This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: 9Q+uOt3Wqs2tn0DQsqZljZzA7slBx0mqEjgLsNr5O2I= Subject key identifier: 19:30:4E:5A:41:BB:54:57:42:1F:A9:88:B5:42:42:49:BE:3F:5F:50 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B42B7A52A3E4AD6CC6A1ECD83CE846BD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 21:01:30 +0000 Manifest this update: Sun 21 Dec 2025 21:01:30 +0000 Manifest next update: Mon 22 Dec 2025 21:01:30 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: tSUhq77NuQlIAKMSRQuqauH0/Pa8LjJeZ5rLiKhcq4c=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) 9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:a5:2a:3e:4a:d6:cc:6a:1e:cd:83:ce:84:6b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Dec 21 21:01:30 2025 GMT Not After : Dec 22 21:01:30 2025 GMT Subject: CN=19304e5a41bb5457421fa988b5424249be3f5f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:92:10:a9:83:33:35:70:09:42:c2:e7:8e: e5:11:17:0b:05:23:a2:81:e3:c5:20:20:5c:1d:3e: 5e:ff:a0:e1:a1:98:95:19:89:9b:a0:a9:0e:5c:6e: c1:58:2a:09:fc:7b:3d:08:07:72:dd:58:a0:8c:3a: 75:d7:10:56:c5:b8:b6:7e:2c:28:6b:29:ba:4c:5f: 9e:da:9f:cb:83:d5:d7:eb:20:83:4e:ba:3f:c0:21: 5f:0b:12:c4:e2:ea:e0:bb:cf:36:2d:2a:26:eb:a5: 48:67:7a:b1:14:20:9e:97:eb:fe:51:1c:a2:fb:b8: af:e5:d1:9d:fc:1e:62:b9:fe:da:63:dc:39:5d:4b: f2:b6:99:6f:52:be:ac:2b:b7:71:b2:59:cb:d8:c7: 72:b0:e9:d7:4c:9f:33:79:44:ae:25:85:e3:ce:4d: 56:6a:e6:a8:9a:86:47:53:c4:4d:00:e1:11:9a:22: f4:36:95:56:3b:06:3f:d9:7e:e4:0e:e1:48:87:80: 9d:31:9c:d3:9e:9d:ee:fb:d9:d8:a3:e6:27:31:c6: 9e:d4:54:b9:b0:fe:cb:eb:36:e7:2e:87:c5:77:98: 4b:ed:9e:4f:76:ca:c3:a0:15:a9:4f:cf:07:39:80: e1:0e:a1:aa:e1:b4:af:71:d0:67:e1:34:0a:1f:8b: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:30:4E:5A:41:BB:54:57:42:1F:A9:88:B5:42:42:49:BE:3F:5F:50 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:35:59:97:05:70:f3:c4:63:b8:d5:b2:ad:92:27:11:04:b7: bb:a0:25:53:d2:a2:85:ae:d9:0e:fb:8d:10:92:3c:6e:92:24: 65:38:7e:76:9e:7f:e4:66:a0:3c:d0:84:26:be:b1:fe:c9:2a: 65:22:a4:95:5f:66:ab:b9:6a:eb:d6:4e:4f:9b:db:ed:7e:35: 2e:b1:0d:dc:57:2c:4c:32:d3:54:84:1d:d9:5b:84:0c:7e:c4: 4d:8b:4f:67:be:d6:48:7a:72:53:56:d9:2f:38:6a:d4:69:05: f5:c3:1b:ff:be:ce:1d:51:ad:28:7a:7b:f4:3e:bb:71:ce:be: a2:5d:08:e6:61:18:da:0c:b8:ac:63:3e:21:d9:f8:41:65:07: 15:67:a2:46:03:94:a4:b8:6e:16:d4:c0:57:e5:0f:9b:70:4b: ad:c4:8f:6e:00:ca:4d:a0:bc:65:21:96:8d:66:1d:8f:6c:eb: bb:d7:26:99:56:d0:5d:b8:25:78:aa:45:92:15:a3:9c:88:ce: 69:aa:3d:36:40:80:d5:15:59:8c:ee:58:67:5b:9f:d4:9e:ec: 1e:e4:27:e5:d4:0f:a1:4c:ed:30:77:52:72:af:f6:e2:2e:2b: fd:7f:c0:13:35:c5:4e:bb:49:b0:cb:0f:f6:88:85:89:83:36: ef:4e:79:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt6UqPkrWzGoezYPOhGvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUxMjIxMjEwMTMwWhcNMjUxMjIyMjEwMTMwWjAzMTEwLwYDVQQD EygxOTMwNGU1YTQxYmI1NDU3NDIxZmE5ODhiNTQyNDI0OWJlM2Y1ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKaSEKmDMzVwCULC547lERcLBSOi gePFICBcHT5e/6DhoZiVGYmboKkOXG7BWCoJ/Hs9CAdy3VigjDp11xBWxbi2fiwo aym6TF+e2p/Lg9XX6yCDTro/wCFfCxLE4urgu882LSom66VIZ3qxFCCel+v+URyi +7iv5dGd/B5iuf7aY9w5XUvytplvUr6sK7dxslnL2MdysOnXTJ8zeUSuJYXjzk1W auaomoZHU8RNAOERmiL0NpVWOwY/2X7kDuFIh4CdMZzTnp3u+9nYo+YnMcae1FS5 sP7L6zbnLofFd5hL7Z5PdsrDoBWpT88HOYDhDqGq4bSvcdBn4TQKH4vYBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkwTlpBu1RXQh+piLVCQkm+P19QMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzVZlwVw 88RjuNWyrZInEQS3u6AlU9Kiha7ZDvuNEJI8bpIkZTh+dp5/5GagPNCEJr6x/skq ZSKklV9mq7lq69ZOT5vb7X41LrEN3FcsTDLTVIQd2VuEDH7ETYtPZ77WSHpyU1bZ Lzhq1GkF9cMb/77OHVGtKHp79D67cc6+ol0I5mEY2gy4rGM+Idn4QWUHFWeiRgOU pLhuFtTAV+UPm3BLrcSPbgDKTaC8ZSGWjWYdj2zru9cmmVbQXbgleKpFkhWjnIjO aao9NkCA1RVZjO5YZ1uf1J7sHuQn5dQPoUztMHdScq/24i4r/X/AEzXFTrtJsMsP 9oiFiYM27055LA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:45 2025 by rpki-client