This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json) Hash identifier: tlvUYIeIMbvSo4dMmc/z+bDVoZ5azwzMob9GQvxiObM= Subject key identifier: 88:A2:BC:36:57:6D:51:89:CE:1E:35:FD:FB:E1:01:82:3F:DD:EF:F4 Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b Certificate serial: 019AF31CF6448E931278956A44DC1C5ECE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 10:02:32 +0000 Manifest this update: Sat 06 Dec 2025 10:02:32 +0000 Manifest next update: Sun 07 Dec 2025 10:02:32 +0000 Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: AIEypZ/9xg0rKt2pjjXaiYtQQhxYTKZkHz2+aIjXShA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f6:44:8e:93:12:78:95:6a:44:dc:1c:5e:ce:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b Validity Not Before: Dec 6 10:02:32 2025 GMT Not After : Dec 7 10:02:32 2025 GMT Subject: CN=88a2bc36576d5189ce1e35fdfbe101823fddeff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:95:0a:c5:89:f3:2f:97:27:19:3f:95:1c: 94:91:b4:5e:46:a3:58:ea:72:5c:44:13:ef:a4:26: 19:c0:ed:bc:c1:fe:ac:2e:f6:03:9c:9c:24:36:be: 41:6b:22:cc:e1:cc:bb:ea:35:2a:7a:26:4e:6e:31: 32:b7:aa:5a:a6:4d:33:f8:e7:06:2d:81:97:50:f0: 2b:41:f4:1f:96:1f:31:33:3f:22:ad:fc:20:1f:e0: ad:3a:3a:a9:85:af:8e:5c:97:46:1c:44:89:b2:3e: 5e:d1:e5:09:4a:d2:37:87:19:9c:d5:7a:b3:f4:38: d9:b9:75:b8:00:8f:2c:92:3f:aa:68:fb:71:e4:e1: 61:ba:ee:77:ab:c6:eb:ee:b7:0b:6b:4a:b3:e2:0d: e9:46:39:3d:f7:28:a8:a5:fd:36:8f:0a:8b:b0:63: 29:70:c9:4d:50:a5:5a:f8:d6:74:08:4b:33:62:03: c8:b8:39:a3:6b:2b:a4:96:08:47:ab:f2:8b:19:d4: 11:1c:2e:f9:a3:ba:48:e4:45:bb:4e:4c:fc:aa:39: 5c:b5:dc:e3:fa:2b:a2:02:55:21:4f:db:2f:33:c7: 64:95:f4:c6:90:1b:b5:fe:9b:71:b9:76:8b:d6:9e: 26:be:6f:42:1d:75:33:35:1a:0f:28:e3:e5:d2:9f: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A2:BC:36:57:6D:51:89:CE:1E:35:FD:FB:E1:01:82:3F:DD:EF:F4 X509v3 Authority Key Identifier: keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:37:96:40:21:c9:2d:35:db:06:9a:af:99:9f:32:b6:29:8d: 03:33:a3:ee:ad:72:e3:31:de:80:89:0a:d7:10:df:91:19:97: 59:a9:bc:06:45:30:38:33:61:a2:c7:70:d3:5a:56:5b:01:3e: 5d:28:ef:4c:f0:0e:c1:f6:3f:d3:df:44:13:de:24:38:d8:c9: b7:f1:a3:ae:3b:d1:16:d5:53:f2:53:5c:c4:54:5c:5a:23:29: f9:2b:cc:7f:cd:9c:17:b1:cf:f5:22:23:de:8a:6f:00:1d:52: 1b:38:dc:5a:cd:69:4c:74:e2:32:45:c2:65:cd:e1:06:83:dc: 88:58:58:ce:0d:75:e6:98:90:6d:f1:1a:82:ae:97:5c:24:e8: db:2f:89:33:df:a6:73:20:11:ea:a3:ce:16:a2:30:1e:a5:30: 62:cc:c4:92:a8:80:d6:23:0a:a3:6b:99:20:33:44:66:2e:7f: c9:15:49:50:d8:52:65:ce:eb:07:34:d6:c9:f6:bf:60:8d:e9: 50:4d:b3:ba:8c:ad:1d:7f:f3:33:32:2d:f3:60:89:22:a9:50: 23:92:88:d1:ba:f5:21:f6:90:d7:3b:ee:16:03:04:ea:fc:31: 5f:49:c3:cb:94:13:e3:49:8c:1e:d0:c8:74:2b:6b:0f:23:e0: bb:68:3c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPZEjpMSeJVqRNwcXs4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGQ3ZTFhYmIyY2Q4M2U5YTJkZTlhMDZiMzkxYjNhNTI0 NDQ0MWIwHhcNMjUxMjA2MTAwMjMyWhcNMjUxMjA3MTAwMjMyWjAzMTEwLwYDVQQD Eyg4OGEyYmMzNjU3NmQ1MTg5Y2UxZTM1ZmRmYmUxMDE4MjNmZGRlZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupGVCsWJ8y+XJxk/lRyUkbReRqNY 6nJcRBPvpCYZwO28wf6sLvYDnJwkNr5BayLM4cy76jUqeiZObjEyt6papk0z+OcG LYGXUPArQfQflh8xMz8irfwgH+CtOjqpha+OXJdGHESJsj5e0eUJStI3hxmc1Xqz 9DjZuXW4AI8skj+qaPtx5OFhuu53q8br7rcLa0qz4g3pRjk99yiopf02jwqLsGMp cMlNUKVa+NZ0CEszYgPIuDmjayuklghHq/KLGdQRHC75o7pI5EW7Tkz8qjlctdzj +iuiAlUhT9svM8dklfTGkBu1/ptxuXaL1p4mvm9CHXUzNRoPKOPl0p9LfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiivDZXbVGJzh41/fvhAYI/3e/0MB8GA1UdIwQY MBaAFE9Nfhq7LNg+mi3poGs5GzpSREQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAt NTFmNWM0NThmMTJjLzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAtNTFmNWM0NThmMTJj LzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTeWQCHJ LTXbBpqvmZ8ytimNAzOj7q1y4zHegIkK1xDfkRmXWam8BkUwODNhosdw01pWWwE+ XSjvTPAOwfY/099EE94kONjJt/GjrjvRFtVT8lNcxFRcWiMp+SvMf82cF7HP9SIj 3opvAB1SGzjcWs1pTHTiMkXCZc3hBoPciFhYzg115piQbfEagq6XXCTo2y+JM9+m cyAR6qPOFqIwHqUwYszEkqiA1iMKo2uZIDNEZi5/yRVJUNhSZc7rBzTWyfa/YI3p UE2zuoytHX/zMzIt82CJIqlQI5KI0br1IfaQ1zvuFgME6vwxX0nDy5QT40mMHtDI dCtrDyPgu2g8Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:01 2025 by rpki-client