This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json) Hash identifier: jYm0L9aPj5kzpzcq8VpVZsnUi63NtR72I/W0OCiKspg= Subject key identifier: B8:5D:15:E8:47:D5:65:48:60:12:9E:61:65:17:6E:5A:43:45:18:D3 Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145 Certificate serial: 019AF9F996F0D95837DE65C0239E4308C6B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft Manifest number: 06D2 Signing time: Sun 07 Dec 2025 18:01:14 +0000 Manifest this update: Sun 07 Dec 2025 18:01:14 +0000 Manifest next update: Mon 08 Dec 2025 18:01:14 +0000 Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: HqWT84H4C+1QOoMkOGG1w/1mSkEpYq1IwdvZO+kA1IY=) 2: xBIT4PfyqTeMr9EZAxQSDFw_tsM.roa (hash: +1108t61ZAdcCTRierOezlIx1u0lJ4yi+OpdSaQwRQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:96:f0:d9:58:37:de:65:c0:23:9e:43:08:c6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145 Validity Not Before: Dec 7 18:01:14 2025 GMT Not After : Dec 8 18:01:14 2025 GMT Subject: CN=b85d15e847d5654860129e6165176e5a434518d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:c5:e9:56:7d:ee:8d:5e:81:94:67:71:d7: e6:2b:8c:4b:08:3e:9d:dd:b2:23:36:0c:a0:5f:92: 7a:4a:9c:f1:5e:93:6a:21:c2:e1:af:e0:0c:c9:c9: d7:db:d8:8d:c9:65:28:43:25:1f:18:40:ce:15:d4: 66:27:76:bc:a1:b4:e4:3e:17:4b:8b:e7:8f:d9:bd: 77:f3:47:e5:e0:9d:77:cf:dd:ba:01:a8:68:20:1d: 60:5a:a0:e8:18:ea:c4:65:46:b3:72:1c:50:ba:2e: e6:a2:2b:0d:30:de:29:f4:89:b3:0e:3b:5e:b6:9a: 18:52:25:e3:3c:32:29:55:8e:27:8f:56:45:5e:3f: 95:04:b5:3b:cd:94:16:1c:48:cc:10:41:69:de:f8: 4c:3c:05:ff:81:87:2d:cf:df:9c:5d:33:d3:b2:ab: e7:9b:27:d8:42:98:41:88:a3:56:e6:dd:f8:92:65: 20:08:31:fe:24:fb:49:05:d0:c3:01:07:d7:45:8a: dd:20:9b:ad:56:88:e0:a9:ca:95:f3:ba:f9:a6:89: 48:ba:a4:7d:5e:42:7e:7a:eb:c9:2e:f6:6b:3e:dd: f0:79:75:5b:5c:f6:ab:f7:9b:f7:ee:09:f7:bc:26: 3d:d6:21:82:2b:b2:de:ce:cd:36:e4:a7:30:0e:57: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5D:15:E8:47:D5:65:48:60:12:9E:61:65:17:6E:5A:43:45:18:D3 X509v3 Authority Key Identifier: keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:38:36:41:31:94:ea:a0:8a:a1:bb:d9:d7:a0:37:83:c0: 7c:0c:98:c8:e0:c3:13:2d:a2:8d:7d:6c:d7:2b:8f:44:c0:0a: 39:fc:59:29:16:f9:19:cf:ea:05:3f:16:af:72:11:bc:4e:65: 92:51:d1:63:d7:df:ff:79:e9:66:7e:45:03:44:8d:51:68:7d: 79:d9:58:d2:af:ae:e8:4e:73:a3:98:69:bd:9a:96:92:f9:8f: 53:4f:93:a2:4b:bd:ab:5f:6f:45:23:f8:c8:8c:69:36:ee:9b: c7:3e:1c:e0:03:5a:3c:94:4a:3e:17:8c:94:0d:f1:77:81:e1: fb:03:b1:af:3d:83:93:ae:6c:dc:31:14:c6:13:a2:5d:8e:36: 87:f2:cd:0c:37:1f:6f:35:06:22:b7:a5:25:39:88:57:bb:59: 81:9d:e7:03:6c:b8:8a:b8:75:31:87:10:89:0f:08:9d:24:0d: bd:f9:66:4b:6f:70:60:4b:fc:94:b2:10:fe:49:60:58:42:41: dd:a4:80:ab:a8:b5:67:cf:36:75:93:64:9f:5d:fe:3c:ec:c5: 86:44:2e:17:f8:6c:1a:1d:e4:75:42:8a:b8:0d:4d:f1:0e:6e: 4d:10:fe:d6:6c:03:5e:d2:3e:87:db:21:5f:80:44:df:97:ef: 8a:d6:93:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+Zbw2Vg33mXAI55DCMazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy NjcxNDUwHhcNMjUxMjA3MTgwMTE0WhcNMjUxMjA4MTgwMTE0WjAzMTEwLwYDVQQD EyhiODVkMTVlODQ3ZDU2NTQ4NjAxMjllNjE2NTE3NmU1YTQzNDUxOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTTF6VZ97o1egZRncdfmK4xLCD6d 3bIjNgygX5J6SpzxXpNqIcLhr+AMycnX29iNyWUoQyUfGEDOFdRmJ3a8obTkPhdL i+eP2b1380fl4J13z926AahoIB1gWqDoGOrEZUazchxQui7moisNMN4p9ImzDjte tpoYUiXjPDIpVY4nj1ZFXj+VBLU7zZQWHEjMEEFp3vhMPAX/gYctz9+cXTPTsqvn myfYQphBiKNW5t34kmUgCDH+JPtJBdDDAQfXRYrdIJutVojgqcqV87r5polIuqR9 XkJ+euvJLvZrPt3weXVbXPar95v37gn3vCY91iGCK7Lezs025KcwDlcdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhdFehH1WVIYBKeYWUXblpDRRjTMB8GA1UdIwQY MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt OGVjMWJmOWZkYTJiLzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwQ4NkEx lOqgiqG72degN4PAfAyYyODDEy2ijX1s1yuPRMAKOfxZKRb5Gc/qBT8Wr3IRvE5l klHRY9ff/3npZn5FA0SNUWh9edlY0q+u6E5zo5hpvZqWkvmPU0+Toku9q19vRSP4 yIxpNu6bxz4c4ANaPJRKPheMlA3xd4Hh+wOxrz2Dk65s3DEUxhOiXY42h/LNDDcf bzUGIrelJTmIV7tZgZ3nA2y4irh1MYcQiQ8InSQNvflmS29wYEv8lLIQ/klgWEJB 3aSAq6i1Z882dZNkn13+POzFhkQuF/hsGh3kdUKKuA1N8Q5uTRD+1mwDXtI+h9sh X4BE35fvitaTeA== -----END CERTIFICATE-----Generated at Sun Dec 7 21:56:36 2025 by rpki-client