This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json) Hash identifier: IFQsHIJxLakMsiuhQPpHC9YXqK8ps71leI6/OncU0Vs= Subject key identifier: 94:64:F7:50:BD:FA:1B:95:F3:9A:18:21:63:0E:54:79:32:55:17:AE Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Certificate serial: 019B3B6B7B2021E7B2A0E65880EAA82705DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:00:57 +0000 Manifest this update: Sat 20 Dec 2025 11:00:57 +0000 Manifest next update: Sun 21 Dec 2025 11:00:57 +0000 Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: 14jzqnkTO3Fv+b+LyEFw5nHnj0dNyVI3swYNc/ou7ZI=) 2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=) 3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=) 4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:7b:20:21:e7:b2:a0:e6:58:80:ea:a8:27:05:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Validity Not Before: Dec 20 11:00:57 2025 GMT Not After : Dec 21 11:00:57 2025 GMT Subject: CN=9464f750bdfa1b95f39a1821630e5479325517ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:4f:f9:76:f7:e6:15:07:ea:e5:c5:70:9a: 09:01:3c:da:88:7f:08:2f:b7:50:e4:5a:c7:1e:72: 64:09:94:a9:33:a0:59:b0:50:86:7b:8b:e3:80:ee: 9d:d1:5f:c5:e4:76:83:94:da:2e:de:e5:7a:f6:5b: 81:2a:e8:93:f2:bd:0d:b2:5b:7a:97:74:03:6f:c7: ac:24:47:77:5a:eb:2e:d4:0d:81:b3:4f:9a:80:3a: 2c:ef:53:05:70:45:6c:20:67:f5:b4:2b:8e:51:a2: ea:06:68:21:68:82:d7:96:a3:22:d4:9b:e8:79:bd: 0e:8d:ed:cd:3c:df:12:91:84:93:88:17:58:f4:69: 8a:b7:ea:dc:94:1b:7c:6b:a1:84:61:21:22:c8:29: 41:8c:39:f1:c8:28:79:29:aa:78:be:f3:8a:e2:63: 40:02:7b:8e:3d:84:86:64:34:81:1c:c3:1f:bc:18: 88:80:c6:62:e4:1d:f3:76:6d:23:8a:65:42:e2:41: 0d:a5:af:51:97:56:fb:ec:b2:2e:47:30:a3:e1:84: 5c:ec:b2:7f:a7:2a:1c:62:20:35:81:fc:07:67:09: 21:54:01:4a:22:76:5c:0c:5f:01:d9:c7:4b:20:8c: af:d8:31:24:1b:b7:5e:7c:33:b8:f8:cc:a9:da:f8: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:64:F7:50:BD:FA:1B:95:F3:9A:18:21:63:0E:54:79:32:55:17:AE X509v3 Authority Key Identifier: keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:69:81:35:2b:7c:13:34:df:17:58:09:14:34:6c:5e:35:f7: 79:d6:74:6d:24:34:6d:70:29:c6:7b:10:88:4d:64:d0:71:0e: 89:ee:d6:e5:62:cc:3b:34:29:49:0c:45:0a:44:79:1c:df:19: d6:ee:c8:30:8e:26:03:3d:d0:dd:e7:07:05:49:6f:ee:65:14: 3c:a2:15:96:3e:64:a9:0d:ff:28:93:71:ae:da:4e:8c:44:c4: 0c:7e:7d:31:c5:f6:ae:69:c2:e4:1a:4e:80:20:a7:44:ce:b0: c7:b4:7e:59:77:5b:a8:a9:11:ef:cb:e1:d6:e5:8c:8e:a0:de: f8:89:d3:93:09:fd:d9:5e:50:8e:3d:0e:df:9e:a7:31:d8:09: 99:e6:5f:ce:4c:37:40:7e:da:e2:37:f3:07:1d:b2:5f:17:6e: ab:9d:ea:9e:e1:d8:3e:5a:44:eb:31:93:be:68:27:2f:33:a2: bc:36:de:cd:90:72:d0:25:75:d7:ad:55:f3:b0:0e:9c:71:9f: 3c:71:0d:3a:64:95:c4:1e:f1:d4:2c:3b:5b:76:d1:8e:b5:83: 0a:9f:06:07:d8:10:5a:ad:18:cd:64:67:63:ed:40:c0:cf:1b: 01:f7:6d:e3:51:ee:06:bc:bd:53:b1:ac:4f:f9:b1:39:9a:47: cd:82:47:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3sgIeeyoOZYgOqoJwXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl YzBiNGYwHhcNMjUxMjIwMTEwMDU3WhcNMjUxMjIxMTEwMDU3WjAzMTEwLwYDVQQD Eyg5NDY0Zjc1MGJkZmExYjk1ZjM5YTE4MjE2MzBlNTQ3OTMyNTUxN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsJP+Xb35hUH6uXFcJoJATzaiH8I L7dQ5FrHHnJkCZSpM6BZsFCGe4vjgO6d0V/F5HaDlNou3uV69luBKuiT8r0Nslt6 l3QDb8esJEd3Wusu1A2Bs0+agDos71MFcEVsIGf1tCuOUaLqBmghaILXlqMi1Jvo eb0Oje3NPN8SkYSTiBdY9GmKt+rclBt8a6GEYSEiyClBjDnxyCh5Kap4vvOK4mNA AnuOPYSGZDSBHMMfvBiIgMZi5B3zdm0jimVC4kENpa9Rl1b77LIuRzCj4YRc7LJ/ pyocYiA1gfwHZwkhVAFKInZcDF8B2cdLIIyv2DEkG7defDO4+Myp2vhKbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRk91C9+huV85oYIWMOVHkyVReuMB8GA1UdIwQY MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt OWM5MzNjY2QxNmM3LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3 LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmmBNSt8 EzTfF1gJFDRsXjX3edZ0bSQ0bXApxnsQiE1k0HEOie7W5WLMOzQpSQxFCkR5HN8Z 1u7IMI4mAz3Q3ecHBUlv7mUUPKIVlj5kqQ3/KJNxrtpOjETEDH59McX2rmnC5BpO gCCnRM6wx7R+WXdbqKkR78vh1uWMjqDe+InTkwn92V5Qjj0O356nMdgJmeZfzkw3 QH7a4jfzBx2yXxduq53qnuHYPlpE6zGTvmgnLzOivDbezZBy0CV1161V87AOnHGf PHENOmSVxB7x1Cw7W3bRjrWDCp8GB9gQWq0YzWRnY+1AwM8bAfdt41HuBry9U7Gs T/mxOZpHzYJH2g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:55 2025 by rpki-client