This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json) Hash identifier: PelmJwW877waNGIGjBZftQPt/xvZaOJvAiXduJtG1B0= Subject key identifier: E0:CD:49:44:C3:5A:20:5F:77:E4:8A:A4:90:DF:24:B1:76:35:22:4E Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019AF0BF7F9A202C543C373CF4D0B91E56E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft Manifest number: 07 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: 84INDcZjTBlWx7iXLOUNmppVBRE.asa (hash: uOzVHo8Ev2RYxavQU1/DtqqtcYQmVGn8KRMz2l/ludA=) 2: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: 6BmMdsgh8MxiZhoiVEgPZDL0DT99ORaRGLDnH5TAhNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7f:9a:20:2c:54:3c:37:3c:f4:d0:b9:1e:56:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=e0cd4944c35a205f77e48aa490df24b17635224e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:5e:50:c5:5b:ff:83:8c:84:35:eb:c8:3c: 5b:b6:67:26:36:36:0b:6f:08:7f:71:e1:37:58:e0: 48:03:86:25:6a:0d:4d:dd:26:3c:a0:cc:b2:b0:10: 11:e8:47:e8:3b:85:af:8e:8c:97:05:b2:76:7b:24: 8f:93:13:f3:5b:85:a8:e3:17:f5:dd:e3:50:32:3c: 6a:6b:ba:ad:3f:f2:82:34:15:ce:10:14:75:07:50: f1:22:a7:b6:6a:d7:2e:b6:8e:ab:48:01:8d:4a:4f: 2c:b9:72:b6:4f:17:db:73:3a:64:d9:16:8c:a4:8c: db:85:32:50:fa:01:58:08:f0:8b:c1:fe:33:8e:5f: 6f:4b:11:52:ba:33:97:a2:a3:51:f6:4a:77:06:cd: 38:47:fe:58:05:0d:b0:9b:c0:03:f6:56:1f:e6:6f: 3b:9a:16:96:57:9e:60:0d:b3:4a:b1:38:d1:c6:9d: 7d:d7:96:f5:21:ce:50:58:60:ce:5d:03:53:24:0d: c6:07:82:29:1e:fc:b9:5e:d5:a5:b6:b3:0e:38:23: 4a:f7:5b:93:29:c9:5c:75:f1:fc:86:b0:cf:02:1f: f3:fc:7b:61:fc:7c:81:6f:32:89:0c:65:b8:3d:c7: 98:2b:0f:a3:41:f4:73:b4:fd:eb:b6:f2:2b:c6:ff: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CD:49:44:C3:5A:20:5F:77:E4:8A:A4:90:DF:24:B1:76:35:22:4E X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:25:72:b4:66:05:c2:05:27:7c:3b:3c:2b:de:36:60:08:a0: f7:dc:80:81:dc:59:23:9f:e5:78:4f:14:4a:da:ef:b9:99:2e: cb:50:7f:c0:94:89:18:0b:a3:b9:77:f1:81:96:06:75:d1:5e: be:55:7b:b2:e2:c4:af:87:59:48:cf:11:da:92:d2:92:61:d6: f2:fa:60:70:f2:26:f1:ff:cf:6f:3b:0a:38:29:25:80:99:6c: 9b:55:b1:81:e8:e2:21:0c:82:3d:9b:a6:dd:ac:e2:2a:70:5e: 2b:88:bf:ad:c3:ae:b7:79:af:ae:a1:bf:15:d4:3c:88:47:21: a7:07:e7:73:1c:a3:25:96:50:f4:9f:3b:60:60:54:93:e0:a8: ac:07:88:5a:75:10:d6:0a:ab:8a:fa:d1:27:83:d2:38:f1:fe: 85:c5:ab:5e:51:80:d2:0c:00:8d:58:11:e2:23:ee:38:45:bd: 8f:95:fa:04:b0:ce:59:c5:15:c7:1d:83:b4:bf:fa:b3:79:c7: 99:7c:a5:c6:61:4e:d8:f6:3e:1d:8a:5f:0d:61:bf:9a:44:2c: c2:37:7b:04:8e:6b:98:2a:d9:2b:a7:98:e3:bd:62:ed:ef:2d: 1f:de:0c:96:c0:6b:ef:15:44:45:3b:95:de:dc:f0:bf:7d:4d: fb:1a:18:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3+aICxUPDc89NC5HlbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EyhlMGNkNDk0NGMzNWEyMDVmNzdlNDhhYTQ5MGRmMjRiMTc2MzUyMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjJeUMVb/4OMhDXryDxbtmcmNjYL bwh/ceE3WOBIA4Ylag1N3SY8oMyysBAR6EfoO4WvjoyXBbJ2eySPkxPzW4Wo4xf1 3eNQMjxqa7qtP/KCNBXOEBR1B1DxIqe2atcuto6rSAGNSk8suXK2Txfbczpk2RaM pIzbhTJQ+gFYCPCLwf4zjl9vSxFSujOXoqNR9kp3Bs04R/5YBQ2wm8AD9lYf5m87 mhaWV55gDbNKsTjRxp1915b1Ic5QWGDOXQNTJA3GB4IpHvy5XtWltrMOOCNK91uT KclcdfH8hrDPAh/z/Hth/HyBbzKJDGW4PceYKw+jQfRztP3rtvIrxv9jdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODNSUTDWiBfd+SKpJDfJLF2NSJOMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESVytGYF wgUnfDs8K942YAig99yAgdxZI5/leE8UStrvuZkuy1B/wJSJGAujuXfxgZYGddFe vlV7suLEr4dZSM8R2pLSkmHW8vpgcPIm8f/PbzsKOCklgJlsm1WxgejiIQyCPZum 3aziKnBeK4i/rcOut3mvrqG/FdQ8iEchpwfncxyjJZZQ9J87YGBUk+CorAeIWnUQ 1gqrivrRJ4PSOPH+hcWrXlGA0gwAjVgR4iPuOEW9j5X6BLDOWcUVxx2DtL/6s3nH mXylxmFO2PY+HYpfDWG/mkQswjd7BI5rmCrZK6eY471i7e8tH94MlsBr7xVERTuV 3tzwv31N+xoYQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:59 2025 by rpki-client