This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json) Hash identifier: VCXW5pmJk0OxFrB7BPEj/C+q81dpvTZaFXRVM8w4pfw= Subject key identifier: 09:D7:63:4C:8D:AF:03:51:28:7A:EB:88:C9:19:AB:7F:48:09:57:47 Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Certificate serial: 019AF352B112DFB5712E230816A6A73406C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft Manifest number: 023C Signing time: Sat 06 Dec 2025 11:01:13 +0000 Manifest this update: Sat 06 Dec 2025 11:01:13 +0000 Manifest next update: Sun 07 Dec 2025 11:01:13 +0000 Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=) 2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: h8SaGcejJ1tXVgEFdwLI4lI5emp3WJJMhCUeC/fGlEo=) 3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b1:12:df:b5:71:2e:23:08:16:a6:a7:34:06:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Validity Not Before: Dec 6 11:01:13 2025 GMT Not After : Dec 7 11:01:13 2025 GMT Subject: CN=09d7634c8daf0351287aeb88c919ab7f48095747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:5f:b1:ea:10:af:e5:63:73:ec:42:7b:cf: c6:73:c4:f0:b2:46:f6:a0:02:9b:d0:58:6d:98:6d: a9:49:a7:a0:d0:8f:a3:27:8d:44:ab:82:fb:c2:a1: e7:29:6c:0b:ee:b7:1a:2e:39:66:92:ff:4a:7d:39: ba:ff:97:58:5b:39:ca:94:cb:07:77:f3:2e:d1:d0: 96:95:d4:62:b8:5b:b3:f2:b2:0d:15:b0:54:cb:ef: 96:a1:66:d1:28:9d:55:42:0a:b9:65:c1:3a:bc:e3: 03:c4:75:f8:11:1e:e7:8e:6d:df:4d:a8:be:a4:fb: aa:03:73:b6:0b:3b:31:08:ed:9a:28:7c:f9:a7:58: dc:f8:34:5d:55:e0:5b:ee:8e:c4:fc:f1:64:32:12: 65:d7:ab:8f:72:6c:8d:38:0a:4c:97:4d:c6:4a:1d: 0e:ee:51:f2:63:37:fe:7b:4a:79:b1:32:b8:cf:ba: 37:49:2a:56:69:e1:8e:7c:16:c2:d6:8f:bb:f1:25: a8:b5:bd:09:4f:03:d6:4b:ff:85:a3:1e:c7:3f:26: d1:83:d8:fd:b0:24:7f:75:b5:ca:3e:a9:1a:8c:77: 96:d5:1c:c8:73:c3:7c:ed:04:81:8e:91:cc:2c:29: b6:e9:12:c5:f6:17:f8:c0:46:5b:d8:37:b5:2e:8c: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D7:63:4C:8D:AF:03:51:28:7A:EB:88:C9:19:AB:7F:48:09:57:47 X509v3 Authority Key Identifier: keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8b:22:65:68:43:bf:1f:8f:c4:4b:09:6b:2a:48:ab:37:36: 91:7f:ee:ce:64:77:7e:22:23:f5:42:c1:91:57:33:16:6b:5d: 1b:49:33:5c:7a:d8:0b:68:fb:8e:da:38:04:02:d7:90:bf:02: 5d:02:cf:8e:ac:c5:11:ce:73:5d:3d:e7:31:46:69:ab:34:c2: 70:5f:6a:10:8c:90:7e:33:13:23:f4:7e:17:8f:13:3d:0d:f3: 71:44:b3:86:2b:67:24:b2:e8:24:78:3e:6b:b6:7d:dc:ff:d6: c0:28:c9:4c:d9:0b:2d:ae:75:08:63:4b:e2:d4:97:ca:bf:8a: 91:c6:de:70:57:3e:2a:6b:a5:70:04:d9:a6:eb:a3:4c:11:73: 5b:13:d8:38:da:3e:e7:8a:21:08:c2:94:fe:ab:1f:02:84:47: 8f:6b:4d:0d:f6:d2:44:25:e8:7b:ae:0c:af:c8:a2:cf:cd:92: f4:1c:a4:c7:a4:34:88:12:07:ea:42:8f:1c:f1:c2:15:76:f3: 76:33:a4:78:9f:c6:af:0a:dc:ad:a9:d6:ee:07:22:74:00:82: 6b:64:2e:11:43:55:d6:ce:05:12:05:c5:c9:a2:35:54:b0:a1: 8c:b5:8d:d8:60:c3:fd:13:f4:b4:e1:5a:e5:4b:2e:06:5f:bb: 6a:46:cc:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrES37VxLiMIFqanNAbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNzNiMDU2ZjhkMGZhOTk2ZDY4MzNjMzBiMWZkNzhlN2Q5 NzlhYzQwHhcNMjUxMjA2MTEwMTEzWhcNMjUxMjA3MTEwMTEzWjAzMTEwLwYDVQQD EygwOWQ3NjM0YzhkYWYwMzUxMjg3YWViODhjOTE5YWI3ZjQ4MDk1NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytZfseoQr+Vjc+xCe8/Gc8Twskb2 oAKb0FhtmG2pSaeg0I+jJ41Eq4L7wqHnKWwL7rcaLjlmkv9KfTm6/5dYWznKlMsH d/Mu0dCWldRiuFuz8rINFbBUy++WoWbRKJ1VQgq5ZcE6vOMDxHX4ER7njm3fTai+ pPuqA3O2CzsxCO2aKHz5p1jc+DRdVeBb7o7E/PFkMhJl16uPcmyNOApMl03GSh0O 7lHyYzf+e0p5sTK4z7o3SSpWaeGOfBbC1o+78SWotb0JTwPWS/+Fox7HPybRg9j9 sCR/dbXKPqkajHeW1RzIc8N87QSBjpHMLCm26RLF9hf4wEZb2De1LoykywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnXY0yNrwNRKHrriMkZq39ICVdHMB8GA1UdIwQY MBaAFE9zsFb40PqZbWgzwwsf1459l5rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUt MTM5MGEyZDk5ZTBiLzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUtMTM5MGEyZDk5ZTBi LzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIsiZWhD vx+PxEsJaypIqzc2kX/uzmR3fiIj9ULBkVczFmtdG0kzXHrYC2j7jto4BALXkL8C XQLPjqzFEc5zXT3nMUZpqzTCcF9qEIyQfjMTI/R+F48TPQ3zcUSzhitnJLLoJHg+ a7Z93P/WwCjJTNkLLa51CGNL4tSXyr+KkcbecFc+KmulcATZpuujTBFzWxPYONo+ 54ohCMKU/qsfAoRHj2tNDfbSRCXoe64Mr8iiz82S9Bykx6Q0iBIH6kKPHPHCFXbz djOkeJ/GrwrcranW7gcidACCa2QuEUNV1s4FEgXFyaI1VLChjLWN2GDD/RP0tOFa 5UsuBl+7akbMfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:16 2025 by rpki-client