This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json) Hash identifier: tI7YZYIDXoqmVEvfLna/BvakUADpTS/4HNtOzgk2i7U= Subject key identifier: A9:9E:50:02:78:35:18:7E:4D:50:AD:55:7D:69:57:97:D8:88:0D:8B Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B2062A3F3EF2D7DA76430DCFFF869E723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 05:01:33 +0000 Manifest this update: Mon 15 Dec 2025 05:01:33 +0000 Manifest next update: Tue 16 Dec 2025 05:01:33 +0000 Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: u67N2G/uSeeuN+9/G2d9AA9Ce1AyocGz78HkL+mD1sM=) 2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:a3:f3:ef:2d:7d:a7:64:30:dc:ff:f8:69:e7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Dec 15 05:01:33 2025 GMT Not After : Dec 16 05:01:33 2025 GMT Subject: CN=a99e50027835187e4d50ad557d695797d8880d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:c8:83:b2:16:9e:bd:cf:97:3d:84:f3:5c: b2:d2:46:00:e3:9b:f4:da:d4:a4:e4:90:cb:b8:4f: ce:31:71:ee:c0:db:b3:05:0b:29:90:84:cc:36:6e: 88:38:1a:52:fd:f8:60:a8:0d:2f:73:99:5c:ff:39: 3d:7a:90:00:e0:27:78:19:2a:10:2c:f7:ae:84:03: f7:7e:22:8f:47:65:e7:0f:24:25:8e:eb:fd:16:fe: ee:df:56:a1:a4:8b:ac:31:45:11:f3:5e:69:8b:a0: ff:8c:9b:c8:2c:e5:e9:44:d4:71:e8:7a:69:69:37: 62:56:85:57:7f:06:86:34:de:27:f5:8e:a7:a9:87: 2b:c9:b7:ff:71:f3:08:a6:ef:41:96:7f:f6:f6:bd: 2f:b1:df:1a:0f:3c:57:f4:49:be:f2:90:ca:5e:23: 4d:ac:37:b2:3d:88:1b:cd:63:eb:ef:9d:04:00:71: 0c:f1:f2:49:d9:9b:8b:7c:ca:99:05:c6:7c:6b:07: 6b:84:6b:3b:21:0f:c6:b8:75:f2:f6:ee:7e:c3:d7: 95:56:77:51:c5:c4:d8:c0:3c:ff:63:1f:20:b0:9f: 3a:5d:4e:de:6c:28:30:a4:53:5c:4a:8d:0e:9b:71: 95:9f:3f:61:67:09:8c:70:b5:d1:21:a6:c1:de:78: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:50:02:78:35:18:7E:4D:50:AD:55:7D:69:57:97:D8:88:0D:8B X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bd:5a:73:b2:60:8f:32:cf:d8:f7:4d:74:35:c3:2e:8d:f8: b7:2a:11:0f:45:d8:fb:26:06:76:35:b4:f6:03:01:dc:ca:6d: 77:65:96:ef:82:39:7c:3d:cb:9a:42:86:b8:19:82:a2:4d:7c: 33:17:44:99:f3:78:d0:9e:a3:8c:64:dd:4a:15:cc:a0:41:d8: 15:c7:67:b5:5a:62:e8:4d:a6:e5:b4:52:23:f9:3e:b9:85:87: 81:fe:4d:f0:98:09:34:26:cb:16:7c:5f:5d:72:9d:5a:12:3c: 74:b9:eb:ae:47:12:3b:b4:84:3b:d0:a6:31:d2:07:1e:82:ab: b3:e9:52:97:d9:3b:73:92:b8:a7:79:b2:41:5a:16:7b:aa:80: af:51:50:d0:41:c7:d4:d1:0c:8e:09:26:22:08:02:8c:d2:97: 32:cc:09:7d:8c:e9:72:f7:44:58:c6:ef:6e:78:48:4a:97:25: 82:46:63:50:9c:16:62:59:7b:39:f3:5e:93:19:76:59:e4:63: 22:4e:e7:a0:91:ee:fc:45:c7:e4:48:1e:27:08:2b:67:a5:a4: bf:06:82:e2:2c:2e:ff:62:59:d7:6e:b5:e6:c3:b4:ed:28:51: d6:ee:a0:69:8d:14:a3:19:1b:70:6c:c3:b1:ca:eb:e2:e8:c8: ce:c0:da:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYqPz7y19p2Qw3P/4aecjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjUxMjE1MDUwMTMzWhcNMjUxMjE2MDUwMTMzWjAzMTEwLwYDVQQD EyhhOTllNTAwMjc4MzUxODdlNGQ1MGFkNTU3ZDY5NTc5N2Q4ODgwZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJzIg7IWnr3Plz2E81yy0kYA45v0 2tSk5JDLuE/OMXHuwNuzBQspkITMNm6IOBpS/fhgqA0vc5lc/zk9epAA4Cd4GSoQ LPeuhAP3fiKPR2XnDyQljuv9Fv7u31ahpIusMUUR815pi6D/jJvILOXpRNRx6Hpp aTdiVoVXfwaGNN4n9Y6nqYcrybf/cfMIpu9Bln/29r0vsd8aDzxX9Em+8pDKXiNN rDeyPYgbzWPr750EAHEM8fJJ2ZuLfMqZBcZ8awdrhGs7IQ/GuHXy9u5+w9eVVndR xcTYwDz/Yx8gsJ86XU7ebCgwpFNcSo0Om3GVnz9hZwmMcLXRIabB3niAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmeUAJ4NRh+TVCtVX1pV5fYiA2LMB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL1ac7Jg jzLP2PdNdDXDLo34tyoRD0XY+yYGdjW09gMB3Mptd2WW74I5fD3LmkKGuBmCok18 MxdEmfN40J6jjGTdShXMoEHYFcdntVpi6E2m5bRSI/k+uYWHgf5N8JgJNCbLFnxf XXKdWhI8dLnrrkcSO7SEO9CmMdIHHoKrs+lSl9k7c5K4p3myQVoWe6qAr1FQ0EHH 1NEMjgkmIggCjNKXMswJfYzpcvdEWMbvbnhISpclgkZjUJwWYll7OfNekxl2WeRj Ik7noJHu/EXH5EgeJwgrZ6WkvwaC4iwu/2JZ12615sO07ShR1u6gaY0UoxkbcGzD scrr4ujIzsDaqQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:17 2025 by rpki-client