This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json) Hash identifier: yVANaJbBNI3+bq4+8f3CPseSsMbR4mLd4KixDibaW1w= Subject key identifier: C5:82:16:3B:3B:41:95:2A:50:BC:D9:BB:BC:3D:E9:2A:F5:48:49:89 Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f Certificate serial: 019B3B6B3BF3765FAB09F912AECCFA9C4C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft Manifest number: 0867 Signing time: Sat 20 Dec 2025 11:00:41 +0000 Manifest this update: Sat 20 Dec 2025 11:00:41 +0000 Manifest next update: Sun 21 Dec 2025 11:00:41 +0000 Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=) 2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: fA8r9MWcBxOnAjtTWN8fHQ+DL13LYdYQlIBIj9wemMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:3b:f3:76:5f:ab:09:f9:12:ae:cc:fa:9c:4c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f Validity Not Before: Dec 20 11:00:41 2025 GMT Not After : Dec 21 11:00:41 2025 GMT Subject: CN=c582163b3b41952a50bcd9bbbc3de92af5484989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:c6:54:0f:eb:a6:e0:72:c5:49:17:73:ec: 25:fa:41:37:d4:6b:a0:ac:ee:c3:21:f9:5e:ea:fc: 5c:ef:95:7d:de:86:0e:05:49:63:c9:ba:c8:31:40: 61:21:12:cc:58:a8:a3:9b:65:38:60:03:76:2f:e1: 64:14:fa:26:7c:7e:49:59:2f:63:18:21:54:76:80: 7e:11:46:31:2a:cf:c5:d7:79:ef:77:b5:b3:32:6c: f1:98:9c:32:b8:98:57:8d:d8:8a:8c:b8:a6:d6:ae: 30:c4:f6:9c:a1:a5:81:90:a3:00:ce:2d:43:19:08: bb:4d:3b:aa:69:9b:39:4b:c5:49:62:61:f8:2b:07: 80:2b:19:54:b4:ce:e8:e1:41:8c:04:24:ec:b5:63: f8:4a:17:bc:7b:c3:b1:1d:ee:25:06:04:7a:72:26: 8d:ca:e3:4a:2c:ff:89:57:b0:9f:3f:1f:ff:7d:11: 6e:24:87:78:11:8b:be:ee:7e:05:de:5e:ab:ac:9f: e2:45:b9:2f:d1:18:16:19:3b:52:80:96:a4:e9:1f: 43:43:42:fe:0e:5d:d4:83:61:67:8b:0e:9a:7a:84: 37:a8:ec:02:ed:80:64:08:e1:a2:9a:c1:2c:55:ed: 06:6e:7b:2b:a0:fd:d5:66:8f:b6:6c:c5:bb:a2:1b: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:16:3B:3B:41:95:2A:50:BC:D9:BB:BC:3D:E9:2A:F5:48:49:89 X509v3 Authority Key Identifier: keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5b:05:32:ea:09:7c:ef:13:91:8b:fb:3c:e6:b1:f9:43:fa: f3:23:2e:15:9f:72:a3:62:d8:c8:57:27:f3:19:37:ba:e2:91: e6:7a:16:89:fc:08:91:9b:46:12:09:f7:8f:25:bc:44:9d:0b: bf:b4:99:e2:78:93:fe:33:85:4c:1b:58:9e:7f:83:6b:f7:87: c8:df:ee:50:83:7d:ea:8e:4e:3a:eb:1a:6a:63:5d:ff:dc:c7: b9:26:91:e8:ec:ed:d3:98:89:cd:aa:08:a0:fa:34:83:99:0d: 98:7f:81:f1:05:21:3e:97:c6:67:73:67:a8:29:85:c0:c2:a7: 85:65:ed:71:99:3b:d8:09:30:98:58:25:47:39:18:e6:8b:51: a1:b5:33:ed:41:dd:7a:a2:db:4a:dd:7d:80:a2:b7:17:b2:25: 00:7c:32:ef:e0:f9:24:08:b4:06:e4:83:cd:04:74:00:cb:3a: 5e:dc:43:3e:84:88:dc:5d:19:43:da:9d:66:a6:87:bf:5f:8d: 8c:4e:1b:33:ee:e7:b3:3b:19:dc:8c:e1:5d:20:3f:a3:f0:cc: 27:85:3c:55:91:8c:be:3b:d1:52:8e:95:53:c2:37:4f:e3:d9: d3:f4:c6:2d:24:f9:c7:59:63:50:3f:7b:d7:b7:77:e3:45:98: a8:ef:c0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azvzdl+rCfkSrsz6nEyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl YmIyM2YwHhcNMjUxMjIwMTEwMDQxWhcNMjUxMjIxMTEwMDQxWjAzMTEwLwYDVQQD EyhjNTgyMTYzYjNiNDE5NTJhNTBiY2Q5YmJiYzNkZTkyYWY1NDg0OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/bGVA/rpuByxUkXc+wl+kE31Gug rO7DIfle6vxc75V93oYOBUljybrIMUBhIRLMWKijm2U4YAN2L+FkFPomfH5JWS9j GCFUdoB+EUYxKs/F13nvd7WzMmzxmJwyuJhXjdiKjLim1q4wxPacoaWBkKMAzi1D GQi7TTuqaZs5S8VJYmH4KweAKxlUtM7o4UGMBCTstWP4She8e8OxHe4lBgR6ciaN yuNKLP+JV7CfPx//fRFuJId4EYu+7n4F3l6rrJ/iRbkv0RgWGTtSgJak6R9DQ0L+ Dl3Ug2Fniw6aeoQ3qOwC7YBkCOGimsEsVe0GbnsroP3VZo+2bMW7oht2LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWCFjs7QZUqULzZu7w96Sr1SEmJMB8GA1UdIwQY MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt NWFhYWMyY2IwZGYxLzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolsFMuoJ fO8TkYv7POax+UP68yMuFZ9yo2LYyFcn8xk3uuKR5noWifwIkZtGEgn3jyW8RJ0L v7SZ4niT/jOFTBtYnn+Da/eHyN/uUIN96o5OOusaamNd/9zHuSaR6Ozt05iJzaoI oPo0g5kNmH+B8QUhPpfGZ3NnqCmFwMKnhWXtcZk72AkwmFglRzkY5otRobUz7UHd eqLbSt19gKK3F7IlAHwy7+D5JAi0BuSDzQR0AMs6XtxDPoSI3F0ZQ9qdZqaHv1+N jE4bM+7nszsZ3IzhXSA/o/DMJ4U8VZGMvjvRUo6VU8I3T+PZ0/TGLST5x1ljUD97 17d340WYqO/Adg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:36 2025 by rpki-client