This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json) Hash identifier: UzSBwO2QeCVnFV+REbhYWsOWo65y1EbEtRKE9Lb7ces= Subject key identifier: 33:B7:33:FD:D3:FF:38:DE:F9:9D:8B:E3:98:F7:1B:E6:88:EA:79:57 Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f Certificate serial: 019AF19B7E57ABC6FBEDFF5165776DD53F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft Manifest number: 1442 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=) 2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: E1OLUu/5fjR4h4Fvzh4C4eMGnXH4GXUPUZPJxUbgx9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:57:ab:c6:fb:ed:ff:51:65:77:6d:d5:3f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=33b733fdd3ff38def99d8be398f71be688ea7957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:fc:25:ce:1e:b0:cb:96:12:7d:33:f6:83: b8:96:55:89:97:05:c2:7b:a0:09:6d:55:91:3f:0a: 09:c7:d4:e3:ba:eb:d3:ec:4c:a0:09:9b:31:64:0c: 62:a6:65:1f:a8:b9:66:fb:bf:57:8f:f8:9d:ea:85: d5:5f:4b:97:dc:35:aa:57:3d:08:b9:45:b5:ab:9f: 0d:ff:7b:87:08:c2:3f:84:8c:09:5f:fa:b1:8c:6d: 30:dd:7d:64:fe:20:f8:3f:ae:61:e2:c8:c4:b0:09: 50:ac:a8:96:24:6b:13:d6:97:7a:a8:7c:46:8b:b9: 2e:87:af:9e:df:68:2a:01:8a:b7:e2:a3:a0:81:d2: f0:87:0a:f7:9d:cb:0c:02:02:74:c6:5b:bf:be:43: 05:3e:ea:f4:56:11:ce:7d:b2:0c:de:50:31:39:15: aa:9e:e1:32:e5:12:d0:7b:3e:14:fd:dc:8e:37:87: 52:f5:a4:f1:5f:d0:08:62:31:9f:0a:72:e3:6b:9e: d1:fa:05:db:e4:7d:7c:40:35:cb:b2:a2:1b:37:42: 82:1b:c5:02:8c:48:37:47:57:e8:34:b7:34:85:8d: b8:aa:30:b4:5d:e7:0f:a2:ae:bb:c4:80:28:a4:61: ba:76:af:88:28:f4:59:26:66:d2:f5:4f:ec:eb:6b: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:33:FD:D3:FF:38:DE:F9:9D:8B:E3:98:F7:1B:E6:88:EA:79:57 X509v3 Authority Key Identifier: keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:66:fd:cc:ac:14:36:22:7c:ea:01:9d:dc:27:14:72:99:fb: 5d:c8:b5:c5:5f:72:36:ce:ed:18:36:7f:a3:af:79:0d:9e:18: d9:14:6b:c8:ce:4f:ce:26:30:92:38:ca:c6:25:22:ad:84:59: a2:44:10:b9:d9:24:9a:78:8f:2f:d2:2b:7b:03:46:b6:d3:fc: 5c:57:b9:27:ec:d3:4d:68:f5:d2:6f:65:14:b5:70:24:63:8a: c9:f9:43:f5:a7:3f:9c:61:94:25:fd:94:8d:67:7d:e7:94:43: 73:a2:7e:66:b8:c6:b0:e7:0b:17:fc:68:40:2d:ef:93:c2:06: c7:b5:dc:91:8c:06:37:fa:f9:78:42:09:f9:30:47:a5:ea:68: 50:d8:bc:9f:a5:e9:78:04:6e:ac:24:f3:d5:83:b4:19:da:8d: a0:2f:bf:95:b3:e0:23:84:1d:ff:a5:fc:50:47:47:9b:db:2d: 94:49:21:d9:db:5e:84:00:95:bd:1a:f3:d5:08:2a:19:31:42: f0:25:9b:cc:8f:1a:c1:e6:cf:f7:fa:fd:e1:c2:3a:8e:ed:ca: c5:f7:01:e2:cc:a1:e6:61:f7:eb:6e:73:20:cf:93:11:8e:50: 7e:12:6c:07:4e:6d:2b:a1:47:e9:12:c9:d2:65:af:48:5a:30: 4e:e6:d2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm35Xq8b77f9RZXdt1T9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE3ZDZiMDNlMmZlNWY4OTExY2JlYjVmYWUyZGNhM2Jk NjY3N2YwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EygzM2I3MzNmZGQzZmYzOGRlZjk5ZDhiZTM5OGY3MWJlNjg4ZWE3OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstH8Jc4esMuWEn0z9oO4llWJlwXC e6AJbVWRPwoJx9TjuuvT7EygCZsxZAxipmUfqLlm+79Xj/id6oXVX0uX3DWqVz0I uUW1q58N/3uHCMI/hIwJX/qxjG0w3X1k/iD4P65h4sjEsAlQrKiWJGsT1pd6qHxG i7kuh6+e32gqAYq34qOggdLwhwr3ncsMAgJ0xlu/vkMFPur0VhHOfbIM3lAxORWq nuEy5RLQez4U/dyON4dS9aTxX9AIYjGfCnLja57R+gXb5H18QDXLsqIbN0KCG8UC jEg3R1foNLc0hY24qjC0XecPoq67xIAopGG6dq+IKPRZJmbS9U/s62vR1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO3M/3T/zje+Z2L45j3G+aI6nlXMB8GA1UdIwQY MBaAFE9hfWsD4v5fiRHL61+uLco71md/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMt MDI3YzdmN2RjNmQ1LzEvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMtMDI3YzdmN2RjNmQ1 LzEvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2b9zKwU NiJ86gGd3CcUcpn7Xci1xV9yNs7tGDZ/o695DZ4Y2RRryM5PziYwkjjKxiUirYRZ okQQudkkmniPL9IrewNGttP8XFe5J+zTTWj10m9lFLVwJGOKyflD9ac/nGGUJf2U jWd955RDc6J+ZrjGsOcLF/xoQC3vk8IGx7XckYwGN/r5eEIJ+TBHpepoUNi8n6Xp eARurCTz1YO0GdqNoC+/lbPgI4Qd/6X8UEdHm9stlEkh2dtehACVvRrz1QgqGTFC 8CWbzI8awebP9/r94cI6ju3KxfcB4syh5mH3625zIM+TEY5QfhJsB05tK6FH6RLJ 0mWvSFowTubScA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:21 2025 by rpki-client