This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json) Hash identifier: 5xDx7IYjhCLot9ltKuVfdvQZDAk9VpPOXTY99zjcYEc= Subject key identifier: 04:1B:75:0C:E8:17:C5:63:D8:64:3E:81:58:22:CE:31:35:4F:4C:67 Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Certificate serial: 019B42EE72861BA8DFFA128E99ABDB5C393D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft Manifest number: 022A Signing time: Sun 21 Dec 2025 22:01:21 +0000 Manifest this update: Sun 21 Dec 2025 22:01:21 +0000 Manifest next update: Mon 22 Dec 2025 22:01:21 +0000 Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: go86jp465P/qkWpNDZJRx0NHPOJosXrtUgQ6Z4gQdBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:72:86:1b:a8:df:fa:12:8e:99:ab:db:5c:39:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6 Validity Not Before: Dec 21 22:01:21 2025 GMT Not After : Dec 22 22:01:21 2025 GMT Subject: CN=041b750ce817c563d8643e815822ce31354f4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:e5:4e:0d:4a:95:d5:b6:3c:4a:81:a4:ab: 9f:01:a4:99:3b:57:ef:87:37:55:4f:55:1d:fd:4f: ad:f7:33:09:22:3d:71:3b:a5:0b:02:8d:89:44:c2: e4:1e:e5:0c:f6:a9:2a:1c:0f:e8:44:a7:f3:74:7b: b9:45:ee:36:98:e9:f5:4f:7e:df:97:88:eb:ae:33: 38:f0:28:47:09:bd:4b:f2:7b:c0:6d:a0:03:a3:2c: f4:b4:f0:f4:50:bf:f3:15:37:f6:d8:84:22:4e:78: c3:f3:06:72:d4:f4:20:f0:1c:e2:97:fc:e6:76:b6: fd:d0:2b:a7:c1:45:b7:23:b4:09:34:23:00:eb:7a: d4:6d:dc:95:a7:f5:5f:94:7c:1f:a2:07:1f:e1:46: ff:dd:6d:24:c8:88:c7:59:5e:f6:e4:77:3d:87:57: 24:98:1f:6e:77:e1:3c:1c:4f:88:a5:b1:cf:71:9b: 17:1f:3f:b0:97:8e:6b:db:64:78:75:d8:37:b8:25: 30:0b:b7:33:1b:3e:7a:df:c6:de:4f:e3:d8:b4:65: aa:6f:1a:3a:50:91:1c:4c:57:82:a4:fa:7f:f2:f7: 16:8a:39:d3:3e:f5:d0:01:46:bf:70:d4:2c:2f:04: 92:38:c4:9d:f6:d6:d2:41:34:76:1d:c7:40:36:3f: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:75:0C:E8:17:C5:63:D8:64:3E:81:58:22:CE:31:35:4F:4C:67 X509v3 Authority Key Identifier: keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e8:e4:4c:83:fe:c1:a5:56:b2:0d:79:45:b9:d6:07:ab:ed: f2:fe:0e:38:b7:dd:c6:14:92:a3:24:16:be:6d:7a:91:53:38: 57:7e:a9:ab:d8:7f:ba:74:82:08:64:8c:87:fe:30:04:4f:fd: 79:92:d1:8f:13:f6:1e:ef:8c:d3:11:37:70:a0:94:d6:9b:9b: b1:d5:c0:06:ad:46:89:cf:e4:27:87:1a:7d:d3:f9:8e:0d:b4: a4:de:10:f7:4b:e1:d6:f7:22:71:1d:19:60:6f:4c:43:07:e4: 45:e0:b2:15:ac:ab:9d:cb:20:26:77:e9:2e:6a:a4:cc:f9:84: c4:e5:c6:04:53:26:d7:b0:88:49:34:14:0a:80:de:5f:9d:7d: eb:6f:59:9b:3a:52:5f:59:61:83:8f:aa:9d:92:f8:89:70:2c: c3:76:af:0e:aa:ea:ea:9b:f4:f8:e6:4a:7c:36:f2:fb:ae:1a: 7c:4d:26:45:6f:6b:80:dc:6b:4e:c9:49:f6:61:ac:dc:22:e2: 04:09:ab:14:78:22:7a:d7:56:a3:a0:76:01:50:c6:56:f8:47: 99:60:c3:21:e1:e9:f1:8e:57:3f:2a:5d:db:61:68:74:28:78: 6e:66:19:f7:cd:99:8d:2d:b1:82:96:aa:5d:8d:50:d7:fd:9d: f3:8b:79:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nKGG6jf+hKOmavbXDk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5 YzRhZTYwHhcNMjUxMjIxMjIwMTIxWhcNMjUxMjIyMjIwMTIxWjAzMTEwLwYDVQQD EygwNDFiNzUwY2U4MTdjNTYzZDg2NDNlODE1ODIyY2UzMTM1NGY0YzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLvlTg1KldW2PEqBpKufAaSZO1fv hzdVT1Ud/U+t9zMJIj1xO6ULAo2JRMLkHuUM9qkqHA/oRKfzdHu5Re42mOn1T37f l4jrrjM48ChHCb1L8nvAbaADoyz0tPD0UL/zFTf22IQiTnjD8wZy1PQg8Bzil/zm drb90CunwUW3I7QJNCMA63rUbdyVp/VflHwfogcf4Ub/3W0kyIjHWV725Hc9h1ck mB9ud+E8HE+IpbHPcZsXHz+wl45r22R4ddg3uCUwC7czGz5638beT+PYtGWqbxo6 UJEcTFeCpPp/8vcWijnTPvXQAUa/cNQsLwSSOMSd9tbSQTR2HcdANj+9QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQbdQzoF8Vj2GQ+gVgizjE1T0xnMB8GA1UdIwQY MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4 LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOjkTIP+ waVWsg15RbnWB6vt8v4OOLfdxhSSoyQWvm16kVM4V36pq9h/unSCCGSMh/4wBE/9 eZLRjxP2Hu+M0xE3cKCU1pubsdXABq1Gic/kJ4cafdP5jg20pN4Q90vh1vcicR0Z YG9MQwfkReCyFayrncsgJnfpLmqkzPmExOXGBFMm17CISTQUCoDeX519629ZmzpS X1lhg4+qnZL4iXAsw3avDqrq6pv0+OZKfDby+64afE0mRW9rgNxrTslJ9mGs3CLi BAmrFHgietdWo6B2AVDGVvhHmWDDIeHp8Y5XPypd22FodCh4bmYZ982ZjS2xgpaq XY1Q1/2d84t5Dg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:27:20 2025 by rpki-client