This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: II0W6A7rvowPEkjySSQz8ZVj4NCtM9/ZJgJikKyBYAk= Subject key identifier: 87:06:90:BC:70:B8:6E:B7:53:18:0F:E7:6F:DB:3D:81:58:18:D0:6E Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B2F67D16F9E6BA9839BD364E69776C431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 03:01:31 +0000 Manifest this update: Thu 18 Dec 2025 03:01:31 +0000 Manifest next update: Fri 19 Dec 2025 03:01:31 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: AHtoI62QdvA4BphLXrONclCMvwK5VB+hJ8gLJFkOktM=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) 9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:d1:6f:9e:6b:a9:83:9b:d3:64:e6:97:76:c4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Dec 18 03:01:31 2025 GMT Not After : Dec 19 03:01:31 2025 GMT Subject: CN=870690bc70b86eb753180fe76fdb3d815818d06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:06:d5:a2:a7:bc:bb:13:ef:8f:0e:da:c1: 1e:e9:33:ec:cc:d7:47:cc:d7:f4:f0:83:6c:77:5e: ef:85:b6:28:ec:64:bc:7d:43:f6:7b:06:8d:9f:fa: 93:00:a2:b3:f8:b3:53:38:fa:62:c3:db:58:9d:14: 3d:df:71:61:fb:79:8d:c8:f4:d1:31:ac:13:58:0c: b9:b0:e3:7b:10:e7:1c:47:45:10:c2:4c:de:53:de: d3:ae:2e:cf:0d:1c:9e:16:a5:9f:2a:83:de:c3:78: ec:54:e3:01:dc:39:6e:fd:72:0c:45:f0:e2:1e:2f: 08:64:7d:e4:5b:c8:ca:97:a8:a7:bc:e8:27:54:b0: 00:34:f5:41:12:f8:dd:5b:01:4f:a4:12:23:70:f6: 2a:e4:0f:62:ef:67:65:50:30:7a:d3:7d:67:77:d4: 90:21:35:00:6e:2c:aa:91:a5:ac:6b:5c:ea:ee:7d: 2e:7e:3f:3b:6f:59:42:00:18:35:aa:3d:e1:74:d0: 7a:b3:72:93:a2:d0:b0:53:10:49:3e:af:e0:0e:e9: b4:1a:c7:5d:f4:bb:60:6d:40:ae:f1:ef:28:c8:aa: 4a:7e:10:47:84:28:f9:66:98:77:86:98:52:19:c8: eb:11:66:f7:8d:52:ff:16:45:d9:8d:5e:24:0a:68: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:06:90:BC:70:B8:6E:B7:53:18:0F:E7:6F:DB:3D:81:58:18:D0:6E X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e1:77:05:48:ed:b0:3f:a2:5c:e8:3b:80:5b:68:4f:7f:58: c7:ce:04:52:2d:7a:b4:8b:59:11:84:f4:7f:52:a3:bf:af:ee: 65:fa:92:44:c3:70:30:48:02:a0:b1:12:3e:29:37:4c:9f:8a: e8:7c:cb:56:dc:29:59:d7:00:44:ce:85:30:8e:d4:aa:f8:2e: 4b:05:5f:24:0e:4e:cf:52:da:32:1c:65:52:10:3e:80:dd:d7: ce:e8:39:76:de:c5:a2:4f:5c:67:b8:9a:52:ff:cb:a6:b8:23: 0f:71:f2:5e:2a:b5:d7:96:fd:1f:75:9a:63:a1:57:0a:0f:d3: 00:2e:e2:c4:55:5d:a8:ac:d3:7d:33:3f:15:82:e5:f6:e3:31: 31:a9:1d:60:05:50:34:b0:28:8a:7c:a8:93:de:5b:8c:a0:95: 10:6b:b2:37:62:36:08:4c:75:2b:43:d2:73:14:13:3e:fb:22: cf:73:c5:d6:d8:e4:7a:9c:52:a0:8f:64:76:1f:7c:76:0c:75: e2:6e:a4:fc:73:4b:50:e9:ab:49:83:bd:bd:03:49:44:4e:cd: fd:d4:10:87:4f:df:1d:3d:9d:78:2d:fe:95:c1:41:14:c8:fd: de:9a:39:83:17:b2:72:68:9e:18:15:41:c6:fa:15:7d:90:01: ec:2c:ca:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ9Fvnmupg5vTZOaXdsQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUxMjE4MDMwMTMxWhcNMjUxMjE5MDMwMTMxWjAzMTEwLwYDVQQD Eyg4NzA2OTBiYzcwYjg2ZWI3NTMxODBmZTc2ZmRiM2Q4MTU4MThkMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgcG1aKnvLsT748O2sEe6TPszNdH zNf08INsd17vhbYo7GS8fUP2ewaNn/qTAKKz+LNTOPpiw9tYnRQ933Fh+3mNyPTR MawTWAy5sON7EOccR0UQwkzeU97Tri7PDRyeFqWfKoPew3jsVOMB3Dlu/XIMRfDi Hi8IZH3kW8jKl6invOgnVLAANPVBEvjdWwFPpBIjcPYq5A9i72dlUDB6031nd9SQ ITUAbiyqkaWsa1zq7n0ufj87b1lCABg1qj3hdNB6s3KTotCwUxBJPq/gDum0Gsdd 9LtgbUCu8e8oyKpKfhBHhCj5Zph3hphSGcjrEWb3jVL/FkXZjV4kCmgDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcGkLxwuG63UxgP52/bPYFYGNBuMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+F3BUjt sD+iXOg7gFtoT39Yx84EUi16tItZEYT0f1Kjv6/uZfqSRMNwMEgCoLESPik3TJ+K 6HzLVtwpWdcARM6FMI7UqvguSwVfJA5Oz1LaMhxlUhA+gN3Xzug5dt7Fok9cZ7ia Uv/LprgjD3HyXiq115b9H3WaY6FXCg/TAC7ixFVdqKzTfTM/FYLl9uMxMakdYAVQ NLAoinyok95bjKCVEGuyN2I2CEx1K0PScxQTPvsiz3PF1tjkepxSoI9kdh98dgx1 4m6k/HNLUOmrSYO9vQNJRE7N/dQQh0/fHT2deC3+lcFBFMj93po5gxeycmieGBVB xvoVfZAB7CzKmA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:05 2025 by rpki-client