This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: YtEdJxA6C33bA4Gjus5PFP5SGsp89jyz6Tsf3J3hqr0= Subject key identifier: 16:BA:DD:B4:1E:88:0A:12:60:29:6F:3E:1E:FC:6E:82:31:1C:2F:4C Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019AF24005BE908A8DD683886A9BA2313954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 17A8 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: Lk4TJ2Si/PaaDbwpMMyOKRWG12j/nXGj1h/9b0FDP04=) 2: 4peSVxTbY4zslmn56rvjicgQc7I.roa (hash: +nu5P8vI7PFQXwbJ6t2Zz3coXWOy63zFOw3M4zv4uDY=) 3: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=) 4: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=) 5: Z_3Sd3D3RdwmwjVhN9NqfA7BzpY.roa (hash: Sg8kImSh1cuIQfozfNlnqJy3ut54w54Xyh4htMBXe1s=) 6: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=) 7: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=) 8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:be:90:8a:8d:d6:83:88:6a:9b:a2:31:39:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=16baddb41e880a1260296f3e1efc6e82311c2f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:e8:4b:ce:c1:cc:e8:5f:4f:73:ce:4f:6e: fa:4e:94:fe:45:9f:72:7e:ab:5d:87:68:f4:d5:d5: 19:66:96:7f:ee:0a:ac:f8:ac:b3:b3:9a:9e:c4:e9: 25:67:14:eb:b7:4a:b4:99:6f:05:20:74:00:ce:72: ca:ea:8d:50:6a:e6:5c:5a:ff:85:40:e5:fa:d0:30: b2:78:d4:bc:97:30:92:31:6e:15:ec:30:77:9d:28: a3:e3:29:e4:46:dc:ae:12:b9:06:48:be:a9:b4:a4: 9b:ca:99:87:65:d3:e5:8c:4e:17:61:a6:79:ce:e3: fc:c9:01:f9:e1:19:6b:63:ea:71:b5:5d:d3:15:86: 19:26:7d:c2:8c:e4:86:73:7e:80:3e:62:24:60:86: ca:3d:1c:93:3b:de:05:e1:08:2a:92:f6:b3:01:8b: 03:1d:99:56:f1:ed:a7:21:93:e6:18:83:17:f0:f2: 55:e8:38:32:4f:58:36:b8:ca:67:2a:a0:86:15:cf: 85:fc:b5:c1:98:56:24:b4:63:2f:82:c7:ce:3c:6a: 7e:d1:4d:87:af:3b:19:0d:c4:29:66:07:bf:18:7f: 02:53:3e:7f:34:66:f0:a1:51:29:df:30:f3:8b:3d: c7:d1:a3:9c:57:44:df:3f:01:d3:87:19:3c:44:30: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:DD:B4:1E:88:0A:12:60:29:6F:3E:1E:FC:6E:82:31:1C:2F:4C X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6e:0a:69:0c:16:85:51:9a:e3:2f:62:ce:88:4c:91:9d:92: 88:b8:22:36:06:f0:92:52:9c:4a:b3:de:b4:6b:c6:40:7c:ec: 70:42:14:2c:f5:0f:26:a0:32:59:2c:a9:04:1e:58:7a:d6:47: 8f:60:8e:e2:a8:6c:41:4d:be:85:5d:5c:a9:25:dc:0f:4f:89: a2:3b:c3:ab:bf:77:39:fa:f6:26:46:c7:e1:44:16:40:15:ab: 2b:16:91:74:10:2b:c3:29:0b:99:43:c7:21:18:77:b8:27:2e: 23:0e:34:2c:31:bb:65:8e:3d:7c:96:e6:50:73:a0:0f:6d:1b: 2e:fc:07:b2:11:7e:a3:b2:88:44:47:5d:cf:e4:4a:1e:1c:3e: 6a:cd:e9:bc:f7:cd:3e:5d:30:a4:e3:54:b8:a4:16:7c:8f:81: f9:65:68:2d:79:6e:e1:4a:a7:ee:16:e9:21:aa:c0:21:be:ab: 48:43:b3:3a:04:13:dd:c4:d8:82:9b:b9:97:b5:36:e7:e5:5c: 05:e7:19:70:19:f0:4a:e7:9f:92:c2:cf:24:3d:02:8d:63:c6: 05:b9:dc:8d:bc:90:03:f4:dc:d8:60:ba:aa:82:0c:bc:5c:2e: 79:9e:ca:57:25:b4:d7:a4:dc:16:62:08:85:4a:f0:80:06:76: b4:36:fe:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAW+kIqN1oOIapuiMTlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EygxNmJhZGRiNDFlODgwYTEyNjAyOTZmM2UxZWZjNmU4MjMxMWMyZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNXoS87BzOhfT3POT276TpT+RZ9y fqtdh2j01dUZZpZ/7gqs+Kyzs5qexOklZxTrt0q0mW8FIHQAznLK6o1QauZcWv+F QOX60DCyeNS8lzCSMW4V7DB3nSij4ynkRtyuErkGSL6ptKSbypmHZdPljE4XYaZ5 zuP8yQH54RlrY+pxtV3TFYYZJn3CjOSGc36APmIkYIbKPRyTO94F4QgqkvazAYsD HZlW8e2nIZPmGIMX8PJV6DgyT1g2uMpnKqCGFc+F/LXBmFYktGMvgsfOPGp+0U2H rzsZDcQpZge/GH8CUz5/NGbwoVEp3zDziz3H0aOcV0TfPwHThxk8RDD/7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa63bQeiAoSYClvPh78boIxHC9MMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfm4KaQwW hVGa4y9izohMkZ2SiLgiNgbwklKcSrPetGvGQHzscEIULPUPJqAyWSypBB5YetZH j2CO4qhsQU2+hV1cqSXcD0+JojvDq793Ofr2JkbH4UQWQBWrKxaRdBArwykLmUPH IRh3uCcuIw40LDG7ZY49fJbmUHOgD20bLvwHshF+o7KIREddz+RKHhw+as3pvPfN Pl0wpONUuKQWfI+B+WVoLXlu4Uqn7hbpIarAIb6rSEOzOgQT3cTYgpu5l7U25+Vc BecZcBnwSuefksLPJD0CjWPGBbncjbyQA/Tc2GC6qoIMvFwueZ7KVyW016TcFmII hUrwgAZ2tDb+Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:56 2025 by rpki-client