This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json) Hash identifier: p9m+sPT/JT26JcpXe1fIxmtpYjdVmBs7G5jLACmbLWQ= Subject key identifier: B5:68:FD:45:01:D4:CC:A9:AB:3A:E3:8C:B3:3B:C9:5C:C4:D6:89:AA Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B484B4ECECFBC52119E2B0D0E73F7387E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft Manifest number: 070D Signing time: Mon 22 Dec 2025 23:00:53 +0000 Manifest this update: Mon 22 Dec 2025 23:00:53 +0000 Manifest next update: Tue 23 Dec 2025 23:00:53 +0000 Files and hashes: 1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=) 2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=) 3: Red5pkskUAFA8WcL1YOe9BUuOZM.roa (hash: S6qOREc3I0Eo71LK+o2EBPNiAlQAC2CgwyQqhyD99Xg=) 4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=) 5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: 3oh+4UhVIQ3kfXnr0xqo77ViHjButl/XZI8W2Ag1k1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:4e:ce:cf:bc:52:11:9e:2b:0d:0e:73:f7:38:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Dec 22 23:00:53 2025 GMT Not After : Dec 23 23:00:53 2025 GMT Subject: CN=b568fd4501d4cca9ab3ae38cb33bc95cc4d689aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:1a:f1:15:a6:1a:7a:d4:3e:92:4c:0d:77: 1d:7e:67:ac:4f:5f:70:dd:49:6b:42:92:e5:84:00: 1c:06:f2:70:47:40:19:5c:18:32:3a:06:7b:0a:f9: c4:73:9a:06:f8:da:a4:0d:88:b4:dd:a4:50:d8:d9: fd:ee:d1:ab:c1:f9:ef:06:de:38:81:de:a6:b4:53: 91:97:1c:87:68:d4:dd:81:9f:0d:d9:27:2f:b7:7c: f0:0b:a6:c4:32:9e:c6:4c:41:cf:a2:31:9c:05:b8: 21:df:84:bd:de:de:ac:17:e9:a9:19:54:95:b5:2b: 19:bc:61:d0:ed:b3:0f:fa:e3:98:7b:ef:c1:a7:de: 57:0a:a7:c2:fb:09:ec:7c:19:f2:fb:90:10:17:9a: 8c:2f:bd:c2:d9:63:a0:37:25:6a:0d:1f:74:2b:52: 2e:bd:65:3b:72:88:a5:50:47:b1:c7:27:d8:99:f5: 4a:8b:37:f4:e1:52:86:50:8a:95:86:f0:67:c7:94: c2:0b:7c:8a:f6:fe:44:d7:7a:72:2b:06:a6:32:c6: b6:9a:e6:79:78:5a:2e:bb:42:8a:7c:ab:be:10:c4: 62:d0:81:b0:02:de:9f:49:78:de:d2:52:79:b3:5c: df:12:46:b5:3c:03:89:fa:82:af:3f:7d:c5:e3:35: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:FD:45:01:D4:CC:A9:AB:3A:E3:8C:B3:3B:C9:5C:C4:D6:89:AA X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f8:a6:48:41:99:b7:cf:32:4a:60:70:ac:e2:ad:b8:48:c3: 5a:c6:e1:aa:fd:9c:bc:ac:79:ac:a2:aa:80:59:22:bd:a7:85: d3:0f:90:b4:6e:e6:1f:b6:3c:8c:08:fe:c4:85:3a:ca:d1:a4: 8e:ba:a4:a5:39:be:9a:87:f7:a5:7a:f1:52:7e:f9:61:ad:e8: 07:74:7c:07:ce:7b:77:78:fd:7f:43:36:13:12:b7:84:be:8c: 45:77:42:6f:89:96:af:8d:4a:84:fb:88:e0:4b:c3:24:18:b7: f0:5d:cd:6e:31:4b:f9:36:ac:d5:ca:a2:8b:10:a4:2f:50:cb: 56:eb:d5:ab:69:96:3b:f4:55:55:2b:fd:d6:eb:84:8c:a0:a1: 2e:ba:f1:25:e7:be:38:81:6d:3a:c8:60:06:6d:15:d4:b2:ea: 38:92:97:9c:05:42:93:25:18:8b:1e:18:04:6d:8f:73:d6:60: 79:cd:7f:60:45:ba:ab:c8:f5:cc:02:47:51:cc:a2:0a:6d:5c: da:d4:e2:d9:04:4b:f5:bf:28:be:d0:6f:8a:b9:22:ed:0f:c9: ae:1b:35:e4:55:ac:f4:00:58:cd:a9:3a:c5:dd:a4:6c:8d:f8: 6e:d9:ba:c7:6b:64:c5:ce:b6:d0:01:12:c9:29:45:fc:23:41: d1:0f:e8:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS07Oz7xSEZ4rDQ5z9zh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjUxMjIyMjMwMDUzWhcNMjUxMjIzMjMwMDUzWjAzMTEwLwYDVQQD EyhiNTY4ZmQ0NTAxZDRjY2E5YWIzYWUzOGNiMzNiYzk1Y2M0ZDY4OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRAa8RWmGnrUPpJMDXcdfmesT19w 3UlrQpLlhAAcBvJwR0AZXBgyOgZ7CvnEc5oG+NqkDYi03aRQ2Nn97tGrwfnvBt44 gd6mtFORlxyHaNTdgZ8N2Scvt3zwC6bEMp7GTEHPojGcBbgh34S93t6sF+mpGVSV tSsZvGHQ7bMP+uOYe+/Bp95XCqfC+wnsfBny+5AQF5qML73C2WOgNyVqDR90K1Iu vWU7coilUEexxyfYmfVKizf04VKGUIqVhvBnx5TCC3yK9v5E13pyKwamMsa2muZ5 eFouu0KKfKu+EMRi0IGwAt6fSXje0lJ5s1zfEka1PAOJ+oKvP33F4zW/CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVo/UUB1MypqzrjjLM7yVzE1omqMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvimSEGZ t88ySmBwrOKtuEjDWsbhqv2cvKx5rKKqgFkivaeF0w+QtG7mH7Y8jAj+xIU6ytGk jrqkpTm+mof3pXrxUn75Ya3oB3R8B857d3j9f0M2ExK3hL6MRXdCb4mWr41KhPuI 4EvDJBi38F3NbjFL+Tas1cqiixCkL1DLVuvVq2mWO/RVVSv91uuEjKChLrrxJee+ OIFtOshgBm0V1LLqOJKXnAVCkyUYix4YBG2Pc9Zgec1/YEW6q8j1zAJHUcyiCm1c 2tTi2QRL9b8ovtBvirki7Q/Jrhs15FWs9ABYzak6xd2kbI34btm6x2tkxc620AES ySlF/CNB0Q/ocQ== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:37 2025 by rpki-client