This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json) Hash identifier: h0fJDYrfKD6muD9eqpbh0cjfzSG66uMz+jYbLR6Mc3k= Subject key identifier: 2D:C4:CD:FB:69:E4:FF:47:29:B8:4B:6E:30:8F:E0:08:EC:1B:02:0C Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Certificate serial: 019B36E9B88EF481F4FC3CFCD801574F2F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 14:00:45 +0000 Manifest this update: Fri 19 Dec 2025 14:00:45 +0000 Manifest next update: Sat 20 Dec 2025 14:00:45 +0000 Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=) 2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: kX7lSjaxcOc3ktDc25YZxrXWiL+ASNSX7ImwvVBo3BY=) 3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=) 4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:b8:8e:f4:81:f4:fc:3c:fc:d8:01:57:4f:2f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Validity Not Before: Dec 19 14:00:45 2025 GMT Not After : Dec 20 14:00:45 2025 GMT Subject: CN=2dc4cdfb69e4ff4729b84b6e308fe008ec1b020c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:b5:b3:9c:7e:35:b9:45:77:80:90:78:3f: 0d:c8:90:7b:7f:47:4a:e6:59:b4:c8:85:3f:20:59: cc:db:d3:91:c3:a9:31:80:00:66:2d:ab:c5:cd:ba: ee:17:e7:53:39:04:e3:bd:71:bf:8c:80:05:b8:db: be:56:19:4a:a2:69:ee:1f:2c:ad:2c:7d:03:66:2b: e3:fc:d6:a5:99:92:4b:4a:b8:3a:49:15:68:e2:32: 79:50:d8:30:6e:1d:ac:56:0d:dc:ea:ee:3d:bd:20: d7:f7:e1:2d:e0:79:5c:49:d9:06:4f:22:29:61:52: e7:11:ff:f6:5f:4a:13:04:e1:3e:c8:b1:8c:08:a6: 7e:87:99:e5:b3:ef:b9:a9:d3:41:19:04:7d:61:16: 79:f0:b9:b5:e4:74:9e:dd:b7:90:60:db:25:1e:b5: 19:40:a4:82:e9:89:f7:98:20:51:8a:37:13:76:fe: 46:8a:37:be:d3:8d:92:d7:c0:ae:3c:9c:e3:62:bd: 62:6c:5d:a2:89:a5:95:77:05:61:f7:4d:2a:c3:59: b5:db:c4:49:05:4d:60:a0:91:fd:30:2c:21:57:1d: 36:b2:66:9e:b4:f2:45:b9:2c:32:b3:24:4d:57:13: f3:03:61:e9:9b:a8:22:6a:51:82:a2:f7:cd:50:82: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:CD:FB:69:E4:FF:47:29:B8:4B:6E:30:8F:E0:08:EC:1B:02:0C X509v3 Authority Key Identifier: keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:27:76:0a:85:ad:6f:81:38:f0:ec:72:75:15:62:c9:e9:47: 6d:1b:89:a6:b5:5b:1c:54:5f:a9:73:bc:9a:a9:b7:10:d0:49: 84:ce:0c:46:ca:1b:74:83:7d:a3:65:91:29:b2:0c:00:8c:8a: 90:63:c3:a2:5f:cb:44:59:0f:2f:88:b8:a9:f9:07:a8:38:c3: d0:3d:87:0c:07:b1:97:c7:5c:c6:1d:a9:5e:64:92:13:65:bc: 99:67:64:58:a7:6d:d5:90:3b:60:43:fd:3a:fc:23:4f:08:1d: fd:d5:04:20:f9:8f:d9:7e:0b:cc:21:03:96:f6:8b:5b:77:5e: 89:6e:e4:f5:ac:ef:b2:05:95:52:e5:8f:64:c7:6e:68:2e:37: 32:83:e7:e3:2b:6a:31:85:13:4f:da:0e:90:83:c7:2b:b9:13: 18:df:2b:56:af:3a:f3:01:c5:bc:49:99:68:11:2d:e1:16:ef: d4:85:7f:77:de:63:e9:2c:b8:2f:93:06:22:dd:f0:79:a1:fe: 39:95:b6:e4:bd:27:5c:71:10:97:43:fc:a4:3b:51:a7:38:41: 86:6b:1c:0d:0b:93:20:e1:f6:14:bc:94:db:0a:30:b1:92:ad: 46:c6:78:f5:a0:ff:9e:86:d7:bd:1d:6d:5e:37:ca:1d:94:89: d8:7a:e8:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26biO9IH0/Dz82AFXTy9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj Y2U0YTQwHhcNMjUxMjE5MTQwMDQ1WhcNMjUxMjIwMTQwMDQ1WjAzMTEwLwYDVQQD EygyZGM0Y2RmYjY5ZTRmZjQ3MjliODRiNmUzMDhmZTAwOGVjMWIwMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwS1s5x+NblFd4CQeD8NyJB7f0dK 5lm0yIU/IFnM29ORw6kxgABmLavFzbruF+dTOQTjvXG/jIAFuNu+VhlKomnuHyyt LH0DZivj/NalmZJLSrg6SRVo4jJ5UNgwbh2sVg3c6u49vSDX9+Et4HlcSdkGTyIp YVLnEf/2X0oTBOE+yLGMCKZ+h5nls++5qdNBGQR9YRZ58Lm15HSe3beQYNslHrUZ QKSC6Yn3mCBRijcTdv5Gije+042S18CuPJzjYr1ibF2iiaWVdwVh900qw1m128RJ BU1goJH9MCwhVx02smaetPJFuSwysyRNVxPzA2Hpm6gialGCovfNUIK6PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Ezftp5P9HKbhLbjCP4AjsGwIMMB8GA1UdIwQY MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt MTRmYWIwMjQ0OTQ4LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4 LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyd2CoWt b4E48OxydRViyelHbRuJprVbHFRfqXO8mqm3ENBJhM4MRsobdIN9o2WRKbIMAIyK kGPDol/LRFkPL4i4qfkHqDjD0D2HDAexl8dcxh2pXmSSE2W8mWdkWKdt1ZA7YEP9 OvwjTwgd/dUEIPmP2X4LzCEDlvaLW3deiW7k9azvsgWVUuWPZMduaC43MoPn4ytq MYUTT9oOkIPHK7kTGN8rVq868wHFvEmZaBEt4Rbv1IV/d95j6Sy4L5MGIt3weaH+ OZW25L0nXHEQl0P8pDtRpzhBhmscDQuTIOH2FLyU2wowsZKtRsZ49aD/nobXvR1t XjfKHZSJ2HroEw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:47 2025 by rpki-client