This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json) Hash identifier: ve/bJvmqIUaZI12Ld0S9o89BGof4B+/IVIoqPQoazns= Subject key identifier: 40:0D:C2:A8:9F:7A:98:A0:7F:5F:2E:A3:90:1F:EF:67:15:AA:B2:9E Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Certificate serial: 019AABA73976CA1791C9D0EE262282B99F4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft Manifest number: 13F1 Signing time: Sat 22 Nov 2025 13:00:54 +0000 Manifest this update: Sat 22 Nov 2025 13:00:54 +0000 Manifest next update: Sun 23 Nov 2025 13:00:54 +0000 Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=) 2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=) 3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: 0a1m4w8Qvby3eF1/VKbk48EP3d+/8+FP0ZOH/p7G2Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:39:76:ca:17:91:c9:d0:ee:26:22:82:b9:9f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Validity Not Before: Nov 22 13:00:54 2025 GMT Not After : Nov 23 13:00:54 2025 GMT Subject: CN=400dc2a89f7a98a07f5f2ea3901fef6715aab29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:fa:12:f2:16:fe:9f:30:22:51:fb:d2:b8: 14:4c:54:79:25:74:bd:aa:f2:e8:e8:8e:46:91:db: 78:a8:28:c5:65:24:b1:02:ef:d9:57:7c:96:0d:43: 4f:f7:0b:bf:19:30:2c:a6:64:83:bb:42:71:a3:93: d6:3b:dc:ff:64:2a:48:b8:76:7f:f0:f8:fe:74:75: ec:b7:a1:bf:87:58:e6:5d:7a:a2:18:cd:74:53:43: 11:b9:8e:ea:f8:a3:42:47:32:cf:6e:a4:3b:41:e1: d7:76:bd:68:2e:07:92:3f:b4:ac:bc:6b:b1:1f:a2: 56:50:1f:dd:26:c6:a8:57:bb:8f:4d:56:fd:3c:fd: 47:0f:70:51:d9:31:25:58:a8:8a:18:f9:3d:f4:bf: 69:42:3a:1e:5f:43:17:7f:c2:98:f2:ff:b5:86:64: 41:89:20:b1:c4:0f:72:c7:43:ec:3a:7e:d0:2e:36: 38:77:f6:89:20:3a:6a:cd:26:27:29:8c:06:2a:f8: 5f:2b:9f:be:9d:e6:ad:71:53:39:11:88:1d:c3:b6: 45:e0:77:ce:0a:f7:f8:49:0f:76:29:dc:08:f0:bf: 6a:5c:18:3f:a7:75:d8:b0:2c:32:68:62:45:2b:94: 9f:96:85:b3:98:58:45:d2:86:cc:4d:6d:73:b3:4c: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:C2:A8:9F:7A:98:A0:7F:5F:2E:A3:90:1F:EF:67:15:AA:B2:9E X509v3 Authority Key Identifier: keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:61:cf:7c:c2:d4:25:8c:23:c5:c7:5f:e1:f0:ca:f9:7c: a2:24:c5:ae:24:52:c1:f8:35:96:72:a3:7d:3a:94:2c:78:5c: 20:07:b4:3d:f1:6e:47:3f:be:ca:e8:0f:63:a1:24:54:bf:44: 1b:4d:f5:fe:96:33:c2:61:4a:79:47:ae:0c:4d:a5:5f:0a:b0: 74:ec:c3:a5:56:99:31:4f:f9:bb:3c:c2:68:41:22:c3:71:09: 36:8c:ce:2a:01:46:ac:81:83:77:ed:2c:74:ec:58:20:dd:09: 00:2a:80:42:c5:27:4e:82:c0:37:8e:65:84:5a:52:b4:22:e6: 8c:5c:c8:4d:ca:8c:0e:8a:31:25:0e:6a:f2:09:d7:a2:05:33: fb:43:d1:e6:12:89:4f:94:4d:0d:ee:c1:1f:f8:1d:59:68:36: 34:6c:d7:cb:ff:cf:05:5f:16:88:e4:38:b6:b5:46:cc:eb:ff: 00:6f:12:6f:83:0d:46:54:a1:0d:b5:9d:10:56:75:bd:8c:6c: 0e:20:42:b2:b4:08:4e:bc:b5:2b:9a:1b:8d:59:7f:3c:5d:f1: bd:2a:ce:0b:eb:51:0b:34:1c:b0:0b:75:32:73:e3:0d:41:ea: d2:ae:74:2c:60:59:ac:97:92:82:25:e9:f3:a7:a3:24:81:51: 77:f9:86:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpzl2yheRydDuJiKCuZ9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1 ZjFmMDIwHhcNMjUxMTIyMTMwMDU0WhcNMjUxMTIzMTMwMDU0WjAzMTEwLwYDVQQD Eyg0MDBkYzJhODlmN2E5OGEwN2Y1ZjJlYTM5MDFmZWY2NzE1YWFiMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlij6EvIW/p8wIlH70rgUTFR5JXS9 qvLo6I5Gkdt4qCjFZSSxAu/ZV3yWDUNP9wu/GTAspmSDu0Jxo5PWO9z/ZCpIuHZ/ 8Pj+dHXst6G/h1jmXXqiGM10U0MRuY7q+KNCRzLPbqQ7QeHXdr1oLgeSP7SsvGux H6JWUB/dJsaoV7uPTVb9PP1HD3BR2TElWKiKGPk99L9pQjoeX0MXf8KY8v+1hmRB iSCxxA9yx0PsOn7QLjY4d/aJIDpqzSYnKYwGKvhfK5++neatcVM5EYgdw7ZF4HfO Cvf4SQ92KdwI8L9qXBg/p3XYsCwyaGJFK5SfloWzmFhF0obMTW1zs0xwLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEANwqifepigf18uo5Af72cVqrKeMB8GA1UdIwQY MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt M2M3NDEyMjBlYTAwLzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB5hz3zC 1CWMI8XHX+Hwyvl8oiTFriRSwfg1lnKjfTqULHhcIAe0PfFuRz++yugPY6EkVL9E G031/pYzwmFKeUeuDE2lXwqwdOzDpVaZMU/5uzzCaEEiw3EJNozOKgFGrIGDd+0s dOxYIN0JACqAQsUnToLAN45lhFpStCLmjFzITcqMDooxJQ5q8gnXogUz+0PR5hKJ T5RNDe7BH/gdWWg2NGzXy//PBV8WiOQ4trVGzOv/AG8Sb4MNRlShDbWdEFZ1vYxs DiBCsrQITry1K5objVl/PF3xvSrOC+tRCzQcsAt1MnPjDUHq0q50LGBZrJeSgiXp 86ejJIFRd/mG6g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:00 2025 by rpki-client