This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json) Hash identifier: SBas2IZP6KomB8NlREFzfSh1jeeKu1Q2G93ngNINPgs= Subject key identifier: 5A:93:6B:9B:3D:47:56:73:E9:A7:DD:D3:45:C2:73:C7:05:EA:6C:C0 Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Certificate serial: 019B3AC6D229BEEF566E6FF9A81DCE296668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 08:01:06 +0000 Manifest this update: Sat 20 Dec 2025 08:01:06 +0000 Manifest next update: Sun 21 Dec 2025 08:01:06 +0000 Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=) 2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: yzOABNy9jMeOvQhlEGjVnQP7YO5sx14BQVh5f7MQHiw=) 3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d2:29:be:ef:56:6e:6f:f9:a8:1d:ce:29:66:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Validity Not Before: Dec 20 08:01:06 2025 GMT Not After : Dec 21 08:01:06 2025 GMT Subject: CN=5a936b9b3d475673e9a7ddd345c273c705ea6cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:ac:18:f9:4a:77:50:19:e4:40:75:ee:f9: 15:7a:39:5c:51:4d:49:d9:64:3c:99:79:a4:74:35: 9d:13:8f:4a:54:25:55:d7:69:e5:be:74:14:07:6a: 4f:cc:be:f8:df:15:b7:d1:f4:4c:77:9c:c6:47:c3: 92:91:9b:7c:66:b1:6e:19:4a:60:b5:41:e4:0c:e8: f4:08:8e:81:a9:62:94:64:61:fa:15:dd:f4:32:d8: 65:00:a8:ed:58:2e:b5:22:31:4f:90:72:bc:d5:18: 53:72:f2:1a:b0:fb:43:6e:9a:0e:d9:e4:f9:70:f8: 4d:3b:8d:39:78:74:ba:53:8f:81:54:7a:81:b7:67: 22:3c:91:90:5c:5a:a8:c9:8e:a2:03:9a:98:e0:e2: 7a:58:ee:cd:80:57:05:98:a4:70:cf:7c:74:e1:8f: cc:61:ae:77:79:71:d4:61:b4:da:9a:16:30:88:d0: 78:7c:9b:1d:a0:34:49:fb:fd:bd:a1:7f:4d:a1:41: b0:7e:71:aa:ef:7e:cc:74:9e:83:e4:6b:71:2d:2a: ac:16:ec:5d:49:2f:00:f6:24:18:db:ee:80:97:7a: 5c:46:3e:2a:ee:d3:75:60:2d:8f:a2:80:4c:ed:e9: d3:d5:71:fd:69:29:c4:f1:5c:4e:90:23:41:9a:dd: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:93:6B:9B:3D:47:56:73:E9:A7:DD:D3:45:C2:73:C7:05:EA:6C:C0 X509v3 Authority Key Identifier: keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b9:d1:39:7f:54:c5:96:1d:94:1f:69:90:f4:0f:c8:96:75: 0b:97:be:c2:89:f1:5b:c3:35:77:6d:9c:30:18:04:9b:05:ed: 24:93:77:bd:1f:d8:0d:61:67:da:07:6c:33:f6:1f:12:d9:14: b4:85:2f:fc:b9:4d:cf:d1:35:eb:f6:37:96:5c:60:e4:3d:9b: 72:98:cf:52:5e:de:28:ac:fc:11:de:a1:39:da:d4:9c:3a:4d: 80:f3:d1:71:14:ef:6f:de:67:3d:9b:88:b4:19:00:fd:e4:f7: 14:4b:1a:80:57:ad:fe:e2:67:d5:ef:e8:27:ac:38:cc:a8:1e: 25:eb:2d:c3:30:51:4d:0b:42:56:59:1c:f5:ba:c2:a0:80:18: 3c:50:d3:41:5d:b7:53:5c:3b:63:6e:e0:96:67:b3:f1:cf:04: 15:f3:0e:5a:02:a9:70:cd:ed:99:20:d8:c4:ab:65:83:ba:6b: 84:ee:f6:8e:00:1d:cc:2b:c2:fd:4a:cd:20:a8:10:60:6e:fd: 7a:37:9d:f7:b6:93:81:99:b8:85:41:f0:3d:9c:86:b2:51:61: 62:c6:ce:3f:07:49:73:d8:db:a8:12:0a:32:cf:53:d7:1f:ba: 47:80:3b:88:fd:a9:48:d7:68:03:9a:aa:20:52:e2:12:e3:c1: f1:fb:2b:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtIpvu9Wbm/5qB3OKWZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx YjljZmQwHhcNMjUxMjIwMDgwMTA2WhcNMjUxMjIxMDgwMTA2WjAzMTEwLwYDVQQD Eyg1YTkzNmI5YjNkNDc1NjczZTlhN2RkZDM0NWMyNzNjNzA1ZWE2Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsasGPlKd1AZ5EB17vkVejlcUU1J 2WQ8mXmkdDWdE49KVCVV12nlvnQUB2pPzL743xW30fRMd5zGR8OSkZt8ZrFuGUpg tUHkDOj0CI6BqWKUZGH6Fd30MthlAKjtWC61IjFPkHK81RhTcvIasPtDbpoO2eT5 cPhNO405eHS6U4+BVHqBt2ciPJGQXFqoyY6iA5qY4OJ6WO7NgFcFmKRwz3x04Y/M Ya53eXHUYbTamhYwiNB4fJsdoDRJ+/29oX9NoUGwfnGq737MdJ6D5GtxLSqsFuxd SS8A9iQY2+6Al3pcRj4q7tN1YC2PooBM7enT1XH9aSnE8VxOkCNBmt2JewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqTa5s9R1Zz6afd00XCc8cF6mzAMB8GA1UdIwQY MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1 LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabnROX9U xZYdlB9pkPQPyJZ1C5e+wonxW8M1d22cMBgEmwXtJJN3vR/YDWFn2gdsM/YfEtkU tIUv/LlNz9E16/Y3llxg5D2bcpjPUl7eKKz8Ed6hOdrUnDpNgPPRcRTvb95nPZuI tBkA/eT3FEsagFet/uJn1e/oJ6w4zKgeJestwzBRTQtCVlkc9brCoIAYPFDTQV23 U1w7Y27glmez8c8EFfMOWgKpcM3tmSDYxKtlg7prhO72jgAdzCvC/UrNIKgQYG79 ejed97aTgZm4hUHwPZyGslFhYsbOPwdJc9jbqBIKMs9T1x+6R4A7iP2pSNdoA5qq IFLiEuPB8fsrBw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:14:58 2025 by rpki-client