This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: 60qI5WXi3QQLjhWEznVHkg67GEJMCCKMTFQ0RvM72MY= Subject key identifier: ED:D6:90:29:03:D7:FC:71:93:A1:2D:86:C5:1C:BC:3E:17:6F:FA:1A Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019AF389F3FC795C03CC750E2E849225A145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: IkM18x35Jev+6FsStEMfytUpI3ioYa83/O57XtWtlOo=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) 9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f3:fc:79:5c:03:cc:75:0e:2e:84:92:25:a1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=edd6902903d7fc7193a12d86c51cbc3e176ffa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:0a:8a:e4:33:f2:1a:98:32:b3:a8:c4:91: a0:ba:53:d0:15:e3:14:84:ef:b4:68:c8:33:5f:73: af:b8:19:7a:02:ad:9f:0f:ee:52:15:16:d6:b1:c6: 53:c9:5d:89:bc:71:57:4c:78:3b:8d:e9:7a:b5:56: df:66:7a:7c:8d:31:4a:63:de:70:31:b1:1a:4b:49: 62:c2:08:2e:b3:d6:f0:b7:2d:cf:6e:c2:4e:3c:1e: 45:21:0f:05:78:01:f8:78:ac:87:57:6f:d9:3a:ae: c9:18:c3:cf:7f:54:40:49:82:25:1b:0d:54:af:7c: 76:92:e7:14:55:56:5e:ff:91:78:d4:3a:cd:6a:3b: 2b:26:06:ee:c6:8e:f9:5a:b3:b4:fe:93:7a:1a:d7: eb:94:70:a5:22:d2:a2:08:c1:29:5f:10:46:76:97: 94:e2:af:92:fe:19:6a:fb:ea:88:b6:e0:8d:79:32: 54:ad:99:02:3a:63:8f:74:79:63:2e:5d:4d:35:2e: 52:e8:70:5e:18:d9:18:44:ba:c4:73:b6:c3:9b:3a: 9d:da:10:04:ff:03:af:f6:80:2d:84:92:ad:1f:f9: 1a:3a:ae:e0:22:54:e3:da:83:8c:94:ea:e8:0b:c5: 18:46:f9:49:eb:6b:f3:cf:93:06:0e:b8:08:a5:83: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D6:90:29:03:D7:FC:71:93:A1:2D:86:C5:1C:BC:3E:17:6F:FA:1A X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ba:e2:88:5e:86:29:b4:fc:8f:ca:91:ae:1c:85:b7:72:34: 82:75:6b:01:82:a5:65:f5:8a:c2:47:ae:f9:9d:a1:51:e1:be: 8d:fa:22:85:29:4f:30:2e:5c:ec:91:d0:e3:8f:86:77:94:21: 34:41:58:b4:82:e9:b6:eb:83:84:33:69:90:62:a7:7c:c1:31: c6:5c:5f:53:47:96:78:39:20:c1:fe:8c:dc:f3:b6:5e:3d:ae: f1:8d:b7:38:8e:e4:7e:35:fa:ed:6d:da:3d:31:20:64:f9:5d: 76:f7:28:e3:f3:34:53:02:e7:4d:3e:db:7a:fe:f3:69:b6:e6: 74:21:3b:09:44:91:e6:6a:3e:8a:bb:b2:71:48:3d:bb:b6:3d: b6:5a:72:50:b6:aa:ba:82:b8:ad:bb:f0:73:9b:71:96:a0:8e: d9:6b:d3:76:1d:98:d4:35:fb:4b:1b:48:f9:c4:d4:f1:23:db: 85:a1:0a:be:4e:f7:eb:0d:8d:bb:1b:f7:7a:bb:ba:f5:06:ba: 03:6e:c2:00:0e:ae:88:95:c1:14:de:b4:85:34:5a:fe:cf:0a: dc:3d:e5:33:2b:2e:cc:c5:24:16:a1:80:4f:2c:88:f8:6f:68: e9:ff:34:6b:ae:b2:41:2b:32:5d:71:05:ad:15:8c:23:d3:6e: 24:37:5c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifP8eVwDzHUOLoSSJaFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD EyhlZGQ2OTAyOTAzZDdmYzcxOTNhMTJkODZjNTFjYmMzZTE3NmZmYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncgKiuQz8hqYMrOoxJGgulPQFeMU hO+0aMgzX3OvuBl6Aq2fD+5SFRbWscZTyV2JvHFXTHg7jel6tVbfZnp8jTFKY95w MbEaS0liwggus9bwty3PbsJOPB5FIQ8FeAH4eKyHV2/ZOq7JGMPPf1RASYIlGw1U r3x2kucUVVZe/5F41DrNajsrJgbuxo75WrO0/pN6GtfrlHClItKiCMEpXxBGdpeU 4q+S/hlq++qItuCNeTJUrZkCOmOPdHljLl1NNS5S6HBeGNkYRLrEc7bDmzqd2hAE /wOv9oAthJKtH/kaOq7gIlTj2oOMlOroC8UYRvlJ62vzz5MGDrgIpYNMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3WkCkD1/xxk6EthsUcvD4Xb/oaMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLriiF6G KbT8j8qRrhyFt3I0gnVrAYKlZfWKwkeu+Z2hUeG+jfoihSlPMC5c7JHQ44+Gd5Qh NEFYtILptuuDhDNpkGKnfMExxlxfU0eWeDkgwf6M3PO2Xj2u8Y23OI7kfjX67W3a PTEgZPlddvco4/M0UwLnTT7bev7zabbmdCE7CUSR5mo+iruycUg9u7Y9tlpyULaq uoK4rbvwc5txlqCO2WvTdh2Y1DX7SxtI+cTU8SPbhaEKvk736w2Nuxv3eru69Qa6 A27CAA6uiJXBFN60hTRa/s8K3D3lMysuzMUkFqGATyyI+G9o6f80a66yQSsyXXEF rRWMI9NuJDdcAg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:33 2025 by rpki-client