This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: 28H04RoUN5NPf6VI6sQwauFmYYhbolVX5b0QAhOIqZY= Subject key identifier: D2:F2:B2:28:E3:1D:FF:33:92:44:ED:70:B5:77:B9:B7:61:82:38:60 Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019B3456C8B2C29ACD52DF7B45B88C96A2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 02:01:01 +0000 Manifest this update: Fri 19 Dec 2025 02:01:01 +0000 Manifest next update: Sat 20 Dec 2025 02:01:01 +0000 Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: w7PiNocQurN46mnQJDzHQe1pf+fu3j2tOr1EWRXGZGQ=) 3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=) 4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=) 5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:c8:b2:c2:9a:cd:52:df:7b:45:b8:8c:96:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Dec 19 02:01:01 2025 GMT Not After : Dec 20 02:01:01 2025 GMT Subject: CN=d2f2b228e31dff339244ed70b577b9b761823860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d7:11:df:d9:ce:7c:a0:48:01:4a:51:e0:c5: 7b:85:44:90:74:16:70:14:f3:a3:43:73:23:7a:fd: e4:c7:62:e8:8b:7b:b5:03:39:68:7d:fb:9e:47:e8: 54:e1:c4:1e:e5:71:a7:6c:cf:9b:da:51:56:87:98: 9b:04:2f:a1:11:da:62:14:d4:4b:cd:eb:30:08:2d: a9:bd:a9:47:bb:dd:6d:13:70:10:2e:95:ed:1e:58: 21:18:30:2b:24:01:cf:06:ee:73:f7:c9:12:32:b0: c4:aa:90:3d:ba:d0:da:f5:97:49:55:30:4e:2a:85: 3b:ee:96:e0:84:3f:b2:fa:36:71:4a:e3:29:3f:71: e1:e9:c1:72:ce:f6:5d:b4:0a:98:93:b5:e9:90:c7: 0c:7c:01:cb:dd:85:80:07:9d:43:3c:8c:ab:42:60: c7:77:c4:38:b6:0b:d6:8f:6f:bd:0a:8f:b4:a3:d8: 76:1a:55:4b:18:57:27:eb:e9:50:81:94:c4:14:d2: 2c:d0:85:d5:7e:c2:25:3b:a7:ce:3d:32:c8:9b:c8: 08:51:ee:3a:27:ec:6f:ff:17:8d:35:75:c5:27:25: c4:2e:36:b7:4a:79:49:d4:c1:8e:b3:31:a4:f8:c7: f4:9e:54:17:79:e1:ce:30:84:07:41:4f:8e:8d:82: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:B2:28:E3:1D:FF:33:92:44:ED:70:B5:77:B9:B7:61:82:38:60 X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:e2:4a:08:1a:7a:90:b3:4d:ba:e4:ba:51:11:2b:df:2e: d9:25:3b:fb:94:10:cd:2c:3a:63:9f:58:6c:b2:58:5a:d1:53: 8b:23:85:c4:c6:19:5a:ea:39:54:f8:e4:02:79:63:82:bf:06: dc:3b:be:20:c4:59:74:0b:86:72:c7:b7:95:67:55:fc:95:66: 95:8e:ab:63:21:de:be:f7:34:23:bf:8f:d0:70:c6:91:89:6d: 3a:f2:bb:fa:a7:18:cf:5b:7d:f5:bc:b1:e5:8c:2d:04:3c:86: ff:5a:1d:b2:92:d5:e5:ec:d6:ff:37:4c:71:b4:a6:82:22:42: 57:b2:fd:7d:69:30:7a:82:99:b1:4c:71:e6:3a:87:79:c7:1f: 76:e2:8c:a8:0e:2a:1b:ce:da:0a:a9:b4:93:a6:63:2f:51:52: 1d:f6:1c:4c:c5:df:f4:c4:d4:27:d2:58:d6:70:ad:e3:4d:7c: 71:b7:14:8a:c2:69:3c:02:a5:8a:5a:e1:70:f5:df:52:63:2a: 29:9d:a9:85:4c:6c:5d:c7:dd:57:fe:9c:b4:c1:8a:51:f0:e0: 2c:c9:19:f1:d9:a0:31:5f:3a:ab:f5:57:e9:d8:f6:55:8c:8f: 01:e9:42:3a:e9:e0:69:8f:79:ef:c9:67:c5:b7:99:9a:c5:9a: a4:12:72:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VsiywprNUt97RbiMlqLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjUxMjE5MDIwMTAxWhcNMjUxMjIwMDIwMTAxWjAzMTEwLwYDVQQD EyhkMmYyYjIyOGUzMWRmZjMzOTI0NGVkNzBiNTc3YjliNzYxODIzODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNcR39nOfKBIAUpR4MV7hUSQdBZw FPOjQ3Mjev3kx2Loi3u1AzloffueR+hU4cQe5XGnbM+b2lFWh5ibBC+hEdpiFNRL zeswCC2pvalHu91tE3AQLpXtHlghGDArJAHPBu5z98kSMrDEqpA9utDa9ZdJVTBO KoU77pbghD+y+jZxSuMpP3Hh6cFyzvZdtAqYk7XpkMcMfAHL3YWAB51DPIyrQmDH d8Q4tgvWj2+9Co+0o9h2GlVLGFcn6+lQgZTEFNIs0IXVfsIlO6fOPTLIm8gIUe46 J+xv/xeNNXXFJyXELja3SnlJ1MGOszGk+Mf0nlQXeeHOMIQHQU+OjYLd4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLysijjHf8zkkTtcLV3ubdhgjhgMB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXLiSgga epCzTbrkulERK98u2SU7+5QQzSw6Y59YbLJYWtFTiyOFxMYZWuo5VPjkAnljgr8G 3Du+IMRZdAuGcse3lWdV/JVmlY6rYyHevvc0I7+P0HDGkYltOvK7+qcYz1t99byx 5YwtBDyG/1odspLV5ezW/zdMcbSmgiJCV7L9fWkweoKZsUxx5jqHeccfduKMqA4q G87aCqm0k6ZjL1FSHfYcTMXf9MTUJ9JY1nCt4018cbcUisJpPAKlilrhcPXfUmMq KZ2phUxsXcfdV/6ctMGKUfDgLMkZ8dmgMV86q/VX6dj2VYyPAelCOungaY9578ln xbeZmsWapBJy5g== -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:07 2025 by rpki-client