This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: eLPFC1bdzqKtNu87c9NlfEh+e0KPaprjTslL5BH0tC8= Subject key identifier: 57:E8:B4:BD:14:F1:CF:B0:42:B7:E6:A4:C5:7D:5B:1F:D9:01:77:8D Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019AF19B51CAC20EAA42A874AB190B67E70F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0B2F Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 0yfwmVxTJLER4DUt2Vg6_khLCpA.roa (hash: MKcDvWwqHVE9vZSHOg8w0ciXql+cjgazIARUal2yFTQ=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: gApijHlbL/WJ+zhT1AVct0+qa9p4vv189iAnuLdvykM=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: Aj9g_m6CfaASGCr3QyqhACN1wEY.roa (hash: +gKJiI8OTdXPQarnhMH7udASgSEq+BKd5szYHIlrvmo=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa (hash: 1S1vrwIqgJsILm5Ujeq8fQD6amjAbXoD/QM4fibgEmg=) 8: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 9: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 10: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 11: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 12: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 13: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: tBBMucfAaPHnI41UkYRqzWOfghM.roa (hash: NvXNtx83uU1ttCu+rJOFlyPiOp0KIY/kIuFiIN4vm5o=) 21: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=) 22: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 23: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 24: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:51:ca:c2:0e:aa:42:a8:74:ab:19:0b:67:e7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=57e8b4bd14f1cfb042b7e6a4c57d5b1fd901778d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:df:ce:56:67:7f:d3:24:4d:cf:ef:ad:5d: b5:01:ab:11:bb:5d:6a:e2:f0:0d:fb:e4:45:25:8f: be:5d:c9:05:26:96:ec:ac:92:f7:dd:45:66:1f:a1: a8:57:7d:0c:57:89:d6:c6:32:64:45:3e:7d:35:e2: d3:6a:06:e0:45:be:07:74:92:48:c1:b3:d9:e7:c1: f4:25:20:fa:0f:98:f9:11:0b:f1:88:d4:79:93:a4: 7a:93:0b:2f:7b:ad:2d:01:89:fd:69:38:19:c9:d9: f6:03:1c:74:cd:4c:a0:2e:43:0c:9b:08:04:15:5b: db:05:13:6c:32:7b:91:08:5a:32:c4:e5:6c:a0:4f: 95:9c:71:bb:ca:a4:07:61:52:4f:b8:10:87:51:ce: 4e:4c:34:01:dd:4e:23:01:4c:28:71:a0:cf:10:0f: 6c:8d:5c:f3:16:d0:8d:f8:6a:0a:0a:e4:8f:6c:78: 6b:ab:08:b5:96:3c:d6:ab:7a:82:70:83:6d:29:9a: 15:cf:05:ac:81:d9:a7:70:8c:23:df:fc:9b:67:1e: c5:ed:bd:7f:7c:49:f5:bc:f4:64:37:d7:b6:37:d4: 60:8b:df:56:5c:95:c8:86:97:5c:67:bd:72:cf:97: 4a:bd:d1:d0:36:38:ec:1c:49:28:cf:1a:3d:05:77: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:B4:BD:14:F1:CF:B0:42:B7:E6:A4:C5:7D:5B:1F:D9:01:77:8D X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:a2:ca:c9:c4:24:76:05:1d:2f:8b:31:be:82:4a:10:c9: 70:0d:29:69:d6:f6:63:c0:c0:4b:36:0d:73:56:0f:3a:31:c6: 52:41:1f:78:96:a7:34:94:0d:1f:66:1d:3d:40:24:85:0d:a2: 51:b9:e3:ca:16:d1:a3:68:38:96:8c:d6:18:58:44:eb:77:71: 4e:f7:77:d8:5f:25:de:66:86:ae:7c:cf:76:99:25:53:d5:b5: a7:41:e0:45:cb:66:1d:a3:8e:b0:dd:9f:c1:3e:f1:d2:29:7d: 4d:2d:f9:9f:e6:c2:3e:38:85:ae:ca:ae:9d:7d:4a:3b:bc:9a: 0c:ff:d6:d9:fb:55:a6:f7:6e:42:01:af:b2:fc:75:0f:54:4b: cf:0b:4d:e0:59:3e:b3:9f:85:94:4d:bb:f4:10:9c:c8:9e:76: 18:46:8f:35:5a:9b:e7:21:f7:77:f7:8c:ec:5d:f5:3f:fa:51: ed:74:8d:b5:af:7d:95:0e:1b:f7:2c:33:84:aa:06:53:4b:23: a5:ce:a8:f6:cf:48:97:02:60:ad:ea:91:1d:f9:e3:44:ad:7c: 51:45:bf:0d:6f:12:cf:1b:3c:99:94:48:8f:62:71:ab:8b:50: b6:48:b8:5c:b9:32:f2:3b:ca:7c:ff:e9:b4:1a:51:f0:74:ab: 97:5a:2e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1HKwg6qQqh0qxkLZ+cPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg1N2U4YjRiZDE0ZjFjZmIwNDJiN2U2YTRjNTdkNWIxZmQ5MDE3NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd3fzlZnf9MkTc/vrV21AasRu11q 4vAN++RFJY++XckFJpbsrJL33UVmH6GoV30MV4nWxjJkRT59NeLTagbgRb4HdJJI wbPZ58H0JSD6D5j5EQvxiNR5k6R6kwsve60tAYn9aTgZydn2Axx0zUygLkMMmwgE FVvbBRNsMnuRCFoyxOVsoE+VnHG7yqQHYVJPuBCHUc5OTDQB3U4jAUwocaDPEA9s jVzzFtCN+GoKCuSPbHhrqwi1ljzWq3qCcINtKZoVzwWsgdmncIwj3/ybZx7F7b1/ fEn1vPRkN9e2N9Rgi99WXJXIhpdcZ71yz5dKvdHQNjjsHEkozxo9BXdOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfotL0U8c+wQrfmpMV9Wx/ZAXeNMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJg+iysnE JHYFHS+LMb6CShDJcA0padb2Y8DASzYNc1YPOjHGUkEfeJanNJQNH2YdPUAkhQ2i UbnjyhbRo2g4lozWGFhE63dxTvd32F8l3maGrnzPdpklU9W1p0HgRctmHaOOsN2f wT7x0il9TS35n+bCPjiFrsqunX1KO7yaDP/W2ftVpvduQgGvsvx1D1RLzwtN4Fk+ s5+FlE279BCcyJ52GEaPNVqb5yH3d/eM7F31P/pR7XSNta99lQ4b9ywzhKoGU0sj pc6o9s9IlwJgreqRHfnjRK18UUW/DW8Szxs8mZRIj2Jxq4tQtki4XLky8jvKfP/p tBpR8HSrl1ouNA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:54 2025 by rpki-client