This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json) Hash identifier: JGwMsagq2CpWXjcINV99HqpLwncVdDQumJqv8oJMY50= Subject key identifier: A1:4C:E9:4E:5A:56:39:9F:0E:AD:C0:23:C9:07:8D:3A:5F:1D:A7:74 Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Certificate serial: 019AF31BDB6630AB8C77AAA6D6561CEA815B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft Manifest number: 0202 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=) 2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: mZoRIBu47o8TrA41D9xRt6X3ZqX6zEX0EZ1VwE0i2B8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:db:66:30:ab:8c:77:aa:a6:d6:56:1c:ea:81:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=a14ce94e5a56399f0eadc023c9078d3a5f1da774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:87:51:6e:41:95:78:4a:5c:65:aa:0a:34: 5e:4b:a1:bb:d9:37:17:2f:5a:41:28:04:62:21:ac: 17:88:2c:11:4f:da:1f:c4:e0:28:2a:2b:ea:76:12: 60:b2:10:6c:f0:03:6f:d2:41:27:b0:17:47:1e:1a: 1b:e9:23:fd:a9:07:2e:c1:79:f6:3e:d3:e1:43:a1: 42:5d:6f:49:ca:3e:fd:85:ab:58:27:ec:66:a2:8b: 7a:e3:9b:4d:30:ce:a2:ab:0e:0b:73:6c:07:94:c8: 03:43:6f:9b:d9:e3:fa:e6:ef:e5:95:90:5f:72:73: 5f:b8:06:55:53:ec:6f:f2:fd:07:c6:45:b7:b5:99: f3:ec:e6:71:05:bb:1e:f3:fc:4e:83:1c:c2:30:4f: 86:2f:9d:1d:aa:6b:32:1b:27:e6:62:03:35:21:b3: 3e:b9:f1:49:87:93:87:3d:df:81:5b:a1:9d:9f:dd: bb:c5:76:96:b4:c3:ff:90:c8:2a:51:0f:c7:01:15: 81:25:98:a4:38:bd:45:e3:ff:5b:ac:a4:84:71:70: 71:e9:cd:a3:e7:42:57:f8:91:b0:ff:71:fa:8d:b2: e4:6d:db:c3:00:44:41:8a:01:31:63:e4:66:63:b3: 39:91:07:18:32:3c:e4:48:fc:53:98:ee:c9:b3:58: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4C:E9:4E:5A:56:39:9F:0E:AD:C0:23:C9:07:8D:3A:5F:1D:A7:74 X509v3 Authority Key Identifier: keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:d0:84:00:48:af:e8:28:a4:42:a8:15:f6:1f:0b:e4:28: 3f:a7:11:8b:55:c0:f9:d1:46:70:a2:5b:fc:eb:04:87:b5:59: 4e:1d:6e:16:92:42:28:09:2e:c5:32:8e:2b:1e:49:ab:80:dd: e8:7b:23:81:27:74:97:44:50:2a:a6:c2:af:c5:6d:c8:3e:20: b8:0a:6b:60:a6:ba:8d:0c:54:65:37:87:3a:20:47:13:ea:48: 90:b3:2f:45:a0:4b:a1:fc:29:31:80:48:31:15:73:ba:1d:45: 97:20:ea:8b:f9:4a:a0:ef:76:4a:2d:26:8f:e6:0e:d6:5e:1e: d9:70:88:a8:7c:64:38:f0:54:e3:63:00:7e:00:e0:22:a1:f0: e2:c1:8d:ab:2f:5a:e1:5f:97:88:3a:d6:bd:42:d0:ea:70:e9: ef:c9:dd:64:ae:e2:a9:0c:2e:9a:80:64:6e:00:6a:b3:b0:94: 48:1c:4b:b5:eb:c6:38:6a:e5:38:58:96:ee:60:2a:ef:82:fd: 56:2a:66:69:5e:35:ef:43:f2:51:4d:68:0d:5c:c0:99:c2:16: c3:14:12:75:00:8b:e7:71:ea:b6:ad:1e:a9:b9:d3:ec:2c:86: 0d:ea:ac:3e:d1:a7:68:55:fb:a4:37:80:64:33:96:72:75:d5: 6f:5f:f2:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9tmMKuMd6qm1lYc6oFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODRlM2QyM2ZmNjBiODI5ZTE0NmViZGFiNGEwYWU2MWRl MGY0ZmIwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EyhhMTRjZTk0ZTVhNTYzOTlmMGVhZGMwMjNjOTA3OGQzYTVmMWRhNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIeHUW5BlXhKXGWqCjReS6G72TcX L1pBKARiIawXiCwRT9ofxOAoKivqdhJgshBs8ANv0kEnsBdHHhob6SP9qQcuwXn2 PtPhQ6FCXW9Jyj79hatYJ+xmoot645tNMM6iqw4Lc2wHlMgDQ2+b2eP65u/llZBf cnNfuAZVU+xv8v0HxkW3tZnz7OZxBbse8/xOgxzCME+GL50dqmsyGyfmYgM1IbM+ ufFJh5OHPd+BW6Gdn927xXaWtMP/kMgqUQ/HARWBJZikOL1F4/9brKSEcXBx6c2j 50JX+JGw/3H6jbLkbdvDAERBigExY+RmY7M5kQcYMjzkSPxTmO7Js1iLlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFM6U5aVjmfDq3AI8kHjTpfHad0MB8GA1UdIwQY MBaAFK+E49I/9guCnhRuvatKCuYd4PT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQt ZTVkOGUzNzUwMDA5LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQtZTVkOGUzNzUwMDA5 LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAHQhABI r+gopEKoFfYfC+QoP6cRi1XA+dFGcKJb/OsEh7VZTh1uFpJCKAkuxTKOKx5Jq4Dd 6HsjgSd0l0RQKqbCr8VtyD4guAprYKa6jQxUZTeHOiBHE+pIkLMvRaBLofwpMYBI MRVzuh1FlyDqi/lKoO92Si0mj+YO1l4e2XCIqHxkOPBU42MAfgDgIqHw4sGNqy9a 4V+XiDrWvULQ6nDp78ndZK7iqQwumoBkbgBqs7CUSBxLtevGOGrlOFiW7mAq74L9 VipmaV4170PyUU1oDVzAmcIWwxQSdQCL53Hqtq0eqbnT7CyGDeqsPtGnaFX7pDeA ZDOWcnXVb1/ynQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:59 2025 by rpki-client