This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json) Hash identifier: RWNwr1AJsovnE4yTy4Ec6veR8+oVMh2ATzB0t9D4JSg= Subject key identifier: 18:CC:C3:70:6B:74:9A:9E:08:30:A7:D6:34:EC:3F:2A:FF:30:78:07 Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B3B6B91C1E991085A7DB0426DDB235EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:01:03 +0000 Manifest this update: Sat 20 Dec 2025 11:01:03 +0000 Manifest next update: Sun 21 Dec 2025 11:01:03 +0000 Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: Kz7W/eRfXQojHZyr7iPfNkwysdaGBO9X+kVOC8l7fx8=) 2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:91:c1:e9:91:08:5a:7d:b0:42:6d:db:23:5e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Dec 20 11:01:03 2025 GMT Not After : Dec 21 11:01:03 2025 GMT Subject: CN=18ccc3706b749a9e0830a7d634ec3f2aff307807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:65:99:6f:1f:0f:f3:e2:78:c2:9c:c4:98: c7:18:f0:71:a1:29:15:43:05:3e:ee:c8:ce:f8:53: 06:e2:9d:ad:b5:55:ef:b8:a2:e3:bf:b4:59:db:88: 08:73:71:f6:c5:7d:be:00:96:67:3e:72:53:f5:db: fc:88:82:59:eb:8d:a9:a7:9e:c7:b8:5e:ed:cc:86: 1d:ae:56:80:37:b4:97:4d:f2:d9:2b:c4:55:23:2e: cc:41:08:35:42:25:0a:9b:67:e0:6b:d5:ca:1b:d2: 56:da:cc:84:9b:a4:58:6a:75:8f:c4:99:78:b7:8b: 0e:63:b5:6b:2e:03:92:aa:6b:8f:b4:3f:1d:e2:df: 2f:b4:3b:a0:7d:5a:53:3d:66:2d:14:08:77:fd:36: 63:0a:49:fe:ad:ad:25:8a:f3:51:41:a7:82:02:0d: 34:f8:88:cd:ec:dc:de:16:0b:56:41:90:f7:d2:41: 0a:51:15:49:14:8b:81:36:4b:e1:54:ce:ed:ea:0a: 98:fb:91:e2:d7:32:a3:a1:da:7a:25:d2:b9:6c:97: 7d:a5:7f:93:3e:db:7d:f5:95:73:cb:df:82:1b:cd: 6a:4a:ee:7b:16:87:24:62:f3:6e:12:10:f6:e3:0f: b7:57:e3:03:5b:80:6e:3c:ad:55:60:cc:86:1e:1a: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CC:C3:70:6B:74:9A:9E:08:30:A7:D6:34:EC:3F:2A:FF:30:78:07 X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8b:a9:4c:a4:44:5c:f4:30:64:35:71:05:13:83:ec:35:d5: 1d:6c:a8:16:bc:58:18:fe:ff:19:3a:a0:7e:b9:20:49:83:1f: f8:fb:d6:4a:1f:2c:8c:b0:5a:70:48:c8:be:3a:d3:6a:3d:6b: e5:26:16:ff:9e:db:a8:8e:4a:23:25:2c:72:fc:a7:85:d9:cb: 22:e8:41:60:17:3f:af:a6:e9:b9:ec:45:e6:4e:7a:da:45:2c: 24:56:b5:02:85:a7:5a:ac:06:48:dd:6b:b0:f8:31:79:07:a0: 6f:ec:f6:d5:98:f3:fa:03:cf:37:ee:e3:44:53:e1:cb:c8:38: ca:5b:7d:dc:f3:e0:39:0b:cd:5c:67:c2:a3:06:37:e1:08:0d: b5:89:5f:b7:c3:17:3e:16:a7:e5:f4:d5:6a:4a:4b:41:cb:97: de:3f:60:ad:0a:e8:c4:90:26:6f:d9:ea:b6:60:bb:3e:f3:31: 55:99:22:4d:dc:15:94:69:49:a6:45:68:c7:8f:f7:10:9e:0f: e3:34:7a:48:63:6c:b0:2b:7b:3d:4a:d7:26:83:f2:f3:d5:e6: 58:18:96:3f:91:0b:7e:08:94:06:a0:f1:26:ff:87:e0:85:a9: 1c:14:14:94:a5:fc:db:be:9c:7a:f4:61:ee:ef:7a:9a:a9:c9: 01:69:fc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5HB6ZEIWn2wQm3bI177MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjUxMjIwMTEwMTAzWhcNMjUxMjIxMTEwMTAzWjAzMTEwLwYDVQQD EygxOGNjYzM3MDZiNzQ5YTllMDgzMGE3ZDYzNGVjM2YyYWZmMzA3ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn1lmW8fD/PieMKcxJjHGPBxoSkV QwU+7sjO+FMG4p2ttVXvuKLjv7RZ24gIc3H2xX2+AJZnPnJT9dv8iIJZ642pp57H uF7tzIYdrlaAN7SXTfLZK8RVIy7MQQg1QiUKm2fga9XKG9JW2syEm6RYanWPxJl4 t4sOY7VrLgOSqmuPtD8d4t8vtDugfVpTPWYtFAh3/TZjCkn+ra0livNRQaeCAg00 +IjN7NzeFgtWQZD30kEKURVJFIuBNkvhVM7t6gqY+5Hi1zKjodp6JdK5bJd9pX+T Ptt99ZVzy9+CG81qSu57FockYvNuEhD24w+3V+MDW4BuPK1VYMyGHho+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjMw3BrdJqeCDCn1jTsPyr/MHgHMB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIupTKRE XPQwZDVxBROD7DXVHWyoFrxYGP7/GTqgfrkgSYMf+PvWSh8sjLBacEjIvjrTaj1r 5SYW/57bqI5KIyUscvynhdnLIuhBYBc/r6bpuexF5k562kUsJFa1AoWnWqwGSN1r sPgxeQegb+z21Zjz+gPPN+7jRFPhy8g4ylt93PPgOQvNXGfCowY34QgNtYlft8MX Phan5fTVakpLQcuX3j9grQroxJAmb9nqtmC7PvMxVZkiTdwVlGlJpkVox4/3EJ4P 4zR6SGNssCt7PUrXJoPy89XmWBiWP5ELfgiUBqDxJv+H4IWpHBQUlKX8276cevRh 7u96mqnJAWn8Lw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:44 2025 by rpki-client