This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json) Hash identifier: uZvQ4Wj2Elbcq/1ncJmWrBFgeWkQBjgGy1Ux3aTjAUs= Subject key identifier: 2C:97:7B:CE:1C:4C:8E:04:4F:42:67:84:47:35:1D:FA:4C:24:F0:96 Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Certificate serial: 019AF276AA2E34326D3B5DC6D0C7DAAA7B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: 1jJC5sVBOvCwFPbH7dIKcgLYYaW6OPv3P7MTRaMowIo=) 2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:aa:2e:34:32:6d:3b:5d:c6:d0:c7:da:aa:7b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=2c977bce1c4c8e044f42678447351dfa4c24f096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:75:85:ec:7d:c8:35:b4:4b:c4:ec:9e:15: 2e:75:bf:7a:8a:f5:cb:11:6b:69:76:fd:cb:5f:a7: 8c:08:48:1f:27:1e:01:84:9d:61:d4:1d:c0:90:e1: 6d:ff:db:c2:f7:35:54:61:a1:5a:44:29:0c:9d:11: 53:9a:3a:91:de:40:3c:7e:41:17:07:5f:15:e8:74: c5:2a:9a:4a:f0:d8:c5:ab:98:1d:4b:55:3d:d7:19: ca:8e:53:85:b9:c5:f7:aa:cc:f2:4c:77:2d:0d:7e: 88:f9:8b:c3:9f:1c:7a:23:e6:2a:cf:98:f4:e9:85: 4e:83:86:f2:15:95:70:57:3d:ed:1b:fd:f1:41:46: a7:39:fd:b8:65:5b:42:1e:15:4b:a4:7c:64:65:1e: d5:81:2d:ef:c7:96:53:c9:e4:a0:c7:d0:c8:28:9e: fc:1a:cf:6c:e2:6c:93:01:79:71:e8:d9:10:14:72: dc:e1:c8:97:fc:11:03:fb:30:72:9d:fe:cb:9b:49: 14:06:1f:98:85:a6:fe:23:61:9d:62:23:10:6c:da: 98:3c:0b:58:24:81:40:a6:e9:d4:47:b9:34:2a:98: ac:8d:97:c2:36:c0:34:6f:11:b3:12:26:6d:60:e8: 84:69:68:4b:a5:ea:e4:27:44:8e:bc:9d:71:4e:9c: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:7B:CE:1C:4C:8E:04:4F:42:67:84:47:35:1D:FA:4C:24:F0:96 X509v3 Authority Key Identifier: keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dc:10:af:f5:66:5a:5d:7c:57:47:97:a3:3d:53:eb:b3:41: 56:4d:14:4f:79:28:8b:47:08:b2:04:c2:ee:05:a5:33:14:f8: 58:d9:fb:ac:9b:d0:a1:46:3a:b7:6e:46:47:49:1b:1e:7d:4f: 88:06:69:b5:e1:20:c5:24:f9:ad:01:93:57:92:c2:f0:50:77: 0c:8b:0e:63:ee:eb:ef:57:db:e9:85:7a:be:b7:10:e2:11:04: 5c:32:e8:84:a6:d5:ba:f9:ba:4c:b6:11:58:e8:65:ee:fa:86: 7a:34:6b:18:1e:eb:a6:5b:ce:3e:4f:8e:64:08:d8:5e:cb:52: 56:89:4f:a7:85:d5:45:de:73:19:c9:62:e4:f7:8b:f9:ff:6c: 5b:83:55:5c:aa:bc:cc:c2:cd:73:89:71:79:21:26:61:c5:32: 7b:c8:12:fb:0d:41:b0:2d:d9:80:67:8e:0d:ce:c7:ba:c0:ce: 64:d0:d3:17:e1:04:22:8b:ed:44:bf:65:16:a9:5f:70:48:06: 9c:16:e5:39:ac:ad:05:68:d8:03:94:4d:f4:97:d6:f6:dc:07: 5c:1f:e5:dc:45:05:fd:f9:a3:ff:41:4a:3d:4a:28:76:bc:74: ea:ac:68:47:78:93:7d:24:e2:62:ac:87:67:f2:e4:92:c5:d5: 4e:99:55:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqouNDJtO13G0MfaqnuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh YzIwYTgwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EygyYzk3N2JjZTFjNGM4ZTA0NGY0MjY3ODQ0NzM1MWRmYTRjMjRmMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUN1hex9yDW0S8TsnhUudb96ivXL EWtpdv3LX6eMCEgfJx4BhJ1h1B3AkOFt/9vC9zVUYaFaRCkMnRFTmjqR3kA8fkEX B18V6HTFKppK8NjFq5gdS1U91xnKjlOFucX3qszyTHctDX6I+YvDnxx6I+Yqz5j0 6YVOg4byFZVwVz3tG/3xQUanOf24ZVtCHhVLpHxkZR7VgS3vx5ZTyeSgx9DIKJ78 Gs9s4myTAXlx6NkQFHLc4ciX/BED+zBynf7Lm0kUBh+Yhab+I2GdYiMQbNqYPAtY JIFApunUR7k0KpisjZfCNsA0bxGzEiZtYOiEaWhLperkJ0SOvJ1xTpyiUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyXe84cTI4ET0JnhEc1HfpMJPCWMB8GA1UdIwQY MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2 LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9wQr/Vm Wl18V0eXoz1T67NBVk0UT3koi0cIsgTC7gWlMxT4WNn7rJvQoUY6t25GR0kbHn1P iAZpteEgxST5rQGTV5LC8FB3DIsOY+7r71fb6YV6vrcQ4hEEXDLohKbVuvm6TLYR WOhl7vqGejRrGB7rplvOPk+OZAjYXstSVolPp4XVRd5zGcli5PeL+f9sW4NVXKq8 zMLNc4lxeSEmYcUye8gS+w1BsC3ZgGeODc7HusDOZNDTF+EEIovtRL9lFqlfcEgG nBblOaytBWjYA5RN9JfW9twHXB/l3EUF/fmj/0FKPUoodrx06qxoR3iTfSTiYqyH Z/LkksXVTplVZg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:04 2025 by rpki-client