This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json) Hash identifier: 2v1y/oDV7XvJZV4/3CdlC050MVsVw9OgrHHalPO5CbY= Subject key identifier: 6D:2C:74:A6:96:B6:73:5E:7B:B9:22:27:18:C3:22:7D:FF:CA:9A:BE Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Certificate serial: 019AF2090881FAE4B0779299640DDB635275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft Manifest number: 06C0 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: sBHdCShZZHzZ401AoBP4KAjXIY9ew4Ei1u4Ev0Nm+t4=) 2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:08:81:fa:e4:b0:77:92:99:64:0d:db:63:52:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=6d2c74a696b6735e7bb9222718c3227dffca9abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:9f:4a:b0:f1:73:6c:ad:d5:6a:a9:b2:36: d4:c3:d5:5c:72:11:e4:fb:78:5a:9b:72:11:1b:76: 6c:56:3c:c0:36:aa:17:ae:3c:9d:c0:ae:da:f7:d9: 17:58:10:21:ae:3c:f0:25:70:8e:52:d2:dd:e8:3f: bb:97:65:52:e8:f8:a7:89:21:3e:c6:7f:6a:fd:15: 5b:59:02:9d:2f:dc:4b:4f:be:85:93:98:bf:44:16: 61:86:87:b3:1c:04:1a:2e:f3:64:1b:c3:02:f5:3c: e2:a2:65:c6:fe:5a:da:56:f9:e5:f8:23:c6:3e:50: 07:be:92:83:b4:f0:d3:39:47:c9:25:0a:7c:6f:5c: c2:a9:71:db:c4:d6:d2:eb:9c:6e:b6:03:ff:cb:2d: 0d:d2:6e:3b:9d:9b:d4:ab:1f:89:14:d7:89:c5:68: 74:81:76:84:1f:b5:53:81:d3:41:8c:5e:73:62:2d: 46:b3:ad:a3:47:b0:54:dd:65:be:da:5d:f5:66:a7: af:db:5a:3a:32:02:f3:93:42:e3:72:18:90:16:57: 02:aa:a1:04:ab:33:a6:f5:5d:99:c6:bd:05:f1:23: 88:84:99:3a:26:1e:cb:85:ff:85:f3:14:0d:0b:fc: 79:37:ac:3f:b8:27:8b:43:a4:7e:71:60:38:85:6c: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:74:A6:96:B6:73:5E:7B:B9:22:27:18:C3:22:7D:FF:CA:9A:BE X509v3 Authority Key Identifier: keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:db:73:e9:07:01:ee:f3:97:e4:bf:a6:f8:6c:b3:b7:96: 62:13:20:ba:0c:c7:1c:c8:1f:c6:ce:94:8f:97:d6:25:bc:c5: c7:bc:c1:90:5d:47:ed:72:e4:75:4a:9c:64:51:ba:63:9e:1f: 19:1e:c8:0a:b3:e1:77:9d:2a:30:4d:45:f5:74:7f:91:72:40: d3:91:ca:7d:46:ba:4c:da:fd:68:57:8b:62:dd:90:be:87:fd: 54:ac:4a:aa:a3:c2:97:75:f0:4d:a0:96:05:96:00:28:8f:30: 57:b3:68:b4:28:7e:1e:e8:54:f5:9c:fd:45:62:07:3e:1a:83: 73:9f:91:74:27:5b:14:89:d4:87:af:f3:24:53:fa:b4:30:bb: 7b:17:88:70:87:eb:44:bc:80:fd:60:09:fb:a7:2a:56:85:37: 9e:3a:26:c5:7d:9f:19:0a:cc:3d:5d:f1:44:52:da:3e:d5:ff: d0:50:19:c5:b8:2b:41:ba:95:3c:8c:8d:1b:a1:c8:1d:b7:86: dc:35:68:ca:4b:49:1a:c4:71:89:69:16:c3:a7:a3:27:0d:0f: ee:77:10:5c:64:5c:3d:03:e5:60:24:47:33:ff:d8:9b:5a:10: f9:dc:56:b9:e2:c8:b2:4c:28:3e:1b:7a:2d:bb:b6:5a:69:90: 8b:45:6a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQiB+uSwd5KZZA3bY1J1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4 Y2ViY2EwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg2ZDJjNzRhNjk2YjY3MzVlN2JiOTIyMjcxOGMzMjI3ZGZmY2E5YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmqfSrDxc2yt1WqpsjbUw9VcchHk +3ham3IRG3ZsVjzANqoXrjydwK7a99kXWBAhrjzwJXCOUtLd6D+7l2VS6PiniSE+ xn9q/RVbWQKdL9xLT76Fk5i/RBZhhoezHAQaLvNkG8MC9TziomXG/lraVvnl+CPG PlAHvpKDtPDTOUfJJQp8b1zCqXHbxNbS65xutgP/yy0N0m47nZvUqx+JFNeJxWh0 gXaEH7VTgdNBjF5zYi1Gs62jR7BU3WW+2l31Zqev21o6MgLzk0LjchiQFlcCqqEE qzOm9V2Zxr0F8SOIhJk6Jh7Lhf+F8xQNC/x5N6w/uCeLQ6R+cWA4hWy5GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0sdKaWtnNee7kiJxjDIn3/ypq+MB8GA1UdIwQY MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzLbc+kH Ae7zl+S/pvhss7eWYhMgugzHHMgfxs6Uj5fWJbzFx7zBkF1H7XLkdUqcZFG6Y54f GR7ICrPhd50qME1F9XR/kXJA05HKfUa6TNr9aFeLYt2Qvof9VKxKqqPCl3XwTaCW BZYAKI8wV7NotCh+HuhU9Zz9RWIHPhqDc5+RdCdbFInUh6/zJFP6tDC7exeIcIfr RLyA/WAJ+6cqVoU3njomxX2fGQrMPV3xRFLaPtX/0FAZxbgrQbqVPIyNG6HIHbeG 3DVoyktJGsRxiWkWw6ejJw0P7ncQXGRcPQPlYCRHM//Ym1oQ+dxWueLIskwoPht6 Lbu2WmmQi0Vq5A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:43 2025 by rpki-client