This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json) Hash identifier: MlGWq2IcYsyABxuiuapAX/loV2eNNaShhdNPDoAb+y4= Subject key identifier: 1B:78:D7:F7:7B:A5:9A:F9:9D:90:94:1D:AA:E6:CD:34:6F:1F:FE:E4 Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Certificate serial: 019B10EF76FE3DCFED25C808C2102B6DD2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 05:01:27 +0000 Manifest this update: Fri 12 Dec 2025 05:01:27 +0000 Manifest next update: Sat 13 Dec 2025 05:01:27 +0000 Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: qush+JJQK8f2ftLk1NBvWaME1K2wXOkORq5++dOMM7c=) 2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=) 3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=) 4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:76:fe:3d:cf:ed:25:c8:08:c2:10:2b:6d:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Validity Not Before: Dec 12 05:01:27 2025 GMT Not After : Dec 13 05:01:27 2025 GMT Subject: CN=1b78d7f77ba59af99d90941daae6cd346f1ffee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:c2:72:a8:7b:9d:36:e0:bb:58:3c:72:ab: 14:f1:c3:04:01:af:cd:8d:b7:bb:6a:70:55:b3:c1: b6:c2:7b:fc:33:12:0d:2c:6a:50:91:32:af:23:df: df:7c:50:a9:23:6a:f1:15:6c:34:fe:17:28:8e:d5: 29:d8:10:ba:7d:9c:69:d5:8c:e5:8e:07:1c:47:b6: 57:d2:75:e7:a4:e7:c8:11:04:b0:03:d1:d1:31:bb: 4b:d8:dd:65:62:e7:3c:13:a6:66:1d:58:c6:95:55: ad:59:f1:ea:d0:20:d1:95:16:7b:01:6b:6d:03:6b: 69:5d:1b:9c:d5:26:09:07:ea:dd:70:3d:49:f7:f0: 0e:36:3b:50:03:97:5c:a4:96:6b:b5:85:5c:90:d8: 73:51:ea:35:b2:b2:9a:9f:68:45:23:79:92:a8:de: 89:7f:f0:8a:2c:00:fa:bd:16:0a:ee:53:45:a6:23: d3:68:bf:6e:d9:a3:11:7c:2f:a8:75:2b:35:e0:04: 21:d1:7a:12:78:c3:a6:0b:00:db:e4:1d:8a:c8:44: a6:f7:5b:37:d1:31:b7:f2:be:99:e5:53:67:22:0b: 1b:dc:9d:32:97:26:73:70:0f:b2:32:21:28:fd:ec: 25:f4:88:e7:cd:8a:aa:82:ee:0f:93:67:44:51:22: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:78:D7:F7:7B:A5:9A:F9:9D:90:94:1D:AA:E6:CD:34:6F:1F:FE:E4 X509v3 Authority Key Identifier: keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b0:c0:9c:6d:3a:26:a6:47:07:8e:54:f7:fc:e1:fd:5f:f9: b0:29:7a:71:f4:05:86:17:cd:17:a9:c5:bf:b8:fe:4d:c1:cd: b6:f4:dd:94:4b:a5:03:b2:16:cd:3b:a7:fd:fe:64:2c:df:1b: cf:7c:f4:9f:e8:71:c2:57:d8:4c:3b:72:78:3c:ee:2b:7f:d5: b7:00:65:5f:2c:d2:f5:f7:c4:d2:ce:59:82:b8:06:19:89:07: 24:8c:d5:6c:30:e1:d0:71:d3:ea:fa:4e:48:b6:80:71:fc:8c: 64:97:98:81:59:9c:55:12:c7:5a:12:32:8a:fa:3b:44:54:fb: e2:23:96:71:da:1e:2c:c9:5e:82:ef:63:68:34:21:e4:df:ae: 63:85:29:42:1b:bc:27:1f:32:a8:2b:cf:90:3d:67:3d:71:a0: d2:77:a4:d1:1c:5a:0a:25:d8:a4:fe:74:30:78:22:8c:f9:32: 9f:44:b0:3c:0a:36:63:f8:24:6f:23:da:d5:6b:4d:f1:c2:09: 0f:b2:23:e6:15:ed:77:ab:49:55:93:69:67:ce:de:78:c4:2e: 08:6b:d5:ee:23:cb:c0:ef:04:17:61:5c:f1:e0:99:57:0c:9e: a5:a1:99:e5:0f:14:59:29:ce:90:9a:12:0a:02:9e:69:8c:0a: f5:93:d2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ73b+Pc/tJcgIwhArbdLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl YzBiNGYwHhcNMjUxMjEyMDUwMTI3WhcNMjUxMjEzMDUwMTI3WjAzMTEwLwYDVQQD EygxYjc4ZDdmNzdiYTU5YWY5OWQ5MDk0MWRhYWU2Y2QzNDZmMWZmZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNrCcqh7nTbgu1g8cqsU8cMEAa/N jbe7anBVs8G2wnv8MxINLGpQkTKvI9/ffFCpI2rxFWw0/hcojtUp2BC6fZxp1Yzl jgccR7ZX0nXnpOfIEQSwA9HRMbtL2N1lYuc8E6ZmHVjGlVWtWfHq0CDRlRZ7AWtt A2tpXRuc1SYJB+rdcD1J9/AONjtQA5dcpJZrtYVckNhzUeo1srKan2hFI3mSqN6J f/CKLAD6vRYK7lNFpiPTaL9u2aMRfC+odSs14AQh0XoSeMOmCwDb5B2KyESm91s3 0TG38r6Z5VNnIgsb3J0ylyZzcA+yMiEo/ewl9IjnzYqqgu4Pk2dEUSLpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt41/d7pZr5nZCUHarmzTRvH/7kMB8GA1UdIwQY MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt OWM5MzNjY2QxNmM3LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3 LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArDAnG06 JqZHB45U9/zh/V/5sCl6cfQFhhfNF6nFv7j+TcHNtvTdlEulA7IWzTun/f5kLN8b z3z0n+hxwlfYTDtyeDzuK3/VtwBlXyzS9ffE0s5ZgrgGGYkHJIzVbDDh0HHT6vpO SLaAcfyMZJeYgVmcVRLHWhIyivo7RFT74iOWcdoeLMlegu9jaDQh5N+uY4UpQhu8 Jx8yqCvPkD1nPXGg0nek0RxaCiXYpP50MHgijPkyn0SwPAo2Y/gkbyPa1WtN8cIJ D7Ij5hXtd6tJVZNpZ87eeMQuCGvV7iPLwO8EF2Fc8eCZVwyepaGZ5Q8UWSnOkJoS CgKeaYwK9ZPS0Q== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:13 2025 by rpki-client