This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json) Hash identifier: NWKt4HYbJzqoBFBkFby8A3JkyoySFLO2wuvVDs8kiz4= Subject key identifier: 07:7B:D8:B4:9F:35:34:EA:4E:CD:7F:7A:7E:0E:D1:E2:1D:21:3F:64 Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f Certificate serial: 019B4324C43ADEADB781C2E85954AAE159B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft Manifest number: 086B Signing time: Sun 21 Dec 2025 23:00:41 +0000 Manifest this update: Sun 21 Dec 2025 23:00:41 +0000 Manifest next update: Mon 22 Dec 2025 23:00:41 +0000 Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=) 2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: S+Pps5gCZaJRCbISyjimUJ+xyMEFsPUPmysNX+by6mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:c4:3a:de:ad:b7:81:c2:e8:59:54:aa:e1:59:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f Validity Not Before: Dec 21 23:00:41 2025 GMT Not After : Dec 22 23:00:41 2025 GMT Subject: CN=077bd8b49f3534ea4ecd7f7a7e0ed1e21d213f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:03:9b:59:75:59:15:e0:e8:7e:09:a5:7a:92: 42:4c:2b:bd:bb:1c:28:4c:76:b7:fc:30:06:f0:92: 14:33:ff:42:54:6a:5e:10:44:aa:00:01:23:e5:32: 69:9e:97:6d:4f:af:96:3a:6d:ad:ed:b4:ee:e6:cf: e4:1c:f4:ff:0e:e3:5c:da:10:24:87:7a:4b:81:79: e4:4d:49:d2:53:96:e0:35:c1:20:03:1c:68:d7:0d: 95:8c:f7:4c:b7:d8:9b:b7:b8:13:65:e2:28:be:db: 3d:73:5f:0c:3c:52:36:37:37:71:9c:28:67:e3:6f: 27:3c:6e:78:25:e5:80:33:8a:8b:ad:5e:be:5c:c3: 18:ee:9e:3d:a3:2e:30:1c:8f:2e:f7:77:21:6d:d9: 7e:db:de:78:37:0c:1d:5e:fe:b7:c3:a1:a3:73:7a: 47:3a:2b:33:24:da:1d:8d:c0:3e:1b:79:7f:ce:f6: 24:16:76:9e:25:d2:d7:b3:3f:4b:96:9a:14:dd:c5: 1e:c9:d7:10:25:42:73:06:a7:6c:02:4e:cb:16:ff: eb:d8:9d:1f:c5:a7:ce:a2:e8:27:3d:67:cc:31:e5: 17:dd:b4:95:0f:0c:76:6c:90:f8:90:5b:83:d8:35: 7b:9b:4e:5a:99:87:4a:a5:07:14:c9:bb:b3:02:1b: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7B:D8:B4:9F:35:34:EA:4E:CD:7F:7A:7E:0E:D1:E2:1D:21:3F:64 X509v3 Authority Key Identifier: keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:16:06:c5:b7:77:da:dc:bc:92:7c:40:06:af:19:fd:76: 4d:de:4f:b9:9d:51:c4:16:e5:e3:bb:f7:f1:10:a0:58:66:b6: d9:e7:c8:b8:45:43:6f:14:4d:ff:39:72:6b:f4:b1:68:85:ce: d4:a8:1b:bd:79:bf:79:b4:d6:85:09:a6:d6:10:6d:66:5e:00: 57:90:2c:e0:d6:fd:96:d2:47:5c:e2:52:31:cf:2b:7c:40:c7: 32:44:57:c2:46:3a:e5:f3:96:d3:0b:bb:c0:bd:ff:71:5d:06: ed:84:b1:6b:be:3e:3d:05:6b:ea:8b:e4:7f:b6:af:b9:fd:20: 39:4e:14:aa:be:77:64:0a:9c:bb:34:d2:17:2e:cc:0c:d5:6b: e0:84:40:82:29:1a:03:4e:bf:8c:72:17:48:85:74:0c:a3:82: fa:21:0e:d0:41:b8:f3:39:65:b2:14:30:3e:15:a0:04:a0:f2: 5f:cd:f7:15:7b:7e:e4:05:4c:4a:a8:a3:75:78:45:7f:4c:d6: f0:3d:79:d4:26:a6:9b:e5:64:6c:90:1b:66:d9:ef:57:91:fb: e1:b7:81:50:55:0a:51:2a:6b:d9:b8:c8:da:dd:d3:9c:3b:39: e7:08:89:34:58:3d:f2:97:a3:c6:2b:85:00:08:58:18:71:73: a7:2d:89:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJMQ63q23gcLoWVSq4VmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl YmIyM2YwHhcNMjUxMjIxMjMwMDQxWhcNMjUxMjIyMjMwMDQxWjAzMTEwLwYDVQQD EygwNzdiZDhiNDlmMzUzNGVhNGVjZDdmN2E3ZTBlZDFlMjFkMjEzZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QObWXVZFeDofgmlepJCTCu9uxwo THa3/DAG8JIUM/9CVGpeEESqAAEj5TJpnpdtT6+WOm2t7bTu5s/kHPT/DuNc2hAk h3pLgXnkTUnSU5bgNcEgAxxo1w2VjPdMt9ibt7gTZeIovts9c18MPFI2NzdxnChn 428nPG54JeWAM4qLrV6+XMMY7p49oy4wHI8u93chbdl+2954NwwdXv63w6Gjc3pH OiszJNodjcA+G3l/zvYkFnaeJdLXsz9LlpoU3cUeydcQJUJzBqdsAk7LFv/r2J0f xafOougnPWfMMeUX3bSVDwx2bJD4kFuD2DV7m05amYdKpQcUybuzAhvRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd72LSfNTTqTs1/en4O0eIdIT9kMB8GA1UdIwQY MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt NWFhYWMyY2IwZGYxLzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLUWBsW3 d9rcvJJ8QAavGf12Td5PuZ1RxBbl47v38RCgWGa22efIuEVDbxRN/zlya/SxaIXO 1KgbvXm/ebTWhQmm1hBtZl4AV5As4Nb9ltJHXOJSMc8rfEDHMkRXwkY65fOW0wu7 wL3/cV0G7YSxa74+PQVr6ovkf7avuf0gOU4Uqr53ZAqcuzTSFy7MDNVr4IRAgika A06/jHIXSIV0DKOC+iEO0EG48zllshQwPhWgBKDyX833FXt+5AVMSqijdXhFf0zW 8D151Camm+VkbJAbZtnvV5H74beBUFUKUSpr2bjI2t3TnDs55wiJNFg98pejxiuF AAhYGHFzpy2JEQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:18:21 2025 by rpki-client