This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json) Hash identifier: W9HADgMIxqRugmDA24wX2j71o2Uq9iP/SZkGTAB7vpA= Subject key identifier: 51:4B:56:45:94:83:F7:CC:61:52:B4:08:64:C6:A6:47:1D:28:B4:0B Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Certificate serial: 019B0E25B3F682BCE612EE5DB625F85579BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft Manifest number: 1298 Signing time: Thu 11 Dec 2025 16:01:50 +0000 Manifest this update: Thu 11 Dec 2025 16:01:50 +0000 Manifest next update: Fri 12 Dec 2025 16:01:50 +0000 Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: cZpYPQcpY6JLwofMbdTc/TY7YaunwW9iKV6a8HYz3lE=) 2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=) 3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:b3:f6:82:bc:e6:12:ee:5d:b6:25:f8:55:79:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Validity Not Before: Dec 11 16:01:50 2025 GMT Not After : Dec 12 16:01:50 2025 GMT Subject: CN=514b56459483f7cc6152b40864c6a6471d28b40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:b6:86:54:eb:1e:84:5a:2c:28:7a:07:b3: 0e:0f:38:cf:9a:2c:79:e3:c9:18:b6:76:30:27:dd: 46:ab:b8:63:88:33:bb:cb:36:e1:55:24:12:0b:32: 4d:b4:05:c7:9d:6f:a6:c4:55:97:e9:fb:d5:47:ce: 72:d3:5f:3c:24:e0:93:cb:17:a5:2e:d6:d9:73:57: 96:1a:3f:36:d3:b0:0f:f7:9d:11:b2:e7:93:ad:6b: 36:ca:90:ff:a3:eb:e2:92:92:0d:5a:f3:01:0c:18: 28:76:78:ac:5c:18:7a:e4:a1:c2:76:70:d7:45:f4: 02:3b:9c:a5:31:cf:5b:9d:85:c1:f9:9b:3b:85:7c: d9:f2:20:8c:c9:d3:d2:e6:96:2e:5b:a8:74:87:85: 41:19:69:ab:20:19:52:e8:9a:e8:5c:19:bc:0f:47: ad:e2:75:49:f1:c6:28:0b:f9:ea:9e:cd:36:f7:9c: b1:90:36:80:69:10:a4:50:41:05:f5:39:62:79:1d: 95:bf:88:9c:6a:a3:21:f2:24:5f:19:44:13:ab:49: 16:e7:ff:b2:f0:02:a6:81:da:b0:45:74:3e:93:b7: 96:7c:50:34:1b:f1:97:5c:a1:c7:3c:33:6c:b2:1d: c6:4f:8d:5a:5c:60:bd:e3:2c:6f:da:85:9c:6a:83: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4B:56:45:94:83:F7:CC:61:52:B4:08:64:C6:A6:47:1D:28:B4:0B X509v3 Authority Key Identifier: keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a8:6e:80:2b:b4:10:7c:58:2c:8f:9e:b4:49:97:97:57:32: f3:c6:30:00:20:04:75:66:40:71:3f:95:a7:31:5f:d2:6b:85: 08:67:1a:20:af:1a:81:d6:29:34:e2:17:0d:64:bd:45:54:b2: f6:2f:47:6d:92:ec:7f:2c:b4:2e:7f:be:30:2c:79:13:da:11: 76:b5:70:62:fa:99:9f:e7:de:b6:4d:ac:8c:08:39:e2:c5:0a: 2e:d6:32:02:83:1f:ef:d5:58:b8:cd:f9:3d:7e:79:80:e7:b0: 4a:0f:f7:e8:e1:8c:c8:1c:b6:ae:ab:2d:e1:12:eb:46:04:98: f1:88:13:5d:95:73:ad:50:a2:8b:80:0b:fc:99:2f:f8:c8:a5: 34:f2:d4:cc:5b:20:1a:85:08:ae:0a:24:b5:5b:06:8f:3c:f1: fc:8a:c9:b0:30:81:de:d7:21:75:06:a9:9e:54:20:1b:ad:c3: 35:d6:2f:25:35:b2:96:71:d6:fa:98:64:d9:da:a7:97:94:95: b5:17:22:5e:00:52:34:22:63:25:be:b6:71:34:2b:7d:95:96: 28:8d:e3:48:ab:4e:11:16:82:9d:e1:64:ab:40:78:13:5c:38: 4b:7c:75:cf:d3:fc:dc:fb:ee:3a:2d:24:d8:0c:6b:bc:1a:37: 4b:77:51:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJbP2grzmEu5dtiX4VXm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm M2FlYzkwHhcNMjUxMjExMTYwMTUwWhcNMjUxMjEyMTYwMTUwWjAzMTEwLwYDVQQD Eyg1MTRiNTY0NTk0ODNmN2NjNjE1MmI0MDg2NGM2YTY0NzFkMjhiNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiu2hlTrHoRaLCh6B7MODzjPmix5 48kYtnYwJ91Gq7hjiDO7yzbhVSQSCzJNtAXHnW+mxFWX6fvVR85y0188JOCTyxel LtbZc1eWGj8207AP950RsueTrWs2ypD/o+vikpINWvMBDBgodnisXBh65KHCdnDX RfQCO5ylMc9bnYXB+Zs7hXzZ8iCMydPS5pYuW6h0h4VBGWmrIBlS6JroXBm8D0et 4nVJ8cYoC/nqns0295yxkDaAaRCkUEEF9TlieR2Vv4icaqMh8iRfGUQTq0kW5/+y 8AKmgdqwRXQ+k7eWfFA0G/GXXKHHPDNssh3GT41aXGC94yxv2oWcaoOy/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFLVkWUg/fMYVK0CGTGpkcdKLQLMB8GA1UdIwQY MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt N2JkMGNmYTIzOWY2LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2 LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKhugCu0 EHxYLI+etEmXl1cy88YwACAEdWZAcT+VpzFf0muFCGcaIK8agdYpNOIXDWS9RVSy 9i9HbZLsfyy0Ln++MCx5E9oRdrVwYvqZn+fetk2sjAg54sUKLtYyAoMf79VYuM35 PX55gOewSg/36OGMyBy2rqst4RLrRgSY8YgTXZVzrVCii4AL/Jkv+MilNPLUzFsg GoUIrgoktVsGjzzx/IrJsDCB3tchdQapnlQgG63DNdYvJTWylnHW+phk2dqnl5SV tRciXgBSNCJjJb62cTQrfZWWKI3jSKtOERaCneFkq0B4E1w4S3x1z9P83PvuOi0k 2AxrvBo3S3dRxg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:43 2025 by rpki-client