This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json) Hash identifier: n5A2ad+kBu/iMJh8QS+ulDdhNSOy2Ga/La4ZrMqtpVc= Subject key identifier: 51:43:A4:FF:7A:FE:0F:16:36:8D:DD:5C:A3:41:13:68:A4:57:FB:7C Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Certificate serial: 019AF31BD5FC2323F082320CEFD1830EE4DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft Manifest number: 12B9 Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 3x7IOb2WQ+wVk7gF3zv8LeiLXbe2DJlrInnVBRYjYyI=) 2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=) 3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d5:fc:23:23:f0:82:32:0c:ef:d1:83:0e:e4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=5143a4ff7afe0f16368ddd5ca3411368a457fb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:fb:01:50:b2:0e:49:47:64:3f:93:e1:75: 90:bd:10:b2:42:9d:77:da:7c:7d:25:27:07:9d:4c: 97:99:e7:08:71:e6:76:a5:49:10:9e:fe:4e:08:15: e3:45:9b:85:01:57:a4:7a:60:30:ef:86:b2:ac:48: 67:13:f5:73:85:a7:ca:bb:ff:b8:e6:9a:57:05:dc: 7d:88:6c:ba:99:62:6f:8e:c7:53:10:ef:4a:c4:0b: 91:b6:5e:0b:e1:9a:60:a3:9f:1c:25:a6:97:cc:70: 4a:b9:b0:97:60:13:5b:5e:d9:3e:54:09:f1:73:ed: fe:ec:48:07:2b:36:cb:f9:f6:ed:87:90:1f:fd:66: 8e:dd:da:a1:18:f9:2e:a2:6e:99:7b:37:1f:37:23: 87:c9:35:ba:0a:ad:39:c7:b9:e1:1e:30:c8:77:b7: a5:a2:9b:fc:45:26:7f:f2:46:67:44:c3:0e:95:e2: 26:9b:27:4a:a4:d5:ad:87:9f:9c:1d:91:6f:e3:a1: 76:8b:c5:98:09:ee:01:ad:cf:e2:4d:3d:44:b3:9f: e5:fa:4c:79:a2:21:37:54:0d:45:ff:30:de:ae:29: e5:1c:f0:2d:3e:85:5a:c8:20:cb:c1:08:17:db:01: 36:7b:ab:4f:af:f2:59:56:25:79:d7:ce:6d:e7:dc: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:A4:FF:7A:FE:0F:16:36:8D:DD:5C:A3:41:13:68:A4:57:FB:7C X509v3 Authority Key Identifier: keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:b5:66:a1:ef:50:48:cd:5d:6b:c5:93:cd:1d:a5:74:21: 75:ba:fa:4c:93:49:4f:38:ea:5f:7f:1c:77:6d:a5:ca:63:77: 35:61:cf:e5:8c:e3:c8:eb:0e:d4:71:ea:52:0a:07:20:fe:ce: 96:91:cd:5a:1b:f0:bf:32:91:70:eb:60:f7:fc:e7:7e:1d:84: 57:fc:1f:71:fa:ee:c6:71:d0:24:55:74:27:f0:cd:cd:62:39: bd:7f:58:a9:5c:13:0a:d4:80:bb:f4:1d:5c:b8:a4:b5:0c:e4: 4d:0a:62:ff:9a:a1:02:d5:1f:41:47:5d:41:79:6a:96:af:ea: 7e:af:26:12:a9:83:89:d0:23:f5:f1:cc:c9:58:71:9b:18:b3: 37:c7:db:c8:09:8e:04:1f:03:6b:87:27:cc:8d:10:01:07:96: 23:a7:22:7c:f0:62:9e:58:8e:be:61:13:40:92:34:dd:ea:ef: 7b:f7:22:ed:89:36:80:00:e6:33:83:f6:5d:be:66:3c:f0:31: 01:a6:6b:11:dc:47:43:c0:a9:76:c8:57:af:e5:13:f9:30:97: 3f:1f:12:09:f4:8a:b7:92:ed:64:a9:3c:e7:48:54:83:b3:a1: 3e:a9:36:56:86:ad:9f:b0:36:96:89:6e:db:9d:1c:e8:c7:da: 79:fd:70:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9X8IyPwgjIM79GDDuTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2 NTlhMGIwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD Eyg1MTQzYTRmZjdhZmUwZjE2MzY4ZGRkNWNhMzQxMTM2OGE0NTdmYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKv7AVCyDklHZD+T4XWQvRCyQp13 2nx9JScHnUyXmecIceZ2pUkQnv5OCBXjRZuFAVekemAw74ayrEhnE/VzhafKu/+4 5ppXBdx9iGy6mWJvjsdTEO9KxAuRtl4L4Zpgo58cJaaXzHBKubCXYBNbXtk+VAnx c+3+7EgHKzbL+fbth5Af/WaO3dqhGPkuom6ZezcfNyOHyTW6Cq05x7nhHjDId7el opv8RSZ/8kZnRMMOleImmydKpNWth5+cHZFv46F2i8WYCe4Brc/iTT1Es5/l+kx5 oiE3VA1F/zDerinlHPAtPoVayCDLwQgX2wE2e6tPr/JZViV5185t59x/gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFDpP96/g8WNo3dXKNBE2ikV/t8MB8GA1UdIwQY MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt N2UyODA3NTJkYTIxLzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyG1ZqHv UEjNXWvFk80dpXQhdbr6TJNJTzjqX38cd22lymN3NWHP5YzjyOsO1HHqUgoHIP7O lpHNWhvwvzKRcOtg9/znfh2EV/wfcfruxnHQJFV0J/DNzWI5vX9YqVwTCtSAu/Qd XLiktQzkTQpi/5qhAtUfQUddQXlqlq/qfq8mEqmDidAj9fHMyVhxmxizN8fbyAmO BB8Da4cnzI0QAQeWI6cifPBinliOvmETQJI03erve/ci7Yk2gADmM4P2Xb5mPPAx AaZrEdxHQ8CpdshXr+UT+TCXPx8SCfSKt5LtZKk850hUg7OhPqk2Voatn7A2lolu 250c6Mfaef1wfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:42 2025 by rpki-client