This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: pAjWSVI/VBbNaLeGAw21jWO27oTpzpp1zApXyaPW5aQ= Subject key identifier: 3A:0B:99:76:24:D4:65:87:4D:22:A2:FE:89:86:F1:2C:03:B2:58:3A Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B2EC24058B095AA250A0AB4B5493819D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 1447 Signing time: Thu 18 Dec 2025 00:00:40 +0000 Manifest this update: Thu 18 Dec 2025 00:00:40 +0000 Manifest next update: Fri 19 Dec 2025 00:00:40 +0000 Files and hashes: 1: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=) 2: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 3: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 4: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=) 5: DwoEeOBfOR1SSGusspKAwmFsVzQ.roa (hash: H0pqbDAXRPRfJy9ww7VBJEAMgv3v6lJt4id1Wh1pb3c=) 6: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 7: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 8: HPsj0REG9ntH5p9MtTfoE6PCtOM.roa (hash: 2c7mCAX4kFN1TjTb3dWtYIPUaSS1csZT+hNK2CXjJ6A=) 9: KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa (hash: 5P0Y8IyDFw3FKNorF2UISwlzSeLPTC9FKECNMhgmf8U=) 10: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 11: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 12: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 13: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 14: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 15: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 16: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 17: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 18: faH_H0bFTtExgpasofxwLYYJANE.roa (hash: UuzU0p9stf+YHdFjtIwVt8QxOqyBZDWMZbSxRsrWLug=) 19: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 20: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=) 21: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 22: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 23: i0SeWpSdogsaJx8W0_kVOAU_lRM.roa (hash: zq4L3oJxr9W9+WWee/L9rMw2rGgwNa6vusNf5ygshpI=) 24: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=) 25: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 26: nX_QAdzwSifxskcfZILVdGVu48c.roa (hash: ouA+SlnoKVv8DbD3Nn75qCPDCCLaDnVWOsKdJNJzO8I=) 27: qGx9a8MEF9OXy58djy_mCruf3WM.roa (hash: XwWNw6/nVyc0EM8BYpG7R7D5OC3oOrQM3PzBabqrllU=) 28: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 29: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: J0ea3IYQIkKSa4hHg1QYPovm2un1/kaiNayTVzMIN80=) 30: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 31: wr8foz5Mir5CdXg4AJzu9v_vxAA.roa (hash: ixM1cMPLJGFu51fGqV4fl5yayoYnJRWGn/rjQ5uu5VM=) 32: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:40:58:b0:95:aa:25:0a:0a:b4:b5:49:38:19:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Dec 18 00:00:40 2025 GMT Not After : Dec 19 00:00:40 2025 GMT Subject: CN=3a0b997624d465874d22a2fe8986f12c03b2583a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:8a:f5:b6:d7:b9:6c:37:73:39:12:7d:54: c6:bb:39:c5:f0:4e:f9:71:b6:f3:39:11:8b:a0:19: 95:c0:30:a1:db:43:ba:d8:8c:88:9d:bd:2b:8c:e2: 6b:0d:1c:6f:ad:17:c8:9c:44:b6:d9:ab:a0:5f:84: e3:ff:f6:46:eb:e0:87:bd:73:c8:62:73:2f:de:3e: 8b:e6:53:07:97:5f:75:10:96:b9:57:cc:b4:f9:9c: f1:e0:d1:9c:86:80:ca:5c:9e:c1:19:77:71:af:03: de:71:37:de:1c:85:ed:96:cc:af:11:c3:ae:be:e4: 62:6f:42:9b:e8:77:11:cd:be:de:c6:03:b6:9e:f3: 39:ce:6f:40:0f:a8:f5:0e:2a:a9:94:95:1e:8f:7d: 60:a4:a2:87:13:5d:81:46:67:5b:3a:d5:ba:49:8b: bf:2c:6f:99:cc:80:81:91:71:4b:fc:18:5b:79:54: e2:63:e8:eb:e9:db:9a:b7:7d:62:98:e6:b9:3b:45: cf:5e:70:c6:d3:d3:df:b1:5c:e5:51:28:e4:aa:2a: 81:e1:27:c0:27:ab:bb:8d:50:c4:09:78:4c:2e:57: 51:82:d9:06:c0:a7:8e:10:16:d3:f0:68:b8:36:35: 28:10:23:ff:21:9c:69:1f:39:5c:9e:ac:98:74:18: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:99:76:24:D4:65:87:4D:22:A2:FE:89:86:F1:2C:03:B2:58:3A X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:94:03:bd:ca:16:68:de:42:70:1f:74:25:99:1d:3c:3e:8d: 5d:0c:8d:22:51:9e:af:c5:99:60:7a:87:0e:eb:7c:66:cb:be: 0f:84:c3:57:d4:9c:8f:69:e7:f1:c0:30:b5:05:a3:93:b3:62: 61:0a:a5:8a:36:5b:c3:fd:1e:19:94:d4:a5:44:72:bc:03:ce: 52:0b:91:19:c7:6d:6a:05:95:9d:f4:7f:11:9b:c7:62:7b:8d: 7e:48:1d:14:5e:17:db:e2:a2:b8:f5:aa:34:50:3a:41:cd:cc: 44:c1:a0:11:2c:77:26:4f:54:00:d1:f3:a3:a5:79:65:9e:1d: dc:be:3b:21:37:1e:6b:69:5b:2a:66:45:e8:b0:79:f6:9b:e6: d1:9d:76:9d:39:82:0a:97:d0:9b:fe:68:10:d7:7d:69:cd:bd: f4:1a:01:43:02:b5:93:80:b4:aa:d5:bc:45:0b:fd:ab:1c:a2: d2:97:97:c6:8e:9c:51:83:40:a5:89:31:f6:a9:b6:c6:aa:15: 98:de:93:52:a3:19:eb:56:06:53:d1:90:a6:46:25:5b:ac:5b: 33:c1:7b:ed:ac:ca:90:27:be:d4:6d:c9:1b:be:7b:c2:59:f5: b7:15:39:21:99:fb:76:b8:40:eb:21:fc:d6:b1:0d:49:f1:55: 37:c3:28:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwkBYsJWqJQoKtLVJOBnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMjE4MDAwMDQwWhcNMjUxMjE5MDAwMDQwWjAzMTEwLwYDVQQD EygzYTBiOTk3NjI0ZDQ2NTg3NGQyMmEyZmU4OTg2ZjEyYzAzYjI1ODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7CK9bbXuWw3czkSfVTGuznF8E75 cbbzORGLoBmVwDCh20O62IyInb0rjOJrDRxvrRfInES22augX4Tj//ZG6+CHvXPI YnMv3j6L5lMHl191EJa5V8y0+Zzx4NGchoDKXJ7BGXdxrwPecTfeHIXtlsyvEcOu vuRib0Kb6HcRzb7exgO2nvM5zm9AD6j1DiqplJUej31gpKKHE12BRmdbOtW6SYu/ LG+ZzICBkXFL/BhbeVTiY+jr6duat31imOa5O0XPXnDG09PfsVzlUSjkqiqB4SfA J6u7jVDECXhMLldRgtkGwKeOEBbT8Gi4NjUoECP/IZxpHzlcnqyYdBiBuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoLmXYk1GWHTSKi/omG8SwDslg6MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZQDvcoW aN5CcB90JZkdPD6NXQyNIlGer8WZYHqHDut8Zsu+D4TDV9Scj2nn8cAwtQWjk7Ni YQqlijZbw/0eGZTUpURyvAPOUguRGcdtagWVnfR/EZvHYnuNfkgdFF4X2+KiuPWq NFA6Qc3MRMGgESx3Jk9UANHzo6V5ZZ4d3L47ITcea2lbKmZF6LB59pvm0Z12nTmC CpfQm/5oENd9ac299BoBQwK1k4C0qtW8RQv9qxyi0peXxo6cUYNApYkx9qm2xqoV mN6TUqMZ61YGU9GQpkYlW6xbM8F77azKkCe+1G3JG757wln1txU5IZn7drhA6yH8 1rENSfFVN8Mo/g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:59 2025 by rpki-client