This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json) Hash identifier: Hj4+Rv9QPA1kqa4oTLqWP/eT5llkG4emkZzKGsthAS0= Subject key identifier: A1:16:D5:E0:BB:DB:5C:C6:E4:C9:6F:C2:A0:86:0D:8F:DB:0F:2D:68 Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Certificate serial: 019AF1D1DB6B552A067B90145A730FC015EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft Manifest number: 165C Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: DhgmGqPmSPNZMAHc938WoryjvqZ2NDRua0WIKP5cIqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:db:6b:55:2a:06:7b:90:14:5a:73:0f:c0:15:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83 Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=a116d5e0bbdb5cc6e4c96fc2a0860d8fdb0f2d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3b:bb:2e:8c:dc:f2:1c:68:34:1e:dd:64:93: 5d:e9:6a:74:4d:51:82:49:f3:b0:c1:18:37:df:3d: fa:f7:2f:b1:66:56:1a:3f:4b:1a:f6:58:fd:74:8f: 9c:12:28:e9:aa:2e:05:f5:f8:b1:66:52:e2:40:6f: f8:28:34:fc:43:17:1d:a7:b0:7b:67:f3:a2:c3:96: 3e:77:c8:05:0f:a8:01:70:cd:c7:7c:f6:0a:ee:cf: 0f:d7:f1:ab:93:94:53:05:03:e3:06:cc:18:6f:4b: ed:6d:da:9a:97:5a:7c:b0:db:b5:02:da:54:1f:6b: 09:42:b6:d3:4d:15:fd:99:b1:4d:f8:b9:b9:78:d2: 2a:ac:81:89:fb:e1:1f:9d:7f:9f:33:c7:37:81:12: 11:58:59:47:ba:f8:45:59:bc:7b:06:28:44:62:e9: 3a:02:31:43:bf:20:63:7a:f8:ff:30:77:fb:09:3b: 8f:f0:6b:46:c6:5f:d4:c4:b4:bb:c1:be:37:74:8c: 39:a1:63:da:54:fc:fb:2d:09:c6:ef:69:c9:5d:64: 0f:b7:9c:f1:e3:3e:fe:9c:8e:48:45:8a:ec:67:48: c8:be:b9:ea:b8:16:c8:07:67:78:7c:3c:65:55:54: cb:a2:fd:2a:1f:29:ee:1e:3f:a5:cc:23:99:cd:c9: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:16:D5:E0:BB:DB:5C:C6:E4:C9:6F:C2:A0:86:0D:8F:DB:0F:2D:68 X509v3 Authority Key Identifier: keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3f:41:90:50:88:0e:e5:e2:37:55:4c:66:e2:48:6f:4b:14: 19:28:e9:97:29:b4:24:f9:d6:9d:8d:d8:06:29:7b:2d:b7:cc: d2:6f:87:e3:0a:af:e7:ba:b2:ea:b0:5d:ae:54:45:0b:51:9c: 69:df:e1:b2:b9:12:ef:47:d4:3a:9a:09:88:6e:5f:ec:d1:65: da:97:ac:54:50:dd:8b:82:a0:2f:f5:72:db:55:cb:1e:e5:98: 69:93:a6:35:a1:8e:5a:de:68:8a:55:71:d6:70:9a:60:b2:ca: 6c:ef:b4:d5:34:69:b0:41:65:64:d4:13:ae:85:1c:88:c5:05: bc:c5:c0:09:d7:98:94:e7:8d:0f:7f:52:b8:ac:65:d6:96:d4: 21:dd:d7:2f:14:72:7d:a0:3e:79:2b:1c:28:71:79:c2:73:5d: 2c:a9:ab:51:a3:9c:d3:9b:bf:6a:d3:80:1f:01:f9:b2:9b:bc: 27:cb:86:39:da:5a:0e:23:c9:01:38:ab:5d:de:7e:34:e2:86: bc:f1:54:8e:5d:84:75:e9:b5:6e:43:dc:c0:1e:c4:78:72:30: 20:c5:e5:24:37:be:25:c2:c9:28:9f:a2:45:ff:af:91:38:a7: 9a:b4:9f:14:a9:8c:7a:4c:2b:79:1c:07:1e:da:5f:a0:9d:b4: 6d:3a:26:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dtrVSoGe5AUWnMPwBXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh YWVjODMwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EyhhMTE2ZDVlMGJiZGI1Y2M2ZTRjOTZmYzJhMDg2MGQ4ZmRiMGYyZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Du7Lozc8hxoNB7dZJNd6Wp0TVGC SfOwwRg33z369y+xZlYaP0sa9lj9dI+cEijpqi4F9fixZlLiQG/4KDT8Qxcdp7B7 Z/Oiw5Y+d8gFD6gBcM3HfPYK7s8P1/Grk5RTBQPjBswYb0vtbdqal1p8sNu1AtpU H2sJQrbTTRX9mbFN+Lm5eNIqrIGJ++EfnX+fM8c3gRIRWFlHuvhFWbx7BihEYuk6 AjFDvyBjevj/MHf7CTuP8GtGxl/UxLS7wb43dIw5oWPaVPz7LQnG72nJXWQPt5zx 4z7+nI5IRYrsZ0jIvrnquBbIB2d4fDxlVVTLov0qHynuHj+lzCOZzcld4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEW1eC721zG5MlvwqCGDY/bDy1oMB8GA1UdIwQY MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgz9BkFCI DuXiN1VMZuJIb0sUGSjplym0JPnWnY3YBil7LbfM0m+H4wqv57qy6rBdrlRFC1Gc ad/hsrkS70fUOpoJiG5f7NFl2pesVFDdi4KgL/Vy21XLHuWYaZOmNaGOWt5oilVx 1nCaYLLKbO+01TRpsEFlZNQTroUciMUFvMXACdeYlOeND39SuKxl1pbUId3XLxRy faA+eSscKHF5wnNdLKmrUaOc05u/atOAHwH5spu8J8uGOdpaDiPJATirXd5+NOKG vPFUjl2Edem1bkPcwB7EeHIwIMXlJDe+JcLJKJ+iRf+vkTinmrSfFKmMekwreRwH HtpfoJ20bTomwA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:10 2025 by rpki-client