This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json) Hash identifier: gFeYegAPmCN/L/YOoBD77s6BvF8fKHDtb3MGtuSFWmU= Subject key identifier: B9:66:14:2C:AC:18:FF:50:18:07:44:9A:14:AB:FA:D5:3D:26:E4:8A Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0 Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0 Certificate serial: 019AF23FFFD488063E01E073AD620E93A4C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft Manifest number: EB Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: lujAe2Tf1rf00rjjtjtFsHLCEh6nGn/7vkd+7HfT3hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ff:d4:88:06:3e:01:e0:73:ad:62:0e:93:a4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0 Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=b966142cac18ff501807449a14abfad53d26e48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:c6:02:95:46:df:7b:b5:3f:1a:ef:d9:42: 0b:6b:d6:35:75:37:cd:b6:3f:9d:53:09:88:9e:3b: 7e:eb:7f:06:e6:c3:78:19:28:29:c0:76:0b:50:0a: a4:41:c2:98:2d:ea:63:02:2e:f1:86:92:fc:58:5a: e5:9b:29:3d:48:97:38:3d:91:0a:a3:63:11:3f:ee: 2d:c3:f4:8f:bd:0d:5b:ed:62:cf:e5:be:32:80:73: 50:05:e8:26:36:62:e0:ea:92:50:c5:05:97:cb:de: c8:7c:bc:32:de:33:8d:c9:d6:6d:4c:09:31:07:f3: 0d:71:8d:ca:48:42:8f:01:e4:de:04:8f:69:33:bc: c7:e6:15:6b:ea:4a:8a:44:49:1b:4b:15:e0:e3:8c: f4:f7:46:5c:25:4e:17:91:7e:0f:6a:ee:73:3a:5d: 95:82:e3:e4:43:7a:db:e1:d9:86:70:9b:83:3d:9b: 72:5c:a4:bf:88:e2:ef:87:73:e6:72:d3:cd:66:bd: 6d:3d:8e:22:a8:4e:bb:56:59:d3:a8:0c:12:a6:9c: 97:7f:7c:39:21:4d:03:d3:9c:e7:27:7b:10:22:c6: 9e:f9:ef:83:18:10:3c:ab:07:67:55:a1:a1:88:d0: 98:e5:df:88:a5:cc:10:0f:0d:e3:e2:e0:9e:8c:ef: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:14:2C:AC:18:FF:50:18:07:44:9A:14:AB:FA:D5:3D:26:E4:8A X509v3 Authority Key Identifier: keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:bf:9b:4f:a4:80:b9:38:4b:dc:13:d0:65:fc:3a:90:d4: de:2c:51:8c:7d:a7:92:2a:79:f2:1f:db:73:02:6f:58:9c:c9: 44:b9:3a:94:48:76:a3:06:c4:a0:88:8f:67:75:d5:03:27:e4: 4c:e3:74:29:d9:fc:63:46:e2:d2:b7:5e:c9:91:89:75:f2:30: 99:43:45:80:42:be:91:57:13:2a:ad:96:0d:38:07:ae:de:90: 1d:86:a1:ad:f5:42:ee:8d:d8:08:1e:6a:74:62:11:2d:e7:df: db:5f:eb:ad:93:11:b8:bb:7e:c5:fd:94:76:a5:78:01:66:80: d2:32:0d:43:3d:5d:83:9b:b0:4d:02:5a:2c:bc:6c:76:bb:c4: 5e:cd:8d:be:69:fa:51:a4:c4:ca:73:c3:74:a9:05:0c:7f:0a: 1a:24:dd:50:db:a7:fc:f3:02:27:6e:5b:74:56:88:cb:17:ef: 38:a9:63:65:6a:ec:3d:df:5b:9b:65:31:ba:07:0e:41:6f:ef: 34:27:82:33:af:16:11:aa:f2:6b:0a:d7:03:4d:1a:2e:22:87: 25:8b:9a:9a:c3:df:69:27:88:45:fc:03:a4:1d:f5:4e:a6:8c: 50:7e:c9:5a:1c:87:f6:62:61:32:11:18:2b:1a:50:7e:a1:02: 26:92:2a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP//UiAY+AeBzrWIOk6TEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYmJlZGU2NDk2ZjcxNzI3NzY4YWY2YjYxYjBiZGQzMGUy MTcwYjAwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD EyhiOTY2MTQyY2FjMThmZjUwMTgwNzQ0OWExNGFiZmFkNTNkMjZlNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIDGApVG33u1Pxrv2UILa9Y1dTfN tj+dUwmInjt+638G5sN4GSgpwHYLUAqkQcKYLepjAi7xhpL8WFrlmyk9SJc4PZEK o2MRP+4tw/SPvQ1b7WLP5b4ygHNQBegmNmLg6pJQxQWXy97IfLwy3jONydZtTAkx B/MNcY3KSEKPAeTeBI9pM7zH5hVr6kqKREkbSxXg44z090ZcJU4XkX4Pau5zOl2V guPkQ3rb4dmGcJuDPZtyXKS/iOLvh3PmctPNZr1tPY4iqE67VlnTqAwSppyXf3w5 IU0D05znJ3sQIsae+e+DGBA8qwdnVaGhiNCY5d+IpcwQDw3j4uCejO9EFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlmFCysGP9QGAdEmhSr+tU9JuSKMB8GA1UdIwQY MBaAFOC77eZJb3Fyd2iva2GwvdMOIXCwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2Qt MDBmODM5ODdiZWQ3LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2QtMDBmODM5ODdiZWQ3 LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiC/m0+k gLk4S9wT0GX8OpDU3ixRjH2nkip58h/bcwJvWJzJRLk6lEh2owbEoIiPZ3XVAyfk TON0Kdn8Y0bi0rdeyZGJdfIwmUNFgEK+kVcTKq2WDTgHrt6QHYahrfVC7o3YCB5q dGIRLeff21/rrZMRuLt+xf2UdqV4AWaA0jINQz1dg5uwTQJaLLxsdrvEXs2Nvmn6 UaTEynPDdKkFDH8KGiTdUNun/PMCJ25bdFaIyxfvOKljZWrsPd9bm2UxugcOQW/v NCeCM68WEaryawrXA00aLiKHJYuamsPfaSeIRfwDpB31TqaMUH7JWhyH9mJhMhEY KxpQfqECJpIqPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:17 2025 by rpki-client