This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json) Hash identifier: BHcx/nGVoFvnuEuLmT2AQh2iP8VUwG0P1qte9rTe0NM= Subject key identifier: 8E:4B:7D:70:72:06:5E:1B:58:58:17:69:12:85:2C:D0:90:DD:4C:B6 Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76 Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176 Certificate serial: 019B435B8C3409A9DE4204E6CFF323471E5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 00:00:31 +0000 Manifest this update: Mon 22 Dec 2025 00:00:31 +0000 Manifest next update: Tue 23 Dec 2025 00:00:31 +0000 Files and hashes: 1: 8ofea1TR2-dllg5VQcblmlWW_Jw.roa (hash: DDzXIHlSYWS45kNZcp+/HWVN971pVq7eD5ioet4NIZ4=) 2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: Vjdh9f904lDzduNkHVPXM3sOQNMiEJJaRdCkGBYspjY=) 3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:8c:34:09:a9:de:42:04:e6:cf:f3:23:47:1e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176 Validity Not Before: Dec 22 00:00:31 2025 GMT Not After : Dec 23 00:00:31 2025 GMT Subject: CN=8e4b7d7072065e1b5858176912852cd090dd4cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:e0:65:c3:55:b9:55:8a:06:95:d3:f2:21: 26:71:ae:94:25:f5:bb:be:7c:84:85:36:0d:61:72: 91:6f:4b:10:7e:8b:f9:37:8b:eb:e5:65:0b:83:bb: 7f:58:03:1e:b8:60:74:a9:33:2a:af:d3:b4:66:37: 41:cc:5e:a0:a1:02:b7:2e:87:3f:a1:ab:0d:12:2e: b4:27:16:e8:2c:26:75:66:09:b3:e5:a0:56:a9:79: 18:42:32:d2:12:0f:ae:eb:6e:6c:d5:90:ed:39:94: e4:df:b0:43:72:52:ba:7d:e2:c0:e2:55:78:1e:b8: 07:c9:a1:1f:04:d6:f9:e5:4b:5d:fc:3b:c8:69:58: 23:3b:8b:51:77:cc:02:0f:44:22:46:7d:e5:c0:71: 47:94:d4:1e:d1:6f:84:d6:84:7b:4a:78:ed:96:1f: 64:55:cd:82:ce:23:a5:35:89:ce:b2:53:d0:eb:65: fc:9c:d2:48:26:ca:9a:93:a2:b7:25:67:80:88:de: eb:78:dd:db:b9:0c:15:c7:b1:9f:df:ef:cc:ad:8d: 57:c1:8d:3b:80:77:30:4c:d9:a1:00:b5:0d:19:91: 83:2c:1c:6e:0f:d3:cf:06:a4:f2:10:6c:0b:05:72: f6:94:39:0c:95:7c:22:1b:a2:b3:2a:54:59:33:40: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4B:7D:70:72:06:5E:1B:58:58:17:69:12:85:2C:D0:90:DD:4C:B6 X509v3 Authority Key Identifier: keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:99:b8:e6:6c:be:40:1c:df:6a:3c:ec:de:f7:68:cf:5c:6f: e9:1e:2f:7d:bf:1a:6f:09:87:cd:d7:3c:63:e0:47:05:ec:eb: 1c:ee:5a:af:6e:76:24:be:63:dc:65:84:0d:ec:12:a4:f8:89: 3c:0e:95:fb:0a:87:df:95:0a:d7:e0:a0:8f:6d:d1:56:7a:30: 39:c6:bd:f5:c3:b5:4a:7c:35:53:cd:e4:08:52:8d:18:1e:7e: 67:66:0a:2a:6b:30:49:b9:48:41:02:f9:bc:81:db:00:f6:64: 95:6f:67:ae:df:9a:98:31:16:56:87:7c:92:94:69:3f:5c:bc: 1f:2f:89:eb:f2:a3:0b:b8:f8:02:c4:a4:df:f9:85:f9:88:b2: c3:ee:59:5c:31:fd:2d:fa:51:3f:d9:32:c8:86:fb:9f:75:af: 73:46:4d:65:c8:e9:64:7b:d9:60:98:e6:03:fd:98:8e:4c:d6: c3:b0:8e:27:bc:0c:5c:e8:ee:a9:44:55:57:91:fe:ac:e3:d5: e6:40:a8:b4:2a:ab:c3:17:09:fe:ba:a2:bd:80:a4:de:aa:78: 85:bb:33:fe:20:91:3a:55:67:c6:30:c7:8a:8a:a9:1d:84:6e: 38:ee:43:57:54:f1:06:69:73:5d:14:08:b5:dd:d8:8b:68:2e: b8:16:92:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW4w0CaneQgTmz/MjRx5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGUxN2ZkYWEyOTE4N2I4ZTQwZDYzMGFkZGViZDlmZDI0 YzAxNzYwHhcNMjUxMjIyMDAwMDMxWhcNMjUxMjIzMDAwMDMxWjAzMTEwLwYDVQQD Eyg4ZTRiN2Q3MDcyMDY1ZTFiNTg1ODE3NjkxMjg1MmNkMDkwZGQ0Y2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3HgZcNVuVWKBpXT8iEmca6UJfW7 vnyEhTYNYXKRb0sQfov5N4vr5WULg7t/WAMeuGB0qTMqr9O0ZjdBzF6goQK3Loc/ oasNEi60JxboLCZ1Zgmz5aBWqXkYQjLSEg+u625s1ZDtOZTk37BDclK6feLA4lV4 HrgHyaEfBNb55Utd/DvIaVgjO4tRd8wCD0QiRn3lwHFHlNQe0W+E1oR7Snjtlh9k Vc2CziOlNYnOslPQ62X8nNJIJsqak6K3JWeAiN7reN3buQwVx7Gf3+/MrY1XwY07 gHcwTNmhALUNGZGDLBxuD9PPBqTyEGwLBXL2lDkMlXwiG6KzKlRZM0DicwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5LfXByBl4bWFgXaRKFLNCQ3Uy2MB8GA1UdIwQY MBaAFEqOF/2qKRh7jkDWMK3evZ/STAF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYt NWM3NjVjNTM3M2EzLzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYtNWM3NjVjNTM3M2Ez LzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZm45my+ QBzfajzs3vdoz1xv6R4vfb8abwmHzdc8Y+BHBezrHO5ar252JL5j3GWEDewSpPiJ PA6V+wqH35UK1+Cgj23RVnowOca99cO1Snw1U83kCFKNGB5+Z2YKKmswSblIQQL5 vIHbAPZklW9nrt+amDEWVod8kpRpP1y8Hy+J6/KjC7j4AsSk3/mF+Yiyw+5ZXDH9 LfpRP9kyyIb7n3Wvc0ZNZcjpZHvZYJjmA/2YjkzWw7COJ7wMXOjuqURVV5H+rOPV 5kCotCqrwxcJ/rqivYCk3qp4hbsz/iCROlVnxjDHioqpHYRuOO5DV1TxBmlzXRQI td3Yi2guuBaS8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:37 2025 by rpki-client