This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json) Hash identifier: K91ocCfaFrIN5kk49HwWmvZ2EGwYrQD6na9uwWuBtMg= Subject key identifier: D9:4E:76:37:68:97:81:75:9A:1A:7A:80:2D:94:DC:7E:80:5C:04:A9 Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Certificate serial: 019AF0BF6DF88EE181C5287EE03DFBB14F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft Manifest number: 0E87 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=) 2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: aZYt0jHO7lxdeDZ9LJuNw7mpez1nx1RpVmMRLcrfcSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6d:f8:8e:e1:81:c5:28:7e:e0:3d:fb:b1:4f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=d94e7637689781759a1a7a802d94dc7e805c04a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:41:c5:4d:8c:57:f0:12:6f:c7:ff:5b:a3: e3:d1:76:c4:21:22:ab:37:fa:b5:b3:f2:7d:c5:da: c5:1b:38:f8:5d:b1:ad:25:54:5c:ac:97:1c:86:c3: 58:4e:81:32:ca:2c:2e:ad:f9:07:68:cd:56:cf:64: a5:e6:89:04:af:5c:89:eb:09:b1:fa:c6:6b:32:c4: ac:c2:18:32:60:ae:38:35:0b:e0:b1:db:f2:d2:ef: 57:2c:b5:54:af:e5:9f:6e:a4:dc:72:cb:43:4e:dd: c1:09:69:21:19:20:fa:d7:45:fe:ad:42:d1:b3:72: e0:cf:7d:70:92:67:c3:83:57:c0:cd:35:4d:cc:d3: c6:50:67:87:c1:28:99:6a:19:29:bd:0c:05:3d:6a: 55:1c:84:ee:ea:8b:1f:3c:43:7d:59:d3:39:a6:bd: cc:dd:d2:c1:36:11:09:62:96:8e:bc:5a:a6:b8:62: 74:5f:21:20:4b:77:d4:0d:ac:ea:2c:d6:f6:a4:d9: 65:94:18:c6:2e:d0:a8:d1:9c:0c:67:1c:13:4f:cf: 06:64:54:99:dc:80:a6:a6:80:71:cb:44:f5:54:eb: ea:22:1b:54:66:cf:c9:c9:c9:95:e7:b2:5a:b6:c1: 15:34:2b:ee:5e:aa:7d:67:49:cd:b9:d7:47:c0:21: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4E:76:37:68:97:81:75:9A:1A:7A:80:2D:94:DC:7E:80:5C:04:A9 X509v3 Authority Key Identifier: keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:48:49:e7:72:80:90:02:4f:6d:eb:c1:12:5d:51:0e:1e: d8:45:08:52:fd:4e:20:04:1c:8d:56:a2:0f:68:af:02:5d:b1: 3e:1c:b1:12:34:13:2a:a4:87:94:64:40:b7:fe:c5:06:e7:b2: fe:dd:d8:19:2f:1f:f8:1a:09:60:bf:de:fd:2f:0e:6f:01:f7: f6:77:c6:17:73:38:d3:b9:7a:ae:8e:8f:8a:c3:ef:c6:bf:58: 2e:f8:83:db:31:89:83:22:54:4c:e4:13:9b:1b:1b:26:a9:df: 33:b0:34:37:72:f4:d3:05:38:dd:3c:7d:dd:1a:8c:15:f4:43: 6a:a7:3b:d0:f7:c1:cf:2f:18:6d:cf:57:20:34:60:6b:77:95: 80:f4:39:d0:fc:5d:dc:83:f6:a6:64:42:9e:ee:28:f5:e8:c6: a7:55:a6:6d:99:1a:f1:77:96:05:d9:ab:d0:c7:02:85:16:c0: d0:2b:9a:f4:a7:13:ad:e7:6f:5b:3d:e9:b5:e0:4f:7c:8a:5b: ef:18:24:99:25:6f:6e:63:1b:1c:73:b6:21:a8:28:09:f4:02: 7a:69:8c:86:dd:96:e3:0d:da:e8:57:2a:ab:a6:34:e7:11:33: f0:b6:09:8e:e0:6b:2e:ce:2a:18:0e:46:97:79:20:ef:eb:a5: fe:d6:aa:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv234juGBxSh+4D37sU9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDFjNTZlYTA2OWVlN2IxYzFkZjY2ODZiZDM2ZTBlMTQ1 MjhhMjAwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD EyhkOTRlNzYzNzY4OTc4MTc1OWExYTdhODAyZDk0ZGM3ZTgwNWMwNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG5BxU2MV/ASb8f/W6Pj0XbEISKr N/q1s/J9xdrFGzj4XbGtJVRcrJcchsNYToEyyiwurfkHaM1Wz2Sl5okEr1yJ6wmx +sZrMsSswhgyYK44NQvgsdvy0u9XLLVUr+WfbqTccstDTt3BCWkhGSD610X+rULR s3Lgz31wkmfDg1fAzTVNzNPGUGeHwSiZahkpvQwFPWpVHITu6osfPEN9WdM5pr3M 3dLBNhEJYpaOvFqmuGJ0XyEgS3fUDazqLNb2pNlllBjGLtCo0ZwMZxwTT88GZFSZ 3ICmpoBxy0T1VOvqIhtUZs/JycmV57JatsEVNCvuXqp9Z0nNuddHwCFukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlOdjdol4F1mhp6gC2U3H6AXASpMB8GA1UdIwQY MBaAFE9BxW6gae57HB32aGvTbg4UUoogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEt ZDY3YjlhY2E2NDE3LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEtZDY3YjlhY2E2NDE3 LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEihISedy gJACT23rwRJdUQ4e2EUIUv1OIAQcjVaiD2ivAl2xPhyxEjQTKqSHlGRAt/7FBuey /t3YGS8f+BoJYL/e/S8ObwH39nfGF3M407l6ro6PisPvxr9YLviD2zGJgyJUTOQT mxsbJqnfM7A0N3L00wU43Tx93RqMFfRDaqc70PfBzy8Ybc9XIDRga3eVgPQ50Pxd 3IP2pmRCnu4o9ejGp1WmbZka8XeWBdmr0McChRbA0Cua9KcTredvWz3pteBPfIpb 7xgkmSVvbmMbHHO2IagoCfQCemmMht2W4w3a6Fcqq6Y05xEz8LYJjuBrLs4qGA5G l3kg7+ul/taqiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client