This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json) Hash identifier: dJEX6yoPRNLgoSv9q71jLMbE6oB/k+lFk2ichUHQVO4= Subject key identifier: FF:D0:5E:BE:8D:E5:4E:B5:B5:0F:35:A8:92:17:AD:09:3F:29:BA:7F Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B4136B64D6FEBFE062B1A90736B575A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 14:01:03 +0000 Manifest this update: Sun 21 Dec 2025 14:01:03 +0000 Manifest next update: Mon 22 Dec 2025 14:01:03 +0000 Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: Ae5gxW9qPOP+OetMMNCNJHKgt1TY5dxANvu/3QJfBn8=) 2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:b6:4d:6f:eb:fe:06:2b:1a:90:73:6b:57:5a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Dec 21 14:01:03 2025 GMT Not After : Dec 22 14:01:03 2025 GMT Subject: CN=ffd05ebe8de54eb5b50f35a89217ad093f29ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:22:57:7c:27:19:98:ab:a6:64:7c:ea:24: c6:05:e8:34:ef:be:9c:83:75:2d:3b:67:1d:13:45: 8a:d7:bd:1c:71:ce:15:df:89:fa:94:69:ba:3c:f9: f1:49:2b:36:b5:58:65:e8:c1:fb:1a:fa:51:18:b3: ed:cb:aa:9c:37:b7:71:43:a6:17:9e:93:fb:e1:2a: 67:98:78:68:b0:25:fe:76:31:73:00:e1:84:fd:41: 74:59:19:f2:4e:6f:cd:09:85:6f:7a:4d:d4:ff:5a: 31:6e:37:4e:49:bf:63:4c:1b:4a:02:e1:a1:2d:50: 63:79:3d:a4:46:68:bb:23:5e:cd:a0:e1:e4:e2:26: 28:59:21:10:d9:ba:1a:62:eb:e7:46:38:c1:4e:68: d2:ea:7f:6e:a3:d2:39:ec:fe:9e:d5:0c:8e:1d:55: 5f:24:a9:06:69:ff:9b:3c:b9:93:3c:07:9f:bb:54: 66:e9:ff:44:4a:12:a6:21:0e:b1:e9:de:cc:5d:4f: fe:3f:c0:95:84:08:2a:ac:6f:70:4b:ca:a6:c1:48: 6f:e8:b8:ec:dd:9c:2c:07:6b:33:c7:52:9f:29:69: 6a:0c:27:4c:4d:a7:26:e6:49:96:02:fb:1b:f3:aa: d7:08:37:92:83:ee:45:64:a5:d7:b1:c4:79:14:fa: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:5E:BE:8D:E5:4E:B5:B5:0F:35:A8:92:17:AD:09:3F:29:BA:7F X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d9:2f:a5:63:07:fa:c9:1f:92:78:90:a3:c1:62:a2:9a:91: fc:af:39:76:f6:59:62:49:6e:c9:31:08:bf:e9:69:9a:f7:61: f5:df:ca:75:33:35:30:37:ab:7a:f2:be:a2:36:43:70:4c:70: 72:e0:63:d2:c1:3d:77:e6:5e:8c:2a:0e:b6:4d:c7:d9:49:26: ed:d4:8e:69:e1:e3:c5:91:8e:60:49:c2:87:e0:5e:3a:d7:c7: 1d:47:55:dc:b9:a7:63:78:00:75:d8:f1:ff:b9:23:3a:41:69: 64:ad:80:6c:e4:1f:91:b1:d2:fe:58:1f:39:51:01:2c:5c:95: bc:02:ef:6e:1f:ea:5a:e5:35:0c:6a:2b:5e:a2:64:ed:9f:97: 73:69:e4:2f:7e:71:2b:84:fd:5c:50:76:0d:ec:82:27:fd:54: 60:99:f5:da:66:ba:88:6a:fe:64:bc:d7:a2:2e:1b:4a:b2:8e: 78:6c:9f:f1:32:e2:66:c2:18:8c:f1:12:73:74:72:b5:c6:d4: d6:5a:3b:f8:7b:b3:d1:66:db:1e:3e:02:50:6a:38:1e:aa:e4: cf:a0:19:6f:eb:12:a4:e5:38:aa:ce:cc:ff:fe:bb:0f:f2:55: 9c:48:14:05:31:f6:53:86:96:d8:aa:be:1b:a0:8a:44:92:96: 63:bb:2a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNrZNb+v+BisakHNrV1o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjUxMjIxMTQwMTAzWhcNMjUxMjIyMTQwMTAzWjAzMTEwLwYDVQQD EyhmZmQwNWViZThkZTU0ZWI1YjUwZjM1YTg5MjE3YWQwOTNmMjliYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbgiV3wnGZirpmR86iTGBeg0776c g3UtO2cdE0WK170ccc4V34n6lGm6PPnxSSs2tVhl6MH7GvpRGLPty6qcN7dxQ6YX npP74SpnmHhosCX+djFzAOGE/UF0WRnyTm/NCYVvek3U/1oxbjdOSb9jTBtKAuGh LVBjeT2kRmi7I17NoOHk4iYoWSEQ2boaYuvnRjjBTmjS6n9uo9I57P6e1QyOHVVf JKkGaf+bPLmTPAefu1Rm6f9EShKmIQ6x6d7MXU/+P8CVhAgqrG9wS8qmwUhv6Ljs 3ZwsB2szx1KfKWlqDCdMTacm5kmWAvsb86rXCDeSg+5FZKXXscR5FPp3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/QXr6N5U61tQ81qJIXrQk/Kbp/MB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtkvpWMH +skfkniQo8FiopqR/K85dvZZYkluyTEIv+lpmvdh9d/KdTM1MDerevK+ojZDcExw cuBj0sE9d+ZejCoOtk3H2Ukm7dSOaeHjxZGOYEnCh+BeOtfHHUdV3LmnY3gAddjx /7kjOkFpZK2AbOQfkbHS/lgfOVEBLFyVvALvbh/qWuU1DGorXqJk7Z+Xc2nkL35x K4T9XFB2DeyCJ/1UYJn12ma6iGr+ZLzXoi4bSrKOeGyf8TLiZsIYjPESc3RytcbU 1lo7+Huz0WbbHj4CUGo4Hqrkz6AZb+sSpOU4qs7M//67D/JVnEgUBTH2U4aW2Kq+ G6CKRJKWY7sqHA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:09:48 2025 by rpki-client