This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json) Hash identifier: xHjOdjW8UjAzDgVAuE0Cn2uMKkJZ7wIxwsVo51m+axk= Subject key identifier: 68:3C:DB:5F:A7:82:95:A8:76:8E:4B:A9:97:4B:A0:EB:D2:B3:43:61 Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Certificate serial: 019B4CCD4F01BE5CA9E6DC0C895911F860AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft Manifest number: 171F Signing time: Tue 23 Dec 2025 20:01:22 +0000 Manifest this update: Tue 23 Dec 2025 20:01:22 +0000 Manifest next update: Wed 24 Dec 2025 20:01:22 +0000 Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: V06OmIdxj/s/8XXVbc6VWZLBB/J24Y5qwUXlunES63Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:4f:01:be:5c:a9:e6:dc:0c:89:59:11:f8:60:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f Validity Not Before: Dec 23 20:01:22 2025 GMT Not After : Dec 24 20:01:22 2025 GMT Subject: CN=683cdb5fa78295a8768e4ba9974ba0ebd2b34361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:3e:cc:cd:b2:06:34:4e:49:98:77:b7:9b: 3e:e9:e6:55:9c:56:06:b6:db:35:65:fb:55:34:da: 69:86:1a:a6:d4:b9:58:6c:d4:75:80:8c:9b:82:de: dc:43:64:d0:1f:5e:b2:b6:45:9b:b5:59:b0:e6:6c: 38:2a:5b:8f:f7:74:61:ef:a1:66:bc:93:31:fa:06: ca:0a:7d:bd:7a:04:e1:f9:f1:cf:f8:ad:e1:4b:57: 5f:e1:ab:de:6a:28:07:b2:87:a7:e5:cf:36:ce:1b: cd:fd:df:5e:b3:eb:d7:a5:47:72:cc:d5:d1:01:1e: 72:30:5e:f1:6b:6e:f5:c0:5b:a8:b7:f0:67:2b:8f: fb:99:4b:98:6d:bf:dd:b1:93:2a:d9:d6:37:1b:44: 57:14:b2:98:cc:ac:73:bd:b8:f8:c4:72:0b:ca:10: a5:c0:94:b9:11:18:9b:a4:5d:0f:00:fa:11:72:3f: 65:c3:2b:2c:cb:fd:3d:3b:e2:08:18:12:40:55:63: f4:19:bf:af:2e:74:b8:9a:4e:0f:82:05:af:dd:87: ef:da:38:8d:f7:ad:b6:39:c3:e4:a6:5d:48:2b:bd: b6:05:4e:6e:b9:46:8b:d7:9f:0d:28:15:93:44:66: 00:9b:97:8f:7a:88:23:3c:72:10:0f:e6:e3:90:2a: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:DB:5F:A7:82:95:A8:76:8E:4B:A9:97:4B:A0:EB:D2:B3:43:61 X509v3 Authority Key Identifier: keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6b:4d:74:23:b7:52:40:a6:00:0f:5e:80:95:83:c8:0a:58: cc:f8:b4:12:4f:8d:21:6f:07:e7:0c:66:d0:4f:64:f6:3c:3a: a2:01:95:e1:8d:ea:83:54:c2:0b:73:83:16:0c:c5:20:df:50: c3:ca:25:95:89:a2:5d:7a:38:dc:d6:77:e0:b3:d7:75:92:ae: 2d:9d:22:c7:5f:cc:a5:9a:84:99:8d:01:02:41:89:1c:6d:a7: 3d:4f:37:3f:ab:00:2c:2b:f6:87:9d:30:d7:e9:45:17:58:ba: a7:43:0c:81:d6:22:1e:c7:45:c5:3c:97:dc:ee:a6:7c:34:89: d7:80:b8:77:b2:c3:e5:02:53:fc:4a:ff:9c:97:e9:83:b7:79: 98:80:56:4a:b6:5d:67:99:e7:0d:56:5f:53:fa:77:09:d9:4a: 84:cb:08:ef:c0:72:0c:fb:32:cb:79:b8:17:16:cf:25:6a:3e: 54:cd:f3:0e:b9:84:36:96:a0:98:6f:b4:9b:94:03:90:db:89: 32:8a:3c:61:f1:e7:44:d0:bc:f5:90:b9:97:70:4b:41:6c:ff: da:43:92:9f:b0:d6:76:cb:86:ed:16:5e:5a:02:4f:87:d3:7a: c6:cb:fa:28:f0:28:e9:e3:d1:23:2a:8d:b6:a6:87:27:2d:76: 0f:59:b5:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzU8Bvlyp5twMiVkR+GCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk NmUxMmYwHhcNMjUxMjIzMjAwMTIyWhcNMjUxMjI0MjAwMTIyWjAzMTEwLwYDVQQD Eyg2ODNjZGI1ZmE3ODI5NWE4NzY4ZTRiYTk5NzRiYTBlYmQyYjM0MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYQ+zM2yBjROSZh3t5s+6eZVnFYG tts1ZftVNNpphhqm1LlYbNR1gIybgt7cQ2TQH16ytkWbtVmw5mw4KluP93Rh76Fm vJMx+gbKCn29egTh+fHP+K3hS1df4aveaigHsoen5c82zhvN/d9es+vXpUdyzNXR AR5yMF7xa271wFuot/BnK4/7mUuYbb/dsZMq2dY3G0RXFLKYzKxzvbj4xHILyhCl wJS5ERibpF0PAPoRcj9lwyssy/09O+IIGBJAVWP0Gb+vLnS4mk4PggWv3Yfv2jiN 9622OcPkpl1IK722BU5uuUaL158NKBWTRGYAm5ePeogjPHIQD+bjkCqJcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg821+ngpWodo5LqZdLoOvSs0NhMB8GA1UdIwQY MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGtNdCO3 UkCmAA9egJWDyApYzPi0Ek+NIW8H5wxm0E9k9jw6ogGV4Y3qg1TCC3ODFgzFIN9Q w8ollYmiXXo43NZ34LPXdZKuLZ0ix1/MpZqEmY0BAkGJHG2nPU83P6sALCv2h50w 1+lFF1i6p0MMgdYiHsdFxTyX3O6mfDSJ14C4d7LD5QJT/Er/nJfpg7d5mIBWSrZd Z5nnDVZfU/p3CdlKhMsI78ByDPsyy3m4FxbPJWo+VM3zDrmENpagmG+0m5QDkNuJ Moo8YfHnRNC89ZC5l3BLQWz/2kOSn7DWdsuG7RZeWgJPh9N6xsv6KPAo6ePRIyqN tqaHJy12D1m1Iw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:47:03 2025 by rpki-client