This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json) Hash identifier: bb0d85zjp1mdSG0WJ9qsxD8iApnUzM6AALpLbKoPDDg= Subject key identifier: 00:40:CD:60:39:81:4D:68:C1:29:52:B7:5F:85:EE:00:D5:01:AC:01 Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90 Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190 Certificate serial: 019AF19B0B819F7C178262948D1F99F56500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: QHDJeD+9YBhxr3i088wLLF8fqwGASzdxnFc7eke1igo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0b:81:9f:7c:17:82:62:94:8d:1f:99:f5:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=0040cd6039814d68c12952b75f85ee00d501ac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:29:ff:a8:3e:b6:4e:a7:f8:91:3d:4b:a5:19: 25:97:69:79:d0:e1:44:b0:3b:07:99:c9:1e:e7:ce: 96:9a:80:63:7e:c4:3a:1b:49:80:cd:76:05:9a:be: 63:c3:6f:a6:b8:2c:12:8f:28:b7:df:1b:ef:c1:e6: 3b:ca:06:7d:19:42:51:c0:18:52:aa:55:78:6a:15: 91:ca:13:b5:85:b0:18:ee:ee:18:e9:63:9f:90:89: 61:ec:7a:7a:7f:c7:63:8a:19:91:60:b5:f1:c6:82: 8d:d9:69:5e:78:96:b5:44:4c:c8:fd:bd:52:78:a2: a2:08:55:f7:30:83:f6:3a:76:a0:a5:91:a1:e1:9f: 20:bc:19:77:6f:cb:cb:17:76:ad:b2:f5:65:00:a1: 1b:67:e8:9c:20:f1:6f:e5:01:12:61:3f:03:65:66: 53:69:b4:b2:6e:e2:88:7c:a2:cd:55:5b:7f:50:02: 49:94:e6:36:c6:ac:11:51:c2:fc:6c:5c:60:20:d0: d5:a1:c9:8c:52:89:4e:06:0a:3c:4f:5d:e9:cb:8f: 83:9c:1f:b7:ef:c8:dd:d4:35:2b:e5:36:cd:b5:aa: 45:70:6c:b0:b1:a7:4f:35:0f:d4:19:1e:60:7d:30: a2:a6:4e:0b:ae:6b:4b:c2:1a:a9:ef:9e:af:8a:56: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:CD:60:39:81:4D:68:C1:29:52:B7:5F:85:EE:00:D5:01:AC:01 X509v3 Authority Key Identifier: keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:df:8d:1e:62:3d:98:7f:5a:b3:09:69:d6:32:c5:18:c1:b8: 6a:b8:b8:24:7f:2d:e5:8d:50:01:ea:f9:75:bd:5f:b6:47:09: fe:34:15:6d:e2:2e:d7:6c:dc:79:c0:e8:1e:92:aa:d9:43:20: 44:82:9f:ed:5e:ba:01:fb:27:0c:f5:75:69:3e:f5:da:98:9d: dd:7c:7f:28:56:b0:3d:71:c3:f0:57:e0:9c:22:a1:f4:14:c8: 04:55:c9:c8:2a:3d:4b:86:10:54:41:38:e6:90:46:fe:50:6f: 97:77:f0:94:03:bd:b6:53:57:79:59:af:8e:37:7a:6e:9b:ff: 07:84:ec:44:3f:c5:88:57:cb:3d:b6:4a:b2:cd:4e:44:2d:e2: a2:0c:15:41:e3:5e:37:35:36:3d:6c:00:93:4e:d1:15:36:c5: 58:ef:5f:3b:0e:ff:31:78:ac:05:f7:f2:a2:a2:d9:a8:f9:8a: dd:06:8c:6c:39:cc:8e:41:c4:85:47:e7:bd:72:4f:e3:85:05: c3:8c:9b:bf:f7:91:56:81:05:83:eb:ac:25:c4:53:93:60:18: a6:c9:5f:f6:44:6e:87:59:8d:67:10:5e:fb:04:81:b1:08:7c: ea:8c:05:66:ab:ce:be:58:90:dc:44:76:97:65:9f:67:04:ed: 89:44:8e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwuBn3wXgmKUjR+Z9WUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzU1NWIyMDViYWRjZDgyOTRiZDMzMjViOWMyZmJkNTg4 ZDIxOTAwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EygwMDQwY2Q2MDM5ODE0ZDY4YzEyOTUyYjc1Zjg1ZWUwMGQ1MDFhYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Cn/qD62Tqf4kT1LpRkll2l50OFE sDsHmcke586WmoBjfsQ6G0mAzXYFmr5jw2+muCwSjyi33xvvweY7ygZ9GUJRwBhS qlV4ahWRyhO1hbAY7u4Y6WOfkIlh7Hp6f8djihmRYLXxxoKN2WleeJa1REzI/b1S eKKiCFX3MIP2OnagpZGh4Z8gvBl3b8vLF3atsvVlAKEbZ+icIPFv5QESYT8DZWZT abSybuKIfKLNVVt/UAJJlOY2xqwRUcL8bFxgINDVocmMUolOBgo8T13py4+DnB+3 78jd1DUr5TbNtapFcGywsadPNQ/UGR5gfTCipk4LrmtLwhqp756vilZ/2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABAzWA5gU1owSlSt1+F7gDVAawBMB8GA1UdIwQY MBaAFOLFVbIFutzYKUvTMlucL71YjSGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYt NDQ4NzFlNjg1MmY3LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYtNDQ4NzFlNjg1MmY3 LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsN+NHmI9 mH9aswlp1jLFGMG4ari4JH8t5Y1QAer5db1ftkcJ/jQVbeIu12zcecDoHpKq2UMg RIKf7V66AfsnDPV1aT712pid3Xx/KFawPXHD8FfgnCKh9BTIBFXJyCo9S4YQVEE4 5pBG/lBvl3fwlAO9tlNXeVmvjjd6bpv/B4TsRD/FiFfLPbZKss1ORC3iogwVQeNe NzU2PWwAk07RFTbFWO9fOw7/MXisBffyoqLZqPmK3QaMbDnMjkHEhUfnvXJP44UF w4ybv/eRVoEFg+usJcRTk2AYpslf9kRuh1mNZxBe+wSBsQh86owFZqvOvliQ3ER2 l2WfZwTtiUSOgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:32 2025 by rpki-client