This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json) Hash identifier: OSSGczkCu4xzhRSrECfgMxn34Dv9aV3wMM0/CfEhaJM= Subject key identifier: 45:7F:C9:0D:99:0A:41:82:94:0D:A4:B6:7D:FB:C3:48:C6:47:00:41 Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Certificate serial: 019B334473C04AF9F31C749C047ECFA993DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:01:22 +0000 Manifest this update: Thu 18 Dec 2025 21:01:22 +0000 Manifest next update: Fri 19 Dec 2025 21:01:22 +0000 Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: XNLGn+p95vRf9QszSFz8C48Q6TONJ2ZaFYnN4JyhqHk=) 2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:73:c0:4a:f9:f3:1c:74:9c:04:7e:cf:a9:93:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38 Validity Not Before: Dec 18 21:01:22 2025 GMT Not After : Dec 19 21:01:22 2025 GMT Subject: CN=457fc90d990a4182940da4b67dfbc348c6470041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:dc:17:29:ac:7b:49:a2:83:98:69:fb:5d: 1e:a0:28:20:d3:dd:ad:fc:76:bc:99:c3:9d:3b:94: d3:b8:0d:18:54:2a:04:86:ca:3c:8a:94:d2:3f:ca: 42:f8:78:57:c2:7f:85:9c:04:ab:d7:56:2e:28:80: 68:c3:40:90:94:de:d4:cd:e4:17:1d:c0:5d:14:ea: 65:a6:88:67:1d:eb:c3:50:60:00:c7:91:38:a3:10: f5:f9:80:e2:e3:a4:4f:ed:d7:c4:0c:50:67:b1:53: 89:d3:9b:96:c1:b2:d3:cd:07:61:ce:83:f0:b2:b1: 5c:44:2f:12:00:04:ad:b9:68:f4:28:dc:49:db:40: 08:f9:54:0f:cc:9a:d6:6f:ed:b0:0a:1d:4b:e1:2f: ff:be:99:7b:85:b0:39:55:d9:f5:9d:50:b1:b8:e0: f5:a5:f0:c7:40:11:8a:87:e1:0f:1a:a6:e2:e5:96: 22:8d:cb:b6:28:cc:82:f4:5e:82:ca:04:2c:8f:ad: 2e:6d:3a:2d:ef:44:84:03:f5:da:1c:ea:b9:27:41: 36:bb:80:10:38:2c:14:bc:d8:b5:f6:54:5c:03:2b: 93:5a:f5:1b:07:f0:6f:19:1b:6d:50:55:d9:df:ee: b7:1b:58:16:76:56:89:c4:b5:7c:80:c4:4e:17:13: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:C9:0D:99:0A:41:82:94:0D:A4:B6:7D:FB:C3:48:C6:47:00:41 X509v3 Authority Key Identifier: keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a1:5f:b2:b3:b8:fe:8f:18:74:87:29:a3:85:fa:88:c0:46: 42:9d:b0:45:f1:bb:4a:61:50:21:54:f1:b9:dd:ec:a0:19:9a: d7:ac:bc:81:12:f3:24:55:e3:06:f3:3f:4b:0d:26:3c:c9:c2: f1:40:d8:d9:14:14:dc:0f:ab:ca:34:ce:3d:99:07:cc:74:ae: 5f:ea:08:d4:8a:2c:0a:11:20:c3:cb:8b:a3:07:7b:b7:05:ba: df:33:6e:b4:8b:62:2f:8b:8f:2a:d3:a6:62:c1:9d:7b:bf:fd: d5:d2:d5:91:5b:6e:96:8d:e1:5c:b4:ee:41:3a:ec:ba:0c:ab: 2c:54:6a:bf:53:7d:5b:fd:2a:12:28:cd:c5:ca:76:a9:1a:0a: 0b:53:93:bf:3e:22:26:2e:26:9b:fd:2e:20:a5:22:23:2e:2f: 51:e1:78:b3:31:00:2c:27:7c:8e:eb:0e:32:21:a0:57:c6:78: 28:69:65:0e:36:46:24:59:81:4c:1e:09:b6:0e:41:d8:2f:f9: 4e:c6:b6:b3:46:21:14:2f:3c:4f:79:6c:fe:c7:95:a2:94:96: 19:98:87:fd:4a:43:ae:53:45:9a:8f:6b:a9:f8:93:18:7a:33: 58:28:26:39:95:d4:bf:9a:83:1a:66:27:1a:f5:87:74:97:15: f6:78:dc:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHPASvnzHHScBH7PqZPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzNmYzE5OGM3NzJmNTliOGVkZTUyOTg1NmI1MmVhMTc5 YTRlMzgwHhcNMjUxMjE4MjEwMTIyWhcNMjUxMjE5MjEwMTIyWjAzMTEwLwYDVQQD Eyg0NTdmYzkwZDk5MGE0MTgyOTQwZGE0YjY3ZGZiYzM0OGM2NDcwMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVXcFymse0mig5hp+10eoCgg092t /Ha8mcOdO5TTuA0YVCoEhso8ipTSP8pC+HhXwn+FnASr11YuKIBow0CQlN7UzeQX HcBdFOplpohnHevDUGAAx5E4oxD1+YDi46RP7dfEDFBnsVOJ05uWwbLTzQdhzoPw srFcRC8SAAStuWj0KNxJ20AI+VQPzJrWb+2wCh1L4S//vpl7hbA5Vdn1nVCxuOD1 pfDHQBGKh+EPGqbi5ZYijcu2KMyC9F6CygQsj60ubTot70SEA/XaHOq5J0E2u4AQ OCwUvNi19lRcAyuTWvUbB/BvGRttUFXZ3+63G1gWdlaJxLV8gMROFxN4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV/yQ2ZCkGClA2ktn37w0jGRwBBMB8GA1UdIwQY MBaAFOLD/BmMdy9ZuO3lKYVrUuoXmk44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2Et NWYyOWM5ZjU0OWU4LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82ODNmZmItNjVlYi00OTcyLTk5N2EtNWYyOWM5ZjU0OWU4 LzEvNHNQOEdZeDNMMW00N2VVcGhXdFM2aGVhVGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaFfsrO4 /o8YdIcpo4X6iMBGQp2wRfG7SmFQIVTxud3soBma16y8gRLzJFXjBvM/Sw0mPMnC 8UDY2RQU3A+ryjTOPZkHzHSuX+oI1IosChEgw8uLowd7twW63zNutItiL4uPKtOm YsGde7/91dLVkVtulo3hXLTuQTrsugyrLFRqv1N9W/0qEijNxcp2qRoKC1OTvz4i Ji4mm/0uIKUiIy4vUeF4szEALCd8jusOMiGgV8Z4KGllDjZGJFmBTB4Jtg5B2C/5 Tsa2s0YhFC88T3ls/seVopSWGZiH/UpDrlNFmo9rqfiTGHozWCgmOZXUv5qDGmYn GvWHdJcV9njcsA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:42:51 2025 by rpki-client