This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json) Hash identifier: KklooQSpXn0Emjc64j47d+93SNF7zR9BhAFvIsCPyDM= Subject key identifier: E3:BD:D3:D6:57:DC:80:05:E2:EF:AC:B5:0E:5C:88:0B:E9:9B:BD:8D Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9 Certificate serial: 019AF50AD0E1A3E387C6DFD1926B4E91171C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft Manifest number: 0AC3 Signing time: Sat 06 Dec 2025 19:01:57 +0000 Manifest this update: Sat 06 Dec 2025 19:01:57 +0000 Manifest next update: Sun 07 Dec 2025 19:01:57 +0000 Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: ls781lrYGNh1DoaoISwlX/9mdnXVqeuWXhRkiZZKX8o=) 2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d0:e1:a3:e3:87:c6:df:d1:92:6b:4e:91:17:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9 Validity Not Before: Dec 6 19:01:57 2025 GMT Not After : Dec 7 19:01:57 2025 GMT Subject: CN=e3bdd3d657dc8005e2efacb50e5c880be99bbd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:51:0a:83:bc:75:c0:ce:6e:c5:64:dc:d8: e9:44:74:ce:fd:c0:46:71:70:07:6d:de:ea:97:ae: 81:01:0a:ac:fc:19:47:c3:29:a3:96:1d:7d:31:e1: aa:8a:d4:0f:17:1f:ad:53:9e:06:c7:e2:a2:90:c3: cf:46:55:86:48:3f:39:6b:6a:11:12:22:6a:ee:91: 96:bd:3b:45:5f:d9:40:9b:e7:5d:e6:1f:6b:85:9d: f4:54:95:2b:8c:1a:5f:fe:ee:a8:96:cb:ca:fd:b0: 6d:94:c6:43:5b:61:ea:64:62:f5:7c:41:6d:5e:25: e0:5a:22:fc:04:20:b8:9d:52:35:ff:ca:18:a5:9a: f4:36:4c:ce:c0:e0:e4:49:4a:24:b7:a4:a7:41:89: f8:7a:6f:62:07:b4:3a:ac:6b:2a:46:4c:a5:60:58: e1:44:42:87:51:93:c2:5e:1e:1d:9f:39:c7:87:a5: b3:ff:9f:d8:ba:74:55:b9:34:06:97:3d:60:28:ad: 5d:44:aa:c4:ea:0e:6f:1d:9d:b0:d3:ee:50:97:c3: 8b:f6:d3:fd:3c:44:91:00:57:3e:ff:ed:1b:3d:45: 54:de:71:65:9a:dc:3d:19:4e:5b:8d:c8:28:8b:fc: 33:40:50:b1:1c:dd:bd:85:92:cf:7d:00:87:bf:66: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:D3:D6:57:DC:80:05:E2:EF:AC:B5:0E:5C:88:0B:E9:9B:BD:8D X509v3 Authority Key Identifier: keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b5:31:0a:fd:b2:ee:5a:ec:67:b0:01:36:f6:39:5c:b4:e9: e4:aa:4e:5d:a7:9d:79:db:d3:1e:09:d7:b0:c1:1f:92:1e:db: 94:28:0d:c3:88:2e:5a:bb:8b:93:8a:54:77:75:7c:77:51:6f: 31:d1:a9:7e:8b:84:c6:ee:1a:a2:8b:35:fc:06:d9:a7:54:f4: ff:f0:82:1e:ed:e8:77:bf:b8:43:5d:6f:4d:77:c1:11:93:34: 69:fe:70:f9:61:f9:ee:aa:64:7c:dd:8c:fe:66:c4:bf:c4:bc: 3c:2c:be:45:a4:58:bd:c9:e9:6c:9f:08:09:71:91:fb:b3:80: 82:a6:70:11:54:17:6b:09:19:dd:80:e9:69:c5:9d:b9:14:9e: 16:f9:9d:7c:c1:0c:fa:ef:1f:7f:ca:2a:7f:20:e6:13:20:4e: 78:0b:97:82:18:f7:43:49:25:99:47:bf:03:bd:fa:32:f1:38: 15:6b:d7:9b:ce:02:d1:c2:6f:73:d4:29:9d:ee:86:ea:78:2a: 0f:1c:da:90:e0:0e:bd:40:4f:df:c8:bc:35:a6:50:23:02:24: 1d:a0:f1:ba:4f:d3:f8:74:bf:bb:ff:8d:0b:4b:c2:78:e5:42: 62:27:88:15:8f:89:df:a1:8e:f0:b9:b3:20:52:4a:b1:d4:42: 69:48:eb:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtDho+OHxt/RkmtOkRccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw N2E4YjkwHhcNMjUxMjA2MTkwMTU3WhcNMjUxMjA3MTkwMTU3WjAzMTEwLwYDVQQD EyhlM2JkZDNkNjU3ZGM4MDA1ZTJlZmFjYjUwZTVjODgwYmU5OWJiZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNpRCoO8dcDObsVk3NjpRHTO/cBG cXAHbd7ql66BAQqs/BlHwymjlh19MeGqitQPFx+tU54Gx+KikMPPRlWGSD85a2oR EiJq7pGWvTtFX9lAm+dd5h9rhZ30VJUrjBpf/u6olsvK/bBtlMZDW2HqZGL1fEFt XiXgWiL8BCC4nVI1/8oYpZr0NkzOwODkSUokt6SnQYn4em9iB7Q6rGsqRkylYFjh REKHUZPCXh4dnznHh6Wz/5/YunRVuTQGlz1gKK1dRKrE6g5vHZ2w0+5Ql8OL9tP9 PESRAFc+/+0bPUVU3nFlmtw9GU5bjcgoi/wzQFCxHN29hZLPfQCHv2ajIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO909ZX3IAF4u+stQ5ciAvpm72NMB8GA1UdIwQY MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt NmY5N2RmYzEwZmU3LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3 LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrUxCv2y 7lrsZ7ABNvY5XLTp5KpOXaededvTHgnXsMEfkh7blCgNw4guWruLk4pUd3V8d1Fv MdGpfouExu4aoos1/AbZp1T0//CCHu3od7+4Q11vTXfBEZM0af5w+WH57qpkfN2M /mbEv8S8PCy+RaRYvcnpbJ8ICXGR+7OAgqZwEVQXawkZ3YDpacWduRSeFvmdfMEM +u8ff8oqfyDmEyBOeAuXghj3Q0klmUe/A736MvE4FWvXm84C0cJvc9Qpne6G6ngq DxzakOAOvUBP38i8NaZQIwIkHaDxuk/T+HS/u/+NC0vCeOVCYieIFY+J36GO8Lmz IFJKsdRCaUjrKw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:03:47 2025 by rpki-client