This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json) Hash identifier: UJ2uZ4a7hTpa4tuptqIPJjXWFN39vqLbfcyBVHozl58= Subject key identifier: 5A:0C:F1:2B:07:83:41:A0:B6:F8:0F:09:8C:57:BD:F2:6F:14:F7:A2 Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Certificate serial: 019B484B9F9675C97169F890E6453488B528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft Manifest number: 1792 Signing time: Mon 22 Dec 2025 23:01:14 +0000 Manifest this update: Mon 22 Dec 2025 23:01:14 +0000 Manifest next update: Tue 23 Dec 2025 23:01:14 +0000 Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=) 2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: ZPZW9pVBtiEWzUX1cUSjp5GjifGeM+aWV5qWG7cW4ik=) 3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:9f:96:75:c9:71:69:f8:90:e6:45:34:88:b5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Validity Not Before: Dec 22 23:01:14 2025 GMT Not After : Dec 23 23:01:14 2025 GMT Subject: CN=5a0cf12b078341a0b6f80f098c57bdf26f14f7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:ec:be:a6:4a:aa:24:8e:04:e8:2d:2d:a8: 80:e6:d6:d2:19:bf:92:48:da:26:0a:80:d5:9f:3d: cc:a7:54:6d:63:6c:a2:07:db:83:9c:8a:2a:15:56: 09:38:04:7a:7f:42:84:2d:6e:fb:92:15:63:7f:d8: 05:34:33:12:ac:b5:2d:48:ee:71:cf:6d:d0:fb:9c: e2:79:fe:74:97:99:75:df:99:4f:c9:74:10:21:0e: 17:b3:32:f3:e0:00:5d:b7:10:d7:58:1f:2b:3e:e5: c6:f4:2a:bd:95:01:80:fe:60:dc:70:33:b2:14:83: 18:16:d4:40:36:7b:c5:00:0c:4b:f1:58:82:54:88: 1f:cd:55:68:37:9b:cc:2e:f2:48:30:4e:fb:fc:6a: 95:69:0d:0f:4d:0d:4f:32:9e:31:d1:41:d8:e2:21: b4:79:6e:0c:9c:b7:40:2b:cd:fc:c0:e6:26:2a:0b: cb:04:61:83:bc:d3:ff:aa:30:cf:a8:77:a8:5c:70: af:c8:2c:c5:f9:23:9f:13:be:20:98:7e:d3:12:f6: 7a:75:a5:15:0e:7a:18:83:61:88:50:5c:b7:fa:04: 6a:a5:19:7c:a1:0b:3e:26:e9:82:ce:7c:eb:f6:19: e2:ca:08:0d:5b:cf:4e:32:7a:2e:09:bc:38:90:a4: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0C:F1:2B:07:83:41:A0:B6:F8:0F:09:8C:57:BD:F2:6F:14:F7:A2 X509v3 Authority Key Identifier: keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:00:2c:83:c6:38:da:6b:19:48:8c:f7:11:58:5c:5f:df:6e: ac:7d:88:b1:e3:6b:37:55:b1:fa:7d:d8:4b:02:33:bd:93:0c: 21:97:dd:aa:8b:10:5b:fc:d6:0f:f2:6a:b9:ad:de:f9:fd:8e: 5a:fa:0e:55:ab:32:8d:65:2f:9c:c1:75:b2:36:f5:f5:fb:5a: 31:d3:1e:e9:59:09:d5:82:82:0e:e8:b2:f7:62:1a:b8:5a:f8: bf:74:6b:c0:85:9c:a4:16:65:1f:b3:b4:8c:9b:9f:10:fc:5e: a4:89:88:12:4c:6b:0b:ce:08:1a:74:8b:50:4b:dc:c7:a9:0a: f4:06:bd:b1:c9:cb:3e:84:a0:c7:29:90:ae:9b:26:83:dc:53: 5d:d2:2a:b3:90:b0:f9:61:a1:fd:bd:a9:da:c0:97:d0:d6:56: 78:1b:c3:50:89:c0:8f:0a:47:55:ad:35:90:fa:d3:a1:27:ea: a1:c5:21:d2:cc:9e:cd:dd:e6:81:ee:dc:71:d1:39:e6:8b:b9: ff:30:f6:62:35:1e:1d:e2:a0:cb:b6:4f:bb:f8:09:d6:8c:39: 15:9f:de:ee:75:9d:81:aa:20:df:39:9f:b0:97:da:08:7e:05: e8:17:5b:a4:f8:02:82:b9:e5:fb:61:45:6a:b0:f7:b4:79:56: dc:c2:f5:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS5+WdclxafiQ5kU0iLUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx YjljZmQwHhcNMjUxMjIyMjMwMTE0WhcNMjUxMjIzMjMwMTE0WjAzMTEwLwYDVQQD Eyg1YTBjZjEyYjA3ODM0MWEwYjZmODBmMDk4YzU3YmRmMjZmMTRmN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3svqZKqiSOBOgtLaiA5tbSGb+S SNomCoDVnz3Mp1RtY2yiB9uDnIoqFVYJOAR6f0KELW77khVjf9gFNDMSrLUtSO5x z23Q+5zief50l5l135lPyXQQIQ4XszLz4ABdtxDXWB8rPuXG9Cq9lQGA/mDccDOy FIMYFtRANnvFAAxL8ViCVIgfzVVoN5vMLvJIME77/GqVaQ0PTQ1PMp4x0UHY4iG0 eW4MnLdAK838wOYmKgvLBGGDvNP/qjDPqHeoXHCvyCzF+SOfE74gmH7TEvZ6daUV DnoYg2GIUFy3+gRqpRl8oQs+JumCznzr9hniyggNW89OMnouCbw4kKS3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoM8SsHg0GgtvgPCYxXvfJvFPeiMB8GA1UdIwQY MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1 LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgAsg8Y4 2msZSIz3EVhcX99urH2IseNrN1Wx+n3YSwIzvZMMIZfdqosQW/zWD/Jqua3e+f2O WvoOVasyjWUvnMF1sjb19ftaMdMe6VkJ1YKCDuiy92IauFr4v3RrwIWcpBZlH7O0 jJufEPxepImIEkxrC84IGnSLUEvcx6kK9Aa9scnLPoSgxymQrpsmg9xTXdIqs5Cw +WGh/b2p2sCX0NZWeBvDUInAjwpHVa01kPrToSfqocUh0syezd3mge7ccdE55ou5 /zD2YjUeHeKgy7ZPu/gJ1ow5FZ/e7nWdgaog3zmfsJfaCH4F6BdbpPgCgrnl+2FF arD3tHlW3ML1lw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:36:03 2025 by rpki-client