This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json) Hash identifier: aXy1ie+ABn8Bd9mOaIsvLIZIGH49g+QGSglXv0EPqho= Subject key identifier: 38:5F:38:62:45:2C:1D:46:2D:C2:E1:27:7A:72:19:9A:85:A1:8A:85 Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Certificate serial: 019AF2AD797F6F8DB958B3E031BD47BF5F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft Manifest number: 02B3 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: 1n+pOUCP2S1f5d05A6EGdDPW8xbzApG5QB04p/wcTjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:79:7f:6f:8d:b9:58:b3:e0:31:bd:47:bf:5f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=385f3862452c1d462dc2e1277a72199a85a18a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:56:fe:15:7a:9f:0c:99:d4:58:ab:6a:2f: 96:bd:77:e1:da:3d:0b:1b:a6:d8:48:f3:a8:2e:4a: 7b:4d:14:2e:3c:d6:95:3c:d3:c6:e6:8b:91:d4:c9: 38:93:39:37:7a:b6:17:5b:ce:5d:d2:94:d3:3d:35: 0f:b7:b3:c8:55:d7:b2:0f:fc:bf:c6:1e:67:53:a6: 85:fa:e5:98:28:01:8c:31:81:00:b9:e4:41:e8:6f: f1:04:e7:e1:77:61:53:11:32:74:73:c7:8d:43:c1: ba:64:fb:e2:0d:10:81:ed:ad:c2:e1:a7:82:46:3b: 7a:f7:f7:6a:87:3d:1d:fb:3d:c5:96:cc:20:1c:b4: c9:88:80:ca:0d:f3:f7:7f:f0:15:c5:ec:98:b3:bb: 3d:df:17:b5:83:18:c8:8d:75:6d:9b:df:a6:08:9e: 86:d7:7a:86:e8:7e:63:67:0e:85:ca:82:86:2e:f6: 16:cf:2f:af:45:ce:73:82:84:10:bb:c8:b8:d3:b1: 44:76:78:86:0e:d9:1b:2e:0d:20:25:f0:9c:36:2b: dc:68:6a:cb:c9:11:e2:20:80:c7:c5:8e:f7:4e:b1: 2d:89:01:87:8d:aa:d1:6a:34:27:21:37:04:66:e1: 10:26:a5:97:11:dd:79:63:6d:48:79:70:2a:7e:9f: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:38:62:45:2C:1D:46:2D:C2:E1:27:7A:72:19:9A:85:A1:8A:85 X509v3 Authority Key Identifier: keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:66:b5:d1:ae:3c:fc:15:52:f7:10:7a:cf:06:11:db:25:1b: ad:3b:bd:05:7a:ba:7b:4c:e0:77:f1:cd:38:3b:00:b9:5b:47: 79:0e:22:38:5b:9b:e8:bd:15:9e:33:62:c8:4b:f6:d7:74:59: 46:0f:e9:4a:2d:c9:f6:01:29:27:af:5b:6b:6b:a6:c4:8c:c5: aa:71:2a:6c:4d:8b:ac:ae:f4:ee:b7:c9:34:ea:c3:aa:aa:eb: c6:b3:ff:d6:95:c9:25:cc:64:4d:ec:43:92:49:ae:a1:42:6f: bb:fb:5e:79:e5:f5:d1:3b:d9:c0:97:ba:6d:f6:34:8a:0c:8e: e6:47:3c:3a:cb:84:b2:e4:4e:26:ba:d7:eb:2e:ed:15:d2:78: e3:e8:5a:d9:b4:9a:ba:5c:5d:b3:0f:47:cd:bd:42:02:3c:79: 54:b1:50:65:96:09:10:67:c6:39:93:29:ef:a0:ed:79:7f:5f: 11:da:70:27:5c:3d:d6:98:97:a0:99:2c:a5:95:e8:b3:a2:57: a7:d1:08:d7:f4:39:90:d9:60:61:bf:73:6b:9f:41:c1:f9:81: 2d:5b:78:79:95:a1:69:e2:a4:30:16:f6:d7:f3:31:74:e4:09: 69:8d:ee:22:1d:6b:3e:43:53:0e:b2:5a:ed:e4:bd:e1:98:a2: e0:a8:be:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXl/b425WLPgMb1Hv18PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz M2M5N2IwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EygzODVmMzg2MjQ1MmMxZDQ2MmRjMmUxMjc3YTcyMTk5YTg1YTE4YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71VW/hV6nwyZ1Firai+WvXfh2j0L G6bYSPOoLkp7TRQuPNaVPNPG5ouR1Mk4kzk3erYXW85d0pTTPTUPt7PIVdeyD/y/ xh5nU6aF+uWYKAGMMYEAueRB6G/xBOfhd2FTETJ0c8eNQ8G6ZPviDRCB7a3C4aeC Rjt69/dqhz0d+z3FlswgHLTJiIDKDfP3f/AVxeyYs7s93xe1gxjIjXVtm9+mCJ6G 13qG6H5jZw6FyoKGLvYWzy+vRc5zgoQQu8i407FEdniGDtkbLg0gJfCcNivcaGrL yRHiIIDHxY73TrEtiQGHjarRajQnITcEZuEQJqWXEd15Y21IeXAqfp8GywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhfOGJFLB1GLcLhJ3pyGZqFoYqFMB8GA1UdIwQY MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOma10a48 /BVS9xB6zwYR2yUbrTu9BXq6e0zgd/HNODsAuVtHeQ4iOFub6L0VnjNiyEv213RZ Rg/pSi3J9gEpJ69ba2umxIzFqnEqbE2LrK707rfJNOrDqqrrxrP/1pXJJcxkTexD kkmuoUJvu/teeeX10TvZwJe6bfY0igyO5kc8OsuEsuROJrrX6y7tFdJ44+ha2bSa ulxdsw9Hzb1CAjx5VLFQZZYJEGfGOZMp76DteX9fEdpwJ1w91piXoJkspZXos6JX p9EI1/Q5kNlgYb9za59BwfmBLVt4eZWhaeKkMBb21/MxdOQJaY3uIh1rPkNTDrJa 7eS94Zii4Ki+RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:24 2025 by rpki-client