This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json) Hash identifier: Dg55U5Lg/JMwXmvFnVzRcAeoN7mtm2TDlpvIsOkhFic= Subject key identifier: 71:E6:98:27:A0:18:2D:61:98:95:DC:0B:28:7E:D6:44:0F:30:14:A9 Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Certificate serial: 019B34C5A4C5E9B2267401CC2EE72FDD431E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft Manifest number: 0224 Signing time: Fri 19 Dec 2025 04:02:06 +0000 Manifest this update: Fri 19 Dec 2025 04:02:06 +0000 Manifest next update: Sat 20 Dec 2025 04:02:06 +0000 Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=) 2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: UwZ0INqc48Tt3/WOiVZVfWfOw3yEc6UgzMUFmBNyMF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a4:c5:e9:b2:26:74:01:cc:2e:e7:2f:dd:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Validity Not Before: Dec 19 04:02:06 2025 GMT Not After : Dec 20 04:02:06 2025 GMT Subject: CN=71e69827a0182d619895dc0b287ed6440f3014a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:cf:6b:cc:c9:21:58:d3:67:53:c0:13:78: 4d:4a:1f:1b:c6:2d:e3:50:a6:8f:92:e4:88:90:f1: cd:54:90:93:b3:1f:8f:8c:56:7a:19:a5:86:e5:a7: ac:e8:ac:32:e1:dd:db:7d:7d:dd:f0:72:30:39:48: ec:3c:0a:a0:ad:9a:f8:41:63:f3:b3:53:0a:4c:49: 72:20:84:d4:a3:85:e7:c9:af:d4:6c:88:5d:7d:64: 4a:b7:60:91:0e:7c:66:da:2f:35:9e:51:9a:84:f2: 83:0f:e4:5e:e4:0e:a5:da:b5:0f:11:57:51:54:39: 11:7d:57:59:86:c9:a3:4a:cf:d4:47:c5:77:2e:23: 7e:b2:f6:5e:ed:3f:1f:84:9a:f6:7b:14:b3:35:1d: d7:a2:0e:c1:71:c7:4c:5a:4e:8d:9b:96:62:90:6a: a0:c0:a7:f8:30:92:3c:d7:57:0b:12:41:aa:2c:d9: 14:9b:5f:a0:36:d4:e2:5e:18:96:ea:f2:45:2e:a9: 94:88:09:7b:40:5f:5a:9c:1e:a3:14:83:0f:80:f7: 4d:1d:7a:e9:42:24:58:3c:ea:2a:8d:95:41:fd:69: ee:93:41:a2:e3:12:7c:3a:86:85:6e:a6:7f:90:af: 27:dd:f9:f6:26:8a:8b:b0:54:5c:38:9f:31:0d:e1: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E6:98:27:A0:18:2D:61:98:95:DC:0B:28:7E:D6:44:0F:30:14:A9 X509v3 Authority Key Identifier: keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ef:7e:8a:4d:b0:df:3c:42:9e:28:ce:d1:54:32:40:a3:27: 50:60:1f:ee:99:35:8d:c8:92:92:45:63:7d:0c:eb:e6:f4:9a: a1:f3:00:75:f5:7a:69:2b:22:34:c0:e3:a5:3c:6b:dc:36:ef: 25:60:06:08:93:3a:3f:ba:a5:6b:1c:ea:f6:ae:33:e9:da:96: 0a:9f:2c:cf:ca:4a:97:4a:9d:25:6f:ae:b7:c4:f9:ba:a7:62: e7:7d:c7:fc:32:99:fc:5c:22:ef:fe:46:8e:3d:0c:53:71:72: 12:63:89:96:3c:43:c7:cd:34:e3:b1:62:26:c2:b6:cd:fa:6e: ac:41:54:9d:db:23:eb:13:0d:27:d9:16:e9:22:e1:02:8b:40: 40:25:2d:46:31:00:b6:78:3f:4d:04:44:40:1b:e7:32:09:5f: 06:a5:05:c0:b4:30:95:5f:16:55:38:9a:d5:81:cd:6e:a0:e3: 10:fc:e2:00:af:61:73:3d:14:f0:b2:a7:18:66:1e:c5:13:f0: dd:b1:28:98:6f:10:d9:62:d1:f4:fd:60:82:c1:da:54:b9:75: ea:28:f3:fc:7a:b4:48:aa:2e:eb:e8:f1:9d:4c:7e:dc:a2:49: c1:f4:38:24:0a:1b:ab:4e:cc:58:41:4a:4e:d7:51:36:c0:88: c6:30:51:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaTF6bImdAHMLucv3UMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODRlM2QyM2ZmNjBiODI5ZTE0NmViZGFiNGEwYWU2MWRl MGY0ZmIwHhcNMjUxMjE5MDQwMjA2WhcNMjUxMjIwMDQwMjA2WjAzMTEwLwYDVQQD Eyg3MWU2OTgyN2EwMTgyZDYxOTg5NWRjMGIyODdlZDY0NDBmMzAxNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk7Pa8zJIVjTZ1PAE3hNSh8bxi3j UKaPkuSIkPHNVJCTsx+PjFZ6GaWG5aes6Kwy4d3bfX3d8HIwOUjsPAqgrZr4QWPz s1MKTElyIITUo4Xnya/UbIhdfWRKt2CRDnxm2i81nlGahPKDD+Re5A6l2rUPEVdR VDkRfVdZhsmjSs/UR8V3LiN+svZe7T8fhJr2exSzNR3Xog7BccdMWk6Nm5ZikGqg wKf4MJI811cLEkGqLNkUm1+gNtTiXhiW6vJFLqmUiAl7QF9anB6jFIMPgPdNHXrp QiRYPOoqjZVB/Wnuk0Gi4xJ8OoaFbqZ/kK8n3fn2JoqLsFRcOJ8xDeF6nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHmmCegGC1hmJXcCyh+1kQPMBSpMB8GA1UdIwQY MBaAFK+E49I/9guCnhRuvatKCuYd4PT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQt ZTVkOGUzNzUwMDA5LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQtZTVkOGUzNzUwMDA5 LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte9+ik2w 3zxCnijO0VQyQKMnUGAf7pk1jciSkkVjfQzr5vSaofMAdfV6aSsiNMDjpTxr3Dbv JWAGCJM6P7qlaxzq9q4z6dqWCp8sz8pKl0qdJW+ut8T5uqdi533H/DKZ/Fwi7/5G jj0MU3FyEmOJljxDx80047FiJsK2zfpurEFUndsj6xMNJ9kW6SLhAotAQCUtRjEA tng/TQREQBvnMglfBqUFwLQwlV8WVTia1YHNbqDjEPziAK9hcz0U8LKnGGYexRPw 3bEomG8Q2WLR9P1ggsHaVLl16ijz/Hq0SKou6+jxnUx+3KJJwfQ4JAobq07MWEFK TtdRNsCIxjBRwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:41:31 2025 by rpki-client