This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json) Hash identifier: yP9vry+53JpL6QnxUR2CnQj5L4NDDu9DxwXYMRHwN3Y= Subject key identifier: 66:6C:BC:24:48:61:EE:F2:43:EC:D6:75:42:22:AC:C4:DD:CE:2D:68 Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f Certificate serial: 019AF2099CBD465A9B30061E038BD14198A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft Manifest number: 0841 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=) 2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: TZJ9W1FA9cSwzNx4ec+BLCvLWe1+/+TlT0o1cxpxj6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9c:bd:46:5a:9b:30:06:1e:03:8b:d1:41:98:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=666cbc244861eef243ecd6754222acc4ddce2d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:06:c7:b5:29:d4:c6:58:65:2b:96:74:cb:9f: 24:c8:69:e8:36:cc:5d:1a:41:d9:77:af:4c:2a:14: 99:84:b4:dc:6f:f8:ee:de:4e:ca:b6:7b:3c:7a:9d: ea:b8:fe:9f:1e:fc:12:f5:da:a1:37:d7:48:e3:bb: 4c:eb:63:92:b4:f9:02:d6:1e:33:89:39:93:e5:49: 8d:fa:6e:3d:2c:7b:2d:c5:f8:f0:6d:5c:30:4c:df: fe:75:33:04:de:10:4a:b9:07:17:0a:80:3d:6e:53: fb:a9:81:53:1c:78:23:00:2d:c6:bd:e4:20:88:de: 83:5f:86:cf:a6:f9:4a:93:63:71:86:12:4d:a0:10: 8c:1b:83:f7:56:38:f3:e0:f7:73:12:75:32:37:1b: be:cf:e2:93:83:f2:21:fe:ef:61:3b:4f:f4:fb:b1: 3d:9a:4a:ac:52:8c:46:9b:aa:df:6a:6e:1f:d3:04: 6a:39:76:28:f2:dc:4e:6d:b9:ef:20:30:90:e1:a7: d6:a8:5c:d5:c2:59:99:be:c0:4c:8a:94:68:cd:8d: 46:89:9a:9c:9c:64:f0:db:eb:cf:16:04:7f:04:8d: f6:25:b7:4b:9f:23:3c:38:a2:25:1b:8d:d1:86:25: 9f:44:31:cc:ac:5e:f6:72:6b:86:87:c6:ef:2e:14: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6C:BC:24:48:61:EE:F2:43:EC:D6:75:42:22:AC:C4:DD:CE:2D:68 X509v3 Authority Key Identifier: keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:6d:8f:a5:18:65:26:54:6e:0e:25:69:7d:1f:fd:08:53: 1d:5a:ee:44:6a:9e:b0:fa:6a:7e:f6:bf:2c:88:3a:0f:4b:f7: f8:3c:7f:8d:21:6e:e0:ce:30:6b:59:ea:38:83:a7:f5:cf:07: ee:c9:8a:a4:97:4a:76:12:bb:67:45:52:18:d1:cd:fa:20:c8: 15:85:70:ec:a0:b4:08:0a:42:ba:15:fb:30:ec:7b:21:97:ff: f5:2b:01:4e:ac:ac:78:76:7c:7c:83:94:f1:69:ac:1f:a4:0e: 25:e5:4e:9e:d6:ff:a4:3e:14:3a:55:b1:d4:78:94:9b:29:27: 56:97:37:89:b9:c7:fa:39:0f:a6:06:68:78:f7:74:ff:e4:0c: b3:21:13:0e:4d:62:d5:ac:b6:94:16:81:44:59:88:a7:3b:b0: b4:62:b9:75:05:31:29:25:e0:82:bc:ca:c7:30:27:88:be:e8: 47:e4:6d:98:26:74:db:f3:0e:a8:b3:bf:bc:d4:4c:57:48:8a: 52:82:64:ad:bf:b0:1a:30:05:6f:4c:2c:12:51:9b:16:30:24: 42:f6:ea:3c:a8:5e:de:09:0b:03:94:af:72:4c:92:84:76:b8: c8:93:a2:a9:03:1e:d4:27:cc:e2:d1:14:bf:e0:4a:40:b6:ee: ea:b4:c4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZy9RlqbMAYeA4vRQZimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl YmIyM2YwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg2NjZjYmMyNDQ4NjFlZWYyNDNlY2Q2NzU0MjIyYWNjNGRkY2UyZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQbHtSnUxlhlK5Z0y58kyGnoNsxd GkHZd69MKhSZhLTcb/ju3k7Ktns8ep3quP6fHvwS9dqhN9dI47tM62OStPkC1h4z iTmT5UmN+m49LHstxfjwbVwwTN/+dTME3hBKuQcXCoA9blP7qYFTHHgjAC3GveQg iN6DX4bPpvlKk2NxhhJNoBCMG4P3Vjjz4PdzEnUyNxu+z+KTg/Ih/u9hO0/0+7E9 mkqsUoxGm6rfam4f0wRqOXYo8txObbnvIDCQ4afWqFzVwlmZvsBMipRozY1GiZqc nGTw2+vPFgR/BI32JbdLnyM8OKIlG43RhiWfRDHMrF72cmuGh8bvLhQaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZsvCRIYe7yQ+zWdUIirMTdzi1oMB8GA1UdIwQY MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt NWFhYWMyY2IwZGYxLzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXRtj6UY ZSZUbg4laX0f/QhTHVruRGqesPpqfva/LIg6D0v3+Dx/jSFu4M4wa1nqOIOn9c8H 7smKpJdKdhK7Z0VSGNHN+iDIFYVw7KC0CApCuhX7MOx7IZf/9SsBTqyseHZ8fIOU 8WmsH6QOJeVOntb/pD4UOlWx1HiUmyknVpc3ibnH+jkPpgZoePd0/+QMsyETDk1i 1ay2lBaBRFmIpzuwtGK5dQUxKSXggrzKxzAniL7oR+RtmCZ02/MOqLO/vNRMV0iK UoJkrb+wGjAFb0wsElGbFjAkQvbqPKhe3gkLA5SvckyShHa4yJOiqQMe1CfM4tEU v+BKQLbu6rTECw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:04 2025 by rpki-client