This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json) Hash identifier: s+qANxhzCUJ+MpmfnBEMwIuCvBhJVkzvsIHlswwtU78= Subject key identifier: 15:A8:42:08:87:E8:01:16:5D:D6:6C:8F:86:A5:04:6C:7C:75:D3:24 Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Certificate serial: 019AF31D93FD8EF0625A938F069474AE2CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:03:13 +0000 Manifest this update: Sat 06 Dec 2025 10:03:13 +0000 Manifest next update: Sun 07 Dec 2025 10:03:13 +0000 Files and hashes: 1: 1-fujvOT9Nzk33dcGy888-8__GUg.roa (hash: XDy4HY+2OicQCXekMw1WRq7N4kP6fY3CuIb4XAYAHKw=) 2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: ylIjPjz/CxYvjUvRDR1T0xJsaWI/8o8w3uDDt4HWIJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:93:fd:8e:f0:62:5a:93:8f:06:94:74:ae:2c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Validity Not Before: Dec 6 10:03:13 2025 GMT Not After : Dec 7 10:03:13 2025 GMT Subject: CN=15a8420887e801165dd66c8f86a5046c7c75d324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:84:d3:75:da:be:58:5b:4f:d4:37:31:cb: ef:c4:80:d1:3a:90:75:b5:9d:c7:60:71:43:25:8a: 5c:1b:0b:d5:6b:95:63:5c:d2:ce:bb:12:77:1e:dc: 01:3e:e7:5c:3b:9c:48:42:b9:b7:0f:e1:04:4a:b3: 99:b4:83:54:c0:d4:e0:3b:80:3b:6a:e0:f7:26:00: 7b:9f:6e:82:6d:dd:37:87:2c:03:a1:7e:a2:9c:4f: 85:e5:51:dd:23:9c:34:6b:af:33:4c:42:7b:c8:52: 36:29:b1:44:3b:d7:06:e2:19:45:d2:af:52:96:9c: f7:e0:76:fe:db:52:88:ce:df:64:65:ce:96:f0:cc: 84:0f:60:0e:3e:69:21:ae:7e:55:a8:3f:86:72:1e: 81:74:29:d5:29:65:0c:13:2e:85:79:b5:1e:45:3e: 5c:f1:cc:7f:ac:55:97:36:b1:81:a9:c6:1f:a1:f6: ed:92:63:f2:c9:a8:29:20:fe:84:c5:ce:6a:db:ad: 79:26:20:7e:b7:46:36:bf:95:d1:40:ab:e5:f7:ce: b7:4c:53:d3:16:78:0a:bd:70:8b:3f:a4:66:06:2b: e1:72:f9:fe:8c:88:c9:d5:28:e4:68:6a:05:28:ed: e1:77:f3:31:69:f6:86:f2:86:fa:a8:f0:6e:c5:01: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:42:08:87:E8:01:16:5D:D6:6C:8F:86:A5:04:6C:7C:75:D3:24 X509v3 Authority Key Identifier: keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:31:ce:75:18:a6:b1:55:1c:4b:43:cc:09:5e:a1:fd:b1:7a: da:ae:f5:29:74:6a:66:69:20:2c:cb:3f:2b:73:49:42:c6:3b: cd:b5:07:f2:49:3f:b6:37:52:68:07:61:83:09:ce:54:29:5a: cb:0e:60:ee:75:58:3b:6f:c8:73:7d:e0:10:7a:52:65:08:78: 86:37:55:e4:21:66:38:bb:22:a1:36:51:43:b3:13:2c:ce:32: 73:c0:a6:af:65:b6:9f:69:37:58:af:49:4c:1c:b3:3b:de:77: ce:02:47:fe:f4:12:a3:94:72:db:a8:95:b3:f1:b2:b3:32:86: 90:8b:5f:5c:61:4b:7c:df:26:6c:68:7e:ac:83:a2:a5:60:a2: 41:67:ce:1a:af:77:57:64:90:1d:c1:8a:ae:c6:0d:33:09:b9: 4c:95:4d:8a:06:15:f4:09:ca:b5:b7:39:88:61:4c:1a:96:0f: b2:e2:4a:65:20:6d:8a:0d:e2:bb:ba:e9:6e:8b:08:35:42:ea: 71:02:0b:60:7b:71:2d:81:00:0f:80:fe:52:d9:ef:41:fb:06: 2d:bf:d9:00:27:ad:b3:77:bd:85:35:be:02:4f:b2:9b:4c:6d: cc:c7:37:ce:e9:4c:dc:a0:31:83:21:33:af:d7:fe:13:fb:a8: 2c:ce:15:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHZP9jvBiWpOPBpR0rizEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk YTI5ZmUwHhcNMjUxMjA2MTAwMzEzWhcNMjUxMjA3MTAwMzEzWjAzMTEwLwYDVQQD EygxNWE4NDIwODg3ZTgwMTE2NWRkNjZjOGY4NmE1MDQ2YzdjNzVkMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAaE03XavlhbT9Q3McvvxIDROpB1 tZ3HYHFDJYpcGwvVa5VjXNLOuxJ3HtwBPudcO5xIQrm3D+EESrOZtINUwNTgO4A7 auD3JgB7n26Cbd03hywDoX6inE+F5VHdI5w0a68zTEJ7yFI2KbFEO9cG4hlF0q9S lpz34Hb+21KIzt9kZc6W8MyED2AOPmkhrn5VqD+Gch6BdCnVKWUMEy6FebUeRT5c 8cx/rFWXNrGBqcYfofbtkmPyyagpIP6Exc5q2615JiB+t0Y2v5XRQKvl9863TFPT FngKvXCLP6RmBivhcvn+jIjJ1SjkaGoFKO3hd/MxafaG8ob6qPBuxQExtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWoQgiH6AEWXdZsj4alBGx8ddMkMB8GA1UdIwQY MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt NmVhOTRhOTYxZDRjLzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTItNmVhOTRhOTYxZDRj LzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTHOdRim sVUcS0PMCV6h/bF62q71KXRqZmkgLMs/K3NJQsY7zbUH8kk/tjdSaAdhgwnOVCla yw5g7nVYO2/Ic33gEHpSZQh4hjdV5CFmOLsioTZRQ7MTLM4yc8Cmr2W2n2k3WK9J TByzO953zgJH/vQSo5Ry26iVs/GyszKGkItfXGFLfN8mbGh+rIOipWCiQWfOGq93 V2SQHcGKrsYNMwm5TJVNigYV9AnKtbc5iGFMGpYPsuJKZSBtig3iu7rpbosINULq cQILYHtxLYEAD4D+UtnvQfsGLb/ZACets3e9hTW+Ak+ym0xtzMc3zulM3KAxgyEz r9f+E/uoLM4Vag== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:10 2025 by rpki-client