This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json) Hash identifier: xEBV6HzkxMx45IzTIbxYKjkHbrtSWqWcPtVEhMBJMvQ= Subject key identifier: 7F:B0:F8:FE:B4:71:98:E7:92:89:04:36:E8:BA:CC:F0:D1:8A:0D:29 Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72 Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72 Certificate serial: 019B597685D5F7F92560662B1C9798C07AFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft Manifest number: 0252 Signing time: Fri 26 Dec 2025 07:01:38 +0000 Manifest this update: Fri 26 Dec 2025 07:01:38 +0000 Manifest next update: Sat 27 Dec 2025 07:01:38 +0000 Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: jsGskePNT27FbMjB0f/XENvtbUfETDG+VkavayvL2eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:85:d5:f7:f9:25:60:66:2b:1c:97:98:c0:7a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72 Validity Not Before: Dec 26 07:01:38 2025 GMT Not After : Dec 27 07:01:38 2025 GMT Subject: CN=7fb0f8feb47198e792890436e8baccf0d18a0d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:3d:20:40:35:9e:b6:87:9d:9c:c7:ed:d5: 94:b9:f2:dd:ad:92:b0:96:0a:85:40:69:76:12:0f: a6:e1:5e:11:9e:1d:57:8d:53:45:82:81:09:5a:2a: 94:f0:12:64:7a:c6:1c:d3:23:09:a6:fe:b7:b1:d9: 88:97:2c:eb:e2:d2:96:cc:c5:f1:c5:0a:a8:aa:b6: 8b:07:29:bb:f1:76:cd:dd:a1:61:8a:13:75:16:4c: ac:99:99:55:7a:d6:9f:49:0d:1b:12:83:99:bb:8c: f5:a4:e7:b8:9f:d7:d3:93:eb:0c:68:c6:73:d9:42: 91:ef:c0:e7:d1:d2:86:2f:7d:ee:43:db:f0:08:b6: 9a:5f:3a:de:51:df:41:58:7b:f0:19:30:ff:e2:96: 8d:0e:6a:b5:ac:62:71:a2:24:c9:0f:1b:bd:69:87: 21:bf:4b:9f:d8:6d:f9:2f:52:4e:c4:24:6c:c9:06: 8a:31:6f:59:91:3b:9e:99:8c:9f:21:c7:24:60:26: 03:43:28:c9:d6:f3:de:96:b7:fb:fe:90:88:9e:3e: 43:03:ab:94:00:fe:cb:e3:a1:0c:a8:12:fe:d3:fa: d7:23:69:d0:c3:a7:b9:17:81:08:c9:d6:ef:32:45: 6f:3e:54:6f:ca:56:28:f6:27:0d:75:6a:21:ab:74: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:F8:FE:B4:71:98:E7:92:89:04:36:E8:BA:CC:F0:D1:8A:0D:29 X509v3 Authority Key Identifier: keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4f:5a:83:f5:a0:b3:8e:bb:5c:80:fe:6c:ba:68:eb:12:71: 6d:26:41:71:0e:59:bb:cb:8c:89:f0:c6:9a:02:b2:e5:08:b3: 2e:8c:2c:8b:8a:75:49:b2:9a:45:c3:46:a8:79:15:e5:41:35: 34:32:bd:ee:5f:6f:1a:b0:e9:b6:c9:9b:44:f5:9f:9c:d3:b8: f1:8e:a4:85:0f:b4:9e:76:eb:51:d6:da:33:8a:68:66:40:b5: 7a:1d:67:a8:dd:6a:29:3f:77:aa:bb:e9:c6:3b:63:98:0f:d9: e7:e8:82:9a:c8:2a:1e:3a:bb:dd:b0:3f:3a:f0:8a:9b:51:c7: 9b:a9:ef:e3:31:57:32:d7:bf:f7:0b:42:63:9a:44:d4:1d:6c: d2:6f:a5:f6:a5:27:f4:e5:72:87:ca:c4:ec:81:59:1d:9a:f8: ad:64:a6:cd:24:01:05:a4:52:a1:e1:8e:eb:72:6f:a8:a8:50: 9a:1a:c0:5d:45:e1:d0:24:37:2e:cc:9b:70:84:77:ad:76:1d: 3d:6d:49:cf:13:ad:d8:34:73:b3:e4:4a:b1:fa:7c:6c:08:51: 12:01:f2:36:68:7d:61:c3:96:4e:51:98:cf:eb:b9:85:8e:6e: 7d:13:fd:d3:5b:1f:d6:04:e1:3c:f6:95:8b:84:af:84:5c:30: 5e:ee:a1:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdoXV9/klYGYrHJeYwHr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTY4ODQ5NzYxN2U4ZjBhNjA2OTBhZmFiM2VmOTRjMTFh YjZkNzIwHhcNMjUxMjI2MDcwMTM4WhcNMjUxMjI3MDcwMTM4WjAzMTEwLwYDVQQD Eyg3ZmIwZjhmZWI0NzE5OGU3OTI4OTA0MzZlOGJhY2NmMGQxOGEwZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i89IEA1nraHnZzH7dWUufLdrZKw lgqFQGl2Eg+m4V4Rnh1XjVNFgoEJWiqU8BJkesYc0yMJpv63sdmIlyzr4tKWzMXx xQqoqraLBym78XbN3aFhihN1FkysmZlVetafSQ0bEoOZu4z1pOe4n9fTk+sMaMZz 2UKR78Dn0dKGL33uQ9vwCLaaXzreUd9BWHvwGTD/4paNDmq1rGJxoiTJDxu9aYch v0uf2G35L1JOxCRsyQaKMW9ZkTuemYyfIcckYCYDQyjJ1vPelrf7/pCInj5DA6uU AP7L46EMqBL+0/rXI2nQw6e5F4EIydbvMkVvPlRvylYo9icNdWohq3QZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+w+P60cZjnkokENui6zPDRig0pMB8GA1UdIwQY MBaAFOFWiEl2F+jwpgaQr6s++UwRq21yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmIt Y2EzYmIxZGZkYWE2LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmItY2EzYmIxZGZkYWE2 LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU9ag/Wg s467XID+bLpo6xJxbSZBcQ5Zu8uMifDGmgKy5QizLowsi4p1SbKaRcNGqHkV5UE1 NDK97l9vGrDptsmbRPWfnNO48Y6khQ+0nnbrUdbaM4poZkC1eh1nqN1qKT93qrvp xjtjmA/Z5+iCmsgqHjq73bA/OvCKm1HHm6nv4zFXMte/9wtCY5pE1B1s0m+l9qUn 9OVyh8rE7IFZHZr4rWSmzSQBBaRSoeGO63JvqKhQmhrAXUXh0CQ3LsybcIR3rXYd PW1JzxOt2DRzs+RKsfp8bAhREgHyNmh9YcOWTlGYz+u5hY5ufRP901sf1gThPPaV i4SvhFwwXu6hnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:47 2025 by rpki-client