This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json) Hash identifier: 7Gj2BUuMu4B5b0eJdIG1J12CJ1DbWBI3zFzHclQgVqU= Subject key identifier: C7:CD:6F:CE:B5:0D:20:0F:ED:6D:1C:27:0A:F7:69:EE:88:1F:47:9F Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019B2219C07105C0299914942636DF1FB310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft Manifest number: 0C17 Signing time: Mon 15 Dec 2025 13:01:11 +0000 Manifest this update: Mon 15 Dec 2025 13:01:11 +0000 Manifest next update: Tue 16 Dec 2025 13:01:11 +0000 Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=) 2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: NenrxAMZoI/gcNYwxYiTZ+R36akqtNbBgbmO9qiqhrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:c0:71:05:c0:29:99:14:94:26:36:df:1f:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Dec 15 13:01:11 2025 GMT Not After : Dec 16 13:01:11 2025 GMT Subject: CN=c7cd6fceb50d200fed6d1c270af769ee881f479f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:44:60:94:77:f6:e2:98:91:39:4a:0a:a1: 15:0c:1f:8b:a6:b3:31:e9:05:32:7f:ea:2d:89:05: 99:eb:70:59:01:52:cd:18:eb:fd:02:fd:0f:18:df: f0:60:a5:11:32:15:60:b0:cb:68:24:44:4a:56:b1: 5a:ff:05:b1:e8:4b:a1:33:25:47:2a:63:9c:6a:e2: 81:26:6c:84:01:4d:f6:56:29:40:2c:cb:70:a6:67: 9f:ad:3e:25:19:f0:7a:f5:fc:d0:c0:86:29:76:49: 80:a9:f6:1d:4f:54:14:f2:5e:34:94:06:8d:10:a9: 87:65:44:72:95:4a:f8:f9:85:e7:e4:5f:eb:e9:87: 78:ba:4c:fc:fb:d9:98:28:47:c5:c3:28:5f:9e:5b: cb:51:ad:6c:47:58:5c:e7:91:72:4f:23:9a:cf:b1: d3:0e:43:a1:37:98:4b:23:c8:5d:6e:89:f7:25:8c: 4c:17:ab:e5:97:64:92:4e:2d:39:c4:3b:3b:00:95: 62:49:40:df:6e:2f:ab:ae:4a:dd:4e:b4:90:26:06: b9:a6:97:b0:c6:09:78:eb:2e:23:79:a3:a4:b6:f3: 67:1e:44:0e:29:ef:93:e6:23:65:3c:fa:dc:3f:bb: 06:6f:5f:2c:5e:71:98:b5:59:14:2b:05:de:22:e7: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:6F:CE:B5:0D:20:0F:ED:6D:1C:27:0A:F7:69:EE:88:1F:47:9F X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:b6:40:5c:9e:07:c9:ea:49:19:b4:54:41:b1:f5:a1:61: 39:ca:9e:e2:cb:20:f4:0d:aa:64:a7:d4:e2:73:83:c5:76:fa: 5e:f5:43:94:a4:2c:82:3d:a1:8f:5d:22:b8:8b:d2:6a:30:83: 19:35:55:46:e7:3b:36:94:46:f8:3e:99:4b:92:a6:4b:0a:96: d9:81:e2:19:84:03:c5:ea:e6:a9:82:e2:97:18:ed:85:c2:e9: aa:08:2e:08:14:43:74:26:f6:32:d1:4a:8c:76:02:dd:d0:de: 72:c8:ed:c0:4b:b1:a8:a6:04:4c:e1:00:85:57:43:4f:a7:1b: 1f:66:cb:36:7e:dd:a3:49:db:df:9b:06:73:e3:37:f5:84:98: 40:38:53:bb:3f:b8:cc:13:45:e3:21:b9:22:0b:fd:0b:33:bc: 5c:1d:2a:1b:43:c7:65:43:5d:a0:44:24:45:bd:ed:8a:4b:bf: c0:6b:ea:40:27:c2:2a:47:8f:ae:ce:6a:16:fb:cc:13:4f:2c: dc:8f:56:a2:96:ce:1f:2c:e9:6f:f8:cf:23:18:26:68:4e:1a: 3a:86:aa:2d:c6:9e:e0:8d:80:03:ce:f4:96:12:01:cd:f3:3c: a7:ab:8d:86:06:4c:c9:80:08:ba:51:ac:48:0a:97:56:57:a4: 40:e8:83:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGcBxBcApmRSUJjbfH7MQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjUxMjE1MTMwMTExWhcNMjUxMjE2MTMwMTExWjAzMTEwLwYDVQQD EyhjN2NkNmZjZWI1MGQyMDBmZWQ2ZDFjMjcwYWY3NjllZTg4MWY0NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnldEYJR39uKYkTlKCqEVDB+LprMx 6QUyf+otiQWZ63BZAVLNGOv9Av0PGN/wYKURMhVgsMtoJERKVrFa/wWx6EuhMyVH KmOcauKBJmyEAU32VilALMtwpmefrT4lGfB69fzQwIYpdkmAqfYdT1QU8l40lAaN EKmHZURylUr4+YXn5F/r6Yd4ukz8+9mYKEfFwyhfnlvLUa1sR1hc55FyTyOaz7HT DkOhN5hLI8hdbon3JYxMF6vll2SSTi05xDs7AJViSUDfbi+rrkrdTrSQJga5ppew xgl46y4jeaOktvNnHkQOKe+T5iNlPPrcP7sGb18sXnGYtVkUKwXeIudIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfNb861DSAP7W0cJwr3ae6IH0efMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVm2QFye B8nqSRm0VEGx9aFhOcqe4ssg9A2qZKfU4nODxXb6XvVDlKQsgj2hj10iuIvSajCD GTVVRuc7NpRG+D6ZS5KmSwqW2YHiGYQDxermqYLilxjthcLpqgguCBRDdCb2MtFK jHYC3dDecsjtwEuxqKYETOEAhVdDT6cbH2bLNn7do0nb35sGc+M39YSYQDhTuz+4 zBNF4yG5Igv9CzO8XB0qG0PHZUNdoEQkRb3tiku/wGvqQCfCKkePrs5qFvvME08s 3I9WopbOHyzpb/jPIxgmaE4aOoaqLcae4I2AA870lhIBzfM8p6uNhgZMyYAIulGs SAqXVlekQOiD/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 17:06:05 2025 by rpki-client