This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: A0/FFecIsyciBR2LNv24ku7fp553tplxHdkLhDoy5Ss= Subject key identifier: 1A:4F:3A:37:86:CA:57:DA:4C:54:4C:87:2B:F5:B3:27:E2:BE:45:99 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019AF31C535C9E9C5EEE4C5F359FA0B07C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 1/Nxyw7vEOjTETRZOviHuz4E//qfHaKh1ifCn91z/04=) 2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=) 3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=) 4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=) 5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=) 6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=) 7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=) 8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=) 9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:53:5c:9e:9c:5e:ee:4c:5f:35:9f:a0:b0:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=1a4f3a3786ca57da4c544c872bf5b327e2be4599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:0a:14:48:19:e1:d3:9c:c6:b3:9d:48:44: 46:da:d3:e0:ff:97:0a:33:07:60:f2:78:a1:b4:2f: 92:57:24:88:82:ff:77:34:37:ae:25:8e:f7:d1:b4: e7:8e:13:50:4e:79:31:b7:ea:2d:ad:e6:31:22:7f: 9a:82:bb:6e:87:dd:4e:41:f5:63:10:06:86:65:43: fc:4f:e1:60:e8:59:eb:9d:57:17:e5:67:aa:f3:45: bd:49:aa:fd:fc:00:a9:8f:58:00:1a:a3:30:60:b7: f2:52:45:fd:c4:53:92:01:fb:28:4c:7a:b7:71:20: 5b:30:79:d7:84:60:3b:23:0c:71:4c:6e:dc:11:cf: aa:29:01:16:18:76:0d:df:d2:0a:79:ed:b4:c4:3b: 84:43:c9:a6:53:2c:c9:2c:38:70:15:7d:fb:4f:61: 34:7c:54:31:7e:5c:e6:6b:85:b8:9d:05:07:89:62: d6:06:3a:50:7e:05:3b:16:df:d7:3a:dc:fb:00:1d: 7e:5a:d6:c3:ea:68:57:26:ad:45:dc:b5:1a:d2:c3: 0b:74:a5:ce:f6:6c:19:35:b3:ab:31:f4:6d:02:a7: bb:bc:6c:4f:07:ed:f2:ad:a3:d5:c1:5d:f5:8a:3f: ba:8f:fb:7e:32:de:f4:0a:6c:52:63:2d:04:98:39: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4F:3A:37:86:CA:57:DA:4C:54:4C:87:2B:F5:B3:27:E2:BE:45:99 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e9:53:92:1e:8a:c3:dc:77:46:0f:db:2e:1c:e9:16:2b:63: db:22:7c:a0:76:2d:26:d8:db:91:bb:0d:d7:8c:cc:1d:40:d6: bf:97:42:4f:25:b4:b9:1c:a9:e7:89:6e:12:a9:5f:bc:2d:3f: 21:2a:71:98:f5:23:05:45:97:6f:7e:ff:d3:7e:50:ad:02:7c: 4f:e6:50:a2:d9:55:b0:61:9d:4c:50:72:0e:52:c2:0e:d9:46: 1e:83:07:cd:cb:ca:e1:e5:11:f9:49:ee:59:1d:ed:64:d2:75: c5:c4:f5:59:35:5d:ba:f9:b7:68:65:8c:88:11:da:b6:94:7c: 0d:2f:f2:05:9a:29:34:44:18:0f:f3:c8:21:6c:43:dc:31:af: e1:cb:7f:85:ef:4e:8b:15:c9:82:24:73:dc:6a:68:33:93:de: 75:a4:32:a5:4e:c4:c4:47:5c:2e:f1:45:08:17:60:50:17:4a: 61:2f:4c:4e:95:da:cd:37:a1:c9:b4:bb:41:11:36:c4:9a:2c: fa:06:b1:33:bb:6a:5a:d7:c7:da:50:7b:39:9a:d4:f8:ed:ba: c9:33:fd:63:69:0c:63:a4:8b:60:68:36:25:a2:9b:f9:05:6d: fe:a2:65:17:35:b2:9a:95:51:00:1b:36:67:0d:c7:40:a9:72: 11:f0:a2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFNcnpxe7kxfNZ+gsHxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD EygxYTRmM2EzNzg2Y2E1N2RhNGM1NDRjODcyYmY1YjMyN2UyYmU0NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9QKFEgZ4dOcxrOdSERG2tPg/5cK Mwdg8nihtC+SVySIgv93NDeuJY730bTnjhNQTnkxt+otreYxIn+agrtuh91OQfVj EAaGZUP8T+Fg6FnrnVcX5Weq80W9Sar9/ACpj1gAGqMwYLfyUkX9xFOSAfsoTHq3 cSBbMHnXhGA7IwxxTG7cEc+qKQEWGHYN39IKee20xDuEQ8mmUyzJLDhwFX37T2E0 fFQxflzma4W4nQUHiWLWBjpQfgU7Ft/XOtz7AB1+WtbD6mhXJq1F3LUa0sMLdKXO 9mwZNbOrMfRtAqe7vGxPB+3yraPVwV31ij+6j/t+Mt70CmxSYy0EmDmsnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpPOjeGylfaTFRMhyv1syfivkWZMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhulTkh6K w9x3Rg/bLhzpFitj2yJ8oHYtJtjbkbsN14zMHUDWv5dCTyW0uRyp54luEqlfvC0/ ISpxmPUjBUWXb37/035QrQJ8T+ZQotlVsGGdTFByDlLCDtlGHoMHzcvK4eUR+Unu WR3tZNJ1xcT1WTVduvm3aGWMiBHatpR8DS/yBZopNEQYD/PIIWxD3DGv4ct/he9O ixXJgiRz3GpoM5PedaQypU7ExEdcLvFFCBdgUBdKYS9MTpXazTehybS7QRE2xJos +gaxM7tqWtfH2lB7OZrU+O26yTP9Y2kMY6SLYGg2JaKb+QVt/qJlFzWympVRABs2 Zw3HQKlyEfCiKw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:37 2025 by rpki-client