This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json) Hash identifier: 26QlzUxiA9GbvgU3ku1NoMH1q4o7Y8NcJaRoU+JvnBQ= Subject key identifier: 31:15:CA:89:1A:8F:3D:77:07:F0:0C:54:3C:0F:5F:DC:73:02:67:5B Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Certificate serial: 019AF1D24266483E327A918818943CDC3B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft Manifest number: 0200 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: j7hgmkK5n6Rmz0Srt7ldi6QHi1s/UYcqg6Gw6YqfPMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:42:66:48:3e:32:7a:91:88:18:94:3c:dc:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=3115ca891a8f3d7707f00c543c0f5fdc7302675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:3e:23:eb:ce:58:07:ab:81:64:a7:d1:de: 97:06:72:e8:83:27:a8:a2:75:8f:d7:65:07:8b:59: 3a:79:e0:47:e4:f7:12:42:53:b8:db:2f:6e:2c:60: 40:76:fa:1e:6e:43:5d:48:fc:ce:b8:ad:1b:c9:ac: 53:65:44:94:7d:ee:c4:cc:cc:a9:b2:d9:af:0c:f4: 4d:d8:4b:68:de:52:dc:35:ff:87:0c:37:cd:a4:7c: df:20:4a:e4:0d:f9:a1:31:b4:42:cb:35:40:26:3f: c3:2e:3a:45:40:2c:ae:85:e3:df:b3:72:e7:1b:c7: ed:ba:2b:ff:c6:83:27:12:0c:e5:a9:96:f9:ba:5e: b8:6b:bc:0e:a3:60:12:12:bb:15:cb:4d:83:2b:e0: b6:ba:18:c2:d6:52:ed:56:c4:39:86:23:f0:53:6f: 56:89:e3:81:ed:0e:44:bf:88:1c:ea:a1:28:4b:e9: 78:5d:c1:e1:31:dd:53:ea:c6:dc:59:3d:f4:1f:af: 92:07:84:67:15:e5:82:20:03:bf:62:2f:8f:b0:5d: 76:44:5c:70:13:b4:cc:36:c3:b9:4a:e7:26:80:7f: 71:80:b3:1e:98:3f:7a:88:49:7e:9a:b3:fd:4f:7c: 1f:d0:bd:bc:dd:97:51:7c:eb:a4:59:eb:8f:64:b2: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:15:CA:89:1A:8F:3D:77:07:F0:0C:54:3C:0F:5F:DC:73:02:67:5B X509v3 Authority Key Identifier: keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1b:59:37:1f:a4:3e:9f:bc:db:d4:d5:43:c7:08:f4:da:31: d2:6d:df:9a:7f:f7:a0:57:34:97:a0:24:44:1e:57:93:0e:60: 2d:36:2c:95:5d:6d:3f:a4:5f:5c:ef:67:07:72:d3:c0:7e:35: a0:96:57:90:62:f0:ab:69:fb:dd:fa:20:58:6a:47:7e:8c:e5: ff:2d:9d:b9:d7:13:23:41:73:10:ae:c6:26:5a:80:db:3a:8e: 75:5a:35:c4:c6:e2:7c:8e:23:6b:16:80:f9:49:b3:f1:83:8c: ec:49:4e:cd:19:0d:e6:99:0e:c6:5a:26:d2:05:ba:74:9d:54: 8e:62:d0:c8:c3:cb:f9:f7:81:92:f2:c0:56:9b:03:4a:67:a0: 6f:97:89:96:40:dd:84:20:f5:4d:f9:14:ef:a0:33:9b:9d:fc: 7e:70:f7:75:99:20:85:15:40:11:c4:10:51:87:6d:75:7f:75: 3d:0e:25:98:62:28:4d:f3:10:5f:dd:d5:75:f7:81:77:95:03: 2a:e5:7d:cc:a7:a9:6b:b1:e7:63:59:d5:8f:56:0e:29:99:26: ce:ae:85:9a:ff:0b:61:4a:cc:7d:a3:e0:56:ab:6b:cb:a5:71: f7:78:bb:e6:02:25:91:98:f0:2b:6b:06:3c:8f:ff:7b:56:e4: ae:a0:58:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kJmSD4yepGIGJQ83DsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5 YzRhZTYwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EygzMTE1Y2E4OTFhOGYzZDc3MDdmMDBjNTQzYzBmNWZkYzczMDI2NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGg+I+vOWAergWSn0d6XBnLogyeo onWP12UHi1k6eeBH5PcSQlO42y9uLGBAdvoebkNdSPzOuK0byaxTZUSUfe7EzMyp stmvDPRN2Eto3lLcNf+HDDfNpHzfIErkDfmhMbRCyzVAJj/DLjpFQCyuhePfs3Ln G8ftuiv/xoMnEgzlqZb5ul64a7wOo2ASErsVy02DK+C2uhjC1lLtVsQ5hiPwU29W ieOB7Q5Ev4gc6qEoS+l4XcHhMd1T6sbcWT30H6+SB4RnFeWCIAO/Yi+PsF12RFxw E7TMNsO5SucmgH9xgLMemD96iEl+mrP9T3wf0L283ZdRfOukWeuPZLLrTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEVyokajz13B/AMVDwPX9xzAmdbMB8GA1UdIwQY MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4 LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRtZNx+k Pp+829TVQ8cI9Nox0m3fmn/3oFc0l6AkRB5Xkw5gLTYslV1tP6RfXO9nB3LTwH41 oJZXkGLwq2n73fogWGpHfozl/y2dudcTI0FzEK7GJlqA2zqOdVo1xMbifI4jaxaA +Umz8YOM7ElOzRkN5pkOxlom0gW6dJ1UjmLQyMPL+feBkvLAVpsDSmegb5eJlkDd hCD1TfkU76Azm538fnD3dZkghRVAEcQQUYdtdX91PQ4lmGIoTfMQX93VdfeBd5UD KuV9zKepa7HnY1nVj1YOKZkmzq6Fmv8LYUrMfaPgVqtry6Vx93i75gIlkZjwK2sG PI//e1bkrqBYBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:28 2025 by rpki-client