This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json) Hash identifier: CUdeIRbx+nzBI1TAUN0BcNpxPR/S7Rllk551RyHyZEo= Subject key identifier: 60:17:F8:4F:D6:B3:E6:95:51:EC:CA:43:09:06:CB:12:71:93:C9:89 Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a Certificate serial: 019B3F119931D07E73D4E8D03DB8E3D691C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft Manifest number: 0574 Signing time: Sun 21 Dec 2025 04:01:16 +0000 Manifest this update: Sun 21 Dec 2025 04:01:16 +0000 Manifest next update: Mon 22 Dec 2025 04:01:16 +0000 Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: ZmgilQSjFYOIOkahdaOh9DwSQlHuYyoozTp2icK0l2A=) 2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:99:31:d0:7e:73:d4:e8:d0:3d:b8:e3:d6:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a Validity Not Before: Dec 21 04:01:16 2025 GMT Not After : Dec 22 04:01:16 2025 GMT Subject: CN=6017f84fd6b3e69551ecca430906cb127193c989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:f9:06:84:5c:3d:ee:22:41:7f:e8:56:17: a6:c0:ae:46:63:b3:3c:3d:a6:67:d6:c4:eb:c6:78: 10:1d:e4:bc:03:82:79:d3:1d:f5:76:0b:4a:9e:3e: 19:8e:25:e9:82:a4:d9:b3:0e:93:d4:39:5a:20:df: 32:20:de:85:9b:42:04:81:58:46:c6:37:40:de:3c: 3f:e9:72:04:87:7d:f5:bc:28:0d:e9:9d:98:e8:59: 93:40:94:2d:25:5f:ac:d5:79:34:ad:4e:f9:a7:28: b0:64:ed:7d:94:2c:97:e4:7a:fc:c6:b8:5d:6f:5d: e9:0b:bb:14:5d:5d:86:ac:f2:73:69:7c:d0:69:0d: e1:2e:5a:4d:93:b6:ae:26:84:bc:09:be:32:ee:5c: 04:47:7d:a7:f2:d9:ce:dc:56:5c:7c:8d:7e:95:b8: ba:71:a1:b2:e6:6e:86:87:f4:3d:ef:12:e5:c4:05: 61:cb:06:c6:ed:0e:be:b1:38:1f:13:18:0b:99:0f: 64:18:b5:ba:6d:1c:09:20:fe:da:1f:5e:b6:5a:50: ee:27:46:ee:28:fe:cb:f4:4d:07:24:47:61:45:ef: 2d:f0:bc:76:ed:ed:4b:4c:7f:17:52:d7:98:01:43: 48:9e:f4:d5:d0:b2:be:a1:9c:9e:59:1f:09:27:a9: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:17:F8:4F:D6:B3:E6:95:51:EC:CA:43:09:06:CB:12:71:93:C9:89 X509v3 Authority Key Identifier: keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:27:50:94:d7:ec:7c:90:f3:3f:f0:3e:0b:67:24:18:91:51: 1d:48:8c:27:3b:1d:d1:46:69:8a:05:ae:70:20:11:bf:a7:6b: b9:5b:2c:de:9c:31:10:d2:02:f8:73:e2:07:de:d4:a3:dc:24: 3d:11:41:4d:34:ec:67:4d:6d:cf:2f:c0:5a:7f:df:b9:a1:58: 87:d7:63:34:60:68:d2:43:b8:3a:67:22:45:ff:3e:66:f3:0c: 6e:2f:cc:c1:f8:00:e3:a0:1d:fa:a5:de:1c:94:de:1b:ce:34: 65:39:9b:fe:89:82:59:61:89:13:4d:1a:8f:0e:e0:ac:8d:23: ed:bb:56:58:0b:ae:45:ef:8c:a7:d5:08:62:66:18:5f:39:1f: 19:29:47:16:86:0e:93:cd:66:c7:15:86:68:00:6c:5a:e5:c7: 56:1c:4c:7f:10:98:28:39:59:21:d6:de:a9:90:a4:76:92:fa: af:c9:c5:2b:10:80:1c:c0:df:6a:a2:85:09:a1:73:3a:3a:d8: 9f:b4:9b:57:d0:ff:a6:dc:a6:38:a0:10:a8:40:17:62:93:6e: 42:a7:37:ec:92:f0:87:39:33:1c:a0:60:10:e9:bf:ba:03:db: 8a:88:21:88:f0:17:2a:df:ca:3c:60:65:01:f2:a8:be:6f:04: 7b:83:c3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZkx0H5z1OjQPbjj1pHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0 YzBiOGEwHhcNMjUxMjIxMDQwMTE2WhcNMjUxMjIyMDQwMTE2WjAzMTEwLwYDVQQD Eyg2MDE3Zjg0ZmQ2YjNlNjk1NTFlY2NhNDMwOTA2Y2IxMjcxOTNjOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl175BoRcPe4iQX/oVhemwK5GY7M8 PaZn1sTrxngQHeS8A4J50x31dgtKnj4ZjiXpgqTZsw6T1DlaIN8yIN6Fm0IEgVhG xjdA3jw/6XIEh331vCgN6Z2Y6FmTQJQtJV+s1Xk0rU75pyiwZO19lCyX5Hr8xrhd b13pC7sUXV2GrPJzaXzQaQ3hLlpNk7auJoS8Cb4y7lwER32n8tnO3FZcfI1+lbi6 caGy5m6Gh/Q97xLlxAVhywbG7Q6+sTgfExgLmQ9kGLW6bRwJIP7aH162WlDuJ0bu KP7L9E0HJEdhRe8t8Lx27e1LTH8XUteYAUNInvTV0LK+oZyeWR8JJ6mKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAX+E/Ws+aVUezKQwkGyxJxk8mJMB8GA1UdIwQY MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0 LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSdQlNfs fJDzP/A+C2ckGJFRHUiMJzsd0UZpigWucCARv6druVss3pwxENIC+HPiB97Uo9wk PRFBTTTsZ01tzy/AWn/fuaFYh9djNGBo0kO4OmciRf8+ZvMMbi/MwfgA46Ad+qXe HJTeG840ZTmb/omCWWGJE00ajw7grI0j7btWWAuuRe+Mp9UIYmYYXzkfGSlHFoYO k81mxxWGaABsWuXHVhxMfxCYKDlZIdbeqZCkdpL6r8nFKxCAHMDfaqKFCaFzOjrY n7SbV9D/ptymOKAQqEAXYpNuQqc37JLwhzkzHKBgEOm/ugPbioghiPAXKt/KPGBl AfKovm8Ee4PDWg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:10:51 2025 by rpki-client