This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json) Hash identifier: /iGNlLZODKUrZmvECPnlIs3llG/JaKOfBZClXMtOChw= Subject key identifier: CB:0F:37:86:40:97:D2:C6:B2:E6:95:9D:94:65:71:1C:6B:DF:51:18 Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Certificate serial: 019B33B227183301B34237D94E734146EA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft Manifest number: 178A Signing time: Thu 18 Dec 2025 23:01:11 +0000 Manifest this update: Thu 18 Dec 2025 23:01:11 +0000 Manifest next update: Fri 19 Dec 2025 23:01:11 +0000 Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=) 2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: gYUixwmOZua1T1imMyN52hGmN9EXS24ZXpE7kpRlxAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:27:18:33:01:b3:42:37:d9:4e:73:41:46:ea:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Validity Not Before: Dec 18 23:01:11 2025 GMT Not After : Dec 19 23:01:11 2025 GMT Subject: CN=cb0f37864097d2c6b2e6959d9465711c6bdf5118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:f7:d7:47:ec:0c:1d:d5:3c:cc:bf:7d:9d: 8e:af:a7:8c:6c:ce:24:03:7d:ca:e2:46:a8:f8:0e: 42:5d:16:97:90:45:e2:a2:03:ce:4a:18:f8:a6:4a: c8:c2:e2:a0:29:59:a7:59:de:97:c7:c1:0f:4e:d4: 3d:f2:d9:16:4b:44:70:ca:28:43:a4:da:3a:76:eb: db:b8:89:c8:08:04:2c:3d:6c:fb:25:9f:dc:d6:90: 36:e0:18:cb:00:f0:32:c7:ab:b2:1a:c9:50:31:b2: d7:01:bd:25:96:89:91:64:36:11:b5:58:15:ff:3b: d9:9a:bd:41:c3:13:a4:97:01:a9:02:5a:8c:41:54: 1d:45:78:63:31:55:bf:91:82:08:74:71:6d:eb:95: 3c:3a:1a:0f:fc:99:02:8c:e4:5c:3b:e3:93:fb:b7: a0:c2:39:c9:bb:d2:51:e3:21:fd:11:f0:17:8c:06: 07:15:96:b4:ec:1b:1d:37:30:1e:a8:9f:40:e3:1a: b5:28:91:77:dc:ae:49:ea:3a:9d:ec:a7:00:62:85: 74:39:2b:72:56:44:5b:23:ec:fa:bb:6f:14:71:d6: c2:03:3b:73:fc:b5:13:1d:d0:d0:f7:46:5f:d6:81: 89:81:b9:f6:ff:b4:7c:c8:ba:6e:5e:84:2b:2f:a5: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0F:37:86:40:97:D2:C6:B2:E6:95:9D:94:65:71:1C:6B:DF:51:18 X509v3 Authority Key Identifier: keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6d:ec:31:8f:61:1b:ac:b1:25:4e:07:60:92:87:a1:4e:68: 41:f3:ab:de:5b:b3:8c:f4:f8:0f:3a:5a:e1:18:80:9b:81:92: be:32:02:f4:30:f1:16:8e:60:55:c8:8f:13:91:a8:52:9c:13: 93:7d:4c:22:6b:19:b2:a7:82:b8:4d:09:cb:4d:6a:04:db:81: 48:70:71:25:cc:d9:50:c9:a5:15:a6:86:70:dc:90:9f:0b:c3: c2:49:a5:95:5e:e6:c2:bf:39:ca:79:3c:07:4a:36:1e:e4:67: bb:8c:6f:d0:10:b4:9e:00:4f:d5:cd:1b:d6:38:81:3e:00:76: f1:e5:d8:be:ea:47:f9:1e:e3:0a:f4:92:7f:de:6d:55:67:2b: af:55:11:3c:76:d1:e2:24:cf:ea:6f:4d:01:d5:8d:f8:d2:6e: ec:df:ca:8b:11:0d:4f:34:c1:9e:0e:c8:bc:16:35:43:4b:68: dd:ea:6d:71:55:ab:61:ef:66:84:c2:57:da:39:e2:2a:c0:a6: 03:60:00:9e:dc:fe:70:f4:eb:73:d6:2c:56:58:e2:27:63:89: e9:8d:1b:a5:43:da:da:e0:13:d3:e0:56:89:29:26:31:df:c5: d0:a8:11:76:71:68:f1:38:07:2c:05:80:f2:85:21:e6:f7:16: d7:e0:ed:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsicYMwGzQjfZTnNBRuovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh NzBiOWQwHhcNMjUxMjE4MjMwMTExWhcNMjUxMjE5MjMwMTExWjAzMTEwLwYDVQQD EyhjYjBmMzc4NjQwOTdkMmM2YjJlNjk1OWQ5NDY1NzExYzZiZGY1MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bP310fsDB3VPMy/fZ2Or6eMbM4k A33K4kao+A5CXRaXkEXiogPOShj4pkrIwuKgKVmnWd6Xx8EPTtQ98tkWS0RwyihD pNo6duvbuInICAQsPWz7JZ/c1pA24BjLAPAyx6uyGslQMbLXAb0llomRZDYRtVgV /zvZmr1BwxOklwGpAlqMQVQdRXhjMVW/kYIIdHFt65U8OhoP/JkCjORcO+OT+7eg wjnJu9JR4yH9EfAXjAYHFZa07BsdNzAeqJ9A4xq1KJF33K5J6jqd7KcAYoV0OSty VkRbI+z6u28UcdbCAztz/LUTHdDQ90Zf1oGJgbn2/7R8yLpuXoQrL6XuAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsPN4ZAl9LGsuaVnZRlcRxr31EYMB8GA1UdIwQY MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG3sMY9h G6yxJU4HYJKHoU5oQfOr3luzjPT4Dzpa4RiAm4GSvjIC9DDxFo5gVciPE5GoUpwT k31MImsZsqeCuE0Jy01qBNuBSHBxJczZUMmlFaaGcNyQnwvDwkmllV7mwr85ynk8 B0o2HuRnu4xv0BC0ngBP1c0b1jiBPgB28eXYvupH+R7jCvSSf95tVWcrr1URPHbR 4iTP6m9NAdWN+NJu7N/KixENTzTBng7IvBY1Q0to3eptcVWrYe9mhMJX2jniKsCm A2AAntz+cPTrc9YsVljiJ2OJ6Y0bpUPa2uAT0+BWiSkmMd/F0KgRdnFo8TgHLAWA 8oUh5vcW1+DtfQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:21 2025 by rpki-client