This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json) Hash identifier: Le1PvrWqbBnfiDY9D7pRgaPn0GSOj9x+rNLMNDN6ADo= Subject key identifier: 57:6E:4C:D2:E3:9D:A4:EA:CE:22:0D:E4:14:4D:80:D6:BF:F6:AE:A1 Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Certificate serial: 019B3042E089AB9B84DAF4F71E1579F74575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 07:00:47 +0000 Manifest this update: Thu 18 Dec 2025 07:00:47 +0000 Manifest next update: Fri 19 Dec 2025 07:00:47 +0000 Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: xzMIzRlpcR4ZZiuNn7M5xJU+NfNjCLm7BfIV3xCmi8c=) 2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:e0:89:ab:9b:84:da:f4:f7:1e:15:79:f7:45:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Validity Not Before: Dec 18 07:00:47 2025 GMT Not After : Dec 19 07:00:47 2025 GMT Subject: CN=576e4cd2e39da4eace220de4144d80d6bff6aea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:4d:fb:5d:bb:ab:3f:b7:2e:a6:22:bc:68: ec:52:9b:6e:8b:44:e0:81:c3:21:ad:9f:81:01:bd: 79:31:66:4e:52:01:02:52:24:93:e4:cd:80:93:da: a8:3a:f7:a6:6b:79:59:47:85:e9:7d:7b:ba:42:2c: e4:63:37:fe:14:b2:12:db:85:bb:1a:54:44:91:ea: fe:3f:e2:d3:b2:1b:7f:07:39:aa:37:07:4e:17:0c: 1b:bf:e5:c7:9a:8f:58:37:15:10:91:2b:a0:66:c3: fb:42:ef:e0:d9:2e:68:06:c3:2f:f1:f3:da:9a:ae: 89:97:49:1c:c9:ee:65:e6:c5:50:8d:ca:c8:92:59: a1:da:e9:bf:2d:5e:72:14:fd:b5:ba:3a:e0:b6:4f: 14:d7:7c:b8:5d:c0:ce:97:0d:80:8e:79:cb:5b:de: fe:f6:b9:d1:e5:4b:b3:ab:ef:07:86:1e:ce:5d:c2: d3:eb:fd:8a:19:43:05:42:d3:8d:17:36:e3:61:87: 71:9c:7b:c5:c5:66:8c:84:0a:ac:63:20:82:90:02: 34:f0:e6:41:e8:92:55:d2:8d:46:0f:09:80:4c:96: 8c:1a:5c:ff:df:02:b9:2a:e8:3a:b9:13:0c:2c:3d: 35:32:89:56:52:c2:48:9e:c2:cb:66:b5:4e:83:4a: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6E:4C:D2:E3:9D:A4:EA:CE:22:0D:E4:14:4D:80:D6:BF:F6:AE:A1 X509v3 Authority Key Identifier: keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9c:39:06:e6:f7:2e:90:13:23:74:cc:0c:99:ca:c6:ac:2a: 86:32:dd:39:df:ef:d3:80:9c:32:2b:e8:e1:ca:fc:a7:17:cf: 1c:c4:92:ac:96:c3:10:4f:b4:e0:6c:53:7f:29:c7:a7:d0:c4: de:0b:d9:7c:4d:b8:68:31:50:ac:59:c0:ad:fb:8d:a5:f7:4f: 54:26:b3:35:79:1c:7b:44:8a:4f:0b:b3:d8:eb:f1:7d:71:97: 84:e2:c1:80:52:4b:26:b0:be:29:22:d9:4b:e0:3a:ef:b3:ac: df:f5:dd:a4:e8:b6:0f:42:65:5f:f8:4e:20:05:7e:af:87:d7: 8c:9d:04:d7:95:27:9b:79:83:ed:fb:3d:bc:04:26:f2:04:27: 2a:39:4b:52:0c:ec:ee:82:72:28:2a:17:32:ee:87:fc:ef:ff: 07:1e:fc:3a:d2:d1:15:9d:3e:a9:38:47:02:3b:1a:6a:e8:ef: 40:a9:82:69:89:95:6c:f0:05:60:48:52:a4:8d:61:cf:ac:77: 84:c8:b8:36:79:fb:52:08:95:55:41:dd:24:f5:98:8d:be:47: 30:19:fe:d6:2a:87:b9:a1:73:28:a4:80:ae:8d:2b:49:e1:6a: dd:94:79:30:6f:c5:8b:da:db:4b:80:e5:b3:7e:90:14:6b:6d: fb:ed:2a:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQuCJq5uE2vT3HhV590V1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh NjE5ODcwHhcNMjUxMjE4MDcwMDQ3WhcNMjUxMjE5MDcwMDQ3WjAzMTEwLwYDVQQD Eyg1NzZlNGNkMmUzOWRhNGVhY2UyMjBkZTQxNDRkODBkNmJmZjZhZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCdN+127qz+3LqYivGjsUptui0Tg gcMhrZ+BAb15MWZOUgECUiST5M2Ak9qoOvema3lZR4XpfXu6QizkYzf+FLIS24W7 GlREker+P+LTsht/BzmqNwdOFwwbv+XHmo9YNxUQkSugZsP7Qu/g2S5oBsMv8fPa mq6Jl0kcye5l5sVQjcrIklmh2um/LV5yFP21ujrgtk8U13y4XcDOlw2AjnnLW97+ 9rnR5Uuzq+8Hhh7OXcLT6/2KGUMFQtONFzbjYYdxnHvFxWaMhAqsYyCCkAI08OZB 6JJV0o1GDwmATJaMGlz/3wK5Kug6uRMMLD01MolWUsJInsLLZrVOg0onYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFduTNLjnaTqziIN5BRNgNa/9q6hMB8GA1UdIwQY MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5w5Bub3 LpATI3TMDJnKxqwqhjLdOd/v04CcMivo4cr8pxfPHMSSrJbDEE+04GxTfynHp9DE 3gvZfE24aDFQrFnArfuNpfdPVCazNXkce0SKTwuz2OvxfXGXhOLBgFJLJrC+KSLZ S+A677Os3/XdpOi2D0JlX/hOIAV+r4fXjJ0E15Unm3mD7fs9vAQm8gQnKjlLUgzs 7oJyKCoXMu6H/O//Bx78OtLRFZ0+qThHAjsaaujvQKmCaYmVbPAFYEhSpI1hz6x3 hMi4Nnn7UgiVVUHdJPWYjb5HMBn+1iqHuaFzKKSAro0rSeFq3ZR5MG/Fi9rbS4Dl s36QFGtt++0qIQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:20:04 2025 by rpki-client