This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json) Hash identifier: jYBF28UbxbHMGBdZ0e6uE17TASyHdQoVm6RhUL7TTBE= Subject key identifier: 80:B0:9A:67:87:F4:1D:56:D3:3A:F6:E1:6F:A4:7B:15:1B:F1:37:D9 Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Certificate serial: 019AF3F7C57644C2B7294909E13D9111A381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft Manifest number: 0FF9 Signing time: Sat 06 Dec 2025 14:01:32 +0000 Manifest this update: Sat 06 Dec 2025 14:01:32 +0000 Manifest next update: Sun 07 Dec 2025 14:01:32 +0000 Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: B2Jt3UxRXPasrg+TcR0xGZ7F7LmeJx5zvfW5vaJI3j4=) 2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c5:76:44:c2:b7:29:49:09:e1:3d:91:11:a3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Validity Not Before: Dec 6 14:01:32 2025 GMT Not After : Dec 7 14:01:32 2025 GMT Subject: CN=80b09a6787f41d56d33af6e16fa47b151bf137d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:a1:3a:c6:db:3f:d6:64:bd:c8:4c:ab:b8: 73:0b:b3:fa:d3:1d:2c:f6:8b:89:ff:1c:d6:58:01: 2b:db:57:4e:56:0b:74:20:10:0b:7f:ce:92:23:cf: 56:05:ad:a8:58:8e:a4:9f:0d:b6:c9:82:ab:b0:86: d4:81:bc:40:59:f2:fd:49:42:c5:79:84:db:4e:19: a7:b2:6c:03:ec:bd:98:28:63:23:df:66:e5:9a:e8: 9b:30:10:85:69:a1:95:5e:a5:a2:41:93:f6:a7:64: 01:a6:73:9a:13:19:c1:d4:3e:93:31:f1:22:86:7c: f9:e3:18:5d:b9:bd:59:81:13:cd:92:1e:82:f1:e1: 4b:d8:97:2f:4c:f6:6f:fa:ca:ad:a9:13:d3:ba:4d: 72:59:84:a2:2e:a6:e5:f4:32:49:65:fa:34:2f:0d: d2:8e:a0:f4:c5:e0:29:c6:26:b3:f8:30:5d:86:99: 48:ba:ba:8a:1b:66:2d:66:0a:96:bc:ce:5d:70:0a: 57:45:7b:ae:30:7f:5a:8f:d1:2d:b2:49:60:ef:46: 5e:2b:03:e8:83:14:5c:58:71:75:41:64:a8:72:01: 87:64:43:07:07:31:12:61:c5:23:e8:12:bf:25:93: dc:3d:40:b5:84:77:a6:db:88:c2:5d:c1:8a:d5:ad: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B0:9A:67:87:F4:1D:56:D3:3A:F6:E1:6F:A4:7B:15:1B:F1:37:D9 X509v3 Authority Key Identifier: keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:69:af:54:1e:d4:b0:b8:75:14:91:cd:18:e0:2b:b5:5c:64: 6d:26:04:24:41:4f:9c:ef:f0:3a:f0:9e:d6:66:29:d7:26:3e: c9:b9:61:01:3c:63:27:74:7f:dd:cb:c4:0f:a1:b1:64:d8:13: ad:d2:f5:f3:b5:11:a3:db:6c:50:7a:03:cf:67:90:fc:0d:d1: 6b:06:da:83:c2:21:b8:eb:fe:53:9d:b7:6c:28:7d:3b:ce:9f: 52:da:e2:dc:2a:bb:e5:38:e3:3a:19:77:81:af:69:63:af:0f: 25:41:ec:9f:0d:a3:bd:ce:11:57:91:d2:73:0c:bf:2d:87:9e: 8f:75:0e:1c:b3:50:58:53:10:db:a0:d9:66:4c:89:67:8a:31: bf:2d:b7:1e:33:4b:be:de:c3:1e:ba:e8:15:f2:3b:84:96:50: 58:dc:2c:71:35:9f:39:ad:89:2f:7b:ba:1d:0d:7b:88:32:a6: 98:64:4b:68:fb:09:00:83:75:d7:20:6e:74:db:74:f3:16:80: ce:c5:3a:e0:76:a8:fc:92:aa:88:2b:79:2e:6f:af:7a:dd:83: d9:74:17:27:4b:9e:30:ad:c6:2c:4b:70:d2:d2:a8:b0:95:3b: 48:42:68:47:f4:43:6d:9a:df:14:40:a1:80:ce:5e:0c:d6:e6: 72:df:d6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98V2RMK3KUkJ4T2REaOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1 ZTJmZTkwHhcNMjUxMjA2MTQwMTMyWhcNMjUxMjA3MTQwMTMyWjAzMTEwLwYDVQQD Eyg4MGIwOWE2Nzg3ZjQxZDU2ZDMzYWY2ZTE2ZmE0N2IxNTFiZjEzN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvWhOsbbP9ZkvchMq7hzC7P60x0s 9ouJ/xzWWAEr21dOVgt0IBALf86SI89WBa2oWI6knw22yYKrsIbUgbxAWfL9SULF eYTbThmnsmwD7L2YKGMj32blmuibMBCFaaGVXqWiQZP2p2QBpnOaExnB1D6TMfEi hnz54xhdub1ZgRPNkh6C8eFL2JcvTPZv+sqtqRPTuk1yWYSiLqbl9DJJZfo0Lw3S jqD0xeApxiaz+DBdhplIurqKG2YtZgqWvM5dcApXRXuuMH9aj9Etsklg70ZeKwPo gxRcWHF1QWSocgGHZEMHBzESYcUj6BK/JZPcPUC1hHem24jCXcGK1a30fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICwmmeH9B1W0zr24W+kexUb8TfZMB8GA1UdIwQY MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmmvVB7U sLh1FJHNGOArtVxkbSYEJEFPnO/wOvCe1mYp1yY+yblhATxjJ3R/3cvED6GxZNgT rdL187URo9tsUHoDz2eQ/A3Rawbag8IhuOv+U523bCh9O86fUtri3Cq75TjjOhl3 ga9pY68PJUHsnw2jvc4RV5HScwy/LYeej3UOHLNQWFMQ26DZZkyJZ4oxvy23HjNL vt7DHrroFfI7hJZQWNwscTWfOa2JL3u6HQ17iDKmmGRLaPsJAIN11yBudNt08xaA zsU64Hao/JKqiCt5Lm+vet2D2XQXJ0ueMK3GLEtw0tKosJU7SEJoR/RDbZrfFECh gM5eDNbmct/Wlw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:27 2025 by rpki-client