This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json) Hash identifier: oL0BQ8xbScL+6u4wivn36+acHbh8F/ySB/89HkB/2hw= Subject key identifier: FE:89:CF:19:FA:59:9A:98:A1:39:A1:51:C9:3F:C6:CA:19:30:F6:0D Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0 Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0 Certificate serial: 019B5A884988AA7AEC7FDD3ABC1E31F7D1BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft Manifest number: 0121 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: VHN3JWBaXzvecMfILwZ27jsknyeCeQfVdZSWIXcrFhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:49:88:aa:7a:ec:7f:dd:3a:bc:1e:31:f7:d1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=fe89cf19fa599a98a139a151c93fc6ca1930f60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:0b:74:81:a9:fb:d7:26:c5:c6:bc:7b:8c: 00:0c:4a:7e:85:99:cf:a8:39:f2:94:f2:16:c6:63: 66:04:31:80:b6:fb:70:b4:db:36:91:ea:3f:3b:73: 4f:b0:4a:36:f9:33:53:8e:c8:ad:5d:bb:4d:e3:25: cc:53:7c:33:3d:a3:6b:86:45:18:9e:d5:58:71:02: d9:a3:0b:0f:fe:79:ed:ea:21:7e:0d:bf:08:a9:9e: 11:51:aa:4c:22:1c:ce:74:9b:ce:10:0f:8f:32:c7: f9:90:85:8b:e5:c5:bd:16:5a:8c:5a:08:09:1a:ed: b3:88:44:10:2c:e0:a6:a6:fd:cf:7c:ff:90:80:76: a2:ce:55:66:e1:eb:87:cd:2e:bb:0a:52:45:09:17: de:12:c9:bb:0f:32:3c:a3:0e:4e:88:87:cc:18:c5: 24:d2:3b:53:c5:e5:7d:a4:4e:d3:0e:ee:de:70:81: 9f:09:d6:97:e0:6e:6f:f9:73:36:c5:d4:e8:ce:55: 17:42:a5:e2:d1:11:1f:32:d0:bb:86:c6:59:c6:ba: 63:2b:0d:1b:33:a7:da:45:a9:c5:94:7b:40:f9:21: f7:48:68:c0:e7:cc:9b:de:f8:3c:62:c8:48:30:6b: 41:84:f3:39:56:ee:b6:09:2e:9a:ff:c5:f0:ce:35: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:89:CF:19:FA:59:9A:98:A1:39:A1:51:C9:3F:C6:CA:19:30:F6:0D X509v3 Authority Key Identifier: keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ed:82:36:85:5c:52:ea:25:03:af:eb:2b:8c:bb:b0:ab:19: 72:42:e7:bb:47:9b:89:1c:77:fc:d0:b8:07:f5:15:fe:0e:d9: 97:b1:b0:23:4c:32:bc:3c:17:ba:02:a2:73:21:2e:75:04:76: ef:8f:ee:69:35:44:93:f0:87:6f:37:60:1d:e2:97:c5:ea:c8: f2:db:b8:76:6f:1a:74:41:d9:93:4c:a8:d1:74:ac:a3:a7:07: c7:ae:e1:54:d2:0e:bb:94:a7:b8:e6:d6:e0:d3:cf:7c:4c:76: 56:3c:09:79:7d:82:68:1e:83:e1:45:c1:ba:18:04:cc:39:27: 2d:92:af:10:2b:0c:4f:1f:88:78:da:0a:98:74:e7:99:a3:da: 1d:9a:30:13:d0:bc:29:43:48:37:2b:50:b5:08:41:1e:53:be: d0:10:a0:47:1a:5b:7b:24:09:e5:4b:32:fb:46:4c:30:1b:cc: 64:37:23:0b:5e:41:47:dd:d8:82:c8:b2:54:fb:dd:8e:0a:1c: 3e:85:77:01:00:92:42:fd:f5:ae:c8:47:f9:f8:0a:9e:9d:91: 12:6a:a6:c6:24:75:e3:5b:68:a5:1c:dd:51:db:02:2c:e7:12: ff:38:ac:96:90:52:ff:85:38:fc:46:16:30:7f:d8:31:8c:52: 3b:f6:fa:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEmIqnrsf906vB4x99G9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYmJlZGU2NDk2ZjcxNzI3NzY4YWY2YjYxYjBiZGQzMGUy MTcwYjAwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD EyhmZTg5Y2YxOWZhNTk5YTk4YTEzOWExNTFjOTNmYzZjYTE5MzBmNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiULdIGp+9cmxca8e4wADEp+hZnP qDnylPIWxmNmBDGAtvtwtNs2keo/O3NPsEo2+TNTjsitXbtN4yXMU3wzPaNrhkUY ntVYcQLZowsP/nnt6iF+Db8IqZ4RUapMIhzOdJvOEA+PMsf5kIWL5cW9FlqMWggJ Gu2ziEQQLOCmpv3PfP+QgHaizlVm4euHzS67ClJFCRfeEsm7DzI8ow5OiIfMGMUk 0jtTxeV9pE7TDu7ecIGfCdaX4G5v+XM2xdTozlUXQqXi0REfMtC7hsZZxrpjKw0b M6faRanFlHtA+SH3SGjA58yb3vg8YshIMGtBhPM5Vu62CS6a/8XwzjWVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6Jzxn6WZqYoTmhUck/xsoZMPYNMB8GA1UdIwQY MBaAFOC77eZJb3Fyd2iva2GwvdMOIXCwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2Qt MDBmODM5ODdiZWQ3LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2QtMDBmODM5ODdiZWQ3 LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgO2CNoVc UuolA6/rK4y7sKsZckLnu0ebiRx3/NC4B/UV/g7Zl7GwI0wyvDwXugKicyEudQR2 74/uaTVEk/CHbzdgHeKXxerI8tu4dm8adEHZk0yo0XSso6cHx67hVNIOu5SnuObW 4NPPfEx2VjwJeX2CaB6D4UXBuhgEzDknLZKvECsMTx+IeNoKmHTnmaPaHZowE9C8 KUNINytQtQhBHlO+0BCgRxpbeyQJ5Usy+0ZMMBvMZDcjC15BR93YgsiyVPvdjgoc PoV3AQCSQv31rshH+fgKnp2REmqmxiR141topRzdUdsCLOcS/zislpBS/4U4/EYW MH/YMYxSO/b6yA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:56 2025 by rpki-client