This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: F7WkMbjdIGMnwdr/2W1Pph7VcwnXdhhzU+a9s5zBDRI= Subject key identifier: C3:76:81:9A:92:95:FB:34:9C:54:53:00:55:59:62:EC:16:4D:84:B7 Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019B24E3CD17E686FBE2E200B02E09575722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 1785 Signing time: Tue 16 Dec 2025 02:01:07 +0000 Manifest this update: Tue 16 Dec 2025 02:01:07 +0000 Manifest next update: Wed 17 Dec 2025 02:01:07 +0000 Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: hsjzhZ7QEWaZfM1S4WhV8Z20580XLYQ9WgPIuFo8m/E=) 3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=) 4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=) 5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:cd:17:e6:86:fb:e2:e2:00:b0:2e:09:57:57:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Dec 16 02:01:07 2025 GMT Not After : Dec 17 02:01:07 2025 GMT Subject: CN=c376819a9295fb349c545300555962ec164d84b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:35:2b:0f:7d:32:74:93:4b:fa:70:c7:7c: b9:81:a2:f6:ef:c0:0f:63:76:64:9e:5c:d0:ea:9f: 19:1f:93:ac:b5:40:0c:6c:85:92:87:6d:a6:1c:ec: 9d:15:77:f1:50:21:fb:65:62:13:84:23:00:93:ac: f6:f1:d0:0f:e5:4a:28:62:ac:59:0a:85:63:26:45: 61:86:2f:fd:5f:fb:52:b4:bb:61:41:a1:fc:1c:d9: 05:5c:6c:d0:71:a6:c7:19:18:8d:17:79:ed:d7:71: dc:38:b5:15:e8:7d:ff:fb:d8:32:98:86:cc:e8:8e: 5a:db:5c:62:56:43:8e:d2:6e:0c:9e:2f:83:32:6b: 30:56:4f:c5:5c:7a:06:f7:de:cd:61:88:b3:2e:5d: 4a:10:15:d5:09:31:4a:c0:ce:57:b9:cf:28:16:ca: cc:af:53:a7:7c:83:97:4b:68:1a:e0:15:a5:a6:eb: 0e:13:ba:3b:e6:1a:6a:ae:8b:e0:73:77:69:f8:58: 72:de:4a:b8:2d:d6:95:c6:c2:2b:56:2f:73:df:48: 10:45:52:c8:da:bb:f6:76:6f:6b:da:c2:94:19:6b: b9:2f:98:6f:a7:1d:cc:fc:fa:79:57:47:e4:87:f1: dc:e4:ac:98:7c:13:e4:38:55:b2:78:be:10:3c:ae: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:76:81:9A:92:95:FB:34:9C:54:53:00:55:59:62:EC:16:4D:84:B7 X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:69:c6:c5:97:0a:30:e1:e8:3b:7e:7f:03:33:d4:f9:89:44: 23:06:6e:67:d5:91:b8:9b:47:2c:e7:24:79:26:3c:59:36:70: 5d:b8:fa:b4:87:1e:b2:ca:5e:6c:6e:e1:71:5a:af:72:bd:84: 27:da:28:9b:b3:c4:ed:4b:0a:93:8c:a5:16:34:88:6c:12:d1: d8:d7:b0:6b:5c:3d:f5:58:13:05:0b:e0:fd:e1:fb:33:09:65: 16:2c:3e:06:c2:a5:f5:7c:e6:3d:89:1f:21:c2:61:78:2c:df: 6b:16:3f:f2:fc:b6:09:a2:b5:9b:67:b8:56:1a:e5:3f:4a:e6: af:c5:d2:25:f0:3b:08:72:24:b4:82:dd:24:7e:17:c3:c0:06: 48:63:34:e9:0e:77:9c:e5:3c:5b:bd:17:1b:16:7c:fe:4d:aa: 5e:89:71:45:0a:ad:14:ee:90:24:12:23:83:2c:41:ec:23:19: 64:de:e8:db:c3:3b:db:4f:5d:79:65:01:db:bf:e2:ec:5d:23: 00:6c:37:94:b2:7d:69:19:17:07:50:ab:80:82:19:9a:a7:5e: a8:78:a1:ca:6a:eb:05:f7:8e:fa:52:44:ac:bd:82:a4:45:03: a4:bd:b5:d3:cd:87:40:1d:6e:f4:27:7e:7d:10:23:0a:5b:af: e3:d9:a5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk480X5ob74uIAsC4JV1ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjUxMjE2MDIwMTA3WhcNMjUxMjE3MDIwMTA3WjAzMTEwLwYDVQQD EyhjMzc2ODE5YTkyOTVmYjM0OWM1NDUzMDA1NTU5NjJlYzE2NGQ4NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWc1Kw99MnSTS/pwx3y5gaL278AP Y3ZknlzQ6p8ZH5OstUAMbIWSh22mHOydFXfxUCH7ZWIThCMAk6z28dAP5UooYqxZ CoVjJkVhhi/9X/tStLthQaH8HNkFXGzQcabHGRiNF3nt13HcOLUV6H3/+9gymIbM 6I5a21xiVkOO0m4Mni+DMmswVk/FXHoG997NYYizLl1KEBXVCTFKwM5Xuc8oFsrM r1OnfIOXS2ga4BWlpusOE7o75hpqrovgc3dp+Fhy3kq4LdaVxsIrVi9z30gQRVLI 2rv2dm9r2sKUGWu5L5hvpx3M/Pp5V0fkh/Hc5KyYfBPkOFWyeL4QPK7CWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN2gZqSlfs0nFRTAFVZYuwWTYS3MB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGnGxZcK MOHoO35/AzPU+YlEIwZuZ9WRuJtHLOckeSY8WTZwXbj6tIcesspebG7hcVqvcr2E J9oom7PE7UsKk4ylFjSIbBLR2Newa1w99VgTBQvg/eH7MwllFiw+BsKl9XzmPYkf IcJheCzfaxY/8vy2CaK1m2e4VhrlP0rmr8XSJfA7CHIktILdJH4Xw8AGSGM06Q53 nOU8W70XGxZ8/k2qXolxRQqtFO6QJBIjgyxB7CMZZN7o28M7209deWUB27/i7F0j AGw3lLJ9aRkXB1CrgIIZmqdeqHihymrrBfeO+lJErL2CpEUDpL21082HQB1u9Cd+ fRAjCluv49mlUA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:43:21 2025 by rpki-client