This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json) Hash identifier: 1rft0tT1L6WLWzVzJnKFzaCSM9moXmAyiSMhciqQWsQ= Subject key identifier: B0:D1:E6:94:04:5C:4B:61:33:44:57:CB:74:45:ED:2A:2A:C3:A3:C9 Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d Certificate serial: 019AF4656A29A53E4651A68BE31667A92F3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft Manifest number: 08AC Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=) 2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: nP+IVz+7Tn9idYqA0D5tpXCtuPFnMst1jdPJA54iy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6a:29:a5:3e:46:51:a6:8b:e3:16:67:a9:2f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=b0d1e694045c4b61334457cb7445ed2a2ac3a3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:f5:b3:f3:70:ab:c1:77:10:8a:fd:43:4d: a6:19:9f:4a:b0:ba:f9:46:14:23:e9:8a:d3:18:86: 11:44:09:4b:83:df:67:ce:a5:ae:7c:e9:c9:81:2f: be:49:c5:6f:a9:57:e6:10:2a:cf:f1:ab:3e:c5:22: 0d:27:0b:40:61:46:59:5a:b9:3c:22:d7:82:3b:0b: f5:38:68:4d:2e:1d:ed:46:7b:6e:0a:cd:a7:de:7d: ee:52:6b:6a:5c:ef:d6:f5:79:fe:ab:9a:97:ca:ef: 72:6e:6a:c2:e7:81:56:4e:e2:ed:98:b2:3e:b0:22: 97:cd:19:cd:3f:d8:57:68:1d:01:97:6b:c5:94:43: 1a:29:09:32:41:4f:eb:46:cd:5a:5b:fc:61:08:5d: 93:f7:ce:d5:cd:53:59:9f:d4:05:0e:41:17:a4:3f: 98:3c:d7:76:a6:23:f6:b7:d3:59:b8:9e:05:19:bb: 4d:20:2f:6e:53:63:ea:83:34:48:36:95:6b:8f:1d: 1a:b5:bc:c2:c8:5c:3c:ee:9e:59:f8:d6:43:a8:47: 71:87:54:cf:1c:84:89:29:06:7d:ae:ae:e3:92:72: ea:a3:ab:0b:5f:d4:bf:83:be:19:1d:a6:42:3d:c4: f1:10:11:dc:16:67:81:8e:09:1b:a7:7b:1b:a9:50: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:E6:94:04:5C:4B:61:33:44:57:CB:74:45:ED:2A:2A:C3:A3:C9 X509v3 Authority Key Identifier: keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e2:2d:ac:1f:fa:c1:d2:89:c0:bc:43:24:72:1e:10:b0:b2: cc:ae:e8:a1:47:b8:b6:e9:78:0e:7c:a2:7f:23:71:4b:52:ad: fc:ba:ce:86:76:6a:f7:b7:a1:bf:5c:78:ca:34:01:e4:ab:b5: 47:8c:3b:84:63:98:78:79:d1:5f:f2:24:1c:c6:4c:f2:fd:a3: e6:3c:2d:d7:bb:68:99:f0:c4:f9:76:57:3f:dc:46:9c:e4:36: 27:05:99:a8:cb:b3:4b:cf:2c:67:6f:b8:28:0a:a8:f8:d9:05: 5f:d4:ce:e9:ba:95:07:6a:51:93:24:bd:85:49:b9:79:c5:53: f3:dc:a1:34:4b:7d:23:ed:4e:ce:26:7b:4e:e6:ea:71:9d:5e: fe:4f:9b:9e:a8:2b:35:99:05:fa:58:a8:16:75:0c:75:31:88: f0:98:26:71:13:79:22:7b:01:3f:5d:bb:7c:18:a1:51:6b:99: 2c:01:90:84:1b:37:ac:dd:1d:a9:f9:f6:61:a3:d1:d6:c9:82: da:ff:30:8b:f6:1e:fd:9c:48:6f:94:f0:bb:95:8c:9f:d1:c3: a0:13:2e:2d:a5:c1:eb:bf:cf:95:df:bc:6f:27:88:16:0b:87: 76:47:c2:e7:0f:7b:17:c3:23:04:ae:04:ba:0f:ea:44:d2:bc: bb:2e:db:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWoppT5GUaaL4xZnqS89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2 MmU1OWQwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD EyhiMGQxZTY5NDA0NWM0YjYxMzM0NDU3Y2I3NDQ1ZWQyYTJhYzNhM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvn1s/Nwq8F3EIr9Q02mGZ9KsLr5 RhQj6YrTGIYRRAlLg99nzqWufOnJgS++ScVvqVfmECrP8as+xSINJwtAYUZZWrk8 IteCOwv1OGhNLh3tRntuCs2n3n3uUmtqXO/W9Xn+q5qXyu9ybmrC54FWTuLtmLI+ sCKXzRnNP9hXaB0Bl2vFlEMaKQkyQU/rRs1aW/xhCF2T987VzVNZn9QFDkEXpD+Y PNd2piP2t9NZuJ4FGbtNIC9uU2PqgzRINpVrjx0atbzCyFw87p5Z+NZDqEdxh1TP HISJKQZ9rq7jknLqo6sLX9S/g74ZHaZCPcTxEBHcFmeBjgkbp3sbqVCjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDR5pQEXEthM0RXy3RF7Soqw6PJMB8GA1UdIwQY MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt Y2E4YjI3NThiZTE1LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1 LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOItrB/6 wdKJwLxDJHIeELCyzK7ooUe4tul4DnyifyNxS1Kt/LrOhnZq97ehv1x4yjQB5Ku1 R4w7hGOYeHnRX/IkHMZM8v2j5jwt17tomfDE+XZXP9xGnOQ2JwWZqMuzS88sZ2+4 KAqo+NkFX9TO6bqVB2pRkyS9hUm5ecVT89yhNEt9I+1OziZ7TubqcZ1e/k+bnqgr NZkF+lioFnUMdTGI8JgmcRN5InsBP127fBihUWuZLAGQhBs3rN0dqfn2YaPR1smC 2v8wi/Ye/ZxIb5Twu5WMn9HDoBMuLaXB67/Pld+8byeIFguHdkfC5w97F8MjBK4E ug/qRNK8uy7bUg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:30 2025 by rpki-client