This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json) Hash identifier: O50QK3OhJ0NciaO9B3uCdhFwD3G6LRgBYiQ1A7ZkL1s= Subject key identifier: 6E:93:62:CF:0D:8E:F0:2B:F6:2C:1D:14:CD:B2:B9:16:49:55:17:C7 Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019AF3C0558F5E6BC04FA77BBE3431E017C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft Manifest number: 0BFF Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=) 2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: AZukdTa9J+BGjQX1LNMLwsCW/YrSQYu/995Y3JX3pxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:55:8f:5e:6b:c0:4f:a7:7b:be:34:31:e0:17:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=6e9362cf0d8ef02bf62c1d14cdb2b916495517c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:d2:ef:31:91:08:3f:3f:2b:f1:76:45:cc: 77:cb:0f:b8:81:2f:68:22:53:3e:b0:5d:84:7d:db: 52:aa:e9:6f:ae:14:3c:80:d3:89:a3:32:31:72:2c: 8d:68:c5:cb:f6:4b:52:42:9c:5e:ff:67:ad:61:ed: c4:5d:54:8d:c5:20:09:a9:62:fa:67:64:64:4d:1b: f3:ec:5e:05:03:d0:11:b7:1e:7b:0f:82:a6:1b:8d: 03:f9:27:fe:c1:b3:a3:b1:25:7c:cc:fb:d7:62:2f: 62:eb:fc:9f:db:89:78:a6:70:52:08:7a:42:2c:d5: 7b:87:49:bf:fe:8d:8a:f2:00:c7:b5:eb:ee:b4:8e: 19:9f:05:02:fd:48:cd:f7:1e:73:d8:f6:71:59:f4: f7:30:e0:a6:2f:51:40:bf:26:74:9c:b6:99:a2:40: 76:20:be:56:7f:a8:2f:54:e4:19:d7:45:9e:1a:5d: f7:ae:2e:db:31:31:65:22:2a:9b:a9:47:c6:16:00: 51:bb:65:6b:e3:8c:25:33:91:59:b8:37:41:f9:9f: 3d:2e:da:db:da:39:f5:91:1a:86:28:df:a6:5d:42: 7a:90:85:28:e2:16:3d:fa:8a:64:22:3b:be:e1:27: a3:77:56:71:30:5e:7e:c4:d3:63:b9:38:27:e3:9e: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:93:62:CF:0D:8E:F0:2B:F6:2C:1D:14:CD:B2:B9:16:49:55:17:C7 X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:c3:be:37:12:a0:34:7f:3a:d7:da:ca:91:e8:bb:30:53: f8:1d:c0:51:af:0c:a8:fe:d0:bf:73:7c:04:c2:35:ad:49:60: 93:30:fc:0e:21:f2:ee:32:58:51:6a:e9:f4:f3:fc:1c:11:f1: a6:d5:14:2a:ea:6f:19:30:72:c9:1f:0f:99:a9:cd:2e:6c:f6: 58:bf:64:fb:d9:fc:69:54:23:c6:51:49:0e:67:12:44:f6:fb: 5c:0d:d1:e7:e3:30:d4:e5:78:65:86:ee:bc:fa:cd:06:57:88: 2e:e9:d3:a8:ee:a8:07:08:b2:7f:c5:1b:79:c3:f5:8c:5a:2d: b2:ec:c4:cd:6c:d7:46:25:44:f3:5b:1e:f4:01:1d:60:ff:89: 87:67:2b:ba:d6:4f:e1:6e:2f:09:b7:84:65:b3:e9:54:2c:02: be:b6:66:9b:da:1e:ec:05:c3:3c:29:28:be:6f:8f:ec:5e:c6: 2e:2b:3d:7a:49:92:28:f3:9c:e2:0f:d7:54:13:6c:40:00:dc: 4d:1e:02:b0:25:c3:03:f0:61:34:7f:fe:3e:8e:74:33:52:a9: de:c8:fe:2e:3a:d7:18:b5:cb:8d:6e:01:8d:a6:e8:dd:27:15: ce:e2:8a:ad:c6:8d:f6:11:4c:c5:1a:1f:61:11:5e:6d:15:f4: 7e:f5:e9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFWPXmvAT6d7vjQx4BfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD Eyg2ZTkzNjJjZjBkOGVmMDJiZjYyYzFkMTRjZGIyYjkxNjQ5NTUxN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwvS7zGRCD8/K/F2Rcx3yw+4gS9o IlM+sF2EfdtSqulvrhQ8gNOJozIxciyNaMXL9ktSQpxe/2etYe3EXVSNxSAJqWL6 Z2RkTRvz7F4FA9ARtx57D4KmG40D+Sf+wbOjsSV8zPvXYi9i6/yf24l4pnBSCHpC LNV7h0m//o2K8gDHtevutI4ZnwUC/UjN9x5z2PZxWfT3MOCmL1FAvyZ0nLaZokB2 IL5Wf6gvVOQZ10WeGl33ri7bMTFlIiqbqUfGFgBRu2Vr44wlM5FZuDdB+Z89Ltrb 2jn1kRqGKN+mXUJ6kIUo4hY9+opkIju+4Sejd1ZxMF5+xNNjuTgn45733QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6TYs8NjvAr9iwdFM2yuRZJVRfHMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecTDvjcS oDR/OtfaypHouzBT+B3AUa8MqP7Qv3N8BMI1rUlgkzD8DiHy7jJYUWrp9PP8HBHx ptUUKupvGTByyR8PmanNLmz2WL9k+9n8aVQjxlFJDmcSRPb7XA3R5+Mw1OV4ZYbu vPrNBleILunTqO6oBwiyf8UbecP1jFotsuzEzWzXRiVE81se9AEdYP+Jh2crutZP 4W4vCbeEZbPpVCwCvrZmm9oe7AXDPCkovm+P7F7GLis9ekmSKPOc4g/XVBNsQADc TR4CsCXDA/BhNH/+Po50M1Kp3sj+LjrXGLXLjW4Bjabo3ScVzuKKrcaN9hFMxRof YRFebRX0fvXpWA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:32:55 2025 by rpki-client