This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json) Hash identifier: yBpOsbC6l0U5LN1LJGFOetShvwK7brknPgBRsIn7nGk= Subject key identifier: 5E:DD:D7:BF:B2:8F:8E:74:23:16:B2:BE:60:65:F7:9F:12:CC:AB:43 Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63 Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963 Certificate serial: 019AF2AD69B10F6E1BC0EDB04FD15FBBD9E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft Manifest number: 179E Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: 6ytibQXjOjv-ZANwibgbWAzZG2U.roa (hash: Y/Z/9OvD6QNjfuwrTmUdgOamFL52z6ksqnz9FZTa6JU=) 2: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: R2Vd3T5gGxC5CljlubjyLXHBYdjJdHXnL3BJt9dl3ZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:69:b1:0f:6e:1b:c0:ed:b0:4f:d1:5f:bb:d9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=5eddd7bfb28f8e742316b2be6065f79f12ccab43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:db:b6:44:ec:d2:e2:84:7d:f6:e5:8b:a5: 28:2f:3e:73:ca:e5:b4:75:f8:ea:20:c0:14:e5:41: ab:ab:1f:ef:6d:de:cd:d1:3c:62:15:50:d8:a3:6b: b1:b8:b9:d6:d0:d4:bb:bc:c1:b2:90:d1:6e:6d:50: 08:52:87:0a:88:d1:0e:0e:30:37:ba:5a:2b:d9:94: 76:9b:c7:b6:b0:77:98:5d:e5:e6:84:2b:e6:30:10: 53:6c:f8:82:89:07:5d:58:54:36:59:31:9f:4f:e4: a5:67:ae:1b:98:aa:8d:70:d1:26:05:6a:5b:6a:0a: 3e:25:9a:48:dc:3a:e2:79:54:2b:75:fd:37:e9:f4: 82:e7:85:ca:d9:b1:ae:c5:bf:1f:38:3c:bd:6d:b7: ba:3d:19:64:48:32:96:c3:bc:2d:19:f0:c9:b3:47: 46:74:34:fb:fc:12:db:ad:98:25:f1:62:88:76:ad: 67:c1:3e:85:df:dc:6c:12:a5:76:54:99:61:4e:70: 56:86:b1:ab:be:6e:67:1a:79:53:7f:a3:6d:54:a0: e1:77:a3:89:b1:b5:3a:79:45:c7:07:2a:66:50:12: 2e:6b:f9:74:89:6e:d3:11:bb:96:a5:0a:a6:45:7f: 78:5e:94:47:75:5f:5f:7f:9c:70:0a:80:45:3f:a8: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:D7:BF:B2:8F:8E:74:23:16:B2:BE:60:65:F7:9F:12:CC:AB:43 X509v3 Authority Key Identifier: keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2e:91:d7:e5:3f:1e:37:c9:aa:b1:ad:11:08:23:f3:0b:fc: a9:9c:cb:f7:0c:f6:27:75:b1:0b:18:24:7a:9a:78:80:b9:9d: 1a:04:4d:52:6a:8e:71:dc:0c:e4:d1:31:a9:37:1e:2b:e0:17: 45:b1:83:23:e2:dd:ab:bc:c3:1c:7e:31:dd:4f:f2:4e:71:df: cd:20:5c:25:ac:19:d8:6b:91:f1:0e:b1:7e:3c:b3:b0:cc:c2: 0a:14:e8:6d:4d:1c:0f:38:ef:a1:5b:8e:90:80:fd:f8:0b:b3: 8c:44:57:86:b5:02:06:b6:b1:0f:33:8a:bd:11:ef:01:6b:84: 17:cc:dc:2e:00:f9:0a:96:e3:ff:f7:fc:75:0e:ab:05:1a:48: 47:46:50:bd:a7:55:ef:7c:5d:71:8b:5f:d2:55:ff:0f:a7:6f: a2:8c:fa:69:a3:b2:de:8f:f6:f5:2e:01:e2:c3:be:05:2f:a0: bf:51:20:a7:64:11:90:d3:34:bf:f8:07:58:f2:c5:17:44:dc: e5:58:fa:7b:bb:b1:ef:91:24:6e:56:9f:a2:10:b7:db:47:e0: 24:3e:67:1a:1e:93:41:56:86:4c:e7:30:9d:ad:85:d4:81:6a: 7f:05:74:ce:b9:1f:98:84:7b:cd:bd:2e:79:59:dd:e4:4a:d5: 85:9f:7f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWmxD24bwO2wT9Ffu9nlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy NGQ5NjMwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg1ZWRkZDdiZmIyOGY4ZTc0MjMxNmIyYmU2MDY1Zjc5ZjEyY2NhYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHbtkTs0uKEffbli6UoLz5zyuW0 dfjqIMAU5UGrqx/vbd7N0TxiFVDYo2uxuLnW0NS7vMGykNFubVAIUocKiNEODjA3 ulor2ZR2m8e2sHeYXeXmhCvmMBBTbPiCiQddWFQ2WTGfT+SlZ64bmKqNcNEmBWpb ago+JZpI3DrieVQrdf036fSC54XK2bGuxb8fODy9bbe6PRlkSDKWw7wtGfDJs0dG dDT7/BLbrZgl8WKIdq1nwT6F39xsEqV2VJlhTnBWhrGrvm5nGnlTf6NtVKDhd6OJ sbU6eUXHBypmUBIua/l0iW7TEbuWpQqmRX94XpRHdV9ff5xwCoBFP6ieWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7d17+yj450IxayvmBl958SzKtDMB8GA1UdIwQY MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt NzFlYjk1ZjUwZTViLzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMS6R1+U/ HjfJqrGtEQgj8wv8qZzL9wz2J3WxCxgkepp4gLmdGgRNUmqOcdwM5NExqTceK+AX RbGDI+Ldq7zDHH4x3U/yTnHfzSBcJawZ2GuR8Q6xfjyzsMzCChTobU0cDzjvoVuO kID9+AuzjERXhrUCBraxDzOKvRHvAWuEF8zcLgD5Cpbj//f8dQ6rBRpIR0ZQvadV 73xdcYtf0lX/D6dvooz6aaOy3o/29S4B4sO+BS+gv1Egp2QRkNM0v/gHWPLFF0Tc 5Vj6e7ux75EkblafohC320fgJD5nGh6TQVaGTOcwna2F1IFqfwV0zrkfmIR7zb0u eVnd5ErVhZ9/Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:07 2025 by rpki-client