This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json) Hash identifier: FWB6gK/lrSs5tNuyl3D8brqnyGbCd5JSXkC1o8mUueY= Subject key identifier: D9:1E:BF:4B:34:31:D2:CC:78:6F:A8:60:1A:94:20:19:77:EC:CC:AE Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019AF49C1C17CDE119DAD5E01F0CAD57FE3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=) 2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: LTf+IYJOumnpatyAoNk9XbWv0cMsDMIF2m2E7LMMxKg=) 3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=) 4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=) 5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1c:17:cd:e1:19:da:d5:e0:1f:0c:ad:57:fe:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=d91ebf4b3431d2cc786fa8601a94201977ecccae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:10:8a:23:89:ca:ca:44:6c:79:df:17:75: 8a:80:f5:28:38:8f:68:37:20:08:d1:6a:0b:3a:6e: a7:0b:78:63:f5:0d:cf:8d:1e:ad:6b:05:51:04:95: 67:68:9e:7a:f3:91:7e:cf:f8:85:bd:92:7c:df:94: 48:da:b1:2f:a5:1b:a3:cd:62:60:d4:c8:22:82:c6: ae:61:b0:b3:a1:b0:a0:34:61:ea:be:96:8c:7b:f9: 0e:6a:a5:9e:34:52:57:75:cd:a9:0c:dc:2a:28:89: e2:0d:c9:93:cb:3c:35:78:f8:c8:19:22:73:27:da: 84:b9:c8:45:62:39:88:4f:d6:79:14:8c:f6:52:3f: a2:3d:a6:a4:66:51:c5:d9:20:0b:6f:1b:00:5a:b2: 1a:0c:2c:25:59:c7:82:7c:5f:73:26:dd:e7:cc:b9: c6:2e:ae:94:bc:f5:66:f4:58:2f:86:ad:c4:7a:27: 85:81:d2:59:0f:3b:0b:49:60:bf:de:bb:78:1a:58: e3:a9:d9:0a:d6:29:86:2c:b2:63:e7:cd:57:70:fe: de:1a:0d:59:60:df:83:fa:c9:04:38:28:62:3e:83: 78:e1:89:1b:9f:92:e3:f1:b6:5c:a9:19:19:38:d9: 79:ee:a9:f1:f8:1c:90:f1:a2:c4:f0:a0:3c:f5:ec: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:BF:4B:34:31:D2:CC:78:6F:A8:60:1A:94:20:19:77:EC:CC:AE X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:19:00:c7:0d:18:91:fd:d6:80:80:ac:42:1c:9f:fc:ff:c1: 80:56:48:e2:3e:a1:44:67:be:c6:69:aa:cd:4e:30:a1:dd:e7: 8d:77:83:55:ee:5b:32:53:d6:cc:16:cb:4f:01:51:e0:67:cd: 13:8d:b9:61:35:f5:60:f0:48:35:95:98:7b:b8:ca:56:ae:32: 93:62:ac:0c:25:fe:ed:c3:e9:27:37:07:cd:df:f2:fd:12:94: 89:76:72:05:ef:be:36:78:50:cc:52:a9:f6:9c:17:c3:ff:ec: 2f:5a:42:28:94:b3:46:5f:48:f1:2d:26:67:f3:f2:a1:10:91: a8:80:d1:6d:b6:b6:cd:9e:7f:cb:c7:76:ef:c4:ac:fa:e3:ee: 5f:6d:ce:89:91:0b:63:77:94:ba:42:98:2e:f4:a8:67:de:34: 7a:c8:d8:85:2a:07:37:6f:56:1b:ef:52:ba:c6:eb:5b:0c:fa: 8e:6c:ae:72:14:a7:28:bc:3c:0d:07:b3:e3:46:b6:5e:21:d2: f6:81:b4:f4:91:28:82:db:34:cd:a3:8f:c1:45:0d:93:2f:72: b0:41:fe:f3:fa:00:4e:dd:ea:53:3b:b6:8d:4f:2c:51:a6:11: 17:76:be:5a:64:f6:61:8f:1e:2b:83:51:43:c3:d3:6c:ad:e6: ca:7c:b2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBwXzeEZ2tXgHwytV/47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhkOTFlYmY0YjM0MzFkMmNjNzg2ZmE4NjAxYTk0MjAxOTc3ZWNjY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0YQiiOJyspEbHnfF3WKgPUoOI9o NyAI0WoLOm6nC3hj9Q3PjR6tawVRBJVnaJ5685F+z/iFvZJ835RI2rEvpRujzWJg 1MgigsauYbCzobCgNGHqvpaMe/kOaqWeNFJXdc2pDNwqKIniDcmTyzw1ePjIGSJz J9qEuchFYjmIT9Z5FIz2Uj+iPaakZlHF2SALbxsAWrIaDCwlWceCfF9zJt3nzLnG Lq6UvPVm9Fgvhq3EeieFgdJZDzsLSWC/3rt4GljjqdkK1imGLLJj581XcP7eGg1Z YN+D+skEOChiPoN44Ykbn5Lj8bZcqRkZONl57qnx+ByQ8aLE8KA89eztAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkev0s0MdLMeG+oYBqUIBl37MyuMB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBkAxw0Y kf3WgICsQhyf/P/BgFZI4j6hRGe+xmmqzU4wod3njXeDVe5bMlPWzBbLTwFR4GfN E425YTX1YPBINZWYe7jKVq4yk2KsDCX+7cPpJzcHzd/y/RKUiXZyBe++NnhQzFKp 9pwXw//sL1pCKJSzRl9I8S0mZ/PyoRCRqIDRbba2zZ5/y8d278Ss+uPuX23OiZEL Y3eUukKYLvSoZ940esjYhSoHN29WG+9SusbrWwz6jmyuchSnKLw8DQez40a2XiHS 9oG09JEogts0zaOPwUUNky9ysEH+8/oATt3qUzu2jU8sUaYRF3a+WmT2YY8eK4NR Q8PTbK3mynyyug== -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:04 2025 by rpki-client