This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json) Hash identifier: Z56BMzOayxucoDLhR5PWOEsEG8iQ2uu6tqAd1I7MEsE= Subject key identifier: 3F:35:3A:FD:08:CF:4E:F1:EA:3D:C5:35:55:FB:AC:0D:04:87:D7:CC Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Certificate serial: 019B59E39828F37EE3386292E94E2FD8F5C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: VN02nqr3KWDn+6BNzeknaMxSrmJuZkisJwPENu8LblU=) 2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:98:28:f3:7e:e3:38:62:92:e9:4e:2f:d8:f5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=3f353afd08cf4ef1ea3dc53555fbac0d0487d7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:f9:c6:0a:30:75:98:61:71:c4:d0:c9:e7: 7b:97:00:f8:b2:42:29:27:a5:fa:37:a6:1e:d4:4e: 25:48:83:b3:23:b1:8e:66:d5:34:6d:81:36:7d:f1: 39:34:d5:7c:28:69:34:61:8a:d7:ba:8a:e4:69:dd: 51:50:fb:9b:0a:eb:b5:fe:fc:6f:7d:b3:3e:23:9e: 98:03:e3:e1:35:14:8f:59:f2:d3:5f:57:12:b6:c3: e3:2d:ec:a4:d2:cb:81:2b:cf:90:fc:8f:30:e0:7c: ad:af:ef:f4:6b:a6:9e:d3:d6:77:20:3e:8d:12:07: 89:ca:06:0b:7d:4c:c7:82:2b:5f:17:61:fa:b3:cc: 74:8e:13:d3:58:c9:1b:ae:97:34:20:5c:8b:de:89: 97:63:76:ec:d5:37:4c:08:80:0d:ff:53:df:5e:c2: c8:e6:ea:5f:15:2c:87:e9:41:a7:86:5f:a1:61:3f: 8c:df:43:c2:dc:98:17:44:6f:7b:c8:ad:60:d1:e0: bd:0a:81:5a:14:d4:8e:1b:82:db:d8:b5:9a:5f:31: b1:a1:4c:41:6d:25:fc:1f:91:27:94:be:d2:55:77: 13:21:d5:f0:da:bb:a7:e7:1c:0f:28:80:e0:56:49: 9c:b0:3d:14:1e:f0:ad:49:b7:6f:9c:3b:fa:37:18: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:35:3A:FD:08:CF:4E:F1:EA:3D:C5:35:55:FB:AC:0D:04:87:D7:CC X509v3 Authority Key Identifier: keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:27:f3:74:33:fd:51:70:26:47:40:5e:42:cc:b7:b6:87: 5e:07:a9:8d:63:ef:36:ff:6a:08:7e:3c:23:70:4d:ad:b9:d0: 0c:ac:ac:69:a9:b6:1e:5d:e0:f7:36:96:81:97:b7:f5:4e:dc: 4c:24:8c:98:bd:45:af:ab:74:32:9c:fa:d4:f9:d6:d7:8d:0f: e1:c0:52:ee:6c:aa:6e:51:5d:54:86:c7:d7:41:7e:ab:51:e0: 68:f9:b2:47:e2:f8:05:fc:7b:db:ab:ed:f2:29:48:f2:60:7f: a7:54:4d:c8:2e:2d:b1:a8:87:3c:64:37:86:68:df:9d:8f:f4: 1f:e6:80:38:7b:ab:72:68:c8:a4:08:b3:c6:25:b2:ed:7f:0b: 8f:cf:89:f2:c2:96:f0:1e:cf:e0:f5:ba:48:b4:82:2e:b9:7a: f5:bc:8f:49:90:d6:fd:11:e8:5c:6a:8c:96:ee:3e:7d:f5:66: fd:6b:24:74:62:30:e8:fc:79:7d:c4:92:8e:16:8f:27:f3:ae: 92:f7:bd:e6:59:9e:06:34:77:6c:3c:18:7c:95:83:c3:86:b2: ed:42:d4:db:cf:b8:5e:41:58:fb:2a:f8:9d:cc:e0:61:d7:51: ed:c6:6f:9a:7c:70:40:03:54:b5:10:12:f4:78:58:c9:9c:79: d4:44:01:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45go837jOGKS6U4v2PXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzNmYzE5OGM3NzJmNTliOGVkZTUyOTg1NmI1MmVhMTc5 YTRlMzgwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD EygzZjM1M2FmZDA4Y2Y0ZWYxZWEzZGM1MzU1NWZiYWMwZDA0ODdkN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LD5xgowdZhhccTQyed7lwD4skIp J6X6N6Ye1E4lSIOzI7GOZtU0bYE2ffE5NNV8KGk0YYrXuorkad1RUPubCuu1/vxv fbM+I56YA+PhNRSPWfLTX1cStsPjLeyk0suBK8+Q/I8w4Hytr+/0a6ae09Z3ID6N EgeJygYLfUzHgitfF2H6s8x0jhPTWMkbrpc0IFyL3omXY3bs1TdMCIAN/1PfXsLI 5upfFSyH6UGnhl+hYT+M30PC3JgXRG97yK1g0eC9CoFaFNSOG4Lb2LWaXzGxoUxB bSX8H5EnlL7SVXcTIdXw2run5xwPKIDgVkmcsD0UHvCtSbdvnDv6NxgCbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD81Ov0Iz07x6j3FNVX7rA0Eh9fMMB8GA1UdIwQY MBaAFOLD/BmMdy9ZuO3lKYVrUuoXmk44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2Et NWYyOWM5ZjU0OWU4LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2EtNWYyOWM5ZjU0OWU4 LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccAn83Qz /VFwJkdAXkLMt7aHXgepjWPvNv9qCH48I3BNrbnQDKysaam2Hl3g9zaWgZe39U7c TCSMmL1Fr6t0Mpz61PnW140P4cBS7myqblFdVIbH10F+q1HgaPmyR+L4Bfx726vt 8ilI8mB/p1RNyC4tsaiHPGQ3hmjfnY/0H+aAOHurcmjIpAizxiWy7X8Lj8+J8sKW 8B7P4PW6SLSCLrl69byPSZDW/RHoXGqMlu4+ffVm/WskdGIw6Px5fcSSjhaPJ/Ou kve95lmeBjR3bDwYfJWDw4ay7ULU28+4XkFY+yr4nczgYddR7cZvmnxwQANUtRAS 9HhYyZx51EQBIQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client