This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: gjrAfRdL2a5RfxMPQZm1jp/LoGRUsYLk8m2Ua//An9E= Subject key identifier: A1:1D:13:4B:60:47:3F:CC:02:E6:7F:7B:97:8E:D6:FC:67:21:D2:25 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B386A2F79B572DBE190629324A52284E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 144C Signing time: Fri 19 Dec 2025 21:00:41 +0000 Manifest this update: Fri 19 Dec 2025 21:00:41 +0000 Manifest next update: Sat 20 Dec 2025 21:00:41 +0000 Files and hashes: 1: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=) 2: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 3: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 4: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=) 5: DwoEeOBfOR1SSGusspKAwmFsVzQ.roa (hash: H0pqbDAXRPRfJy9ww7VBJEAMgv3v6lJt4id1Wh1pb3c=) 6: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 7: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 8: HPsj0REG9ntH5p9MtTfoE6PCtOM.roa (hash: 2c7mCAX4kFN1TjTb3dWtYIPUaSS1csZT+hNK2CXjJ6A=) 9: KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa (hash: 5P0Y8IyDFw3FKNorF2UISwlzSeLPTC9FKECNMhgmf8U=) 10: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 11: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 12: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 13: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 14: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 15: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 16: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 17: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 18: faH_H0bFTtExgpasofxwLYYJANE.roa (hash: UuzU0p9stf+YHdFjtIwVt8QxOqyBZDWMZbSxRsrWLug=) 19: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 20: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=) 21: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 22: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 23: i0SeWpSdogsaJx8W0_kVOAU_lRM.roa (hash: zq4L3oJxr9W9+WWee/L9rMw2rGgwNa6vusNf5ygshpI=) 24: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=) 25: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 26: nX_QAdzwSifxskcfZILVdGVu48c.roa (hash: ouA+SlnoKVv8DbD3Nn75qCPDCCLaDnVWOsKdJNJzO8I=) 27: qGx9a8MEF9OXy58djy_mCruf3WM.roa (hash: XwWNw6/nVyc0EM8BYpG7R7D5OC3oOrQM3PzBabqrllU=) 28: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 29: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: BCQMviTMgi0+tT6Wti1UgZeMv3dcFvf6FZx2A16/xX8=) 30: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 31: wr8foz5Mir5CdXg4AJzu9v_vxAA.roa (hash: ixM1cMPLJGFu51fGqV4fl5yayoYnJRWGn/rjQ5uu5VM=) 32: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:2f:79:b5:72:db:e1:90:62:93:24:a5:22:84:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Dec 19 21:00:41 2025 GMT Not After : Dec 20 21:00:41 2025 GMT Subject: CN=a11d134b60473fcc02e67f7b978ed6fc6721d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:38:70:a0:04:e7:bd:e8:90:84:42:25:e7: c2:c5:80:99:f0:58:06:83:76:08:46:59:c2:8d:11: 5d:7d:e8:13:7c:ae:d3:56:a5:f6:8e:32:59:ec:ad: 5d:c8:f7:1e:79:b6:ca:f4:e3:10:6e:d9:2b:d2:5d: 58:f1:a6:df:49:06:3d:2e:a1:55:a8:1e:e8:9c:dd: b6:9e:3f:95:8a:d6:ad:bf:f6:e3:89:9d:6c:d3:d7: cb:bf:99:d6:14:4e:71:39:a3:fd:76:8e:6c:d9:c2: a1:72:6c:a0:80:f9:a1:27:16:30:f1:31:a7:f8:ba: 20:45:74:ac:3f:c5:69:7f:ff:7e:81:6f:71:e5:44: 57:32:62:33:99:f9:a6:8b:0f:96:c0:e0:f8:ed:58: 1e:c6:4f:ba:34:d7:20:05:28:8b:27:0e:e5:36:56: 76:75:c0:f2:5c:8c:90:bd:9f:09:17:4d:2b:2b:9b: 1d:ec:32:92:d3:cb:58:fe:bc:26:ea:d6:fd:9d:a8: e3:78:bf:b6:92:b1:2f:fb:27:3d:c1:53:00:2c:a8: 9a:3e:db:ea:66:8b:84:00:f5:d8:15:45:4d:5f:8d: fa:c9:3d:c6:ef:b0:e1:c1:75:d3:4e:31:46:ad:7a: b6:3a:e5:32:b4:0a:5e:7b:e0:bb:cc:f6:2c:de:b3: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:13:4B:60:47:3F:CC:02:E6:7F:7B:97:8E:D6:FC:67:21:D2:25 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:8c:ef:fd:0f:73:96:58:62:27:4b:7f:f5:e8:3b:a3:c8: 90:70:01:bf:e7:d0:af:41:9b:c7:9d:54:8e:d5:69:52:ac:23: 38:4f:e7:74:9f:42:d6:69:05:a3:67:da:c7:21:db:b3:80:96: 63:17:3e:3a:09:85:7d:5e:9e:61:ec:fc:c0:d6:c5:2f:2a:12: 8a:d5:a4:3f:aa:e5:8c:e9:28:f6:df:8c:57:09:ab:3d:3c:8a: 87:3a:59:c0:0a:51:b6:4e:4c:6a:db:32:ff:82:15:bb:10:ed: 38:26:6a:0d:cf:49:2c:2c:96:5d:29:96:8b:cf:2a:47:00:07: 04:e0:ba:e2:ff:01:a4:68:66:6b:62:74:76:a4:16:0c:77:f0: 82:12:7b:4b:ed:9d:48:6f:27:94:61:90:48:c1:07:fb:72:fc: 1b:e0:76:e3:db:35:dc:1a:83:b7:ad:e9:15:d9:f7:66:dc:57: f9:50:60:5a:0d:31:c8:2a:d3:05:c7:e0:26:d6:4e:89:62:fe: 8f:63:1a:b8:bb:81:45:21:a9:ba:bf:31:cd:35:17:41:fc:ec: 02:14:e4:d3:d4:14:4f:96:f9:40:6c:33:78:50:c3:4a:f5:b1: 79:f2:34:ef:68:2d:32:dc:f5:e4:b7:0c:34:c5:80:49:20:99: 8d:6a:c2:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ai95tXLb4ZBikySlIoTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMjE5MjEwMDQxWhcNMjUxMjIwMjEwMDQxWjAzMTEwLwYDVQQD EyhhMTFkMTM0YjYwNDczZmNjMDJlNjdmN2I5NzhlZDZmYzY3MjFkMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZU4cKAE573okIRCJefCxYCZ8FgG g3YIRlnCjRFdfegTfK7TVqX2jjJZ7K1dyPceebbK9OMQbtkr0l1Y8abfSQY9LqFV qB7onN22nj+Vitatv/bjiZ1s09fLv5nWFE5xOaP9do5s2cKhcmyggPmhJxYw8TGn +LogRXSsP8Vpf/9+gW9x5URXMmIzmfmmiw+WwOD47Vgexk+6NNcgBSiLJw7lNlZ2 dcDyXIyQvZ8JF00rK5sd7DKS08tY/rwm6tb9najjeL+2krEv+yc9wVMALKiaPtvq ZouEAPXYFUVNX436yT3G77DhwXXTTjFGrXq2OuUytApee+C7zPYs3rOGIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEdE0tgRz/MAuZ/e5eO1vxnIdIlMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApteM7/0P c5ZYYidLf/XoO6PIkHABv+fQr0Gbx51UjtVpUqwjOE/ndJ9C1mkFo2faxyHbs4CW Yxc+OgmFfV6eYez8wNbFLyoSitWkP6rljOko9t+MVwmrPTyKhzpZwApRtk5Matsy /4IVuxDtOCZqDc9JLCyWXSmWi88qRwAHBOC64v8BpGhma2J0dqQWDHfwghJ7S+2d SG8nlGGQSMEH+3L8G+B249s13BqDt63pFdn3ZtxX+VBgWg0xyCrTBcfgJtZOiWL+ j2MauLuBRSGpur8xzTUXQfzsAhTk09QUT5b5QGwzeFDDSvWxefI072gtMtz15LcM NMWASSCZjWrChA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:20:27 2025 by rpki-client