This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: pHH/A2UFOWAjrHqUB/HbzjW1gZxoU5W+UVAkN4bvqlg= Subject key identifier: 26:3E:52:F0:0F:8E:6D:7B:05:FC:0F:E1:24:C0:1D:A2:6C:9E:31:18 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B1081D564596BDC90DD62EBD752175A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0B3F Signing time: Fri 12 Dec 2025 03:01:42 +0000 Manifest this update: Fri 12 Dec 2025 03:01:42 +0000 Manifest next update: Sat 13 Dec 2025 03:01:42 +0000 Files and hashes: 1: 0yfwmVxTJLER4DUt2Vg6_khLCpA.roa (hash: MKcDvWwqHVE9vZSHOg8w0ciXql+cjgazIARUal2yFTQ=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: E2Z9muzFtM3w2IFVK4kxg35k9TfNf5BNPqEsGXCDL6Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: Aj9g_m6CfaASGCr3QyqhACN1wEY.roa (hash: +gKJiI8OTdXPQarnhMH7udASgSEq+BKd5szYHIlrvmo=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa (hash: 1S1vrwIqgJsILm5Ujeq8fQD6amjAbXoD/QM4fibgEmg=) 8: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 9: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 10: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 11: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 12: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 13: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: tBBMucfAaPHnI41UkYRqzWOfghM.roa (hash: NvXNtx83uU1ttCu+rJOFlyPiOp0KIY/kIuFiIN4vm5o=) 21: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=) 22: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 23: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 24: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:d5:64:59:6b:dc:90:dd:62:eb:d7:52:17:5a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Dec 12 03:01:42 2025 GMT Not After : Dec 13 03:01:42 2025 GMT Subject: CN=263e52f00f8e6d7b05fc0fe124c01da26c9e3118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:94:19:55:68:cb:d0:76:8f:8f:bd:59:18: 8a:9c:d1:c5:1b:f2:51:15:aa:cc:25:dd:64:f7:37: 92:ee:64:ae:23:e2:56:27:f3:99:b3:77:d0:05:dc: 93:c2:6f:62:a9:b1:ac:22:a3:2e:2e:83:df:6b:60: 2f:4f:8e:e1:53:4a:40:01:c5:8e:fb:d8:d1:91:8d: 9f:a0:34:ee:e8:c7:b6:1b:f6:8b:0b:90:22:c0:34: e4:71:11:e0:7c:3d:e9:ce:ca:af:7b:69:5a:60:f0: e9:78:5f:20:11:bb:c5:0d:d4:e5:72:b0:a7:70:1f: aa:a7:9f:ba:24:64:8f:c5:dc:2f:97:0e:58:cf:00: 27:92:af:5c:e1:11:1f:80:09:ab:59:fe:ce:34:dc: 63:18:54:b4:f0:cb:aa:43:2f:70:08:42:72:b1:0e: 90:81:7c:47:e6:40:9b:3c:71:3b:f7:eb:5e:ef:a7: 29:47:be:c5:d5:6e:55:7c:5c:9b:5b:b2:f0:47:ff: 6f:8a:af:dd:80:80:0e:f3:9a:ea:52:a3:e8:91:ad: 93:12:53:3f:bd:42:26:83:5f:c8:c8:9e:f6:3f:d2: 43:36:0d:88:22:ee:54:bf:26:85:01:56:7d:0e:fe: d4:b9:5b:3e:15:a1:21:e4:6b:b7:82:88:d7:43:60: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3E:52:F0:0F:8E:6D:7B:05:FC:0F:E1:24:C0:1D:A2:6C:9E:31:18 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ef:79:07:8d:de:e8:ec:b7:f4:ed:5a:cd:66:40:37:bb:ca: 83:26:e6:7c:c7:2f:91:f1:a6:46:90:57:db:b0:e4:df:e9:33: d1:d2:6b:88:33:b6:de:5d:42:e1:5a:73:c8:f0:f6:41:5d:bd: 08:ea:ca:8a:2a:4e:21:96:b0:9a:21:fe:4e:69:76:62:fc:b0: ad:74:4f:7f:c9:76:8f:b4:d7:9c:b1:d6:72:f8:8f:95:a1:f6: 2f:14:35:a7:f5:e3:39:1d:dd:ad:ed:36:31:ce:2a:78:a1:37: da:98:18:0f:cb:08:e4:c4:ba:01:f2:e3:33:0e:b1:47:84:b5: 51:83:2d:53:03:af:20:4b:68:8e:ec:af:bf:0f:e3:75:f5:1b: b6:a4:3e:0a:cc:ce:c7:a5:fb:89:53:0d:56:61:26:d6:d0:ab: c1:05:2d:fe:c9:16:c3:d3:0a:d7:cf:4a:b1:e5:bb:97:17:fb: 55:3f:c3:56:11:d8:37:4a:22:23:30:11:19:75:95:35:36:8f: 6d:44:b1:8b:33:65:e6:99:43:91:ac:11:6c:f1:f8:77:15:1e: ce:ff:9e:09:ed:16:8b:3c:eb:dc:ab:49:b6:94:0d:b1:dc:67: 25:38:af:9b:40:d4:c4:23:df:b2:fd:72:84:8f:a4:1d:ea:c4: 6a:5a:65:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgdVkWWvckN1i69dSF1oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMjEyMDMwMTQyWhcNMjUxMjEzMDMwMTQyWjAzMTEwLwYDVQQD EygyNjNlNTJmMDBmOGU2ZDdiMDVmYzBmZTEyNGMwMWRhMjZjOWUzMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9yUGVVoy9B2j4+9WRiKnNHFG/JR FarMJd1k9zeS7mSuI+JWJ/OZs3fQBdyTwm9iqbGsIqMuLoPfa2AvT47hU0pAAcWO +9jRkY2foDTu6Me2G/aLC5AiwDTkcRHgfD3pzsqve2laYPDpeF8gEbvFDdTlcrCn cB+qp5+6JGSPxdwvlw5YzwAnkq9c4REfgAmrWf7ONNxjGFS08MuqQy9wCEJysQ6Q gXxH5kCbPHE79+te76cpR77F1W5VfFybW7LwR/9viq/dgIAO85rqUqPoka2TElM/ vUImg1/IyJ72P9JDNg2IIu5UvyaFAVZ9Dv7UuVs+FaEh5Gu3gojXQ2AphwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY+UvAPjm17BfwP4STAHaJsnjEYMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne95B43e 6Oy39O1azWZAN7vKgybmfMcvkfGmRpBX27Dk3+kz0dJriDO23l1C4VpzyPD2QV29 COrKiipOIZawmiH+Tml2YvywrXRPf8l2j7TXnLHWcviPlaH2LxQ1p/XjOR3dre02 Mc4qeKE32pgYD8sI5MS6AfLjMw6xR4S1UYMtUwOvIEtojuyvvw/jdfUbtqQ+CszO x6X7iVMNVmEm1tCrwQUt/skWw9MK189KseW7lxf7VT/DVhHYN0oiIzARGXWVNTaP bUSxizNl5plDkawRbPH4dxUezv+eCe0Wizzr3KtJtpQNsdxnJTivm0DUxCPfsv1y hI+kHerEalplZA== -----END CERTIFICATE-----Generated at Fri Dec 12 10:29:36 2025 by rpki-client