This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json) Hash identifier: 9ttQ0MgB+lj1Xd1Qbq+8orO3o7HRe2DEXA+pjyAeyF4= Subject key identifier: F9:BF:29:C5:9C:8C:FD:15:0B:69:FF:A4:0F:3D:55:24:1A:A2:D3:73 Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96 Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296 Certificate serial: 019AF0BF7846B3B81AB6135070007D450C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft Manifest number: 0C Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: ePD_PZq2SA3Fh1qdkHm5Afa6Vks.roa (hash: v/E9wRP8401S3jY/oWtwnFxF/BL1kSc3z6Bit9lF6Zo=) 2: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: Er04nVvlC6wuMf7s23RHrGyJA7QeACyAjvNSfahUh3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:78:46:b3:b8:1a:b6:13:50:70:00:7d:45:0c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296 Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=f9bf29c59c8cfd150b69ffa40f3d55241aa2d373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:4d:87:c9:0c:05:54:73:88:ed:dc:5e:49: fa:48:f7:27:47:ba:02:c0:13:b9:a9:e2:bd:c1:56: c6:b3:1b:a1:54:4a:66:fe:7f:80:0e:2b:08:64:55: 20:6a:77:48:1b:51:e5:8d:64:7e:69:4e:7f:c5:45: c5:19:b4:c3:17:ca:b1:49:69:7d:18:f2:f7:a9:23: 97:87:a0:f7:ad:65:d1:1c:15:3a:39:97:f2:71:69: ec:ad:e8:95:d3:98:cc:eb:4f:a7:30:7f:93:3c:0f: d2:56:05:26:0d:77:5d:f9:ae:5a:f3:4f:67:e9:f4: 91:6e:df:af:fa:3c:dd:2b:75:d6:bb:b0:14:01:91: 8b:a6:f1:2e:f3:65:ea:0e:20:d7:6c:b5:4e:9f:11: 16:1b:28:5d:e4:29:1c:39:5e:e1:c2:8c:9b:19:fc: 72:e7:b9:ee:20:1c:14:67:e2:ff:ff:e2:56:40:86: 99:00:81:3b:8a:cb:67:74:d4:6d:eb:99:41:b7:c0: a7:12:f3:02:d8:01:f4:b7:88:9d:d0:6a:f7:98:04: 85:fc:76:67:8c:fd:25:b5:d7:4c:34:11:77:03:15: 28:fc:95:70:4a:9a:e1:2d:fc:d3:a8:a6:36:20:be: 73:ca:35:fe:fe:ac:8f:7c:e5:a2:41:6e:93:54:16: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BF:29:C5:9C:8C:FD:15:0B:69:FF:A4:0F:3D:55:24:1A:A2:D3:73 X509v3 Authority Key Identifier: keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:20:db:e5:55:59:d6:50:25:0b:c4:4d:82:f3:13:7d:e8:d6: db:2d:e4:d3:cc:d2:17:db:e2:fe:52:c6:af:c1:d6:50:72:77: 52:0f:30:69:dd:43:ac:14:bd:09:aa:c1:46:1c:f7:1f:9c:37: 15:ed:cb:8e:da:89:fc:22:54:b5:c5:2a:a3:7b:b3:a1:89:e8: 1a:b6:8a:9c:74:7f:c2:5a:25:3f:f5:c1:ad:f6:59:95:ee:31: e6:c2:21:c1:6c:31:c4:13:18:48:b0:93:60:54:e1:44:e4:1b: 87:97:bd:3a:05:5f:ea:2f:a4:d5:ca:e2:96:74:13:cd:89:73: ef:ee:c3:1a:d6:7a:d7:16:49:2f:3d:83:44:d7:10:31:e1:5c: 8a:93:e4:85:42:93:ab:10:4b:a8:2c:6e:0c:fe:a9:b3:71:08: 59:18:25:db:47:1c:d5:a0:5f:9a:ee:74:66:8f:a1:0c:62:03: 76:29:7f:c8:31:43:4e:ea:8e:2d:e2:e4:96:4e:c1:1c:04:9e: 3d:92:7f:8d:72:b1:3a:69:b9:3e:08:4d:d8:33:7d:17:40:b7: 42:dc:e1:d7:ac:9d:a8:83:b8:79:f2:04:c7:e3:36:2e:eb:0f: 2f:f5:b3:64:ca:46:f3:0b:64:0e:e2:29:c1:ca:6d:aa:8c:2c: cc:e7:61:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3hGs7gathNQcAB9RQxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODcxZjI5MGZmZjBlMDQyNjBjNjc1M2UzODdjOWVmYjc1 YmUyOTYwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EyhmOWJmMjljNTljOGNmZDE1MGI2OWZmYTQwZjNkNTUyNDFhYTJkMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzedNh8kMBVRziO3cXkn6SPcnR7oC wBO5qeK9wVbGsxuhVEpm/n+ADisIZFUgandIG1HljWR+aU5/xUXFGbTDF8qxSWl9 GPL3qSOXh6D3rWXRHBU6OZfycWnsreiV05jM60+nMH+TPA/SVgUmDXdd+a5a809n 6fSRbt+v+jzdK3XWu7AUAZGLpvEu82XqDiDXbLVOnxEWGyhd5CkcOV7hwoybGfxy 57nuIBwUZ+L//+JWQIaZAIE7istndNRt65lBt8CnEvMC2AH0t4id0Gr3mASF/HZn jP0ltddMNBF3AxUo/JVwSprhLfzTqKY2IL5zyjX+/qyPfOWiQW6TVBYgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm/KcWcjP0VC2n/pA89VSQaotNzMB8GA1UdIwQY MBaAFLeHHykP/w4EJgxnU+OHye+3W+KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMt OTU1ZjVjYjA5ODkzLzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMtOTU1ZjVjYjA5ODkz LzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyDb5VVZ 1lAlC8RNgvMTfejW2y3k08zSF9vi/lLGr8HWUHJ3Ug8wad1DrBS9CarBRhz3H5w3 Fe3LjtqJ/CJUtcUqo3uzoYnoGraKnHR/wlolP/XBrfZZle4x5sIhwWwxxBMYSLCT YFThROQbh5e9OgVf6i+k1crilnQTzYlz7+7DGtZ61xZJLz2DRNcQMeFcipPkhUKT qxBLqCxuDP6ps3EIWRgl20cc1aBfmu50Zo+hDGIDdil/yDFDTuqOLeLklk7BHASe PZJ/jXKxOmm5PghN2DN9F0C3Qtzh16ydqIO4efIEx+M2LusPL/WzZMpG8wtkDuIp wcptqowszOdhzw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:38 2025 by rpki-client