This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json) Hash identifier: 9fTK5pr5fEsQ4WDAW4YiWYOCQbvJJv+m65p9meJ/fzc= Subject key identifier: A2:09:CE:25:DF:B0:FE:0F:DF:73:1F:02:CA:1C:2D:D0:B8:26:DB:81 Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea Certificate serial: 019B38A145BA89CE7CE967A94E922960AA4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 22:00:51 +0000 Manifest this update: Fri 19 Dec 2025 22:00:51 +0000 Manifest next update: Sat 20 Dec 2025 22:00:51 +0000 Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: Tc7vKEEnTYS7GI3/IGKTf6OjuqE6qOZ67NDa3OlURnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:45:ba:89:ce:7c:e9:67:a9:4e:92:29:60:aa:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea Validity Not Before: Dec 19 22:00:51 2025 GMT Not After : Dec 20 22:00:51 2025 GMT Subject: CN=a209ce25dfb0fe0fdf731f02ca1c2dd0b826db81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:84:17:fc:e1:32:0a:66:52:c9:3d:fc:78: b0:61:75:f5:d4:41:b7:fc:e1:c8:e7:14:a6:13:2e: 44:ae:97:f7:ac:80:46:18:61:21:cc:57:e0:fa:80: a2:e8:7c:aa:b0:b1:6c:d4:0e:a7:82:68:8c:12:ec: 5e:b8:d3:65:3c:47:2a:da:6c:03:5c:ae:be:f7:64: 23:36:7e:1b:30:f3:dd:2a:fd:82:1c:05:42:65:71: 70:33:21:bf:33:36:0b:87:e6:96:6d:84:8f:69:b8: 13:d2:0d:d9:6c:84:33:04:4f:81:4c:b7:27:38:07: 21:b4:dd:3d:2b:fc:89:ba:98:bc:29:2f:b7:99:b0: 6b:51:31:70:fe:89:23:ed:fb:0c:83:a3:d2:a3:19: b5:8e:a7:ce:f1:22:6e:aa:49:77:2e:0a:a5:70:83: fe:6d:c6:2e:fc:f6:96:0b:fd:bc:3d:a2:14:96:b5: 09:fd:1a:90:d0:38:7c:9d:79:07:ac:b2:f7:a1:56: c0:e9:38:67:14:47:a3:03:9d:ae:61:b6:c2:b5:58: ae:92:67:70:da:3a:53:28:27:54:77:a5:e7:5d:9f: c9:c1:3c:55:21:27:01:b2:c2:00:4e:45:b7:3d:3c: 60:78:db:2f:a3:97:9e:90:17:31:3b:ae:4f:61:bf: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:CE:25:DF:B0:FE:0F:DF:73:1F:02:CA:1C:2D:D0:B8:26:DB:81 X509v3 Authority Key Identifier: keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fe:e4:51:25:48:4f:fa:bf:80:e3:f3:55:bf:37:2e:29:57: ce:77:1b:81:d9:f1:1a:1d:5f:60:6f:a2:a7:68:72:7f:87:c9: de:f1:ea:98:44:c3:7e:88:0f:18:04:17:5d:d6:a9:c6:ca:de: 3d:e9:21:dc:e1:97:f2:57:01:c9:9a:fe:4b:ac:15:33:c2:72: 20:ab:76:92:2e:de:9d:1e:49:26:01:6b:8e:ba:7a:9a:86:c6: fc:b6:22:b2:5e:ef:2b:4f:63:d5:8f:82:d0:68:3b:35:4e:0f: ab:51:f7:c8:49:6d:44:38:9b:f9:9c:0e:d2:dd:f4:1d:53:fe: ac:25:28:25:7b:10:94:35:80:bf:31:8e:a2:cc:c3:98:0b:f4: d2:22:f7:a0:2b:81:a9:59:45:fd:d9:34:53:65:f6:89:6c:1d: 4a:01:52:43:17:96:76:3d:18:12:80:34:f8:02:4a:91:41:53: 77:22:9d:68:74:08:e5:d2:57:8e:94:aa:3b:d5:f7:22:bd:09: b1:86:3d:ad:68:b9:a6:53:6c:8b:a7:36:05:f4:4c:72:b8:e8: 12:c8:98:7f:1b:56:8f:e4:63:07:3f:56:be:01:be:29:4a:d8: 56:0f:f6:d6:cd:6b:21:f2:41:66:37:df:87:ca:f2:16:1f:b6: 02:43:38:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUW6ic586WepTpIpYKpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjg2MWVjODRmYzU2ZWFjYTliOGM2MzZlNzkyM2U2Zjky ZGNjZWEwHhcNMjUxMjE5MjIwMDUxWhcNMjUxMjIwMjIwMDUxWjAzMTEwLwYDVQQD EyhhMjA5Y2UyNWRmYjBmZTBmZGY3MzFmMDJjYTFjMmRkMGI4MjZkYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndyEF/zhMgpmUsk9/HiwYXX11EG3 /OHI5xSmEy5Erpf3rIBGGGEhzFfg+oCi6HyqsLFs1A6ngmiMEuxeuNNlPEcq2mwD XK6+92QjNn4bMPPdKv2CHAVCZXFwMyG/MzYLh+aWbYSPabgT0g3ZbIQzBE+BTLcn OAchtN09K/yJupi8KS+3mbBrUTFw/okj7fsMg6PSoxm1jqfO8SJuqkl3LgqlcIP+ bcYu/PaWC/28PaIUlrUJ/RqQ0Dh8nXkHrLL3oVbA6ThnFEejA52uYbbCtViukmdw 2jpTKCdUd6XnXZ/JwTxVIScBssIATkW3PTxgeNsvo5eekBcxO65PYb9sfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIJziXfsP4P33MfAsocLdC4JtuBMB8GA1UdIwQY MBaAFOH4YeyE/FbqypuMY255I+b5LczqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUt MjFhNGQ1Y2MyYWJmLzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUtMjFhNGQ1Y2MyYWJm LzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP7kUSVI T/q/gOPzVb83LilXzncbgdnxGh1fYG+ip2hyf4fJ3vHqmETDfogPGAQXXdapxsre Pekh3OGX8lcByZr+S6wVM8JyIKt2ki7enR5JJgFrjrp6mobG/LYisl7vK09j1Y+C 0Gg7NU4Pq1H3yEltRDib+ZwO0t30HVP+rCUoJXsQlDWAvzGOoszDmAv00iL3oCuB qVlF/dk0U2X2iWwdSgFSQxeWdj0YEoA0+AJKkUFTdyKdaHQI5dJXjpSqO9X3Ir0J sYY9rWi5plNsi6c2BfRMcrjoEsiYfxtWj+RjBz9WvgG+KUrYVg/21s1rIfJBZjff h8ryFh+2AkM4jg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:54 2025 by rpki-client