This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: Unp10UDan7fU0Z6bJyPwn5V93M8vamhpGuTPBJqGdD0= Subject key identifier: 04:4D:67:8E:4A:F3:BE:22:48:66:11:E3:B4:A9:2E:DB:B1:5A:F0:AA Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B3AFDD30A4B69D4F9DFABC82B0AA3A726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0B55 Signing time: Sat 20 Dec 2025 09:01:11 +0000 Manifest this update: Sat 20 Dec 2025 09:01:11 +0000 Manifest next update: Sun 21 Dec 2025 09:01:11 +0000 Files and hashes: 1: 0yfwmVxTJLER4DUt2Vg6_khLCpA.roa (hash: MKcDvWwqHVE9vZSHOg8w0ciXql+cjgazIARUal2yFTQ=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: hxOrb+BC3jaN08LbTYQhbeemHRxomnSH/dq2rV6Wgpo=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: Aj9g_m6CfaASGCr3QyqhACN1wEY.roa (hash: +gKJiI8OTdXPQarnhMH7udASgSEq+BKd5szYHIlrvmo=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa (hash: 1S1vrwIqgJsILm5Ujeq8fQD6amjAbXoD/QM4fibgEmg=) 8: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 9: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 10: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 11: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 12: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 13: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: tBBMucfAaPHnI41UkYRqzWOfghM.roa (hash: NvXNtx83uU1ttCu+rJOFlyPiOp0KIY/kIuFiIN4vm5o=) 21: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=) 22: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 23: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 24: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:d3:0a:4b:69:d4:f9:df:ab:c8:2b:0a:a3:a7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Dec 20 09:01:11 2025 GMT Not After : Dec 21 09:01:11 2025 GMT Subject: CN=044d678e4af3be22486611e3b4a92edbb15af0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:7f:ff:c6:ff:69:9e:1b:0d:e4:90:ed:b5: d0:24:e0:a0:c3:2c:70:c5:d3:ac:9a:99:6a:15:c9: 3f:b9:ff:4f:07:08:10:76:90:57:09:11:aa:47:aa: db:d2:44:ac:f3:0e:3e:f2:2d:8d:37:8f:4d:8f:39: ee:44:97:e2:f1:7c:af:13:e8:e3:2d:48:77:4e:89: 64:f2:b2:eb:f0:1e:b2:f7:db:5b:8f:85:19:0d:23: 9a:d6:9e:ad:25:44:0b:d4:63:be:2d:ee:f9:f9:93: 69:39:66:98:40:53:0a:26:09:34:04:12:f1:64:b7: a0:b3:cc:9c:4c:9d:aa:9b:63:9d:98:5f:97:81:57: f4:e6:8d:66:eb:86:30:8a:f9:82:19:66:b8:67:f7: 2f:42:cc:11:e7:f3:6f:32:70:f1:a9:b6:76:d2:7a: 21:82:1b:3c:4f:ab:c7:ac:62:44:0a:b0:75:c8:62: d7:66:5a:0f:fc:2d:c9:d5:75:b6:e9:de:6f:9c:47: 37:41:d9:55:25:c0:99:24:12:fd:8d:35:36:08:88: 00:31:63:16:17:09:d5:1a:63:62:1e:b9:08:9b:94: ae:b3:df:37:7c:50:26:41:d4:c5:fe:37:f7:e3:51: 8d:29:4d:f6:47:36:9e:5f:e6:30:c1:93:4a:11:2b: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4D:67:8E:4A:F3:BE:22:48:66:11:E3:B4:A9:2E:DB:B1:5A:F0:AA X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:47:6f:84:01:c4:34:21:c6:b5:a1:6a:8c:fa:ac:34:d6:43: 2b:88:51:9b:00:0e:0c:60:cd:00:7b:7f:1e:45:3e:e5:de:fa: 0b:bc:2c:9b:07:b1:c7:28:e6:8f:58:af:9d:2b:ff:e9:45:9f: 5c:d2:81:b2:5a:33:02:62:2d:fb:37:45:b5:ab:c2:2b:28:c7: bc:9c:f1:d2:3e:fb:13:07:c9:55:b6:aa:31:4f:ae:5f:5a:91: e7:16:19:fc:65:d9:26:02:4d:15:31:6b:f3:42:b3:fa:70:67: b6:2e:dc:0f:52:da:4f:60:e7:23:d3:1c:af:f8:77:3f:38:bc: 18:8a:30:39:2f:82:b7:a1:f2:7c:1a:7d:83:66:b6:f6:d3:b3: b9:a1:d8:40:ab:3e:3d:83:a4:10:fe:83:59:6d:71:d7:78:74: 1a:59:07:15:1a:77:20:68:2f:fb:bc:d7:87:3c:92:77:b6:d6: 86:b7:c9:9d:de:58:be:7c:0e:d2:cf:73:2b:46:a5:52:98:a5: fb:46:28:b3:72:ee:4c:1b:03:ed:a8:6d:8f:4f:e3:77:f9:b1: db:cc:ee:ac:3f:62:a9:a7:27:52:86:ea:b7:81:4a:07:e5:18: 44:74:c4:96:f8:1e:84:d0:36:f4:ce:41:ea:4b:ab:a5:b6:74: bf:e8:3b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dMKS2nU+d+ryCsKo6cmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMjIwMDkwMTExWhcNMjUxMjIxMDkwMTExWjAzMTEwLwYDVQQD EygwNDRkNjc4ZTRhZjNiZTIyNDg2NjExZTNiNGE5MmVkYmIxNWFmMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT9//8b/aZ4bDeSQ7bXQJOCgwyxw xdOsmplqFck/uf9PBwgQdpBXCRGqR6rb0kSs8w4+8i2NN49NjznuRJfi8XyvE+jj LUh3Tolk8rLr8B6y99tbj4UZDSOa1p6tJUQL1GO+Le75+ZNpOWaYQFMKJgk0BBLx ZLegs8ycTJ2qm2OdmF+XgVf05o1m64YwivmCGWa4Z/cvQswR5/NvMnDxqbZ20noh ghs8T6vHrGJECrB1yGLXZloP/C3J1XW26d5vnEc3QdlVJcCZJBL9jTU2CIgAMWMW FwnVGmNiHrkIm5Sus983fFAmQdTF/jf341GNKU32RzaeX+YwwZNKEStPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARNZ45K874iSGYR47SpLtuxWvCqMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0dvhAHE NCHGtaFqjPqsNNZDK4hRmwAODGDNAHt/HkU+5d76C7wsmwexxyjmj1ivnSv/6UWf XNKBslozAmIt+zdFtavCKyjHvJzx0j77EwfJVbaqMU+uX1qR5xYZ/GXZJgJNFTFr 80Kz+nBnti7cD1LaT2DnI9Mcr/h3Pzi8GIowOS+Ct6HyfBp9g2a29tOzuaHYQKs+ PYOkEP6DWW1x13h0GlkHFRp3IGgv+7zXhzySd7bWhrfJnd5YvnwO0s9zK0alUpil +0Yos3LuTBsD7ahtj0/jd/mx28zurD9iqacnUobqt4FKB+UYRHTElvgehNA29M5B 6kurpbZ0v+g7aA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:38 2025 by rpki-client