This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json) Hash identifier: MDubvl0oi/6QQZttCilmzQLSJLGN4VFuid+FvEedJNQ= Subject key identifier: 4E:3A:4D:08:59:6D:20:EA:79:B8:A2:66:48:2F:76:2F:66:BA:E2:31 Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4 Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4 Certificate serial: 019AF12D130264363C7063C3B3709396F008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft Manifest number: 0522 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=) 2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: I8ieR0YPM84IFoRD5XSwJ5iVCWvBfGNZTTG3yVSitaQ=) 3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:13:02:64:36:3c:70:63:c3:b3:70:93:96:f0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=4e3a4d08596d20ea79b8a266482f762f66bae231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:97:b3:9e:96:1e:0f:48:e3:dd:3b:fc:7d: a4:fd:bb:18:fb:0d:15:ae:55:0e:1d:03:ad:d7:f9: 13:85:e9:52:75:3d:f7:ee:6e:62:cb:52:5f:23:cd: b7:44:44:78:4f:b9:0f:9d:26:02:00:89:92:0c:eb: 9a:63:b1:b8:30:29:41:07:85:89:29:d5:14:24:b3: 49:ca:d0:bb:71:40:d2:73:82:96:98:0c:a6:2c:ee: ea:4f:c5:38:6a:24:17:a1:63:c4:a2:3b:45:03:f2: d7:ea:90:29:99:e8:db:79:f4:07:fb:41:e6:31:c7: 5f:29:98:44:d7:5a:41:81:34:b1:74:b4:ad:de:95: da:67:3d:4d:77:8e:28:5b:e0:01:db:f9:5d:66:6e: 3f:fb:cd:07:d5:56:db:71:f4:24:68:cc:1c:fa:cc: e9:df:fe:00:5c:b9:c3:76:da:76:91:fb:f0:32:5b: 3d:fd:c0:ce:44:88:15:75:f0:9a:b8:16:84:87:50: e8:08:c8:7a:0c:7b:12:89:83:3c:52:ba:bb:c1:af: 64:24:91:dd:1c:67:3b:ce:3e:7c:28:8e:67:d6:af: ae:05:8e:4b:08:bc:41:9f:cb:ea:f1:83:52:71:82: 4b:db:2c:97:94:9c:e8:eb:be:70:5b:0f:4d:d7:b3: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:4D:08:59:6D:20:EA:79:B8:A2:66:48:2F:76:2F:66:BA:E2:31 X509v3 Authority Key Identifier: keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:d5:c9:f0:9d:76:43:d2:54:3f:05:40:28:88:2e:e5:29: d2:56:19:3f:f8:d8:af:d8:b6:15:36:79:5e:41:4e:5d:6c:97: f9:25:4d:46:e1:cc:b0:60:f1:1b:64:38:6f:b8:71:97:ea:69: 5a:30:af:62:f8:a1:ef:ba:57:ec:eb:4b:f1:d8:d6:23:0b:78: b3:6c:7d:39:50:06:9f:fe:c3:bd:b5:0a:73:5a:cd:d7:9f:77: a3:49:8c:47:b5:27:25:58:c9:3a:ff:8d:5d:5b:00:ae:10:69: 05:8c:8a:d8:eb:d6:32:5c:c8:37:99:35:3d:51:cb:97:29:97: 9f:08:70:b4:92:67:ae:65:88:05:a9:d7:7b:0f:48:c4:55:f2: 3d:4e:da:36:a9:4b:d4:ed:fd:aa:71:96:d9:b3:a9:79:82:07: 50:ba:db:71:b2:57:15:8c:34:2e:45:04:5f:46:27:f7:c3:1f: 6f:bf:47:e2:48:58:a0:d4:17:ec:8a:45:23:c2:5b:d4:8d:3a: 2b:db:f6:f9:64:3b:de:b2:64:d0:2f:d2:ac:bc:68:53:64:ac: 22:09:f2:0e:e8:75:52:0f:5e:48:14:49:cc:3f:32:91:16:d4: de:2b:5b:68:3a:56:b0:3e:b1:81:5b:90:be:96:ed:76:d3:d6: 38:a6:18:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRMCZDY8cGPDs3CTlvAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl ZWNiYTQwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg0ZTNhNGQwODU5NmQyMGVhNzliOGEyNjY0ODJmNzYyZjY2YmFlMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobeXs56WHg9I4907/H2k/bsY+w0V rlUOHQOt1/kThelSdT337m5iy1JfI823RER4T7kPnSYCAImSDOuaY7G4MClBB4WJ KdUUJLNJytC7cUDSc4KWmAymLO7qT8U4aiQXoWPEojtFA/LX6pApmejbefQH+0Hm McdfKZhE11pBgTSxdLSt3pXaZz1Nd44oW+AB2/ldZm4/+80H1VbbcfQkaMwc+szp 3/4AXLnDdtp2kfvwMls9/cDORIgVdfCauBaEh1DoCMh6DHsSiYM8Urq7wa9kJJHd HGc7zj58KI5n1q+uBY5LCLxBn8vq8YNScYJL2yyXlJzo675wWw9N17PWAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE46TQhZbSDqebiiZkgvdi9muuIxMB8GA1UdIwQY MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt NWI1MDc4NjI1ZGVhLzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnDVyfCd dkPSVD8FQCiILuUp0lYZP/jYr9i2FTZ5XkFOXWyX+SVNRuHMsGDxG2Q4b7hxl+pp WjCvYvih77pX7OtL8djWIwt4s2x9OVAGn/7DvbUKc1rN1593o0mMR7UnJVjJOv+N XVsArhBpBYyK2OvWMlzIN5k1PVHLlymXnwhwtJJnrmWIBanXew9IxFXyPU7aNqlL 1O39qnGW2bOpeYIHULrbcbJXFYw0LkUEX0Yn98Mfb79H4khYoNQX7IpFI8Jb1I06 K9v2+WQ73rJk0C/SrLxoU2SsIgnyDuh1Ug9eSBRJzD8ykRbU3itbaDpWsD6xgVuQ vpbtdtPWOKYYkA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:40 2025 by rpki-client