This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json) Hash identifier: F3fTwC+LLUMpBOjqeazhj6hmXjCatovOn+OyrTVvmvQ= Subject key identifier: BB:3F:2F:0C:47:7D:C3:83:70:D2:DF:B7:9A:E3:DE:25:98:DD:DA:AA Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Certificate serial: 019AF5E5C9464F7A659DE957B6A5933128A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 23:01:08 +0000 Manifest this update: Sat 06 Dec 2025 23:01:08 +0000 Manifest next update: Sun 07 Dec 2025 23:01:08 +0000 Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: /koZ2LZyfhTM0/RgzkBJyyG42piKEVNmmlhr2dad+yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c9:46:4f:7a:65:9d:e9:57:b6:a5:93:31:28:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Validity Not Before: Dec 6 23:01:08 2025 GMT Not After : Dec 7 23:01:08 2025 GMT Subject: CN=bb3f2f0c477dc38370d2dfb79ae3de2598dddaaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:e3:4e:56:61:87:83:cb:c8:ad:a0:15:9e: da:0d:df:6d:75:64:22:3b:5e:9a:a4:59:20:5e:09: 62:88:a3:3f:3c:cc:97:74:94:d5:dd:e2:64:c9:1f: 17:e0:92:93:ba:dd:2e:a8:c2:af:13:ac:b3:22:d8: 00:57:8c:c4:15:13:15:52:88:53:00:9a:36:47:0e: f6:47:29:fb:60:53:2b:62:50:d8:bf:e2:5f:1f:3f: d7:db:9f:fc:95:0c:4f:63:5b:3b:7a:1b:83:98:1e: df:81:71:d5:a4:fd:69:5d:d5:83:2c:c1:55:e4:4b: f8:5f:a0:8e:c0:c3:b4:07:4f:af:03:cf:6c:30:df: 1b:45:47:46:97:16:d3:41:31:e6:20:84:e8:c8:87: bf:55:d2:5b:19:07:ff:04:69:1b:39:b1:a4:9c:4f: 96:92:b6:f9:be:10:c3:98:4f:01:c6:d3:8f:28:89: bd:af:80:98:9f:59:a3:e7:c6:bf:a7:cb:21:fb:a9: 19:8f:61:28:84:f8:0f:42:1a:75:4c:cf:8a:1a:5a: f6:e2:70:31:d1:74:79:cf:8c:81:28:6f:d5:5c:9d: 99:84:f7:17:21:f4:cf:e8:03:27:6e:f9:49:d5:c1: 23:83:a7:25:89:06:2e:a4:d6:eb:69:6e:28:57:f1: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3F:2F:0C:47:7D:C3:83:70:D2:DF:B7:9A:E3:DE:25:98:DD:DA:AA X509v3 Authority Key Identifier: keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:48:72:a2:3d:14:4e:28:2f:7d:f8:7c:2a:73:e0:d0:88:10: 81:f2:60:e1:5a:f0:23:b0:bf:56:cc:6f:9b:d4:12:61:1c:a9: 48:16:f7:48:01:5f:97:7d:63:74:24:65:9f:72:18:82:18:7d: fa:96:44:52:53:a1:b5:8f:09:08:30:d2:86:fa:92:1a:1c:51: 46:25:4d:fd:84:c6:a4:66:17:b5:71:df:b7:31:b1:d7:40:65: 40:5a:06:1d:e5:b9:8b:fb:7c:a1:8e:a3:d6:61:cc:68:f5:07: e8:2b:11:2d:ff:63:33:e1:1e:6d:28:eb:be:11:a9:38:f0:c7: 02:98:39:ba:6e:2d:05:df:ea:74:c0:2d:7d:c4:aa:af:e6:d7: a6:a1:8a:8a:8c:84:13:57:3b:56:d1:ca:31:ce:cc:67:ce:33: cf:f4:0d:87:7a:a2:8e:00:29:67:b0:32:df:c8:9d:92:99:2a: 83:18:17:c5:97:72:69:c0:bf:b8:6e:7a:f0:f8:ce:ba:1b:c2: 17:29:ce:58:9d:07:d5:bd:32:48:cd:1e:de:6e:d7:c6:25:6c: 74:6d:c3:9a:ae:9b:4e:ed:80:ac:db:4c:04:a2:10:17:e0:79: e8:81:8e:73:5a:9c:ee:52:ca:c1:f0:9f:77:c6:2a:0d:8b:1b: e4:98:1c:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15clGT3plnelXtqWTMSioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk NmUxMmYwHhcNMjUxMjA2MjMwMTA4WhcNMjUxMjA3MjMwMTA4WjAzMTEwLwYDVQQD EyhiYjNmMmYwYzQ3N2RjMzgzNzBkMmRmYjc5YWUzZGUyNTk4ZGRkYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oXjTlZhh4PLyK2gFZ7aDd9tdWQi O16apFkgXgliiKM/PMyXdJTV3eJkyR8X4JKTut0uqMKvE6yzItgAV4zEFRMVUohT AJo2Rw72Ryn7YFMrYlDYv+JfHz/X25/8lQxPY1s7ehuDmB7fgXHVpP1pXdWDLMFV 5Ev4X6COwMO0B0+vA89sMN8bRUdGlxbTQTHmIIToyIe/VdJbGQf/BGkbObGknE+W krb5vhDDmE8BxtOPKIm9r4CYn1mj58a/p8sh+6kZj2EohPgPQhp1TM+KGlr24nAx 0XR5z4yBKG/VXJ2ZhPcXIfTP6AMnbvlJ1cEjg6cliQYupNbraW4oV/Ec5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLs/LwxHfcODcNLft5rj3iWY3dqqMB8GA1UdIwQY MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUhyoj0U Tigvffh8KnPg0IgQgfJg4VrwI7C/Vsxvm9QSYRypSBb3SAFfl31jdCRln3IYghh9 +pZEUlOhtY8JCDDShvqSGhxRRiVN/YTGpGYXtXHftzGx10BlQFoGHeW5i/t8oY6j 1mHMaPUH6CsRLf9jM+EebSjrvhGpOPDHApg5um4tBd/qdMAtfcSqr+bXpqGKioyE E1c7VtHKMc7MZ84zz/QNh3qijgApZ7Ay38idkpkqgxgXxZdyacC/uG568PjOuhvC FynOWJ0H1b0ySM0e3m7XxiVsdG3Dmq6bTu2ArNtMBKIQF+B56IGOc1qc7lLKwfCf d8YqDYsb5Jgcag== -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:46 2025 by rpki-client