This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json) Hash identifier: yUwpnPqy/RA3VhyT0/8kM5Dv65RvUoFt8alGcHSxtFw= Subject key identifier: BA:F8:AD:3B:B1:49:6D:21:A9:DE:B6:9D:D5:BD:29:A6:D3:09:BE:59 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B3CB53B9D1B929CD2293CFF9C130FA4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft Manifest number: 0707 Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=) 2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=) 3: Red5pkskUAFA8WcL1YOe9BUuOZM.roa (hash: S6qOREc3I0Eo71LK+o2EBPNiAlQAC2CgwyQqhyD99Xg=) 4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=) 5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: NiSCs1D1auUyFaLvmclM2+Kqd0sgVREBiKcu9IZtOQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3b:9d:1b:92:9c:d2:29:3c:ff:9c:13:0f:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=baf8ad3bb1496d21a9deb69dd5bd29a6d309be59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:cd:b0:18:7a:82:30:45:31:82:8c:7a:f3: 65:69:53:77:41:4b:7c:38:0b:c5:2e:9e:e7:5e:b6: 33:ba:f0:91:db:c5:04:58:cc:96:f5:be:ee:d0:81: 56:81:ac:2b:4e:59:ac:56:8e:2f:3f:18:90:76:09: b7:0c:8a:5f:ff:0c:74:dd:0e:a5:3e:e8:23:0f:1a: 72:7e:43:fd:93:be:c5:75:f3:74:c8:39:27:73:98: cc:31:01:c4:a6:d0:a0:36:c9:fe:09:42:ce:83:ea: e2:8d:4a:a9:a7:96:71:2d:be:24:35:f0:14:96:11: c2:7c:2b:06:01:39:03:e3:f0:75:19:0f:1f:b7:ba: 4e:46:64:7a:2a:92:92:10:bf:d3:14:f5:4c:2e:28: 97:a2:f6:77:9f:17:45:70:45:6b:73:7d:ad:08:a7: 34:ab:f1:a2:af:10:e6:b1:09:56:21:66:ed:97:5b: 88:eb:02:96:46:5f:81:fb:39:d0:ec:1c:be:7a:78: 5a:91:9b:ec:f0:48:87:bb:b3:80:45:bc:09:7e:96: 24:11:90:84:6a:9a:6e:b9:3a:21:ff:e2:6b:83:41: 6e:37:17:b8:14:50:14:5e:88:c6:e9:c2:6c:5f:80: 5b:12:9f:70:ee:59:bd:15:7e:4d:a2:39:6d:29:55: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:AD:3B:B1:49:6D:21:A9:DE:B6:9D:D5:BD:29:A6:D3:09:BE:59 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:af:9b:ef:7e:92:1b:40:b7:bc:e7:7a:62:bf:a9:f6:1b: 8d:5a:6c:42:5d:48:0a:49:aa:17:81:ef:f6:ee:5b:d7:f8:26: 05:66:e3:14:78:f0:45:0d:81:20:ef:4a:43:63:bf:92:bb:8c: d3:af:38:9e:6d:b2:a6:14:bb:12:db:24:7e:7b:98:e2:2f:6b: 05:f7:8f:08:a5:e8:2d:12:d1:c7:6f:f6:ec:b3:f6:03:c2:1a: 21:0b:68:98:c0:1f:83:29:71:fd:72:25:71:74:b6:90:97:83: 16:3a:23:3c:dd:fb:e8:f0:61:4f:52:2d:e6:18:3a:db:64:98: 73:ff:67:ab:28:18:84:f3:ff:53:e0:09:2b:18:a7:ad:0f:86: 3e:1b:da:29:0e:14:71:0d:7c:b6:2d:0a:85:b5:5a:f5:b6:62: 98:1f:5a:b2:7c:40:61:24:bb:37:80:d1:8c:4b:49:70:37:b9: fb:b0:87:85:74:84:93:e2:01:09:1c:d7:0d:0f:11:18:d1:56: e7:68:7f:8a:23:3e:d6:3d:af:22:ac:af:dd:68:f7:eb:b3:9c: b9:3a:d7:26:94:93:80:f5:7e:32:62:ee:3e:24:79:57:85:bc: 32:22:b5:f0:28:f3:c3:21:13:21:ff:af:58:61:b7:d1:d7:63: 02:92:45:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTudG5Kc0ik8/5wTD6TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD EyhiYWY4YWQzYmIxNDk2ZDIxYTlkZWI2OWRkNWJkMjlhNmQzMDliZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljHNsBh6gjBFMYKMevNlaVN3QUt8 OAvFLp7nXrYzuvCR28UEWMyW9b7u0IFWgawrTlmsVo4vPxiQdgm3DIpf/wx03Q6l PugjDxpyfkP9k77FdfN0yDknc5jMMQHEptCgNsn+CULOg+rijUqpp5ZxLb4kNfAU lhHCfCsGATkD4/B1GQ8ft7pORmR6KpKSEL/TFPVMLiiXovZ3nxdFcEVrc32tCKc0 q/GirxDmsQlWIWbtl1uI6wKWRl+B+znQ7By+enhakZvs8EiHu7OARbwJfpYkEZCE appuuToh/+Jrg0FuNxe4FFAUXojG6cJsX4BbEp9w7lm9FX5NojltKVUbZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr4rTuxSW0hqd62ndW9KabTCb5ZMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS2vm+9+ khtAt7znemK/qfYbjVpsQl1ICkmqF4Hv9u5b1/gmBWbjFHjwRQ2BIO9KQ2O/kruM 0684nm2yphS7EtskfnuY4i9rBfePCKXoLRLRx2/27LP2A8IaIQtomMAfgylx/XIl cXS2kJeDFjojPN376PBhT1It5hg622SYc/9nqygYhPP/U+AJKxinrQ+GPhvaKQ4U cQ18ti0KhbVa9bZimB9asnxAYSS7N4DRjEtJcDe5+7CHhXSEk+IBCRzXDQ8RGNFW 52h/iiM+1j2vIqyv3Wj367OcuTrXJpSTgPV+MmLuPiR5V4W8MiK18CjzwyETIf+v WGG30ddjApJFng== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:53 2025 by rpki-client