This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json) Hash identifier: lkHUB2gMLQFPMc/UHv+WKGD1anItgHBHQH1Kv4JXAiY= Subject key identifier: 04:14:7C:89:1B:EC:C1:36:DF:A0:BB:31:1A:16:25:E6:5C:F1:65:3A Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Certificate serial: 019B0E930519A5FD2B85873A6A23180E9E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft Manifest number: 02E3 Signing time: Thu 11 Dec 2025 18:01:14 +0000 Manifest this update: Thu 11 Dec 2025 18:01:14 +0000 Manifest next update: Fri 12 Dec 2025 18:01:14 +0000 Files and hashes: 1: 52rM1TLXeNL9F-vxMnLogxZvGbg.roa (hash: t74CQPsg3SU8+YzT6bR/4fFoJ3HTMThAu9/OMJSg+7c=) 2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: T8dYsZ49UVxq8v88hG6W8HxQejUwkjpaq3AFJp6COEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:05:19:a5:fd:2b:85:87:3a:6a:23:18:0e:9e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Validity Not Before: Dec 11 18:01:14 2025 GMT Not After : Dec 12 18:01:14 2025 GMT Subject: CN=04147c891becc136dfa0bb311a1625e65cf1653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:c3:44:de:2a:67:5a:57:9b:79:7d:ba:c0: 19:ec:43:e7:75:3c:b6:89:93:3c:4d:60:97:5d:8e: 6a:20:6f:51:fa:33:e9:61:cc:17:78:06:12:86:de: 2a:91:c8:95:ff:27:a4:5a:15:c8:e2:15:e2:a2:9c: 04:83:19:f4:ec:cb:2c:4d:17:e9:cd:5d:94:5a:31: 30:cf:aa:43:b5:4a:67:59:35:d7:0b:47:fb:9a:23: 03:d2:9a:5b:f9:de:19:ed:c5:05:b9:85:3b:94:12: 23:e7:bc:0a:dc:2b:a5:00:96:1f:d3:81:f1:ca:c1: ff:f5:fd:16:26:be:20:90:87:38:ac:e3:08:4a:06: ff:10:6f:0d:f3:b9:d9:1a:4d:c9:48:61:d2:06:d5: f0:25:b5:6a:cc:07:6f:ee:42:d9:92:98:6c:33:1e: 1d:c3:e5:ce:8a:38:61:93:4e:66:f9:20:a8:26:5c: 6c:1b:25:d1:bd:17:72:fb:78:c7:8b:ba:8c:b4:71: 3a:18:1c:b0:aa:52:3a:93:0f:60:cb:0e:6a:17:94: eb:5d:c3:50:16:63:80:f1:ce:f6:15:69:9a:8b:07: 0e:53:89:d3:87:8a:11:66:8f:d7:88:94:a8:81:ff: d3:e0:52:fe:7b:b6:43:ef:98:4b:59:5e:c9:31:8c: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:14:7C:89:1B:EC:C1:36:DF:A0:BB:31:1A:16:25:E6:5C:F1:65:3A X509v3 Authority Key Identifier: keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:21:01:c5:08:b3:85:01:8b:91:65:65:22:a1:a0:7b:8f: b0:2d:d2:8d:23:06:83:4e:c2:60:17:54:17:38:ac:56:ab:55: 67:7d:e5:24:da:b9:13:a1:82:54:8d:64:4d:f3:3d:4c:fc:d2: fd:c7:b2:0a:b7:07:24:82:be:9c:8a:14:93:11:f6:ea:e5:94: 44:99:5f:53:78:24:39:76:b6:fb:a6:de:39:da:00:31:40:cc: b9:95:e9:b3:d9:9d:ba:71:19:26:82:92:00:25:b3:32:78:85: b8:2b:4e:36:60:0e:fe:84:44:ae:8a:98:8c:ae:bf:7e:f3:28: 2d:da:9d:31:52:fa:0c:a8:c7:cf:d2:db:c4:b7:5a:f0:ca:fd: 3c:99:ae:5f:d9:bf:96:d0:49:3b:5d:73:16:eb:bb:33:6f:c1: a1:61:f1:23:67:d9:38:36:46:24:b2:47:53:90:2d:a6:f9:c8: 4f:83:1f:79:06:02:2e:79:63:66:91:5d:f5:ce:50:a3:94:27: eb:27:c4:44:2b:38:22:f6:26:25:c2:ce:b5:8d:fd:75:95:5e: db:78:78:c5:a1:29:bf:49:6d:f7:c0:85:28:31:4c:d3:ba:ad: bb:75:d2:4d:1a:0a:f5:9e:67:75:2f:00:4e:ab:0d:34:45:f0: 80:dc:88:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwUZpf0rhYc6aiMYDp4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk NjY5NzMwHhcNMjUxMjExMTgwMTE0WhcNMjUxMjEyMTgwMTE0WjAzMTEwLwYDVQQD EygwNDE0N2M4OTFiZWNjMTM2ZGZhMGJiMzExYTE2MjVlNjVjZjE2NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rXDRN4qZ1pXm3l9usAZ7EPndTy2 iZM8TWCXXY5qIG9R+jPpYcwXeAYSht4qkciV/yekWhXI4hXiopwEgxn07MssTRfp zV2UWjEwz6pDtUpnWTXXC0f7miMD0ppb+d4Z7cUFuYU7lBIj57wK3CulAJYf04Hx ysH/9f0WJr4gkIc4rOMISgb/EG8N87nZGk3JSGHSBtXwJbVqzAdv7kLZkphsMx4d w+XOijhhk05m+SCoJlxsGyXRvRdy+3jHi7qMtHE6GBywqlI6kw9gyw5qF5TrXcNQ FmOA8c72FWmaiwcOU4nTh4oRZo/XiJSogf/T4FL+e7ZD75hLWV7JMYwN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQUfIkb7ME236C7MRoWJeZc8WU6MB8GA1UdIwQY MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt OGE1NDVjYjM1YTlhLzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+ohAcUI s4UBi5FlZSKhoHuPsC3SjSMGg07CYBdUFzisVqtVZ33lJNq5E6GCVI1kTfM9TPzS /ceyCrcHJIK+nIoUkxH26uWURJlfU3gkOXa2+6beOdoAMUDMuZXps9mdunEZJoKS ACWzMniFuCtONmAO/oREroqYjK6/fvMoLdqdMVL6DKjHz9LbxLda8Mr9PJmuX9m/ ltBJO11zFuu7M2/BoWHxI2fZODZGJLJHU5AtpvnIT4MfeQYCLnljZpFd9c5Qo5Qn 6yfERCs4IvYmJcLOtY39dZVe23h4xaEpv0lt98CFKDFM07qtu3XSTRoK9Z5ndS8A TqsNNEXwgNyIdg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:15:56 2025 by rpki-client