This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json) Hash identifier: xkCIMughGlL91cgp4/CZMy1REA48+AaLpt+P2LhEe3Q= Subject key identifier: 5B:0A:B8:0B:AA:F9:3E:D0:20:33:96:A5:E3:DE:C9:CE:08:DA:91:10 Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Certificate serial: 019AF208BE6AE59FFE2B9F580DC2282E68CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft Manifest number: 0650 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: mjVpNt7WuSJhyDFjkMCS4WZ0jXAZN3ltSAsLVtGd2wM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:be:6a:e5:9f:fe:2b:9f:58:0d:c2:28:2e:68:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=5b0ab80baaf93ed0203396a5e3dec9ce08da9110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:a7:53:48:5e:3c:71:ef:ec:ce:33:a8:f5: c8:ad:f0:52:2d:e5:2e:26:8e:3f:3d:f3:76:6e:76: eb:87:4f:7d:d8:db:77:f6:8c:71:5f:9d:95:2b:8d: 65:e8:a1:83:15:41:39:d9:d0:43:47:37:13:d7:2c: b8:31:ce:62:72:59:f2:46:a7:f0:81:50:3a:bd:81: 3a:87:d8:f1:a4:63:23:17:5e:ea:15:6e:84:85:4b: 89:78:3d:66:37:df:fe:c8:b9:e6:44:fe:84:f2:4d: 53:71:81:a9:51:11:7c:53:e9:d6:bf:9d:0b:60:43: 88:03:39:45:db:8f:3b:d7:95:bd:64:9c:e2:5c:ea: a2:7f:bc:09:aa:99:4e:06:07:10:5f:d3:df:70:21: b1:84:3a:d5:43:d7:f6:50:6d:2f:5c:6b:39:4f:f1: d5:77:d5:32:15:5c:e9:c5:52:84:a9:03:06:f6:61: a2:66:0b:57:33:96:1b:c0:4c:50:63:d9:06:b9:cf: da:7b:5f:e1:7c:06:61:79:f2:be:65:ca:89:49:69: 75:95:de:9a:38:05:59:eb:34:e9:ee:3c:3c:37:d5: 72:ac:61:ba:d0:b7:77:0c:0f:bc:64:ab:7b:79:ee: 6d:54:2e:0e:db:51:56:85:7a:97:c0:18:85:e5:e5: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:B8:0B:AA:F9:3E:D0:20:33:96:A5:E3:DE:C9:CE:08:DA:91:10 X509v3 Authority Key Identifier: keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:0a:e8:32:6c:4d:6d:dd:59:46:ad:02:c5:c7:b9:b0:d6: 98:0a:81:19:ad:63:4b:ca:34:0c:6b:a1:09:da:b1:99:84:ae: f6:33:dd:51:b6:b2:fd:8d:ed:b7:44:ad:c9:5c:18:12:83:1c: 75:79:88:47:3c:41:5b:ca:50:02:96:85:d7:6c:a9:4d:68:9a: 8a:b9:77:90:1b:10:7c:91:d5:3e:10:49:ff:97:77:3b:5f:bd: 4d:8a:17:31:98:80:a6:ed:25:81:0e:c3:d1:6b:24:8d:53:99: a9:4b:f9:0b:65:d1:f4:8f:29:18:03:55:5a:80:33:e9:a6:fd: ed:a1:7d:64:72:a5:8d:c9:54:44:97:b0:59:6e:41:7d:44:e1: ac:9d:22:fa:70:ec:d6:73:56:9d:6d:f4:79:73:40:58:24:23: 7c:01:49:26:de:0c:1f:03:90:58:9d:de:47:83:a0:f4:d2:3b: 3b:58:fc:6e:75:ca:57:ff:40:07:73:5c:93:9e:a3:fe:13:b4: 4f:18:4b:63:4d:fa:6f:78:d8:d4:ee:b8:44:b1:82:10:3c:fc: 2b:12:cc:52:b0:77:44:ae:af:9e:b0:1a:7c:4a:20:a9:95:95: 0f:c4:f7:f3:a6:57:d0:c0:90:e7:7a:99:10:57:08:6c:64:79: 8f:b6:9c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL5q5Z/+K59YDcIoLmjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz NDYzZWMwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg1YjBhYjgwYmFhZjkzZWQwMjAzMzk2YTVlM2RlYzljZTA4ZGE5MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxanU0hePHHv7M4zqPXIrfBSLeUu Jo4/PfN2bnbrh0992Nt39oxxX52VK41l6KGDFUE52dBDRzcT1yy4Mc5iclnyRqfw gVA6vYE6h9jxpGMjF17qFW6EhUuJeD1mN9/+yLnmRP6E8k1TcYGpURF8U+nWv50L YEOIAzlF248715W9ZJziXOqif7wJqplOBgcQX9PfcCGxhDrVQ9f2UG0vXGs5T/HV d9UyFVzpxVKEqQMG9mGiZgtXM5YbwExQY9kGuc/ae1/hfAZhefK+ZcqJSWl1ld6a OAVZ6zTp7jw8N9VyrGG60Ld3DA+8ZKt7ee5tVC4O21FWhXqXwBiF5eXnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsKuAuq+T7QIDOWpePeyc4I2pEQMB8GA1UdIwQY MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoAK6DJs TW3dWUatAsXHubDWmAqBGa1jS8o0DGuhCdqxmYSu9jPdUbay/Y3tt0StyVwYEoMc dXmIRzxBW8pQApaF12ypTWiairl3kBsQfJHVPhBJ/5d3O1+9TYoXMZiApu0lgQ7D 0WskjVOZqUv5C2XR9I8pGANVWoAz6ab97aF9ZHKljclURJewWW5BfUThrJ0i+nDs 1nNWnW30eXNAWCQjfAFJJt4MHwOQWJ3eR4Og9NI7O1j8bnXKV/9AB3Nck56j/hO0 TxhLY036b3jY1O64RLGCEDz8KxLMUrB3RK6vnrAafEogqZWVD8T386ZX0MCQ53qZ EFcIbGR5j7acnA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:17 2025 by rpki-client