This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json) Hash identifier: NLyC3ReO+re3G6KuORWmmblAveLIGPqzOYIPDZj5C0k= Subject key identifier: 7A:74:C8:BF:69:7E:C7:C2:DF:36:FD:F0:A6:EB:B9:B9:C3:86:5F:19 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B089078FADB7840865BDEF0919B5299CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft Manifest number: 06EC Signing time: Wed 10 Dec 2025 14:00:44 +0000 Manifest this update: Wed 10 Dec 2025 14:00:44 +0000 Manifest next update: Thu 11 Dec 2025 14:00:44 +0000 Files and hashes: 1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=) 2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=) 3: Red5pkskUAFA8WcL1YOe9BUuOZM.roa (hash: S6qOREc3I0Eo71LK+o2EBPNiAlQAC2CgwyQqhyD99Xg=) 4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=) 5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: JWQ4xeQSwe+teCVgzh3dDzMeNgdbm7R4qkuQcCbAjkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:78:fa:db:78:40:86:5b:de:f0:91:9b:52:99:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Dec 10 14:00:44 2025 GMT Not After : Dec 11 14:00:44 2025 GMT Subject: CN=7a74c8bf697ec7c2df36fdf0a6ebb9b9c3865f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:66:fc:5b:3d:a9:5d:66:45:a8:7b:af:c5: 8e:ec:b0:0c:94:69:95:27:3d:c8:a2:7a:59:67:9e: f9:39:56:29:f1:8d:a2:42:c6:58:62:b6:a5:17:d2: bb:51:3b:3c:9e:eb:91:20:08:fe:94:60:a7:c7:30: 1f:cf:3a:44:43:3e:95:a8:cb:5c:88:99:d7:d1:3c: f0:ba:50:b2:77:92:0d:54:04:2c:38:c0:a3:ed:ce: a6:43:11:b8:36:50:d9:09:b1:f8:bd:43:29:cc:73: 0f:0c:11:7c:ee:cc:44:ee:9e:98:22:64:2a:f1:49: 32:eb:28:2e:7c:bd:fb:70:d7:9a:25:51:e8:dd:31: 77:6f:8e:ed:18:26:8f:14:ca:93:ae:44:60:12:85: a1:35:b9:55:90:87:67:7a:f0:37:66:22:ef:b8:86: 80:ec:f4:2c:f5:3e:98:f8:ad:a2:6c:53:79:15:21: 3e:a3:6c:17:bf:0e:6e:cd:3f:ae:aa:80:39:1e:5c: c5:b4:eb:44:dc:79:9a:1f:59:aa:04:e2:e6:1a:8a: e5:7b:fc:c2:81:f7:7b:0a:17:22:cb:74:a0:de:8a: dd:22:07:8e:ee:5a:ad:45:c9:b4:0a:cf:4e:58:e5: 34:29:d7:85:88:28:a8:4a:03:54:24:37:ec:95:36: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:74:C8:BF:69:7E:C7:C2:DF:36:FD:F0:A6:EB:B9:B9:C3:86:5F:19 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:72:52:93:76:74:c0:df:2e:05:47:39:08:99:83:a3:cd: 30:b0:f3:14:b1:43:50:74:95:dd:5c:eb:3d:8b:85:9b:1b:74: 15:5f:0b:5b:61:f4:b1:03:d3:0a:72:28:c1:4c:c0:c3:54:a9: 36:18:0a:40:cc:19:aa:bb:80:73:b0:f7:6e:27:c6:fe:2c:b9: d2:9f:66:53:f0:09:0f:52:b3:70:7b:e3:30:68:fe:ca:ec:82: ed:0a:4e:72:a1:a4:bc:ab:94:97:f0:ef:5f:6c:74:4a:65:7b: df:5d:fd:5b:c3:2f:2a:8d:0a:9d:31:33:d2:bd:6e:f7:1e:82: 68:e0:0c:aa:f9:c7:8d:23:9d:3f:21:12:08:ed:89:b4:0a:f1: de:03:ff:77:27:58:37:74:5f:63:e2:5e:c5:d4:68:f7:eb:e1: 7e:13:06:8c:00:f3:e6:2b:3e:72:31:b1:cb:5d:7e:e1:28:ad: b8:e1:fe:24:d5:f9:64:c0:a3:45:f8:18:b2:06:6b:cd:36:3d: b8:ea:b0:99:74:c2:e3:02:39:56:d2:ac:ee:9a:f9:20:36:1a: b9:cc:b8:f3:6a:61:64:a6:63:53:a9:47:14:21:a5:58:38:3d: a1:5e:7a:02:26:83:ba:c3:5e:6f:43:98:74:d5:89:0b:ab:0e: 80:a0:71:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkHj623hAhlve8JGbUpnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjUxMjEwMTQwMDQ0WhcNMjUxMjExMTQwMDQ0WjAzMTEwLwYDVQQD Eyg3YTc0YzhiZjY5N2VjN2MyZGYzNmZkZjBhNmViYjliOWMzODY1ZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh5m/Fs9qV1mRah7r8WO7LAMlGmV Jz3IonpZZ575OVYp8Y2iQsZYYralF9K7UTs8nuuRIAj+lGCnxzAfzzpEQz6VqMtc iJnX0TzwulCyd5INVAQsOMCj7c6mQxG4NlDZCbH4vUMpzHMPDBF87sxE7p6YImQq 8Uky6ygufL37cNeaJVHo3TF3b47tGCaPFMqTrkRgEoWhNblVkIdnevA3ZiLvuIaA 7PQs9T6Y+K2ibFN5FSE+o2wXvw5uzT+uqoA5HlzFtOtE3HmaH1mqBOLmGorle/zC gfd7Chciy3Sg3ordIgeO7lqtRcm0Cs9OWOU0KdeFiCioSgNUJDfslTaGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp0yL9pfsfC3zb98KbrubnDhl8ZMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKw5yUpN2 dMDfLgVHOQiZg6PNMLDzFLFDUHSV3VzrPYuFmxt0FV8LW2H0sQPTCnIowUzAw1Sp NhgKQMwZqruAc7D3bifG/iy50p9mU/AJD1KzcHvjMGj+yuyC7QpOcqGkvKuUl/Dv X2x0SmV73139W8MvKo0KnTEz0r1u9x6CaOAMqvnHjSOdPyESCO2JtArx3gP/dydY N3RfY+JexdRo9+vhfhMGjADz5is+cjGxy11+4SituOH+JNX5ZMCjRfgYsgZrzTY9 uOqwmXTC4wI5VtKs7pr5IDYaucy482phZKZjU6lHFCGlWDg9oV56AiaDusNeb0OY dNWJC6sOgKBxUg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:14:41 2025 by rpki-client