This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: +Qv9vtBaSTIT+GM1j6nGj0QxUK/ePlAYdD/Gjma2JOY= Subject key identifier: 06:A5:21:17:AA:47:C6:92:51:E1:D6:3B:E5:AC:E9:E6:1D:C4:2F:14 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B3AFE2C025094C3487A18DCCD72FA65C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 09:01:34 +0000 Manifest this update: Sat 20 Dec 2025 09:01:34 +0000 Manifest next update: Sun 21 Dec 2025 09:01:34 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 0Hr68NMIKQPx6UDkeeCPwrIDTdEybKx1F4xHziaOvJQ=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) 9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:2c:02:50:94:c3:48:7a:18:dc:cd:72:fa:65:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Dec 20 09:01:34 2025 GMT Not After : Dec 21 09:01:34 2025 GMT Subject: CN=06a52117aa47c69251e1d63be5ace9e61dc42f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:14:67:2e:26:14:06:70:e5:31:e4:47:f6: 4e:9c:54:a0:73:ee:c0:36:ad:5b:83:99:c7:04:fd: db:a7:36:2d:ee:8c:8d:b3:5b:fe:2a:ca:af:07:c1: 00:06:44:f7:57:bb:81:c9:e1:c8:aa:74:36:dc:23: a0:e3:94:15:31:74:d7:5a:7d:83:c1:66:60:6a:4e: 26:97:61:64:88:11:97:10:0d:ce:92:fc:f8:45:58: b4:9c:fb:e6:84:ed:73:eb:3c:1c:6c:a0:84:f9:b3: 70:03:30:13:cd:5a:b0:ea:e5:f2:d3:79:33:8f:da: 1b:a4:99:3a:5f:73:e8:6f:44:e4:a3:00:37:e2:2d: 5f:5c:10:79:09:ef:a4:ad:c1:08:3c:e2:47:a9:b0: e8:e0:d0:1c:53:3f:56:b1:a4:eb:7a:1a:f3:be:15: 26:b7:43:41:e6:0a:6b:92:e8:68:bc:16:ef:a5:81: 44:af:0e:c0:9e:71:bc:76:7b:6a:20:4d:f0:37:99: a6:de:67:18:c1:cc:33:c7:e7:4f:e4:9a:7f:a7:04: 72:dc:03:ce:58:97:21:32:7f:05:c8:86:c9:14:e8: 11:a0:09:fd:2f:ea:75:bd:5b:98:4e:29:49:45:00: 55:89:b8:c3:e9:22:89:ee:9c:1f:39:24:eb:c1:04: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A5:21:17:AA:47:C6:92:51:E1:D6:3B:E5:AC:E9:E6:1D:C4:2F:14 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c4:1f:5d:8e:15:a1:59:84:62:d0:15:0c:e0:e5:6c:c5:ff: ba:be:81:04:e5:e4:24:2d:66:8e:41:88:d7:a0:4e:68:c9:6d: 91:26:c3:32:74:5c:c2:5e:28:e7:06:ee:48:85:30:df:63:80: 11:49:26:5f:fb:f4:b5:f2:e2:41:eb:9a:97:57:3b:ac:8a:06: d9:81:ac:ff:4b:5b:17:3f:d4:d3:80:fb:41:d6:52:db:6a:ee: 50:57:0e:86:61:b1:88:18:8a:c4:4b:a1:dc:f5:58:cb:3a:ee: 21:16:ef:24:dc:ed:bd:c6:a0:94:17:dc:be:68:73:d1:d3:0e: de:cf:be:8e:78:63:f4:f4:4e:29:24:c2:15:7b:46:ed:cd:27: ed:2d:3a:41:46:f4:9b:de:4f:61:ec:a9:b4:d4:c8:5c:63:32: 21:cd:11:b0:b6:1c:85:9b:8c:d5:04:01:3a:69:d4:a4:c2:3d: 79:10:a1:71:cd:f6:aa:0f:cd:97:31:a1:14:12:24:98:df:61: af:af:5b:e2:f5:6e:8e:ba:f7:b3:0c:01:35:b6:12:95:3b:a6: 3b:7f:c7:9b:6c:3a:51:5d:67:4f:9a:a6:00:85:d9:06:d2:12: 0f:61:52:87:aa:ae:e2:43:1e:84:8d:e1:1b:3e:11:fe:14:fb: fe:82:fa:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/iwCUJTDSHoY3M1y+mXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUxMjIwMDkwMTM0WhcNMjUxMjIxMDkwMTM0WjAzMTEwLwYDVQQD EygwNmE1MjExN2FhNDdjNjkyNTFlMWQ2M2JlNWFjZTllNjFkYzQyZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSMUZy4mFAZw5THkR/ZOnFSgc+7A Nq1bg5nHBP3bpzYt7oyNs1v+KsqvB8EABkT3V7uByeHIqnQ23COg45QVMXTXWn2D wWZgak4ml2FkiBGXEA3Okvz4RVi0nPvmhO1z6zwcbKCE+bNwAzATzVqw6uXy03kz j9obpJk6X3Pob0TkowA34i1fXBB5Ce+krcEIPOJHqbDo4NAcUz9WsaTrehrzvhUm t0NB5gprkuhovBbvpYFErw7AnnG8dntqIE3wN5mm3mcYwcwzx+dP5Jp/pwRy3APO WJchMn8FyIbJFOgRoAn9L+p1vVuYTilJRQBVibjD6SKJ7pwfOSTrwQT4iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAalIReqR8aSUeHWO+Ws6eYdxC8UMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8QfXY4V oVmEYtAVDODlbMX/ur6BBOXkJC1mjkGI16BOaMltkSbDMnRcwl4o5wbuSIUw32OA EUkmX/v0tfLiQeual1c7rIoG2YGs/0tbFz/U04D7QdZS22ruUFcOhmGxiBiKxEuh 3PVYyzruIRbvJNztvcaglBfcvmhz0dMO3s++jnhj9PROKSTCFXtG7c0n7S06QUb0 m95PYeyptNTIXGMyIc0RsLYchZuM1QQBOmnUpMI9eRChcc32qg/NlzGhFBIkmN9h r69b4vVujrr3swwBNbYSlTumO3/Hm2w6UV1nT5qmAIXZBtISD2FSh6qu4kMehI3h Gz4R/hT7/oL6CQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:43 2025 by rpki-client