This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: DbIG1OdRizYVW4dfBILdS4qHIbpsWpc3rJ8HVe83gM4= Subject key identifier: C7:F0:CD:A7:36:16:00:A4:3E:99:B4:76:FC:F3:45:23:00:99:55:0E Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B1FF3E9A00E087A1F03F786580132971E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 1781 Signing time: Mon 15 Dec 2025 03:00:37 +0000 Manifest this update: Mon 15 Dec 2025 03:00:37 +0000 Manifest next update: Tue 16 Dec 2025 03:00:37 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: zGSslfC3Jx7ys4zWr3Zy5EJjWZwn9zFeAhUvq+HdaTQ=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) 9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:e9:a0:0e:08:7a:1f:03:f7:86:58:01:32:97:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Dec 15 03:00:37 2025 GMT Not After : Dec 16 03:00:37 2025 GMT Subject: CN=c7f0cda7361600a43e99b476fcf345230099550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:79:7e:2a:b2:61:c4:5f:26:4a:20:6f:54: 44:ce:4f:22:6e:e8:d3:8d:e9:19:e6:a4:e8:9b:2c: 91:9e:62:2d:83:b8:44:be:b1:00:79:dc:1a:6d:c0: 92:2b:e9:c5:46:e2:21:1b:c4:41:d2:1a:67:a9:4c: 3f:a6:37:74:64:25:a8:a6:3c:10:f2:dd:70:4a:08: 0c:cb:e6:60:c9:e7:e4:89:e7:49:9a:62:70:8b:4a: 65:fd:af:ee:7a:34:ff:23:b1:08:3e:2f:07:e1:fc: 57:4f:45:49:54:1f:1a:17:4d:b5:6b:75:a7:ec:f3: 8a:ab:83:62:34:af:25:96:1f:10:78:dc:68:74:eb: b1:8c:fa:79:2c:b4:9e:2f:33:f2:80:7b:90:99:4d: 73:09:a7:d1:6c:36:26:55:15:70:76:7e:ef:7c:c3: 4d:b3:ab:07:77:3e:4f:5d:85:b9:d1:dd:31:3f:83: cd:14:4f:e4:bd:f9:9d:71:24:9a:3a:af:61:0a:ae: 7b:54:2b:56:f9:ea:2c:90:63:08:dc:4a:dc:49:83: bd:e4:18:fe:70:af:8f:e5:54:ac:49:7c:05:b2:05: 54:01:8c:03:94:4e:52:17:34:0b:58:7a:e6:83:f4: 37:a0:91:5b:a8:bb:54:16:5d:8e:a9:fc:d0:9c:18: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:CD:A7:36:16:00:A4:3E:99:B4:76:FC:F3:45:23:00:99:55:0E X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0e:54:cf:d8:e0:4e:18:ad:03:80:78:c8:49:4b:3e:7b:f9: 6d:6f:fc:47:86:9e:ed:43:6c:ee:b0:80:cd:28:9c:cb:1b:64: af:5b:f4:8c:89:f7:87:7d:af:43:d4:ee:23:75:85:1a:19:6e: 9a:c9:27:81:38:9a:b8:d9:36:5f:3c:8a:c9:c8:df:2f:37:3d: 8f:3d:d7:0f:bb:fa:b5:01:66:96:2e:ee:d7:75:86:58:a5:17: fe:6f:79:83:60:7d:37:01:9e:eb:52:b1:d2:ed:4c:7c:2b:53: 11:7a:88:0b:b5:ab:fe:6a:2c:9a:43:31:87:b6:38:3c:ce:b9: 91:a9:03:29:f0:86:b9:af:74:41:1a:1c:08:db:a2:05:56:69: 64:50:0b:47:ec:af:28:97:7c:2a:85:6a:c3:13:e0:a5:27:65: 5a:15:82:78:f7:46:ff:27:65:f3:88:a2:11:a2:c7:ac:95:39: 99:5f:90:4f:3c:1d:1d:37:24:a0:71:32:08:e7:29:4e:f4:d9: 50:ac:68:0e:fd:02:63:15:84:6c:91:f7:a8:59:3c:ee:da:b2: 31:ce:77:ac:30:f2:b0:b5:66:f9:21:e7:b0:54:72:81:f5:18: ee:48:01:66:5a:d9:b3:a9:70:a0:38:df:f3:3a:90:48:d7:40: fd:93:f0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf8+mgDgh6HwP3hlgBMpceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUxMjE1MDMwMDM3WhcNMjUxMjE2MDMwMDM3WjAzMTEwLwYDVQQD EyhjN2YwY2RhNzM2MTYwMGE0M2U5OWI0NzZmY2YzNDUyMzAwOTk1NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRh5fiqyYcRfJkogb1REzk8ibujT jekZ5qTomyyRnmItg7hEvrEAedwabcCSK+nFRuIhG8RB0hpnqUw/pjd0ZCWopjwQ 8t1wSggMy+ZgyefkiedJmmJwi0pl/a/uejT/I7EIPi8H4fxXT0VJVB8aF021a3Wn 7POKq4NiNK8llh8QeNxodOuxjPp5LLSeLzPygHuQmU1zCafRbDYmVRVwdn7vfMNN s6sHdz5PXYW50d0xP4PNFE/kvfmdcSSaOq9hCq57VCtW+eoskGMI3ErcSYO95Bj+ cK+P5VSsSXwFsgVUAYwDlE5SFzQLWHrmg/Q3oJFbqLtUFl2OqfzQnBgaowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfwzac2FgCkPpm0dvzzRSMAmVUOMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw5Uz9jg ThitA4B4yElLPnv5bW/8R4ae7UNs7rCAzSicyxtkr1v0jIn3h32vQ9TuI3WFGhlu mskngTiauNk2XzyKycjfLzc9jz3XD7v6tQFmli7u13WGWKUX/m95g2B9NwGe61Kx 0u1MfCtTEXqIC7Wr/mosmkMxh7Y4PM65kakDKfCGua90QRocCNuiBVZpZFALR+yv KJd8KoVqwxPgpSdlWhWCePdG/ydl84iiEaLHrJU5mV+QTzwdHTckoHEyCOcpTvTZ UKxoDv0CYxWEbJH3qFk87tqyMc53rDDysLVm+SHnsFRygfUY7kgBZlrZs6lwoDjf 8zqQSNdA/ZPwRQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:27 2025 by rpki-client