This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json) Hash identifier: Vs23/zhhnxzWrfIfsQ1Z+FOQJJoVcqrx3xVZ8jIXr5M= Subject key identifier: DD:61:66:52:FA:2A:03:42:B7:A4:B3:F7:06:F8:3C:47:D2:2F:44:47 Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96 Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296 Certificate serial: 019B5AF6AB67C47FB307B125175ED77CC450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft Manifest number: 43 Signing time: Fri 26 Dec 2025 14:01:13 +0000 Manifest this update: Fri 26 Dec 2025 14:01:13 +0000 Manifest next update: Sat 27 Dec 2025 14:01:13 +0000 Files and hashes: 1: ePD_PZq2SA3Fh1qdkHm5Afa6Vks.roa (hash: v/E9wRP8401S3jY/oWtwnFxF/BL1kSc3z6Bit9lF6Zo=) 2: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: ORzwAUgG2XBMz05xYQr78Mrr8i5i5g6mfGK1u20sNtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:ab:67:c4:7f:b3:07:b1:25:17:5e:d7:7c:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296 Validity Not Before: Dec 26 14:01:13 2025 GMT Not After : Dec 27 14:01:13 2025 GMT Subject: CN=dd616652fa2a0342b7a4b3f706f83c47d22f4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:90:7d:ac:64:5f:46:dd:f8:7d:18:a3:3d: 59:01:d0:a8:2d:99:a9:c0:75:7b:24:dc:e0:e1:f7: a6:70:18:82:b3:18:cb:9c:b1:17:8c:16:d3:85:89: dc:45:9c:18:f8:44:62:33:ed:36:08:7f:23:c3:d2: e7:07:07:8d:e0:9f:7c:67:c1:01:28:a0:70:a3:ba: 95:bb:a4:15:2c:50:f9:d3:df:f6:7a:1f:5a:49:5d: fa:01:ca:e4:12:ad:1d:91:03:73:6f:58:7c:3f:73: 78:fd:74:1d:23:80:8e:63:a2:69:11:f2:76:dc:f5: b3:fd:ab:ea:6c:a1:df:af:39:67:58:6f:0d:ae:86: b3:24:8f:88:27:1e:1a:b9:2f:cd:54:ee:92:c5:ff: af:f5:83:b7:23:27:93:04:26:6a:5b:34:a4:27:62: 08:19:d6:eb:5a:94:3f:d4:85:6e:65:46:93:c2:07: b8:7b:72:12:a8:0f:03:11:fe:3e:de:f2:93:55:a2: 69:5d:6b:3f:1a:d3:5a:01:9c:89:19:11:90:97:af: 18:6a:f5:29:89:05:4b:58:5e:e5:4e:d6:ee:52:d2: e1:50:2f:9f:4b:0c:ff:7a:26:e4:a2:05:43:f4:6f: 82:9a:cf:1f:ee:04:4c:26:c0:5a:0e:19:17:1f:b4: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:66:52:FA:2A:03:42:B7:A4:B3:F7:06:F8:3C:47:D2:2F:44:47 X509v3 Authority Key Identifier: keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:85:6a:63:02:f1:f6:10:13:ad:23:40:02:0f:21:52:34:7a: bc:a6:d5:ec:db:20:72:6e:d5:0f:a1:42:38:8f:ce:7f:bf:c1: 40:38:d3:66:24:a6:40:94:98:90:fe:f0:9b:8b:83:79:05:72: 42:c9:ea:64:78:10:2a:64:cd:f9:53:b1:2a:b0:46:96:91:3a: 18:12:1f:11:12:08:fd:59:06:b8:4c:30:43:2f:5e:7f:bd:b9: 85:35:1b:2d:ea:7e:ad:77:cd:14:bf:89:ae:f4:99:2c:92:91: 5f:54:f8:0f:46:a2:2e:ad:e4:f3:cf:a1:b9:b6:6a:86:aa:9c: b5:18:0c:85:d1:b5:b0:9f:5b:48:5e:7d:f4:85:16:da:e0:b1: a9:c5:c7:7c:2b:50:d3:d8:b3:2b:3c:0a:8b:63:95:10:c9:ad: d3:10:bd:93:b5:21:cc:eb:c8:a4:cf:e4:ab:00:f7:43:5e:23: b6:bb:37:99:b8:3b:62:55:44:9b:f6:13:ed:27:bf:79:0c:49: 37:fc:d3:93:6e:c8:91:81:26:fc:df:6c:49:3a:ea:ca:de:37: c4:09:69:ad:26:75:d2:5b:1d:4d:e4:13:f2:f5:b1:11:de:11: ce:ee:a5:54:a6:f3:40:8f:0e:4c:16:b2:5e:f8:49:46:eb:d5: c2:9a:b4:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qtnxH+zB7ElF17XfMRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODcxZjI5MGZmZjBlMDQyNjBjNjc1M2UzODdjOWVmYjc1 YmUyOTYwHhcNMjUxMjI2MTQwMTEzWhcNMjUxMjI3MTQwMTEzWjAzMTEwLwYDVQQD EyhkZDYxNjY1MmZhMmEwMzQyYjdhNGIzZjcwNmY4M2M0N2QyMmY0NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT6QfaxkX0bd+H0Yoz1ZAdCoLZmp wHV7JNzg4femcBiCsxjLnLEXjBbThYncRZwY+ERiM+02CH8jw9LnBweN4J98Z8EB KKBwo7qVu6QVLFD509/2eh9aSV36AcrkEq0dkQNzb1h8P3N4/XQdI4COY6JpEfJ2 3PWz/avqbKHfrzlnWG8NroazJI+IJx4auS/NVO6Sxf+v9YO3IyeTBCZqWzSkJ2II GdbrWpQ/1IVuZUaTwge4e3ISqA8DEf4+3vKTVaJpXWs/GtNaAZyJGRGQl68YavUp iQVLWF7lTtbuUtLhUC+fSwz/eibkogVD9G+Cms8f7gRMJsBaDhkXH7RhCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1hZlL6KgNCt6Sz9wb4PEfSL0RHMB8GA1UdIwQY MBaAFLeHHykP/w4EJgxnU+OHye+3W+KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMt OTU1ZjVjYjA5ODkzLzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMtOTU1ZjVjYjA5ODkz LzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoVqYwLx 9hATrSNAAg8hUjR6vKbV7Nsgcm7VD6FCOI/Of7/BQDjTZiSmQJSYkP7wm4uDeQVy QsnqZHgQKmTN+VOxKrBGlpE6GBIfERII/VkGuEwwQy9ef725hTUbLep+rXfNFL+J rvSZLJKRX1T4D0aiLq3k88+hubZqhqqctRgMhdG1sJ9bSF599IUW2uCxqcXHfCtQ 09izKzwKi2OVEMmt0xC9k7UhzOvIpM/kqwD3Q14jtrs3mbg7YlVEm/YT7Se/eQxJ N/zTk27IkYEm/N9sSTrqyt43xAlprSZ10lsdTeQT8vWxEd4Rzu6lVKbzQI8OTBay XvhJRuvVwpq0qA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:21 2025 by rpki-client