This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json) Hash identifier: DBwuE+GUpUpGEom1ydxbr645GmQabJwh6zoTtjpV+H8= Subject key identifier: CE:FF:16:54:54:C0:AF:FB:4C:ED:48:B4:82:84:81:A3:E0:C2:D2:3A Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4 Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4 Certificate serial: 019AF38A1215010AFBFF774E74125125FC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft Manifest number: 040D Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=) 2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: i6DKdOi52B1UIO6fOcJK6/WH+RZ7fH7Qw85BYA6hDaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:12:15:01:0a:fb:ff:77:4e:74:12:51:25:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4 Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=ceff165454c0affb4ced48b4828481a3e0c2d23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:3c:8c:79:5e:a6:69:42:d7:61:1f:96:7a: 4b:12:25:14:84:9d:d2:c7:f8:67:d5:2b:dd:df:e9: 3c:d1:dc:14:87:bb:37:e9:15:00:20:6d:5a:80:dc: 43:b2:d8:ae:5a:50:c3:3b:27:4e:b5:08:f3:07:67: bd:33:4e:95:49:76:c0:99:7a:8f:56:bd:eb:9d:70: 55:a6:93:aa:5d:38:a1:fb:33:0d:8c:50:24:af:72: d7:7d:38:2f:63:2b:ea:01:bb:ff:ab:3f:3e:67:3b: 7e:64:6b:f4:61:e3:bb:99:e9:96:07:6d:62:c7:65: d9:a2:a1:53:ca:46:cf:15:b8:18:de:bc:f4:b3:6d: 9e:eb:77:91:f8:75:91:7d:5f:86:d3:25:9b:6d:d1: 37:5a:91:e4:c2:d9:25:f4:dc:07:b3:af:a8:0c:77: f0:e2:b2:b1:7c:ea:a9:b2:09:f1:bd:b6:79:82:26: 76:16:b0:23:70:1c:05:5c:70:d0:57:9e:b6:b0:f4: 3c:2d:db:37:e6:ac:4d:d0:69:67:fa:0a:40:61:41: 2d:2b:66:5c:17:a7:56:f4:ae:ea:93:7c:f6:42:b8: f7:19:41:c1:ac:15:8e:b1:28:56:43:50:0e:4d:41: e6:41:36:9c:72:e9:2b:be:ec:8b:07:18:35:f4:56: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:16:54:54:C0:AF:FB:4C:ED:48:B4:82:84:81:A3:E0:C2:D2:3A X509v3 Authority Key Identifier: keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:09:94:aa:8a:75:b0:55:88:0e:fc:0b:c8:72:fc:de:0d:a9: c9:7d:71:ec:a7:2d:7f:5d:45:c8:80:f9:eb:30:19:dd:37:f5: 0f:ff:c5:f6:60:3c:70:69:d0:6f:f9:17:e7:58:d0:d4:3e:ca: 17:71:cf:da:b4:41:8a:f5:a0:88:67:19:81:7a:03:56:5f:e2: f1:09:1a:68:00:03:9e:a8:c5:b8:e3:d2:f8:04:72:11:bc:47: c7:a8:d5:9c:16:68:0d:35:8d:57:1c:6d:22:37:38:26:48:07: f4:7e:c3:5a:20:54:68:89:23:77:b5:95:08:78:cb:17:34:41: 37:af:09:15:2a:1f:8b:e8:5f:36:c1:24:f0:ab:86:20:2f:1f: 4a:56:e3:13:c0:04:d7:8d:c8:d7:18:81:cb:9f:78:23:95:ea: 6c:c4:dc:f3:27:9c:c6:c6:93:a0:f6:d4:cf:1d:a5:f7:76:ff: 29:9a:da:5f:b5:8b:6c:7a:65:8a:e7:e6:f0:2e:a8:9b:fc:50: 32:33:52:73:da:92:be:b1:0f:5f:90:5b:c5:08:36:1e:72:4f: 78:31:73:ad:7d:9b:a9:17:66:48:79:ce:87:26:16:65:86:e0: 87:9e:8f:3f:64:47:cc:cd:39:b3:a4:d0:5e:d8:b1:81:a8:58: 46:da:c7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihIVAQr7/3dOdBJRJfxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh ODFjYjQwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD EyhjZWZmMTY1NDU0YzBhZmZiNGNlZDQ4YjQ4Mjg0ODFhM2UwYzJkMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplk8jHlepmlC12EflnpLEiUUhJ3S x/hn1Svd3+k80dwUh7s36RUAIG1agNxDstiuWlDDOydOtQjzB2e9M06VSXbAmXqP Vr3rnXBVppOqXTih+zMNjFAkr3LXfTgvYyvqAbv/qz8+Zzt+ZGv0YeO7memWB21i x2XZoqFTykbPFbgY3rz0s22e63eR+HWRfV+G0yWbbdE3WpHkwtkl9NwHs6+oDHfw 4rKxfOqpsgnxvbZ5giZ2FrAjcBwFXHDQV562sPQ8Lds35qxN0Gln+gpAYUEtK2Zc F6dW9K7qk3z2Qrj3GUHBrBWOsShWQ1AOTUHmQTaccukrvuyLBxg19FauywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7/FlRUwK/7TO1ItIKEgaPgwtI6MB8GA1UdIwQY MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2 LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQmUqop1 sFWIDvwLyHL83g2pyX1x7Kctf11FyID56zAZ3Tf1D//F9mA8cGnQb/kX51jQ1D7K F3HP2rRBivWgiGcZgXoDVl/i8QkaaAADnqjFuOPS+ARyEbxHx6jVnBZoDTWNVxxt Ijc4JkgH9H7DWiBUaIkjd7WVCHjLFzRBN68JFSofi+hfNsEk8KuGIC8fSlbjE8AE 143I1xiBy594I5XqbMTc8yecxsaToPbUzx2l93b/KZraX7WLbHpliufm8C6om/xQ MjNSc9qSvrEPX5BbxQg2HnJPeDFzrX2bqRdmSHnOhyYWZYbgh56PP2RHzM05s6TQ XtixgahYRtrHqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:12 2025 by rpki-client