This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json) Hash identifier: lEnti1qpsd3xhufeDZCpt2KaCzgVz9c8Vh/sEQU9YDA= Subject key identifier: EC:EB:DD:61:2E:A4:C0:45:4D:CD:44:99:5D:EF:CD:DB:DE:E4:14:2E Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63 Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963 Certificate serial: 019B34569010465DDCA6B2F051C5B97C93E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft Manifest number: 17C0 Signing time: Fri 19 Dec 2025 02:00:46 +0000 Manifest this update: Fri 19 Dec 2025 02:00:46 +0000 Manifest next update: Sat 20 Dec 2025 02:00:46 +0000 Files and hashes: 1: 6ytibQXjOjv-ZANwibgbWAzZG2U.roa (hash: Y/Z/9OvD6QNjfuwrTmUdgOamFL52z6ksqnz9FZTa6JU=) 2: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: Nq6n0oteXdc/5vtv2gY7Kd/ZJZp5w8JAQDTVqkKCwXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:90:10:46:5d:dc:a6:b2:f0:51:c5:b9:7c:93:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963 Validity Not Before: Dec 19 02:00:46 2025 GMT Not After : Dec 20 02:00:46 2025 GMT Subject: CN=ecebdd612ea4c0454dcd44995defcddbdee4142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:67:70:a3:c6:af:3b:7d:71:48:94:b8:ab: 50:2d:ff:cb:a0:37:84:5f:1e:7b:79:0a:6d:28:c4: ad:ae:f9:8f:51:2b:5a:9d:6d:44:8a:27:b4:c7:6a: b8:dc:a6:68:fa:50:38:9f:d2:fc:3a:d0:19:ae:7d: ac:f0:8c:21:9d:69:53:b1:d4:55:f6:58:8a:f1:b2: be:69:bc:ae:94:da:5f:84:c1:1b:56:29:a3:e2:ef: 1b:ff:08:a3:be:00:e2:30:e2:8f:44:eb:75:fc:58: 57:72:bb:18:5c:7a:63:17:01:03:e6:67:64:ff:48: 6c:20:86:a4:4a:91:fc:70:f5:c3:04:f1:27:f0:57: 03:30:54:5e:66:19:9b:00:86:9a:6d:b2:8b:28:18: 4f:1e:9c:4e:46:f0:de:b8:5d:a7:00:c0:cd:ed:19: 84:4b:e2:42:5e:ac:f1:ea:d4:16:78:97:c8:7e:ca: d6:b1:7b:ba:d7:ea:75:70:38:62:35:d4:8c:fe:6a: 10:b0:3d:15:65:7b:d4:12:31:9b:c4:95:97:c5:0f: 8d:c8:ef:eb:1b:d4:3b:e3:6b:87:fc:72:a0:6a:72: 48:36:7b:9c:c8:87:5d:99:34:ce:93:a4:ad:7a:3d: e1:84:8e:98:dd:7d:87:90:b7:4d:b6:b9:24:3b:12: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:DD:61:2E:A4:C0:45:4D:CD:44:99:5D:EF:CD:DB:DE:E4:14:2E X509v3 Authority Key Identifier: keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:48:f4:6e:c7:ad:e2:26:9b:39:d3:58:3d:05:e7:13:0f:57: 5f:41:ca:01:4d:d9:a1:41:69:05:4e:21:c7:a7:dd:5e:fb:02: f0:68:21:b1:fd:47:79:5d:88:58:54:86:e5:82:e7:91:78:1a: 2e:58:4e:04:42:03:12:17:5f:fd:57:52:65:97:36:35:46:90: 51:e4:ae:3f:40:00:72:cb:4e:0a:56:1e:39:fb:c2:99:12:07: 12:da:fe:5b:b5:10:a9:6c:5b:ba:17:3d:d6:3e:6a:8a:23:e5: e7:3e:9c:ea:47:3a:30:a3:f4:50:6c:22:4b:9c:bf:e0:49:90: 53:e4:d9:ee:b6:7e:dd:dd:c3:d4:94:0b:55:46:da:92:67:6a: eb:fa:ba:3f:65:18:d1:a8:4a:f8:5b:67:e1:af:49:58:6a:6b: 6d:62:8d:6d:28:46:23:ec:53:c4:20:28:f2:f7:6f:77:cf:31: a0:e0:43:aa:c6:0b:26:c7:02:65:65:85:fd:84:2c:31:22:43: 99:9e:e2:24:5a:ed:81:8a:ae:9a:65:4f:c3:b5:5b:39:05:f3: 94:e3:8c:2a:dd:0c:10:a7:d1:e0:32:d2:12:ae:45:74:0d:15: bf:05:0c:d6:f5:13:15:f1:4f:61:b0:88:65:87:68:80:83:47: 45:da:91:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpAQRl3cprLwUcW5fJPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy NGQ5NjMwHhcNMjUxMjE5MDIwMDQ2WhcNMjUxMjIwMDIwMDQ2WjAzMTEwLwYDVQQD EyhlY2ViZGQ2MTJlYTRjMDQ1NGRjZDQ0OTk1ZGVmY2RkYmRlZTQxNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OlncKPGrzt9cUiUuKtQLf/LoDeE Xx57eQptKMStrvmPUStanW1Eiie0x2q43KZo+lA4n9L8OtAZrn2s8IwhnWlTsdRV 9liK8bK+abyulNpfhMEbVimj4u8b/wijvgDiMOKPROt1/FhXcrsYXHpjFwED5mdk /0hsIIakSpH8cPXDBPEn8FcDMFReZhmbAIaabbKLKBhPHpxORvDeuF2nAMDN7RmE S+JCXqzx6tQWeJfIfsrWsXu61+p1cDhiNdSM/moQsD0VZXvUEjGbxJWXxQ+NyO/r G9Q742uH/HKganJINnucyIddmTTOk6Stej3hhI6Y3X2HkLdNtrkkOxKezQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzr3WEupMBFTc1EmV3vzdve5BQuMB8GA1UdIwQY MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt NzFlYjk1ZjUwZTViLzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUj0bset 4iabOdNYPQXnEw9XX0HKAU3ZoUFpBU4hx6fdXvsC8Gghsf1HeV2IWFSG5YLnkXga LlhOBEIDEhdf/VdSZZc2NUaQUeSuP0AAcstOClYeOfvCmRIHEtr+W7UQqWxbuhc9 1j5qiiPl5z6c6kc6MKP0UGwiS5y/4EmQU+TZ7rZ+3d3D1JQLVUbakmdq6/q6P2UY 0ahK+Ftn4a9JWGprbWKNbShGI+xTxCAo8vdvd88xoOBDqsYLJscCZWWF/YQsMSJD mZ7iJFrtgYqummVPw7VbOQXzlOOMKt0MEKfR4DLSEq5FdA0VvwUM1vUTFfFPYbCI ZYdogINHRdqRAg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:22:22 2025 by rpki-client