:23:0c:df:84:1a: 7e:09:89:50:88:b2:54:35:fb:6b:be:6e:bd:b9:06: 83:53:3c:66:b5:62:51:d5:99:fe:77:c3:be:c3:e3: bc:56:bb:89:0f:43:f8:08:ab:e1:3d:16:e7:a2:e4: 75:4d:cf:c9:d5:06:1b:f7:2e:3a:9f:e1:f5:47:db: 0d:b2:7b:ea:9f:0a:58:f5:e8:60:f6:b8:b0:39:d3: 92:d5:54:3c:6b:99:03:a3:c8:c2:5a:48:bc:9d:e1: ee:06:21:48:00:dd:6c:8a:97:5a:79:aa:55:1a:38: 44:fb:e9:95:e0:a7:74:20:86:56:97:ca:01:fe:ed: 3e:4d:19:7a:c1:0f:07:e3:6c:19:21:71:80:7a:ac: b4:2c:bc:14:06:59:3b:74:6f:64:5f:83:d6:c8:8d: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:F4:9D:79:5B:90:4C:26:FF:9E:77:E4:32:17:F6:2F:0B:6B:D7 X509v3 Authority Key Identifier: keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:33:d3:ee:93:ce:63:b7:51:80:e9:bb:e3:7f:63:1f:80:6e: 96:fa:39:71:82:b9:0e:9c:3d:3a:46:58:9c:4c:71:5a:67:2e: e1:6f:28:da:d8:56:a4:25:ba:fd:8f:81:4b:7c:85:c2:0b:32: 55:47:c1:8b:d3:70:78:dc:bc:86:c1:bd:1e:fe:d6:47:6c:bd: 8b:83:ab:bf:88:5b:ee:03:40:e7:1f:39:6b:99:38:b3:e2:59: 9a:21:73:5b:35:90:2f:ca:70:b5:a8:0f:fc:db:a2:bc:64:84: 34:d0:60:1d:e0:4f:14:82:1f:c5:fe:a7:a4:b4:13:cf:fc:fa: f7:e5:87:34:96:fc:a0:a1:0f:45:9b:6f:6d:af:09:91:15:d4: c7:a9:09:1e:2e:74:7e:70:d7:15:ea:72:c4:ca:64:ce:6b:02: 46:89:01:37:43:fe:ff:59:40:c4:f8:c7:2d:f2:05:ad:dd:fc: 81:6e:b8:33:a5:13:9f:b6:3e:11:f5:cb:c5:e0:8a:bc:52:88: 5c:04:59:26:a1:85:bc:d1:3b:55:0f:dc:45:77:41:f1:2c:a1: 2a:d7:5e:b0:79:26:b1:46:cd:40:64:fb:48:6c:81:60:67:d4: 98:52:c2:91:55:dc:a4:fc:72:6a:c1:bc:e7:de:c4:07:16:bf: b8:e4:cb:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKhs5MUueGN+OeOz/7caOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU1NWIyMDViYWRjZDgyOTRiZDMzMjViOWMyZmJkNTg4 ZDIxOTAwHhcNMjUxMjI0MjEwMDQ5WhcNMjUxMjI1MjEwMDQ5WjAzMTEwLwYDVQQD Eyg0YTlhZjQ5ZDc5NWI5MDRjMjZmZjllNzdlNDMyMTdmNjJmMGI2YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcTfwPYyORpFi7s5GovkYIjS62l+ qWSeGb+FSVxeJhI46QNBzlsbnvqawvjwVriluvKRxsevN0r4R8N3oMMYQyae0QM4 WptXW5kGPlOViuBW1uGXGhcdZ27CbB/PFAxak4MQIwzfhBp+CYlQiLJUNftrvm69 uQaDUzxmtWJR1Zn+d8O+w+O8VruJD0P4CKvhPRbnouR1Tc/J1QYb9y46n+H1R9sN snvqnwpY9ehg9riwOdOS1VQ8a5kDo8jCWki8neHuBiFIAN1sipdaeapVGjhE++mV 4Kd0IIZWl8oB/u0+TRl6wQ8H42wZIXGAeqy0LLwUBlk7dG9kX4PWyI2NSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqa9J15W5BMJv+ed+QyF/YvC2vXMB8GA1UdIwQY MBaAFOLFVbIFutzYKUvTMlucL71YjSGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYt NDQ4NzFlNjg1MmY3LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYtNDQ4NzFlNjg1MmY3 LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDPT7pPO Y7dRgOm7439jH4Bulvo5cYK5Dpw9OkZYnExxWmcu4W8o2thWpCW6/Y+BS3yFwgsy VUfBi9NweNy8hsG9Hv7WR2y9i4Orv4hb7gNA5x85a5k4s+JZmiFzWzWQL8pwtagP /NuivGSENNBgHeBPFIIfxf6npLQTz/z69+WHNJb8oKEPRZtvba8JkRXUx6kJHi50 fnDXFepyxMpkzmsCRokBN0P+/1lAxPjHLfIFrd38gW64M6UTn7Y+EfXLxeCKvFKI XARZJqGFvNE7VQ/cRXdB8SyhKtdesHkmsUbNQGT7SGyBYGfUmFLCkVXcpPxyasG8 597EBxa/uOTLoA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:04:22 2025 by rpki-client