This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: hc5W+ehjYgHyi3h812QlVNQwyhgIy/ICQHW+zbOLlxE= Subject key identifier: A0:12:7B:F6:00:E2:59:0E:D6:76:5D:97:23:E3:79:F6:A0:6A:13:31 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019AFA3027A6425E4536246694AE354BA151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 145D Signing time: Sun 07 Dec 2025 19:00:51 +0000 Manifest this update: Sun 07 Dec 2025 19:00:51 +0000 Manifest next update: Mon 08 Dec 2025 19:00:51 +0000 Files and hashes: 1: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 2: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 3: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 4: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: zWKvjxtbigqV0C47T2Nv/Na/ecRsQfOui96Nr0X3MAs=) 5: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 6: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 7: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 8: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 9: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 10: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 11: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 12: RlijeiTmPD6sHGSu-ts_JAvGtZo.roa (hash: yj1wHoLM8feflkvyzQlTnJgBwYE0hD/9rQyGYXqCs2w=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:30:27:a6:42:5e:45:36:24:66:94:ae:35:4b:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Dec 7 19:00:51 2025 GMT Not After : Dec 8 19:00:51 2025 GMT Subject: CN=a0127bf600e2590ed6765d9723e379f6a06a1331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:31:ab:94:de:d0:22:9a:2d:9b:23:b3:f7: 59:db:7d:75:61:a5:21:72:3b:ab:b8:75:f3:7e:ba: 2d:50:d7:a6:8a:5a:18:a4:26:79:b0:cd:7a:d4:8c: 6d:b8:04:24:39:cb:7c:e0:9f:fc:98:75:9f:29:51: 06:31:a6:36:14:ee:87:37:ee:08:e0:c8:fd:7f:03: 65:45:6a:ac:fc:c4:1c:f8:a1:3c:ce:a0:cd:77:a4: 6b:39:7e:96:f2:16:b1:b2:5c:3b:0e:88:7a:76:c4: 90:24:2d:d5:44:05:f1:eb:31:f9:6a:b2:9a:7c:91: b4:d0:71:fa:d2:3d:27:8b:e2:13:d1:ce:f9:4c:d4: 8b:dd:78:67:5c:e4:e1:0a:8f:1b:8a:9f:da:0d:61: ad:62:5d:95:7e:60:15:4b:27:c8:cb:9c:23:22:db: 84:d2:3d:6a:86:41:d1:f4:c8:d6:16:42:70:6c:d9: 9d:56:9c:aa:9f:eb:72:75:c6:ae:0a:11:0d:57:3f: 4e:62:ab:f9:66:40:8d:b9:fe:0e:65:69:39:d1:6a: 81:86:82:cf:be:65:4d:de:bd:84:ae:ed:4c:c3:39: 66:e5:aa:2b:32:e2:ed:46:ad:65:41:93:d4:b0:9f: af:1d:b8:c8:19:14:ab:f7:91:62:28:c6:37:86:96: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:7B:F6:00:E2:59:0E:D6:76:5D:97:23:E3:79:F6:A0:6A:13:31 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:54:f7:56:2e:0c:53:bc:4a:4d:71:a6:81:0b:55:65:f6:2e: dc:26:79:a6:c9:57:f5:16:d1:30:e8:ad:21:9c:99:00:bd:7e: a9:50:f3:f6:58:2c:94:6a:3a:64:5c:ab:37:dd:b0:cb:89:4c: ec:0c:93:b9:8a:fa:27:f1:bd:2d:d6:85:fb:fa:32:96:da:9a: 2f:5f:8c:d3:6e:d0:04:e9:21:e0:be:2d:b4:55:39:ce:5f:2a: 5d:6c:48:2b:a4:e6:60:85:b5:f6:aa:81:0f:30:e5:28:97:98: 4a:3d:b7:88:bc:3d:2d:33:32:1a:8a:63:65:d9:a8:98:c3:ac: 8f:e0:ac:a9:d0:f0:19:a1:c4:67:e2:46:d1:3d:ef:ef:e4:15: 97:4d:bb:7f:9b:45:d9:81:d7:2b:e5:a4:08:a5:46:5f:17:91: 58:66:1c:a4:53:02:7e:41:d5:2e:07:bc:1e:b0:5e:7d:ed:4a: a7:bb:e8:bd:d3:57:e0:d6:0f:da:de:27:2d:3b:63:35:63:9e: da:13:6d:4f:56:c8:0f:c7:13:b8:20:e4:d5:0b:4e:98:9d:42: df:11:22:07:1e:85:4d:70:90:a4:bd:7c:24:81:02:77:7a:b1: 6c:72:f6:7e:ef:a3:56:a4:cf:55:5c:a3:dc:e2:01:c0:11:e2: c7:a9:12:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6MCemQl5FNiRmlK41S6FRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMjA3MTkwMDUxWhcNMjUxMjA4MTkwMDUxWjAzMTEwLwYDVQQD EyhhMDEyN2JmNjAwZTI1OTBlZDY3NjVkOTcyM2UzNzlmNmEwNmExMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz0xq5Te0CKaLZsjs/dZ2311YaUh cjuruHXzfrotUNemiloYpCZ5sM161IxtuAQkOct84J/8mHWfKVEGMaY2FO6HN+4I 4Mj9fwNlRWqs/MQc+KE8zqDNd6RrOX6W8haxslw7Doh6dsSQJC3VRAXx6zH5arKa fJG00HH60j0ni+IT0c75TNSL3XhnXOThCo8bip/aDWGtYl2VfmAVSyfIy5wjItuE 0j1qhkHR9MjWFkJwbNmdVpyqn+tydcauChENVz9OYqv5ZkCNuf4OZWk50WqBhoLP vmVN3r2Eru1Mwzlm5aorMuLtRq1lQZPUsJ+vHbjIGRSr95FiKMY3hpY4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKASe/YA4lkO1nZdlyPjefagahMxMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFT3Vi4M U7xKTXGmgQtVZfYu3CZ5pslX9RbRMOitIZyZAL1+qVDz9lgslGo6ZFyrN92wy4lM 7AyTuYr6J/G9LdaF+/oyltqaL1+M027QBOkh4L4ttFU5zl8qXWxIK6TmYIW19qqB DzDlKJeYSj23iLw9LTMyGopjZdmomMOsj+CsqdDwGaHEZ+JG0T3v7+QVl027f5tF 2YHXK+WkCKVGXxeRWGYcpFMCfkHVLge8HrBefe1Kp7vovdNX4NYP2t4nLTtjNWOe 2hNtT1bID8cTuCDk1QtOmJ1C3xEiBx6FTXCQpL18JIECd3qxbHL2fu+jVqTPVVyj 3OIBwBHix6kSow== -----END CERTIFICATE-----Generated at Mon Dec 8 02:06:19 2025 by rpki-client