This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: w1uy2Ela270lME9+cCIR/vKPwQhfapEXuTEnsDSwoNo= Subject key identifier: 78:1F:25:8D:85:B7:4B:7D:95:1A:F1:75:7A:BC:B2:EC:E6:A0:18:A4 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B4D7176DC4C84E78233F6DE3D800130D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 17B5 Signing time: Tue 23 Dec 2025 23:00:40 +0000 Manifest this update: Tue 23 Dec 2025 23:00:40 +0000 Manifest next update: Wed 24 Dec 2025 23:00:40 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: FqhSzlQ6Y40mzwrDGb1XA++cXwfaiFbc9L+Yefh7vdw=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=) 4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=) 5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=) 13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=) 14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:76:dc:4c:84:e7:82:33:f6:de:3d:80:01:30:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Dec 23 23:00:40 2025 GMT Not After : Dec 24 23:00:40 2025 GMT Subject: CN=781f258d85b74b7d951af1757abcb2ece6a018a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:68:f3:12:92:f1:78:d7:df:cc:18:14:08: a2:5b:c5:53:4f:23:6c:8a:b0:c6:af:7f:91:5a:1c: f7:2f:ea:5d:d1:18:83:3d:75:11:12:68:fa:8f:14: d1:2c:a0:0e:07:03:e5:19:3a:8d:4d:38:ce:aa:09: 94:1f:59:96:34:d9:2c:48:36:79:d1:0a:58:50:26: 01:f1:10:b6:f1:6d:8f:ce:50:5d:9c:a8:9b:db:83: 01:99:ca:f1:01:9c:f4:e4:be:91:21:67:32:b6:ec: b3:ea:9f:20:82:41:cd:c4:d1:d5:38:93:d8:70:68: 9f:1f:32:59:8b:0b:9d:51:3d:6f:df:d5:c0:61:82: 2e:4f:72:c4:94:ba:53:d1:c7:2f:ad:0c:06:80:1e: d9:3b:41:2e:13:8b:52:a4:12:fa:c6:e7:08:ef:54: c8:fa:11:62:0c:99:24:ea:83:cf:0f:5c:6a:80:40: b6:cf:07:ce:44:61:ea:16:39:64:b9:4c:e1:d4:97: 30:a1:e9:e9:e8:a7:36:08:10:98:06:59:51:75:e8: f3:c9:a4:f0:59:30:f2:9f:d3:3a:4a:67:f7:01:57: 96:d8:14:aa:7c:da:78:43:a4:bd:a0:50:59:34:3d: 0d:a0:0a:6d:32:b5:c5:04:a2:cc:56:67:6a:ae:1b: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1F:25:8D:85:B7:4B:7D:95:1A:F1:75:7A:BC:B2:EC:E6:A0:18:A4 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1b:9a:18:b2:d5:c0:1c:86:99:65:e8:1a:53:a3:89:dd:09: 06:2b:fe:64:ea:1c:6f:0d:8f:e5:1b:18:15:ed:35:ee:95:99: 9b:2f:a3:2c:25:7a:69:72:69:b1:ea:86:7c:83:93:03:8d:81: 8b:dc:09:3b:45:90:29:03:ab:ac:5e:ad:ee:6d:2a:fd:44:cf: 90:33:f3:82:8d:3b:95:87:01:a8:a8:11:b9:a7:bc:1c:87:7e: 6f:9e:1b:4f:5f:e9:64:e4:21:85:fa:b6:7d:9e:fd:bd:fa:3e: f6:2c:2e:ad:5a:e1:e6:79:a4:f6:76:75:3f:50:04:f0:5d:a6: 44:84:ab:d3:b5:60:e9:45:65:24:d3:2b:15:f8:fe:6f:12:48: a4:0d:22:79:04:8a:fd:9e:fc:17:f7:32:11:c9:6d:88:c3:e4: b9:4c:0b:ef:48:83:fb:38:f3:e8:b0:0c:ba:8a:d1:d2:6a:a0: b1:13:08:69:2c:81:ca:ad:7b:58:6c:ad:51:2e:5e:57:fc:f4: 69:61:70:95:b4:53:9b:09:c3:4a:41:f4:f5:ba:8e:90:90:17: 20:d0:9d:6a:e3:dd:9a:36:99:0f:02:c9:47:40:8f:14:a3:ed: 7e:3d:f7:62:99:57:cd:a9:00:86:69:24:49:31:85:df:4f:57: 9c:50:01:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcXbcTITngjP23j2AATDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUxMjIzMjMwMDQwWhcNMjUxMjI0MjMwMDQwWjAzMTEwLwYDVQQD Eyg3ODFmMjU4ZDg1Yjc0YjdkOTUxYWYxNzU3YWJjYjJlY2U2YTAxOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfdo8xKS8XjX38wYFAiiW8VTTyNs irDGr3+RWhz3L+pd0RiDPXUREmj6jxTRLKAOBwPlGTqNTTjOqgmUH1mWNNksSDZ5 0QpYUCYB8RC28W2PzlBdnKib24MBmcrxAZz05L6RIWcytuyz6p8ggkHNxNHVOJPY cGifHzJZiwudUT1v39XAYYIuT3LElLpT0ccvrQwGgB7ZO0EuE4tSpBL6xucI71TI +hFiDJkk6oPPD1xqgEC2zwfORGHqFjlkuUzh1Jcwoenp6Kc2CBCYBllRdejzyaTw WTDyn9M6Smf3AVeW2BSqfNp4Q6S9oFBZND0NoAptMrXFBKLMVmdqrhvx5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgfJY2Ft0t9lRrxdXq8suzmoBikMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxuaGLLV wByGmWXoGlOjid0JBiv+ZOocbw2P5RsYFe017pWZmy+jLCV6aXJpseqGfIOTA42B i9wJO0WQKQOrrF6t7m0q/UTPkDPzgo07lYcBqKgRuae8HId+b54bT1/pZOQhhfq2 fZ79vfo+9iwurVrh5nmk9nZ1P1AE8F2mRISr07Vg6UVlJNMrFfj+bxJIpA0ieQSK /Z78F/cyEcltiMPkuUwL70iD+zjz6LAMuorR0mqgsRMIaSyByq17WGytUS5eV/z0 aWFwlbRTmwnDSkH09bqOkJAXINCdauPdmjaZDwLJR0CPFKPtfj33YplXzakAhmkk STGF309XnFAB7Q== -----END CERTIFICATE-----Generated at Wed Dec 24 03:56:06 2025 by rpki-client