This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json) Hash identifier: m9vVQEvLm2ZRHTPgrfqlkTCZ7+wHebPrmxsCA/F1feI= Subject key identifier: 57:87:EE:DC:7C:14:EB:58:DE:86:B0:07:4A:A7:4C:E3:73:63:29:08 Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B2FD53FB9D2C7EE8B93858EA787E38D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 05:01:03 +0000 Manifest this update: Thu 18 Dec 2025 05:01:03 +0000 Manifest next update: Fri 19 Dec 2025 05:01:03 +0000 Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: 5sIw8Bq+wC8l5RgrWdps7UBJuDVhE0MQOvoHNsw1u6I=) 2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:3f:b9:d2:c7:ee:8b:93:85:8e:a7:87:e3:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Dec 18 05:01:03 2025 GMT Not After : Dec 19 05:01:03 2025 GMT Subject: CN=5787eedc7c14eb58de86b0074aa74ce373632908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:10:2a:3c:7a:f6:84:4b:a7:29:14:c9:f5: b6:8d:2c:1c:04:02:59:fa:18:49:42:57:90:9f:98: 16:6a:1b:26:72:a6:74:f6:1d:27:23:4f:f0:96:b5: d9:44:ea:a1:53:45:3f:8b:7e:31:62:74:b8:b8:23: 24:bf:10:14:a7:fd:aa:0a:cb:89:dd:77:06:df:6c: d6:38:01:e1:3e:09:fe:5e:49:f4:02:63:24:0c:f9: 18:62:28:3c:49:94:90:60:a8:93:58:1d:a2:61:0d: 6f:90:a7:82:1e:ab:61:16:ea:63:f8:a4:14:91:17: f2:c0:c4:3a:30:8f:96:88:a9:1f:7e:59:3b:d5:9c: 93:09:51:b6:4c:99:07:20:88:3b:be:14:58:66:cd: eb:5a:64:ee:7b:df:e6:e7:a3:05:a9:9c:e2:2c:da: 3b:bc:fd:09:b0:d0:8f:0e:15:cc:63:8c:4c:17:32: e0:52:54:9e:e2:1b:11:12:a9:9d:93:1e:01:ec:5b: 81:b0:9c:2d:7f:f1:ee:66:37:db:92:28:b1:8d:30: 41:ea:4a:d6:ac:b1:3e:ae:c1:e3:66:99:f9:d8:10: e8:fb:05:8d:67:43:86:30:6a:f9:a0:10:06:21:4c: b0:e4:64:07:24:82:f9:e2:f9:77:c0:a0:a2:b4:f3: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:EE:DC:7C:14:EB:58:DE:86:B0:07:4A:A7:4C:E3:73:63:29:08 X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a4:9f:83:cb:97:cc:c0:ab:54:b0:93:b3:79:be:40:d7:98: 2c:c7:1b:ba:51:66:94:a4:17:2f:bc:88:d6:8f:8d:be:66:5b: 49:d9:00:5d:e1:ea:07:e2:b5:bd:88:f7:71:b1:9f:99:ef:76: 55:42:1b:25:da:dc:0c:f2:b6:e5:2c:88:27:64:b0:27:4a:a9: ba:32:50:89:82:50:12:b1:3e:df:d1:b4:61:9f:4d:f8:37:66: 3b:a1:62:0c:56:c4:91:30:7d:63:b3:e2:f3:6a:e1:30:1d:38: 85:7e:b7:51:08:c2:3e:11:0b:d4:37:b2:5a:58:6a:ce:4b:38: c5:f1:ae:42:be:82:8a:2d:b1:e7:af:f6:65:ee:dd:1b:d6:b1: 4b:72:c8:66:c3:d3:c4:10:19:77:23:d5:56:a1:07:b1:de:d3: 20:ba:62:62:bd:45:87:c9:6e:c2:7f:04:34:9f:29:d7:53:fd: 1f:6a:f8:32:42:b7:ca:68:d3:f5:21:42:d1:f1:00:0c:4f:69: dc:96:59:45:51:ba:0b:0d:ee:8f:c3:c4:f1:c3:06:81:0e:ed: f9:67:2a:3c:46:70:a9:c8:5e:b4:61:dd:d7:ca:31:b1:6e:48: c7:16:e0:9b:7e:77:4f:42:04:1f:22:94:3d:3f:14:89:54:a4: 4c:70:38:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1T+50sfui5OFjqeH441jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjUxMjE4MDUwMTAzWhcNMjUxMjE5MDUwMTAzWjAzMTEwLwYDVQQD Eyg1Nzg3ZWVkYzdjMTRlYjU4ZGU4NmIwMDc0YWE3NGNlMzczNjMyOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXcQKjx69oRLpykUyfW2jSwcBAJZ +hhJQleQn5gWahsmcqZ09h0nI0/wlrXZROqhU0U/i34xYnS4uCMkvxAUp/2qCsuJ 3XcG32zWOAHhPgn+Xkn0AmMkDPkYYig8SZSQYKiTWB2iYQ1vkKeCHqthFupj+KQU kRfywMQ6MI+WiKkfflk71ZyTCVG2TJkHIIg7vhRYZs3rWmTue9/m56MFqZziLNo7 vP0JsNCPDhXMY4xMFzLgUlSe4hsREqmdkx4B7FuBsJwtf/HuZjfbkiixjTBB6krW rLE+rsHjZpn52BDo+wWNZ0OGMGr5oBAGIUyw5GQHJIL54vl3wKCitPPxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeH7tx8FOtY3oawB0qnTONzYykIMB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaSfg8uX zMCrVLCTs3m+QNeYLMcbulFmlKQXL7yI1o+NvmZbSdkAXeHqB+K1vYj3cbGfme92 VUIbJdrcDPK25SyIJ2SwJ0qpujJQiYJQErE+39G0YZ9N+DdmO6FiDFbEkTB9Y7Pi 82rhMB04hX63UQjCPhEL1DeyWlhqzks4xfGuQr6Cii2x56/2Ze7dG9axS3LIZsPT xBAZdyPVVqEHsd7TILpiYr1Fh8luwn8ENJ8p11P9H2r4MkK3ymjT9SFC0fEADE9p 3JZZRVG6Cw3uj8PE8cMGgQ7t+WcqPEZwqchetGHd18oxsW5Ixxbgm353T0IEHyKU PT8UiVSkTHA4bA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:08:01 2025 by rpki-client