This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json) Hash identifier: 3J+ibJbnH6AnioSP52dmLmC+d0Bmjh8QitzWGXUHQ4E= Subject key identifier: 6C:0B:8A:20:BB:B0:F8:D1:D5:D3:BB:8C:25:6E:03:DF:85:42:B2:CC Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Certificate serial: 019AF3F787A945CE759626DB0BCCD950019E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 14:01:16 +0000 Manifest this update: Sat 06 Dec 2025 14:01:16 +0000 Manifest next update: Sun 07 Dec 2025 14:01:16 +0000 Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=) 2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: 3lQmVdKPLLC9zScOowyNuu0rXgS1Wtw7FrXz5U3ALQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:87:a9:45:ce:75:96:26:db:0b:cc:d9:50:01:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Validity Not Before: Dec 6 14:01:16 2025 GMT Not After : Dec 7 14:01:16 2025 GMT Subject: CN=6c0b8a20bbb0f8d1d5d3bb8c256e03df8542b2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:ae:71:a3:9d:8f:7f:e6:e6:5c:5a:4e:7f: 52:8c:c4:e4:87:68:ed:32:52:21:f2:a5:f1:e6:55: 76:95:8e:fc:c3:77:83:bf:00:7d:1d:41:2b:9c:a1: 83:1a:9d:89:dc:7b:4b:4f:cd:4b:77:e7:19:4f:ee: 9c:98:5a:21:2e:f8:38:b8:45:f0:00:0d:45:ff:eb: e0:27:89:91:10:cc:da:ed:21:83:b3:48:66:98:e2: 42:2d:49:c1:04:58:fa:9b:2b:36:0a:fc:04:c8:34: 14:3c:41:97:59:ed:70:66:ac:11:dd:fc:29:35:c8: c3:1a:20:7e:03:cb:81:23:69:cc:aa:b8:2b:6e:76: ce:ef:21:59:6b:82:ca:f0:23:b5:c8:8e:d5:e2:0c: e4:82:19:85:12:e9:37:83:9f:13:d4:b6:8f:c7:02: 71:86:d5:08:17:b5:3d:8a:8a:6a:3b:55:13:96:29: f5:1b:ab:cb:fb:2c:85:ac:04:35:97:3d:32:17:a0: 26:6d:bb:ce:d3:9c:d9:61:50:66:41:d7:be:62:46: 87:ce:d5:92:0f:c5:3e:54:a8:8a:23:87:95:cb:50: 38:80:24:38:69:fa:f8:f7:dc:b0:a3:aa:f7:03:b8: ec:b9:2d:50:b8:cf:7d:96:ba:80:8f:89:55:95:56: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0B:8A:20:BB:B0:F8:D1:D5:D3:BB:8C:25:6E:03:DF:85:42:B2:CC X509v3 Authority Key Identifier: keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ec:41:f4:51:b0:d3:c3:fc:5b:93:8a:50:bf:4c:fb:8c:ae: ac:55:88:56:01:1c:b6:16:87:5b:a9:9d:1d:7f:94:15:d7:03: 07:d8:7c:8d:6e:29:70:84:af:70:f7:f1:f8:83:e3:84:48:b3: 52:3e:a7:b5:51:1b:e0:33:e6:ae:bb:9a:c8:0e:e2:59:45:5c: 36:34:f4:6c:64:02:df:38:c5:7b:63:85:70:94:7a:c6:87:9e: d8:26:bc:ad:b8:5f:b8:ac:13:ed:85:0b:8e:c8:a5:3e:86:a9: b7:da:2b:51:c4:b7:e0:af:f0:15:96:cd:b7:4e:c7:0b:b6:c1: 58:31:5e:12:e4:3c:24:95:0a:2d:e4:fb:00:b9:3b:c0:59:a1: 74:12:91:3e:95:fd:92:4c:26:c7:b1:9f:e4:5b:70:f9:e1:b7: 12:46:95:f3:d8:eb:68:93:bb:ce:b3:7e:8d:d9:7f:77:d3:7d: 48:5c:18:1f:ba:35:e7:61:88:de:7b:42:fd:68:ac:2b:ea:96: 83:fd:35:70:bb:02:e4:06:04:e8:fc:2b:a6:96:17:d9:d2:19: 0b:de:90:51:57:70:3a:a3:95:c6:08:72:67:49:1f:f2:2f:3e: 20:9e:16:6c:a9:d1:50:06:94:30:ec:c4:cb:df:c5:02:58:79: 5a:65:2b:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94epRc51libbC8zZUAGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh NzBiOWQwHhcNMjUxMjA2MTQwMTE2WhcNMjUxMjA3MTQwMTE2WjAzMTEwLwYDVQQD Eyg2YzBiOGEyMGJiYjBmOGQxZDVkM2JiOGMyNTZlMDNkZjg1NDJiMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqheucaOdj3/m5lxaTn9SjMTkh2jt MlIh8qXx5lV2lY78w3eDvwB9HUErnKGDGp2J3HtLT81Ld+cZT+6cmFohLvg4uEXw AA1F/+vgJ4mREMza7SGDs0hmmOJCLUnBBFj6mys2CvwEyDQUPEGXWe1wZqwR3fwp NcjDGiB+A8uBI2nMqrgrbnbO7yFZa4LK8CO1yI7V4gzkghmFEuk3g58T1LaPxwJx htUIF7U9iopqO1UTlin1G6vL+yyFrAQ1lz0yF6AmbbvO05zZYVBmQde+YkaHztWS D8U+VKiKI4eVy1A4gCQ4afr499ywo6r3A7jsuS1QuM99lrqAj4lVlVaF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwLiiC7sPjR1dO7jCVuA9+FQrLMMB8GA1UdIwQY MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEexB9FGw 08P8W5OKUL9M+4yurFWIVgEcthaHW6mdHX+UFdcDB9h8jW4pcISvcPfx+IPjhEiz Uj6ntVEb4DPmrruayA7iWUVcNjT0bGQC3zjFe2OFcJR6xoee2Ca8rbhfuKwT7YUL jsilPoapt9orUcS34K/wFZbNt07HC7bBWDFeEuQ8JJUKLeT7ALk7wFmhdBKRPpX9 kkwmx7Gf5Ftw+eG3EkaV89jraJO7zrN+jdl/d9N9SFwYH7o152GI3ntC/WisK+qW g/01cLsC5AYE6PwrppYX2dIZC96QUVdwOqOVxghyZ0kf8i8+IJ4WbKnRUAaUMOzE y9/FAlh5WmUreg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:00:00 2025 by rpki-client