This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json) Hash identifier: ch4X+bmvuVFJKBysTju0q7KvyfkFbk4q5LUAk4Rj1Uc= Subject key identifier: 81:E0:D1:DB:09:7F:93:85:E6:B1:95:87:5A:CB:51:42:17:51:14:B6 Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Certificate serial: 019AF12E09A57E415C2788F0A043A37B3892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft Manifest number: 0B06 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: NhWbh7MxkpBdAVYO74lLZ2iacp+rD3HSsQzfhzmqwOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:09:a5:7e:41:5c:27:88:f0:a0:43:a3:7b:38:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=81e0d1db097f9385e6b195875acb5142175114b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:47:70:19:fc:12:2c:1d:57:68:ff:89:b0: 46:c5:dd:02:d5:1a:d0:63:79:dd:fd:b5:5a:3b:61: 62:30:1f:35:47:72:ed:fa:83:e1:3f:37:5a:9d:ee: 2f:80:5b:41:0c:6f:70:82:e2:41:f4:a9:b7:3c:8a: 39:45:52:28:26:f6:e6:3e:d0:44:5b:1e:b1:49:c2: 6c:d4:04:9b:00:bd:23:40:d1:72:1e:d0:0b:6b:1c: f0:70:e5:2a:a1:fe:dd:9e:7a:c8:60:e1:d8:71:ec: ff:54:8f:27:61:af:a9:b2:8c:3b:30:ad:11:98:22: f7:68:4e:db:04:26:e2:69:1f:92:5b:2e:8b:8f:43: d7:7e:9b:73:06:93:24:27:38:55:45:dd:ab:c0:0b: 52:1d:12:f6:31:60:70:3b:16:36:61:1b:09:2f:a7: 9b:c6:92:f6:de:a7:1a:d2:69:79:2a:22:72:30:fe: 90:aa:cd:4c:11:3a:60:4a:7c:b4:bd:34:78:c8:69: 79:d8:fe:fa:1a:fb:6a:59:dc:5c:f8:97:70:57:b8: 63:6e:0a:3c:26:3a:b2:bb:5a:7e:e0:80:26:1d:85: 4c:bc:99:ff:be:9c:1d:ce:f1:7e:38:7f:a5:fc:84: 7f:92:e1:f2:ae:93:8a:75:c1:2d:1e:b7:51:fb:47: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:D1:DB:09:7F:93:85:E6:B1:95:87:5A:CB:51:42:17:51:14:B6 X509v3 Authority Key Identifier: keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:32:0e:a8:ec:32:b2:b0:83:b9:36:c0:75:03:57:a7:96:9f: 89:88:ea:d8:c5:55:7e:90:f0:73:36:39:d9:1b:7b:32:12:cf: b2:d2:34:a5:c6:bc:6b:9e:c4:4a:64:f2:96:bb:18:4b:9c:31: 55:39:5e:ae:89:17:97:73:0a:06:77:02:6b:a6:ce:b0:f1:f0: 57:d5:3b:99:11:c0:3f:b5:05:5e:29:65:d1:52:2a:c0:e1:b3: 89:4e:16:c1:9a:92:98:de:c7:86:46:03:c3:a3:c7:dd:fc:8d: c3:01:b0:5a:0e:49:f0:1d:05:01:40:8a:37:26:9d:b6:80:5a: ac:29:47:e4:1a:3b:e1:10:b7:9a:fa:75:a7:f9:53:f7:76:ad: 89:ab:ab:e0:d4:a1:28:d7:8e:0c:34:7f:6a:3c:59:42:3c:7d: b1:d9:32:33:7b:2f:41:34:85:dc:3b:f6:1b:bc:09:a2:06:0c: 38:3c:47:78:01:73:20:89:a1:5b:81:d6:a4:b0:8f:35:67:eb: a9:2c:fd:ac:34:8d:ba:79:03:99:a4:f7:c8:cc:df:2a:9f:36: 56:b9:04:85:9c:18:97:56:d0:1f:17:13:d6:92:1c:a0:69:81: 71:ba:dc:af:e5:18:90:0e:61:35:96:d9:51:bb:5a:cc:63:a0: f7:b2:74:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgmlfkFcJ4jwoEOjeziSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk YzkyZWMwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg4MWUwZDFkYjA5N2Y5Mzg1ZTZiMTk1ODc1YWNiNTE0MjE3NTExNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ctHcBn8EiwdV2j/ibBGxd0C1RrQ Y3nd/bVaO2FiMB81R3Lt+oPhPzdane4vgFtBDG9wguJB9Km3PIo5RVIoJvbmPtBE Wx6xScJs1ASbAL0jQNFyHtALaxzwcOUqof7dnnrIYOHYcez/VI8nYa+psow7MK0R mCL3aE7bBCbiaR+SWy6Lj0PXfptzBpMkJzhVRd2rwAtSHRL2MWBwOxY2YRsJL6eb xpL23qca0ml5KiJyMP6Qqs1METpgSny0vTR4yGl52P76GvtqWdxc+JdwV7hjbgo8 Jjqyu1p+4IAmHYVMvJn/vpwdzvF+OH+l/IR/kuHyrpOKdcEtHrdR+0fVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHg0dsJf5OF5rGVh1rLUUIXURS2MB8GA1UdIwQY MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzIOqOwy srCDuTbAdQNXp5afiYjq2MVVfpDwczY52Rt7MhLPstI0pca8a57ESmTylrsYS5wx VTlerokXl3MKBncCa6bOsPHwV9U7mRHAP7UFXill0VIqwOGziU4WwZqSmN7HhkYD w6PH3fyNwwGwWg5J8B0FAUCKNyadtoBarClH5Bo74RC3mvp1p/lT93atiaur4NSh KNeODDR/ajxZQjx9sdkyM3svQTSF3Dv2G7wJogYMODxHeAFzIImhW4HWpLCPNWfr qSz9rDSNunkDmaT3yMzfKp82VrkEhZwYl1bQHxcT1pIcoGmBcbrcr+UYkA5hNZbZ UbtazGOg97J0BA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:07 2025 by rpki-client