This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json) Hash identifier: f2zbnuAHi+RIuMLBeZggYOCHtDZzn3KM+febIj/GK80= Subject key identifier: BB:9E:42:85:A7:36:F6:07:07:37:33:9E:DE:7E:A0:99:A7:AC:4B:85 Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019AF2AD9A351F7992CA6ED986181D98C34F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=) 2: SyaJdrCGRwEhVAYfY15e_Mzqkco.roa (hash: 7ONi2iAPEgCxvUYpAgtRObF8R52++OBgKVa99G1iWbw=) 3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: xnjNMJQ5eSIQFhYFeegPaDkhUTbumXrGFH6rOJy2zkQ=) 4: hh03zFpevYjY3E83dBgNmLTmAnY.roa (hash: jMJgwZh9RPXCIiUSToKAvjp/ihJCeCstbqBegzy2I2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9a:35:1f:79:92:ca:6e:d9:86:18:1d:98:c3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=bb9e4285a736f6070737339ede7ea099a7ac4b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:db:ff:4f:2a:af:02:df:1f:d7:ad:ec:20: a6:fb:b1:20:fd:89:81:ee:fd:f1:a2:85:40:ee:32: c1:4e:9c:42:9f:04:7d:ba:2c:15:ab:ab:26:7f:41: 44:54:5b:a2:bb:9e:2d:0f:cf:0d:52:67:21:08:4c: 06:22:e6:ff:04:99:90:6e:2d:65:0c:6a:ed:2a:18: cd:65:1c:e8:eb:f5:64:c6:e3:58:f5:d8:31:b8:16: a2:b6:46:44:2a:f2:c7:21:8d:3b:b0:5c:a3:a5:87: ca:2b:ae:7c:e8:cf:0a:c8:d6:e8:8a:d8:ef:c4:a0: 54:9c:a6:20:63:ee:ad:32:41:20:11:6d:64:6a:fa: 46:f1:ef:c0:bc:8d:19:f5:70:22:5d:e9:3a:00:a6: 23:9e:7e:21:5f:28:d3:de:3f:2a:b3:b4:86:9a:23: 59:97:71:47:cb:26:e6:53:19:4f:a6:be:b9:cf:db: 3f:fc:44:ed:24:2f:df:5e:4f:5c:b3:20:81:d7:db: 5e:86:4a:41:c0:c6:9a:08:fc:cb:41:f4:1b:a6:0d: 06:39:00:79:34:15:c0:6a:2c:68:b5:97:76:ee:05: 21:7a:dd:5b:2c:a8:da:08:e3:da:c1:bb:4c:65:83: 66:5b:ae:72:70:b2:ec:e6:68:70:86:04:aa:b7:1a: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:42:85:A7:36:F6:07:07:37:33:9E:DE:7E:A0:99:A7:AC:4B:85 X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:43:3d:3d:96:3d:07:8f:08:27:28:fa:4b:92:97:2a:e5:fe: 48:ff:ff:10:75:c6:8a:46:7d:7b:30:20:1e:9d:9d:23:df:d9: f5:fe:3e:d2:93:e8:42:eb:4c:5f:70:52:43:0c:2b:39:90:87: 27:0b:e9:6c:80:3e:c5:63:e3:62:07:08:aa:56:e2:34:dd:ed: 2d:e4:8f:68:45:d7:f8:2d:c8:ea:10:e8:87:c1:e3:69:32:90: e4:d1:ec:bc:09:f8:44:45:42:39:bf:a8:53:d7:04:13:24:7a: 99:8f:c8:0e:ce:d6:cc:2c:7e:0c:c2:28:1d:d0:f1:70:02:75: d3:43:6d:6e:6c:03:0d:b0:76:66:f8:87:52:7f:9c:aa:b4:96: 75:89:03:f3:ea:be:63:b8:3d:01:a4:40:b6:fc:f3:a8:cf:37: 0a:52:a9:22:1e:1f:1d:0e:32:ca:4b:94:16:a9:0d:06:73:9c: d1:49:b7:bf:0a:44:e3:4d:11:b6:13:b2:53:9d:af:6e:91:f7: 33:1b:d7:55:08:18:65:10:23:02:cd:60:90:a6:69:41:c2:4d: 79:8b:79:da:73:d1:ad:9f:86:71:46:fc:85:02:48:2a:72:41: 3a:9b:9a:cd:db:79:77:43:27:67:7e:db:fe:20:ea:cb:94:59: 4e:83:58:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZo1H3mSym7ZhhgdmMNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD EyhiYjllNDI4NWE3MzZmNjA3MDczNzMzOWVkZTdlYTA5OWE3YWM0Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqPb/08qrwLfH9et7CCm+7Eg/YmB 7v3xooVA7jLBTpxCnwR9uiwVq6smf0FEVFuiu54tD88NUmchCEwGIub/BJmQbi1l DGrtKhjNZRzo6/VkxuNY9dgxuBaitkZEKvLHIY07sFyjpYfKK6586M8KyNboitjv xKBUnKYgY+6tMkEgEW1kavpG8e/AvI0Z9XAiXek6AKYjnn4hXyjT3j8qs7SGmiNZ l3FHyybmUxlPpr65z9s//ETtJC/fXk9csyCB19tehkpBwMaaCPzLQfQbpg0GOQB5 NBXAaixotZd27gUhet1bLKjaCOPawbtMZYNmW65ycLLs5mhwhgSqtxohgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLueQoWnNvYHBzcznt5+oJmnrEuFMB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUM9PZY9 B48IJyj6S5KXKuX+SP//EHXGikZ9ezAgHp2dI9/Z9f4+0pPoQutMX3BSQwwrOZCH JwvpbIA+xWPjYgcIqlbiNN3tLeSPaEXX+C3I6hDoh8HjaTKQ5NHsvAn4REVCOb+o U9cEEyR6mY/IDs7WzCx+DMIoHdDxcAJ100NtbmwDDbB2ZviHUn+cqrSWdYkD8+q+ Y7g9AaRAtvzzqM83ClKpIh4fHQ4yykuUFqkNBnOc0Um3vwpE400RthOyU52vbpH3 MxvXVQgYZRAjAs1gkKZpQcJNeYt52nPRrZ+GcUb8hQJIKnJBOpuazdt5d0MnZ37b /iDqy5RZToNYBA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:14 2025 by rpki-client