This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json) Hash identifier: wbYUUj7jo9bAEv+rIXE3dBEMdE3YusgHOIJ+0UOO3iU= Subject key identifier: D0:AE:1D:A2:44:92:43:05:09:F3:18:36:AD:A9:DA:A6:44:88:45:18 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B6166AA87F541729D03B0D69FD030CC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft Manifest number: 071A Signing time: Sat 27 Dec 2025 20:01:16 +0000 Manifest this update: Sat 27 Dec 2025 20:01:16 +0000 Manifest next update: Sun 28 Dec 2025 20:01:16 +0000 Files and hashes: 1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=) 2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=) 3: Red5pkskUAFA8WcL1YOe9BUuOZM.roa (hash: S6qOREc3I0Eo71LK+o2EBPNiAlQAC2CgwyQqhyD99Xg=) 4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=) 5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: mUQEGRVlIhnzudp5cxp78y4Jx1+9zwoQY4M++xdXPwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:aa:87:f5:41:72:9d:03:b0:d6:9f:d0:30:cc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Dec 27 20:01:16 2025 GMT Not After : Dec 28 20:01:16 2025 GMT Subject: CN=d0ae1da24492430509f31836ada9daa644884518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:6c:fa:5d:40:eb:21:2a:89:f4:21:2e:bc: 1e:e4:46:68:5e:d6:f0:ea:36:d3:b3:20:33:b3:8f: ff:13:b7:10:f5:ca:e2:e0:cd:43:f2:af:c6:11:ef: 59:43:0b:2b:ff:f2:78:a6:6c:0f:24:c6:17:17:93: 21:c7:3a:c6:f2:36:ab:3b:f7:24:0a:ab:c9:48:8a: 2e:88:ad:96:7f:16:d0:d4:ad:51:e0:92:1d:6c:3f: a7:7b:66:3a:87:8c:b0:c1:bd:14:1a:d9:1d:43:40: f2:16:f7:b3:3a:19:18:b5:2c:f3:8e:4d:e5:73:fb: 48:28:d9:7d:fe:07:a8:72:3e:69:1c:7d:93:7f:ce: c5:06:d5:58:2b:6f:6f:36:d3:ad:f0:21:8d:00:d4: 0b:83:ad:f8:dc:33:71:0f:bf:9d:3a:4e:5c:8a:31: e1:92:89:e6:5b:ab:b5:fb:25:5f:f9:8e:ec:c9:ff: 9c:bf:1b:f5:39:17:5c:be:4d:95:48:27:d4:51:1e: e4:1a:8e:26:dc:04:fe:9f:52:4d:d8:1c:58:d7:79: 0c:e4:f0:c7:a2:3c:71:0e:bf:d9:d7:66:cf:af:9d: 02:a7:94:c9:a5:98:72:28:69:7f:8f:ec:14:37:cd: 90:2f:bf:4a:ed:8d:0d:21:78:4b:5e:84:17:ae:6a: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AE:1D:A2:44:92:43:05:09:F3:18:36:AD:A9:DA:A6:44:88:45:18 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:37:df:cd:8c:2a:bb:99:f4:0a:3e:43:20:2d:4d:29:09:69: 4d:e5:65:ca:81:bc:2d:e8:08:dc:bf:70:9a:1d:ab:be:e0:2f: cf:91:0b:7e:f9:04:07:5b:41:d5:41:d9:71:2f:86:d4:83:cd: 72:6c:77:a7:d6:46:67:10:bd:6e:d7:a0:06:3d:08:39:eb:eb: a4:eb:19:95:2a:14:9b:b7:a7:17:61:cf:56:c0:a5:31:7f:4a: 43:41:4c:7f:af:a6:66:6c:ac:d1:8f:60:19:df:38:65:28:63: ab:ee:4a:dc:fc:e7:f2:2a:a3:f8:ba:89:8e:c8:03:fa:bf:91: cc:65:d9:b1:21:00:2d:c4:a1:95:d8:36:58:05:b1:04:74:4e: e5:46:23:e2:58:32:dd:f6:66:36:d6:a2:55:6e:aa:f6:cd:8c: 76:50:9e:71:27:d4:1e:50:80:a0:d9:e1:b6:7c:ab:e1:68:72: 17:dd:ea:a0:69:de:59:33:ce:5b:6d:fa:44:f0:29:75:ab:2f: 3f:42:2c:5f:4c:8f:ec:fa:58:a5:93:47:ed:a2:cb:65:24:43: b4:3b:38:c9:c3:93:86:fd:5c:f4:89:96:8b:c1:3e:50:6b:1f: bc:f2:9d:84:d3:3b:26:3e:32:5a:5c:60:9c:10:a3:55:75:66: 32:7b:be:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZqqH9UFynQOw1p/QMMwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjUxMjI3MjAwMTE2WhcNMjUxMjI4MjAwMTE2WjAzMTEwLwYDVQQD EyhkMGFlMWRhMjQ0OTI0MzA1MDlmMzE4MzZhZGE5ZGFhNjQ0ODg0NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFhs+l1A6yEqifQhLrwe5EZoXtbw 6jbTsyAzs4//E7cQ9cri4M1D8q/GEe9ZQwsr//J4pmwPJMYXF5MhxzrG8jarO/ck CqvJSIouiK2WfxbQ1K1R4JIdbD+ne2Y6h4ywwb0UGtkdQ0DyFvezOhkYtSzzjk3l c/tIKNl9/geocj5pHH2Tf87FBtVYK29vNtOt8CGNANQLg6343DNxD7+dOk5cijHh konmW6u1+yVf+Y7syf+cvxv1ORdcvk2VSCfUUR7kGo4m3AT+n1JN2BxY13kM5PDH ojxxDr/Z12bPr50Cp5TJpZhyKGl/j+wUN82QL79K7Y0NIXhLXoQXrmpXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCuHaJEkkMFCfMYNq2p2qZEiEUYMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTffzYwq u5n0Cj5DIC1NKQlpTeVlyoG8LegI3L9wmh2rvuAvz5ELfvkEB1tB1UHZcS+G1IPN cmx3p9ZGZxC9btegBj0IOevrpOsZlSoUm7enF2HPVsClMX9KQ0FMf6+mZmys0Y9g Gd84ZShjq+5K3Pzn8iqj+LqJjsgD+r+RzGXZsSEALcShldg2WAWxBHRO5UYj4lgy 3fZmNtaiVW6q9s2MdlCecSfUHlCAoNnhtnyr4WhyF93qoGneWTPOW236RPApdasv P0IsX0yP7PpYpZNH7aLLZSRDtDs4ycOThv1c9ImWi8E+UGsfvPKdhNM7Jj4yWlxg nBCjVXVmMnu+0A== -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:21 2025 by rpki-client