This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: FSK9iec77G9ZfBtjdJgKMjpChDVEtY9y/CrHcq36B40= Subject key identifier: 00:F2:52:D8:F3:E0:B5:7E:81:1A:72:93:71:CD:A5:04:C3:1D:42:FF Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B3D90FC8599F85E263D1576A1E414044B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 17CF Signing time: Sat 20 Dec 2025 21:01:10 +0000 Manifest this update: Sat 20 Dec 2025 21:01:10 +0000 Manifest next update: Sun 21 Dec 2025 21:01:10 +0000 Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: UtahiVD+mtYBbHqLpxA4CdBiSikAoqCv+8UdQd6NOxI=) 2: 4peSVxTbY4zslmn56rvjicgQc7I.roa (hash: +nu5P8vI7PFQXwbJ6t2Zz3coXWOy63zFOw3M4zv4uDY=) 3: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=) 4: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=) 5: Z_3Sd3D3RdwmwjVhN9NqfA7BzpY.roa (hash: Sg8kImSh1cuIQfozfNlnqJy3ut54w54Xyh4htMBXe1s=) 6: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=) 7: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=) 8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:fc:85:99:f8:5e:26:3d:15:76:a1:e4:14:04:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Dec 20 21:01:10 2025 GMT Not After : Dec 21 21:01:10 2025 GMT Subject: CN=00f252d8f3e0b57e811a729371cda504c31d42ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:52:ab:6b:e5:f0:8d:c8:c1:65:71:15:8d: ef:9a:2a:7a:80:cf:b5:db:0f:62:c5:b4:23:27:4f: 9c:0f:ed:7a:8d:96:84:c0:fa:cf:39:f0:60:9a:05: 55:da:d8:38:97:da:d0:96:55:2c:b5:52:bf:31:80: d2:ca:b2:56:1b:29:32:0e:c9:02:fd:2d:d9:e7:d2: 9c:cd:b4:45:4e:e2:fa:bd:23:03:cb:2a:10:87:60: 0b:49:bf:f4:8a:d6:43:60:44:57:d9:5e:e7:cb:8a: c9:b3:fe:65:ef:23:c1:d9:dd:b2:a3:58:b4:95:fd: be:ba:bb:e0:fa:e6:d6:df:de:83:c1:58:52:40:a7: 97:f2:81:9f:e2:2b:92:08:06:45:c6:d9:27:51:74: cd:7d:72:d5:ef:f6:ad:ad:1f:19:95:e9:0d:08:56: 75:08:c6:27:eb:48:9f:0a:b8:78:a6:3c:21:ac:19: cf:11:bd:c4:d1:7c:c3:c8:1d:28:98:60:71:4b:7e: f6:03:25:33:1c:a4:1f:16:75:51:10:33:48:36:d6: 8d:ab:88:50:a9:d8:77:23:41:f9:ca:99:14:33:88: 37:d1:c1:f4:f2:93:7e:dc:d0:69:bd:63:c4:61:d1: f8:76:21:0d:98:a0:90:87:8f:7c:b9:a7:15:d6:9e: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F2:52:D8:F3:E0:B5:7E:81:1A:72:93:71:CD:A5:04:C3:1D:42:FF X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1c:d2:6b:49:f7:6e:fa:f4:08:82:05:18:56:8e:b2:71:98: 58:9b:ed:f3:ec:ac:d1:ba:2c:cf:ff:0a:73:6d:58:8f:15:36: 3f:84:fd:b1:f2:6c:85:4f:f2:26:fc:a9:29:53:97:a0:15:37: 3e:57:1b:f4:59:76:91:dd:f6:a2:4b:ec:a5:b3:cf:5e:fc:25: ae:f7:ad:42:58:ee:92:81:62:ef:da:32:e1:28:10:d3:b8:60: 11:8b:22:4b:68:31:1b:b8:43:ba:84:58:44:06:c0:ef:f2:9c: 65:24:f8:e9:96:3e:91:3c:a6:60:24:d7:ec:47:08:20:2a:0c: 89:93:4b:fa:2d:81:39:65:c5:67:e5:40:42:fd:a4:8b:f5:ef: 89:09:c0:ac:ab:bf:03:5a:0c:bd:48:25:8c:a8:a1:a1:15:53: 13:37:e2:43:d1:7b:e9:77:1f:d7:88:c3:63:26:be:04:73:94: a5:66:b5:45:d1:c1:bc:9f:94:4b:2f:e7:6a:ae:9e:34:a6:75: 05:e9:2e:73:3f:4d:6c:68:9a:cf:28:9c:a5:6e:ea:bb:ca:cf: d0:f7:ac:38:56:e8:06:99:c3:22:df:ca:31:8b:f6:34:54:86: 89:54:4e:ec:13:2f:26:dd:f8:df:76:3f:5a:2c:7f:32:19:73: 51:92:fc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kPyFmfheJj0VdqHkFARLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjUxMjIwMjEwMTEwWhcNMjUxMjIxMjEwMTEwWjAzMTEwLwYDVQQD EygwMGYyNTJkOGYzZTBiNTdlODExYTcyOTM3MWNkYTUwNGMzMWQ0MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvhSq2vl8I3IwWVxFY3vmip6gM+1 2w9ixbQjJ0+cD+16jZaEwPrPOfBgmgVV2tg4l9rQllUstVK/MYDSyrJWGykyDskC /S3Z59KczbRFTuL6vSMDyyoQh2ALSb/0itZDYERX2V7ny4rJs/5l7yPB2d2yo1i0 lf2+urvg+ubW396DwVhSQKeX8oGf4iuSCAZFxtknUXTNfXLV7/atrR8ZlekNCFZ1 CMYn60ifCrh4pjwhrBnPEb3E0XzDyB0omGBxS372AyUzHKQfFnVREDNINtaNq4hQ qdh3I0H5ypkUM4g30cH08pN+3NBpvWPEYdH4diENmKCQh498uacV1p4TXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADyUtjz4LV+gRpyk3HNpQTDHUL/MB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhzSa0n3 bvr0CIIFGFaOsnGYWJvt8+ys0bosz/8Kc21YjxU2P4T9sfJshU/yJvypKVOXoBU3 Plcb9Fl2kd32okvspbPPXvwlrvetQljukoFi79oy4SgQ07hgEYsiS2gxG7hDuoRY RAbA7/KcZST46ZY+kTymYCTX7EcIICoMiZNL+i2BOWXFZ+VAQv2ki/XviQnArKu/ A1oMvUgljKihoRVTEzfiQ9F76Xcf14jDYya+BHOUpWa1RdHBvJ+USy/naq6eNKZ1 Bekucz9NbGiazyicpW7qu8rP0PesOFboBpnDIt/KMYv2NFSGiVRO7BMvJt3433Y/ Wix/MhlzUZL8MA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:25 2025 by rpki-client