This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: QuhZjBLWC8jJJRWbsR2svl4gzp5D8J9ZKEx2QncyghQ= Subject key identifier: 95:10:48:AA:94:51:5D:F0:37:ED:C9:05:21:DC:1C:58:D9:CF:93:B8 Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019B3DFE9FB538794CF8240D1B16D2188149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 23:00:55 +0000 Manifest this update: Sat 20 Dec 2025 23:00:55 +0000 Manifest next update: Sun 21 Dec 2025 23:00:55 +0000 Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 7spJn6NTP0qoO+9T3DPsdZFR12aLYk+Ww25LnhwDJrw=) 3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=) 4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=) 5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:9f:b5:38:79:4c:f8:24:0d:1b:16:d2:18:81:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Dec 20 23:00:55 2025 GMT Not After : Dec 21 23:00:55 2025 GMT Subject: CN=951048aa94515df037edc90521dc1c58d9cf93b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f6:2e:0e:de:1c:78:5c:0e:91:28:8e:d0:de: e2:ff:1e:96:d2:d8:ce:1a:bd:bf:df:56:27:c0:27: 73:00:f0:ee:d5:00:00:b6:1c:7e:74:ac:f3:ce:4d: 85:6a:52:75:ff:c5:d9:64:a2:52:e8:b4:84:9e:7f: 23:84:76:cf:d0:8d:b4:46:4f:6d:1c:5b:26:f5:bc: e0:35:3e:dd:b7:50:de:fd:2c:d4:83:d1:cc:60:35: 5b:8f:87:e4:f7:3a:0b:8f:8e:f8:f4:12:dd:8b:aa: 69:d9:df:85:bc:99:70:ec:d5:c1:14:92:cc:1f:9c: c8:af:62:eb:72:91:bd:6b:e3:54:f4:10:10:98:62: 1c:bb:25:9d:0d:bf:2a:f7:86:3f:72:83:53:43:d1: a2:e8:ff:12:6c:2b:20:27:57:3c:e3:e5:5e:51:00: 6c:a0:8a:8b:12:aa:d2:a2:f0:1f:90:b3:85:f1:a7: e7:46:db:e8:8a:2c:f3:4a:7c:9f:fe:f7:fd:2a:a0: 90:55:54:d1:2d:55:3a:55:51:f1:58:d7:cf:c9:eb: 7c:16:cd:be:8b:4a:81:61:14:28:ba:0c:af:9d:24: 01:9a:71:e9:1d:d2:b6:f2:02:c3:51:94:4d:47:63: a5:af:9b:d0:46:cb:5a:e3:f7:49:2f:85:38:2c:e0: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:48:AA:94:51:5D:F0:37:ED:C9:05:21:DC:1C:58:D9:CF:93:B8 X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:62:fd:92:c7:17:67:58:b5:07:1d:56:95:ec:58:6f:56:c2: e0:64:d9:f1:c4:28:44:c1:ec:16:20:34:94:56:7b:6b:5b:f9: a8:c7:74:60:52:f6:f6:88:9c:f0:10:c1:23:24:2a:65:49:67: 4c:ad:f9:81:3b:50:58:21:a0:a1:64:ce:d3:17:c3:32:fe:e0: 90:c0:c1:fc:aa:47:16:ea:e7:32:55:54:0d:7c:36:80:78:b1: dd:65:69:09:4e:de:bc:9b:60:c8:bd:a8:2b:18:c7:e7:1f:11: da:08:37:9b:2b:0c:1f:4a:29:ce:92:e8:01:60:fe:4e:ba:7c: 9d:68:26:8c:06:32:3d:2d:02:43:50:0f:b0:54:4d:ae:64:d5: 81:bc:d5:b7:dc:ba:d1:cb:4d:08:98:cd:9a:96:9f:4a:71:b8: 01:7d:59:99:1e:ba:e5:4b:3e:ad:0c:be:04:e3:e0:86:50:17: 13:a8:dc:dd:38:44:ec:61:f4:50:dc:cb:bf:62:ac:a2:74:23: f5:1c:c9:d4:1a:dc:a1:7c:90:97:3e:53:9d:9f:96:b2:ea:67: ee:dc:d9:20:aa:db:21:ed:06:a2:d9:a0:cf:bb:81:43:71:fb: 0c:a1:57:3e:39:d2:0b:a9:24:0d:56:c0:4b:05:33:5a:07:82: ec:dd:d7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/p+1OHlM+CQNGxbSGIFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjUxMjIwMjMwMDU1WhcNMjUxMjIxMjMwMDU1WjAzMTEwLwYDVQQD Eyg5NTEwNDhhYTk0NTE1ZGYwMzdlZGM5MDUyMWRjMWM1OGQ5Y2Y5M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fYuDt4ceFwOkSiO0N7i/x6W0tjO Gr2/31YnwCdzAPDu1QAAthx+dKzzzk2FalJ1/8XZZKJS6LSEnn8jhHbP0I20Rk9t HFsm9bzgNT7dt1De/SzUg9HMYDVbj4fk9zoLj4749BLdi6pp2d+FvJlw7NXBFJLM H5zIr2LrcpG9a+NU9BAQmGIcuyWdDb8q94Y/coNTQ9Gi6P8SbCsgJ1c84+VeUQBs oIqLEqrSovAfkLOF8afnRtvoiizzSnyf/vf9KqCQVVTRLVU6VVHxWNfPyet8Fs2+ i0qBYRQougyvnSQBmnHpHdK28gLDUZRNR2Olr5vQRsta4/dJL4U4LODdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUQSKqUUV3wN+3JBSHcHFjZz5O4MB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2L9kscX Z1i1Bx1WlexYb1bC4GTZ8cQoRMHsFiA0lFZ7a1v5qMd0YFL29oic8BDBIyQqZUln TK35gTtQWCGgoWTO0xfDMv7gkMDB/KpHFurnMlVUDXw2gHix3WVpCU7evJtgyL2o KxjH5x8R2gg3mysMH0opzpLoAWD+Trp8nWgmjAYyPS0CQ1APsFRNrmTVgbzVt9y6 0ctNCJjNmpafSnG4AX1ZmR665Us+rQy+BOPghlAXE6jc3ThE7GH0UNzLv2KsonQj 9RzJ1BrcoXyQlz5TnZ+Wsupn7tzZIKrbIe0Gotmgz7uBQ3H7DKFXPjnSC6kkDVbA SwUzWgeC7N3Xyg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:36 2025 by rpki-client