This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft File: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json) Hash identifier: dGQcqXyVREd0ZbNFTy3BrmQCFZs94gqJK714S3PTszw= Subject key identifier: 9F:2C:73:9C:D3:2A:FC:08:0F:F8:28:13:77:81:33:CD:1D:34:58:DD Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Certificate serial: 019AF0888A2189909985970A7D0722DDF3DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft Manifest number: F8 Signing time: Fri 05 Dec 2025 22:01:10 +0000 Manifest this update: Fri 05 Dec 2025 22:01:10 +0000 Manifest next update: Sat 06 Dec 2025 22:01:10 +0000 Files and hashes: 1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: /Ndl64TpVhlOAjo3VMPMA4tDWEZjqXS1+dbevMVtIXk=) 2: 73mAifFbbkq89y_6L8I3tNV-FFU.roa (hash: NX+SZCE/iRZZ/qn+fphnC6ahtdeAZSBcTHMFH46HmuE=) 3: x-ZoxCE3dUHDoEInx3KHfEs04No.roa (hash: PP3ssbmv8MfAGIHN4N1jOdg4vgiSdSRg+O85vMICYao=) 4: xjXrY-VAjEXl4AAAJVLLeMGfATA.roa (hash: 4ceK2GE5dyzV4qQFHetdVESaIRknf36gz2mazUprQdk=) 5: ylzVDNqLg-U7e19yN1XUnVv4-mM.roa (hash: xAtySOG4/LBLHBr0GZndFnBbQp0zDTEtHkUbGSqzQLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8a:21:89:90:99:85:97:0a:7d:07:22:dd:f3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Validity Not Before: Dec 5 22:01:10 2025 GMT Not After : Dec 6 22:01:10 2025 GMT Subject: CN=9f2c739cd32afc080ff82813778133cd1d3458dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:6a:d8:8d:62:f4:8e:19:a8:e7:3f:ad:c8: 6a:e2:38:2c:96:41:18:10:6b:57:5a:7c:c9:8a:42: c1:f5:5f:d4:be:69:b5:94:35:f1:f0:42:e5:05:ac: 37:73:40:3b:cf:8e:64:fc:ff:54:b5:0d:bf:b8:8e: 2d:c9:05:8a:d8:a3:fe:35:00:72:91:45:76:d7:f6: f6:56:a3:14:53:3e:6c:8e:fd:48:a5:db:e6:57:00: 31:61:6b:34:bc:6b:b7:7f:31:7f:5e:e5:aa:01:7d: eb:a2:61:24:16:4a:82:d2:66:9e:67:90:31:d7:7b: aa:cc:e3:90:35:60:73:12:61:50:9c:bd:63:eb:49: 3d:0c:b8:ea:be:d3:24:fa:67:26:c7:b3:e2:7c:72: 4b:99:0f:fc:b2:18:11:49:db:94:19:de:5d:da:a5: 33:73:8e:dd:cb:2a:55:f1:45:7d:5a:d3:b3:7c:8f: 29:34:e8:07:d7:86:02:e6:30:af:9f:e2:7b:37:1d: 73:f9:58:70:ba:e6:46:b7:f8:95:bb:d8:dc:27:10: 37:82:1b:11:2d:37:f5:6c:52:af:59:a3:27:d5:d8: 08:44:6e:93:0f:6b:50:49:67:4c:05:3a:4f:05:0f: cd:36:8e:c7:27:38:7f:47:97:b7:67:02:7e:28:dc: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2C:73:9C:D3:2A:FC:08:0F:F8:28:13:77:81:33:CD:1D:34:58:DD X509v3 Authority Key Identifier: keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:57:21:29:97:c7:1e:11:4c:c4:d3:f6:22:27:1e:22:5d:6f: 5d:84:52:fa:8b:06:d7:11:fa:32:e6:d5:c8:46:b5:0b:6a:6b: fa:f7:e3:be:c6:f2:46:6b:53:bb:85:d1:94:c9:32:91:43:fb: 8a:b0:f8:05:79:ff:81:05:4e:cc:37:4b:3d:63:b8:9b:97:15: b1:7f:c5:b1:3f:c9:0d:6e:f6:91:c4:02:5e:7e:d8:2f:12:77: a3:e6:c6:64:8e:d6:99:b6:c7:62:bc:7c:fc:e6:3f:43:45:6a: 9a:7d:9f:d6:6c:02:1d:f7:e6:02:d1:f8:59:d6:78:7b:fe:23: 71:e9:97:23:26:11:36:30:16:9f:fe:10:c2:4c:13:f7:09:2e: 48:08:b7:36:17:b3:a0:65:8f:b7:45:9e:f6:69:04:bb:2e:79: 54:ec:f4:fb:d8:28:56:e8:2f:e4:0b:b9:b1:41:c1:e1:44:38: 6f:01:79:92:84:e9:66:61:f3:7d:ce:c0:b9:81:51:e9:8c:19: 5c:99:2e:9b:b7:24:65:4d:9e:f8:fa:0e:9d:ca:b7:6b:f0:87: ab:c1:a0:2d:46:df:ba:0c:2d:b4:6a:3b:62:65:92:29:6c:9e: e8:1c:be:ef:08:18:a8:79:1c:f5:c5:98:ae:32:20:d6:61:e9: 05:39:cd:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIohiZCZhZcKfQci3fPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ4M2I3ODMwOGQwOWU2NWQyMTUwZWFjMTYyM2RlZTk2 ZDRjNGIwHhcNMjUxMjA1MjIwMTEwWhcNMjUxMjA2MjIwMTEwWjAzMTEwLwYDVQQD Eyg5ZjJjNzM5Y2QzMmFmYzA4MGZmODI4MTM3NzgxMzNjZDFkMzQ1OGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPhq2I1i9I4ZqOc/rchq4jgslkEY EGtXWnzJikLB9V/Uvmm1lDXx8ELlBaw3c0A7z45k/P9UtQ2/uI4tyQWK2KP+NQBy kUV21/b2VqMUUz5sjv1IpdvmVwAxYWs0vGu3fzF/XuWqAX3romEkFkqC0maeZ5Ax 13uqzOOQNWBzEmFQnL1j60k9DLjqvtMk+mcmx7PifHJLmQ/8shgRSduUGd5d2qUz c47dyypV8UV9WtOzfI8pNOgH14YC5jCvn+J7Nx1z+VhwuuZGt/iVu9jcJxA3ghsR LTf1bFKvWaMn1dgIRG6TD2tQSWdMBTpPBQ/NNo7HJzh/R5e3ZwJ+KNwhxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8sc5zTKvwID/goE3eBM80dNFjdMB8GA1UdIwQY MBaAFOItg7eDCNCeZdIVDqwWI97pbUxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQt NjAzYjI5ZmQxYTA4LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQtNjAzYjI5ZmQxYTA4 LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1chKZfH HhFMxNP2IiceIl1vXYRS+osG1xH6MubVyEa1C2pr+vfjvsbyRmtTu4XRlMkykUP7 irD4BXn/gQVOzDdLPWO4m5cVsX/FsT/JDW72kcQCXn7YLxJ3o+bGZI7WmbbHYrx8 /OY/Q0Vqmn2f1mwCHffmAtH4WdZ4e/4jcemXIyYRNjAWn/4QwkwT9wkuSAi3Nhez oGWPt0We9mkEuy55VOz0+9goVugv5Au5sUHB4UQ4bwF5koTpZmHzfc7AuYFR6YwZ XJkum7ckZU2e+PoOncq3a/CHq8GgLUbfugwttGo7YmWSKWye6By+7wgYqHkc9cWY rjIg1mHpBTnNsg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:01 2025 by rpki-client