This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json) Hash identifier: xCReC5/vkhDR0bG1Yb3dCt8b3LFxAmg1bDMCmhB4fhc= Subject key identifier: 9A:08:31:44:64:F2:FE:E4:D7:0B:35:FE:07:21:11:A3:60:58:9B:52 Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Certificate serial: 019AEF760797C9E1729B44296DA7546F8728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 17:01:21 +0000 Manifest this update: Fri 05 Dec 2025 17:01:21 +0000 Manifest next update: Sat 06 Dec 2025 17:01:21 +0000 Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=) 2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: q0AMZO1MEpp3h5qHa2EdyYr9hGSbYSRUpzfcFeEbN6E=) 3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=) 4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:76:07:97:c9:e1:72:9b:44:29:6d:a7:54:6f:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Validity Not Before: Dec 5 17:01:21 2025 GMT Not After : Dec 6 17:01:21 2025 GMT Subject: CN=9a08314464f2fee4d70b35fe072111a360589b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:0d:fd:88:d3:43:d0:56:b1:27:5d:a5:69: 7d:d2:5a:4d:7e:46:7d:ce:e7:fb:8e:47:db:00:93: 83:6f:a7:7d:32:70:b0:28:ef:80:fc:e6:05:8f:f2: e2:e0:e0:ec:72:36:e3:1e:c7:26:52:58:7a:85:45: ac:92:af:0e:1e:ab:5f:35:61:27:e5:5f:0d:f6:89: 5c:1f:c0:8c:e7:6d:c3:73:74:52:a4:4e:cd:74:c0: 10:60:6a:75:a5:c4:cd:8f:f0:81:e0:18:3e:d5:c6: e3:c8:1e:a2:03:90:20:ec:6e:cd:2e:90:cc:2d:63: e1:2f:9b:ab:21:5d:03:a5:63:a8:e7:cd:a3:d3:c1: 2d:ce:6d:46:b9:7d:15:80:24:25:2e:57:5a:ae:d8: f9:84:1a:ee:5f:75:15:0c:ef:3f:dd:d9:84:1c:ee: a6:fa:c8:0d:ab:7c:18:30:03:65:12:3e:7e:13:30: a3:e6:8f:10:90:fa:57:bc:97:3a:86:2e:00:7c:9f: c5:38:40:89:8c:a1:75:dd:20:4a:8c:42:16:d5:73: ff:32:be:d7:2f:7c:68:3c:3f:ff:3e:f0:a3:13:a7: 77:b8:94:0f:0b:19:df:89:ee:74:1e:33:04:5f:52: 0c:59:ad:fd:0a:d1:2c:64:5a:e6:e9:76:cd:c7:1d: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:08:31:44:64:F2:FE:E4:D7:0B:35:FE:07:21:11:A3:60:58:9B:52 X509v3 Authority Key Identifier: keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:84:04:8a:17:e2:8d:1e:3a:77:4e:94:70:36:ed:fb:d6:5c: 87:99:96:c3:1e:ea:c8:6a:6e:55:5b:9f:77:71:9a:cd:dc:2f: c8:d4:d4:57:50:2a:05:e2:f0:8e:27:e5:3f:84:f1:cf:d2:96: a8:1b:09:2b:0c:7f:2c:16:0e:0c:ff:c5:f6:f6:37:89:8d:e1: 9f:94:8e:1b:b5:c6:97:1b:71:62:50:40:fc:0c:a8:3a:05:d4: 2d:7d:90:d6:2a:a6:39:49:82:45:f4:4d:9c:fd:41:b3:6c:f7: c5:99:63:f6:cc:e9:c9:cf:7a:bd:c6:54:f1:b6:7c:22:52:0f: d7:9b:78:f0:3c:36:19:7b:08:7f:ad:be:50:60:a8:f3:59:4e: 52:02:5f:3e:5a:bf:4f:ca:78:16:59:45:1d:58:66:e8:af:4d: 2c:75:a6:8d:96:80:69:2e:ac:29:65:62:c3:69:a4:71:65:0c: c5:10:75:90:b3:83:e0:17:bc:f0:de:28:3f:a4:26:59:99:60: cc:19:94:1d:9b:8e:9a:2b:a7:45:e0:a4:77:b0:82:1d:ed:58: 52:67:ee:4a:3f:b5:7c:f8:16:f0:64:9a:56:1f:b4:6b:fa:fb: 88:11:8e:f4:00:83:5b:bb:0a:c8:15:31:9f:47:0d:60:a3:2d: 31:75:b6:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdgeXyeFym0QpbadUb4coMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj Y2U0YTQwHhcNMjUxMjA1MTcwMTIxWhcNMjUxMjA2MTcwMTIxWjAzMTEwLwYDVQQD Eyg5YTA4MzE0NDY0ZjJmZWU0ZDcwYjM1ZmUwNzIxMTFhMzYwNTg5YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4N/YjTQ9BWsSddpWl90lpNfkZ9 zuf7jkfbAJODb6d9MnCwKO+A/OYFj/Li4ODscjbjHscmUlh6hUWskq8OHqtfNWEn 5V8N9olcH8CM523Dc3RSpE7NdMAQYGp1pcTNj/CB4Bg+1cbjyB6iA5Ag7G7NLpDM LWPhL5urIV0DpWOo582j08Etzm1GuX0VgCQlLldartj5hBruX3UVDO8/3dmEHO6m +sgNq3wYMANlEj5+EzCj5o8QkPpXvJc6hi4AfJ/FOECJjKF13SBKjEIW1XP/Mr7X L3xoPD//PvCjE6d3uJQPCxnfie50HjMEX1IMWa39CtEsZFrm6XbNxx2UrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoIMURk8v7k1ws1/gchEaNgWJtSMB8GA1UdIwQY MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt MTRmYWIwMjQ0OTQ4LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4 LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4QEihfi jR46d06UcDbt+9Zch5mWwx7qyGpuVVufd3GazdwvyNTUV1AqBeLwjiflP4Txz9KW qBsJKwx/LBYODP/F9vY3iY3hn5SOG7XGlxtxYlBA/AyoOgXULX2Q1iqmOUmCRfRN nP1Bs2z3xZlj9szpyc96vcZU8bZ8IlIP15t48Dw2GXsIf62+UGCo81lOUgJfPlq/ T8p4FllFHVhm6K9NLHWmjZaAaS6sKWViw2mkcWUMxRB1kLOD4Be88N4oP6QmWZlg zBmUHZuOmiunReCkd7CCHe1YUmfuSj+1fPgW8GSaVh+0a/r7iBGO9ACDW7sKyBUx n0cNYKMtMXW2qA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:08:01 2025 by rpki-client