This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: /csRvlJ71/dEjnjtNpZMFS0ZmfAcUoNtPJrhg46s93g= Subject key identifier: 99:80:9B:CB:A9:33:7F:A5:61:B1:95:50:68:62:A0:F4:E6:F7:08:F2 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B058F71D28D53EF7421F9CDA18F8B3E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 17B2 Signing time: Wed 10 Dec 2025 00:00:45 +0000 Manifest this update: Wed 10 Dec 2025 00:00:45 +0000 Manifest next update: Thu 11 Dec 2025 00:00:45 +0000 Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: 8lLIogJBlgdSqaDYxoEuTNCoOkxqC+wmSXWvJai3C8E=) 2: 4peSVxTbY4zslmn56rvjicgQc7I.roa (hash: +nu5P8vI7PFQXwbJ6t2Zz3coXWOy63zFOw3M4zv4uDY=) 3: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=) 4: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=) 5: Z_3Sd3D3RdwmwjVhN9NqfA7BzpY.roa (hash: Sg8kImSh1cuIQfozfNlnqJy3ut54w54Xyh4htMBXe1s=) 6: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=) 7: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=) 8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:8f:71:d2:8d:53:ef:74:21:f9:cd:a1:8f:8b:3e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Dec 10 00:00:45 2025 GMT Not After : Dec 11 00:00:45 2025 GMT Subject: CN=99809bcba9337fa561b195506862a0f4e6f708f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:47:74:a0:ac:44:4a:c5:e6:58:63:33:5c: 09:fc:3b:5e:5a:94:3d:50:8c:b7:de:4b:e9:93:09: 0e:ce:b6:8f:34:b6:1a:13:7d:79:88:7c:23:47:4c: c4:f7:91:87:50:10:4d:59:b8:97:a1:97:8b:c3:57: 74:2d:11:a9:d4:34:55:b6:e0:d5:0a:52:3a:4e:66: cf:98:15:09:65:5d:1f:c9:16:c1:ce:66:06:83:31: ff:a2:05:4f:ba:5c:2c:8b:d3:3d:dc:96:45:51:50: 76:85:3f:18:04:71:97:5b:76:1d:b6:c7:ac:5f:c0: 51:12:87:32:dd:be:d1:da:38:49:2b:3a:de:e0:ce: 53:4e:44:94:85:3d:17:41:f8:05:ab:bb:13:6d:7e: 47:5e:df:aa:39:e6:5b:2e:df:99:55:4e:e5:7e:8b: e9:81:5a:67:28:57:88:11:da:99:52:81:f4:17:d0: d4:0e:f7:1a:b0:a0:a3:04:f4:1f:4c:4a:d7:fa:e9: c1:37:e7:22:bc:f5:3d:5e:ab:46:f4:04:b3:ef:50: 2e:51:ce:6e:b6:dd:48:75:df:86:c5:07:41:42:62: 71:3c:c7:49:0a:8b:0b:64:27:b8:55:61:42:c0:d7: bc:fa:f0:ae:79:bf:09:6e:af:25:b7:b2:6f:95:a0: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:80:9B:CB:A9:33:7F:A5:61:B1:95:50:68:62:A0:F4:E6:F7:08:F2 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:22:78:a2:2e:30:6a:b6:a5:dd:af:81:30:a4:5f:69:78:f7: 7f:4c:08:a2:8b:21:be:f1:7d:c1:ec:ca:47:a9:6a:9b:b6:fd: 29:24:6c:e4:14:4d:a4:7f:fb:c4:91:d4:6a:45:0c:4d:0f:c2: b6:7f:60:9f:ec:77:90:17:86:15:28:33:d7:5a:c7:7b:c2:53: c5:b2:30:a4:0b:9e:82:9d:91:59:b9:4a:00:98:b4:ca:43:e9: 35:c2:0b:53:d2:0f:64:f4:c6:d4:8f:64:84:ea:3a:a1:10:5a: 8b:fc:4d:29:49:e1:8c:3a:70:84:97:d0:68:cf:a1:97:1c:aa: 55:db:49:25:e4:72:33:0e:d1:11:6b:96:fe:f8:28:53:c5:69: 79:15:7c:d0:d8:3e:ef:16:2b:1c:5c:df:86:6f:b2:6f:67:d2: 56:60:f3:24:4d:d3:19:6b:c3:10:e9:ea:84:df:34:b3:af:bd: b6:16:06:3a:9e:1a:e8:1e:fd:c5:47:1c:c5:1e:75:83:ec:12: bb:db:5c:51:a0:52:8b:01:e3:29:11:67:d7:ba:d9:79:71:b5: 4c:ec:51:d8:92:ac:a8:68:65:58:c6:35:3c:29:4a:c9:99:41: ef:80:b1:02:b6:b7:b3:44:81:b6:bc:db:7a:4c:be:93:db:f3: 9f:57:4c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFj3HSjVPvdCH5zaGPiz6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjUxMjEwMDAwMDQ1WhcNMjUxMjExMDAwMDQ1WjAzMTEwLwYDVQQD Eyg5OTgwOWJjYmE5MzM3ZmE1NjFiMTk1NTA2ODYyYTBmNGU2ZjcwOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ehHdKCsRErF5lhjM1wJ/DteWpQ9 UIy33kvpkwkOzraPNLYaE315iHwjR0zE95GHUBBNWbiXoZeLw1d0LRGp1DRVtuDV ClI6TmbPmBUJZV0fyRbBzmYGgzH/ogVPulwsi9M93JZFUVB2hT8YBHGXW3Ydtses X8BREocy3b7R2jhJKzre4M5TTkSUhT0XQfgFq7sTbX5HXt+qOeZbLt+ZVU7lfovp gVpnKFeIEdqZUoH0F9DUDvcasKCjBPQfTErX+unBN+civPU9XqtG9ASz71AuUc5u tt1Idd+GxQdBQmJxPMdJCosLZCe4VWFCwNe8+vCueb8Jbq8lt7JvlaCFIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmAm8upM3+lYbGVUGhioPTm9wjyMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyJ4oi4w aral3a+BMKRfaXj3f0wIooshvvF9wezKR6lqm7b9KSRs5BRNpH/7xJHUakUMTQ/C tn9gn+x3kBeGFSgz11rHe8JTxbIwpAuegp2RWblKAJi0ykPpNcILU9IPZPTG1I9k hOo6oRBai/xNKUnhjDpwhJfQaM+hlxyqVdtJJeRyMw7REWuW/vgoU8VpeRV80Ng+ 7xYrHFzfhm+yb2fSVmDzJE3TGWvDEOnqhN80s6+9thYGOp4a6B79xUccxR51g+wS u9tcUaBSiwHjKRFn17rZeXG1TOxR2JKsqGhlWMY1PClKyZlB74CxAra3s0SBtrzb eky+k9vzn1dMPQ== -----END CERTIFICATE-----Generated at Wed Dec 10 01:13:34 2025 by rpki-client