This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json) Hash identifier: +WQPoWFkQT2i3+j7ieM+DJFu9pXWepPhOdPlVOWKxDU= Subject key identifier: 24:60:A0:7E:EE:A9:4A:49:75:CC:04:8E:4E:85:F4:5B:CC:16:EE:1B Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4 Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4 Certificate serial: 019B5D52F1839CC3ADA4DBAF2802159CF857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft Manifest number: 1797 Signing time: Sat 27 Dec 2025 01:01:15 +0000 Manifest this update: Sat 27 Dec 2025 01:01:15 +0000 Manifest next update: Sun 28 Dec 2025 01:01:15 +0000 Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=) 2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: chuaM+sXY2jO3hz5Sw2hq+wjMAtxL4Trg1L9qdzNNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:f1:83:9c:c3:ad:a4:db:af:28:02:15:9c:f8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4 Validity Not Before: Dec 27 01:01:15 2025 GMT Not After : Dec 28 01:01:15 2025 GMT Subject: CN=2460a07eeea94a4975cc048e4e85f45bcc16ee1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c8:c2:28:70:e5:ab:32:c2:aa:71:ec:dd:77: 57:57:59:ee:51:7c:7a:6b:08:23:b0:ca:57:79:21: 55:ac:25:32:66:5c:8c:97:98:08:15:31:52:be:3a: de:78:59:77:3f:8d:75:f5:0b:33:df:71:2d:48:3f: 24:f0:f0:74:3b:96:d6:ce:ee:48:e3:88:04:cb:a4: a3:f2:42:b5:b9:3a:0e:4e:2d:f0:34:f3:d7:77:9c: ef:f2:cf:6b:44:69:a8:e2:cd:64:ac:c4:26:a3:67: 1d:c2:d7:5c:b9:53:02:83:43:0e:75:03:cd:81:f4: a0:22:08:fb:e0:4e:bb:66:03:9d:66:68:82:0c:9b: dd:a5:c1:9e:1a:a0:d3:a7:4a:da:9e:c8:a5:16:54: 18:21:82:31:ef:5c:98:ac:47:6e:a7:6c:df:3c:af: ad:aa:33:08:fe:fc:76:3f:dc:11:e3:54:a9:29:c5: cb:b8:a1:fd:c1:1c:81:61:0a:9b:52:2b:94:b2:06: ce:f5:03:85:fa:9c:68:c4:e8:46:63:a6:2e:85:e8: 18:ad:83:4c:f9:0c:7a:08:79:bc:13:ad:29:fe:69: 44:91:f9:19:1b:c5:26:41:81:c0:04:3b:2b:f4:5f: cd:98:d5:8a:87:16:5f:d6:9d:dc:e3:33:c1:7c:78: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:A0:7E:EE:A9:4A:49:75:CC:04:8E:4E:85:F4:5B:CC:16:EE:1B X509v3 Authority Key Identifier: keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:24:c5:da:6f:73:26:b8:8e:2e:a6:f1:e3:af:c5:eb:62:48: 53:2f:b6:7f:89:5c:49:44:5a:8d:90:13:6a:8e:ed:95:54:e6: 70:f2:85:4d:d6:f9:18:af:26:7e:32:00:e4:c7:17:56:90:21: 01:52:85:0a:ac:5e:38:9d:4b:a6:d0:0d:bc:86:66:37:5d:e6: 3b:f6:0e:0b:81:2e:9c:af:f3:04:93:bd:25:08:cd:0a:84:d2: 5d:66:36:7f:d9:65:80:d8:6e:1c:70:7c:44:d7:ac:a4:84:ef: 31:fd:b5:28:3a:48:a4:44:eb:2e:b6:ad:5e:4e:f9:69:98:ee: ab:10:4f:ad:0d:25:97:c2:22:f0:77:cc:ff:6e:8a:5f:b6:51: 03:04:d6:4d:8f:1e:2f:f6:ae:f9:a2:d3:fb:64:c2:ab:dc:fc: e9:82:d6:d8:ab:0c:4e:8b:6a:6c:e8:26:1a:b2:d8:43:d1:f0: 62:b0:ee:4b:65:2c:25:68:4a:4f:87:fd:f2:c6:3b:d3:ef:b6: 66:a3:04:d8:f0:11:71:12:8b:28:f3:cd:7b:ce:d6:63:1c:0e: 9f:c7:e5:37:b0:0e:e5:48:7e:65:d7:2b:14:41:de:37:53:19: 26:a8:a5:d4:96:db:03:62:1e:57:ec:c8:f0:1a:59:29:ac:ff: 37:e9:5e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUvGDnMOtpNuvKAIVnPhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz OTc5YzQwHhcNMjUxMjI3MDEwMTE1WhcNMjUxMjI4MDEwMTE1WjAzMTEwLwYDVQQD EygyNDYwYTA3ZWVlYTk0YTQ5NzVjYzA0OGU0ZTg1ZjQ1YmNjMTZlZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sjCKHDlqzLCqnHs3XdXV1nuUXx6 awgjsMpXeSFVrCUyZlyMl5gIFTFSvjreeFl3P4119Qsz33EtSD8k8PB0O5bWzu5I 44gEy6Sj8kK1uToOTi3wNPPXd5zv8s9rRGmo4s1krMQmo2cdwtdcuVMCg0MOdQPN gfSgIgj74E67ZgOdZmiCDJvdpcGeGqDTp0ransilFlQYIYIx71yYrEdup2zfPK+t qjMI/vx2P9wR41SpKcXLuKH9wRyBYQqbUiuUsgbO9QOF+pxoxOhGY6YuhegYrYNM +Qx6CHm8E60p/mlEkfkZG8UmQYHABDsr9F/NmNWKhxZf1p3c4zPBfHjZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRgoH7uqUpJdcwEjk6F9FvMFu4bMB8GA1UdIwQY MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt ZjdlZGIyNjg4NjUyLzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSTF2m9z JriOLqbx46/F62JIUy+2f4lcSURajZATao7tlVTmcPKFTdb5GK8mfjIA5McXVpAh AVKFCqxeOJ1LptANvIZmN13mO/YOC4EunK/zBJO9JQjNCoTSXWY2f9llgNhuHHB8 RNespITvMf21KDpIpETrLratXk75aZjuqxBPrQ0ll8Ii8HfM/26KX7ZRAwTWTY8e L/au+aLT+2TCq9z86YLW2KsMTotqbOgmGrLYQ9HwYrDuS2UsJWhKT4f98sY70++2 ZqME2PARcRKLKPPNe87WYxwOn8flN7AO5Uh+ZdcrFEHeN1MZJqil1JbbA2IeV+zI 8BpZKaz/N+leUw== -----END CERTIFICATE-----Generated at Sat Dec 27 05:42:56 2025 by rpki-client