This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft File: T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json) Hash identifier: 6PLRZi/CmeHG8ZEWGVsu213P+Uw2QtmckJdZawLHi4A= Subject key identifier: 10:8B:CB:7D:05:E5:75:BC:A7:E6:38:89:0A:2C:02:C6:EC:C5:80:1A Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Certificate serial: 019AF1D2022BBD1D86BA00DE517C1B232FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: ApCO2ty1oUMwDzn+mO+d/N9mHoPvC0zEwPhNvoaF0WM=) 2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=) 3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=) 4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=) 5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:02:2b:bd:1d:86:ba:00:de:51:7c:1b:23:2f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=108bcb7d05e575bca7e638890a2c02c6ecc5801a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:bf:c6:be:6a:41:86:6e:99:00:42:7f:94: fc:72:d2:d4:ed:e7:93:fc:99:7b:ed:20:8f:03:a6: bb:8d:a1:cb:79:b1:ea:bc:0b:b8:85:d7:38:7e:77: 58:2d:2f:69:e8:5c:f3:57:0e:13:7f:b0:f0:12:5e: b8:e4:d7:36:6c:a1:0a:b3:4c:e4:b1:8c:12:d7:0d: aa:0f:1e:54:0d:ca:a2:0d:7d:82:49:ca:71:4b:71: 4e:63:58:2d:be:ca:26:0a:8b:82:46:f1:89:6b:a0: 90:aa:9c:4d:47:44:95:e2:77:a1:0b:df:a3:a6:40: bd:99:f5:31:f3:6f:39:1d:7f:3a:37:b2:0d:6b:32: 88:59:06:cd:41:13:2b:e6:51:d2:6e:5e:fd:93:81: ca:0e:3f:c3:a7:7d:64:25:18:24:b0:8b:8f:55:0e: 05:fe:65:35:54:46:18:d2:0e:16:e6:f9:0a:4f:8a: da:58:8c:16:56:13:a7:8e:b9:87:82:67:01:eb:8b: 60:ac:5d:cc:34:4f:e3:7f:91:67:52:ec:0a:0f:97: c5:5e:36:51:0a:c9:6b:e6:1a:fb:a7:93:8f:2f:66: df:71:81:78:6f:04:a4:82:c7:3c:84:3a:b3:df:48: e5:5e:72:7b:12:d3:2d:d0:db:17:2b:e2:9d:d3:f5: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:CB:7D:05:E5:75:BC:A7:E6:38:89:0A:2C:02:C6:EC:C5:80:1A X509v3 Authority Key Identifier: keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:4b:bd:3c:c3:c6:47:1b:a7:d8:d8:c4:c9:a7:08:0d:a2: 81:20:4f:d8:26:94:8e:4d:89:ac:46:cb:2f:d6:49:75:35:7e: fd:06:51:70:95:a9:d8:f2:1a:d0:ef:f3:bd:d2:b8:0d:63:db: 03:70:56:13:f6:d3:e8:a6:b4:1d:85:33:f9:58:8c:be:a6:f3: 13:b4:72:72:d2:a4:61:0c:05:0b:89:bd:0b:f5:d3:d1:17:98: 8c:8a:7e:06:e4:ae:ff:a4:e7:75:0a:34:59:94:c7:51:4b:3b: 43:5d:55:7e:34:30:d9:8b:ab:8c:b4:c2:5c:fb:a1:2b:24:e2: cc:3f:87:6e:14:89:9f:05:b3:99:60:6c:84:93:b6:84:c7:10: cd:20:73:c3:6a:3c:2b:29:e3:02:d4:fb:4c:d5:71:d9:11:2a: f5:56:f8:cc:32:7c:51:ed:e4:98:69:9c:1a:b1:d9:0e:21:b7: 21:4f:58:42:b8:84:38:ea:7f:79:63:63:85:03:ff:1f:5d:67: 90:e8:22:b8:0f:73:09:5c:08:99:55:67:6c:d0:a3:a9:35:66: 72:69:09:0b:df:ba:46:30:49:58:57:d1:ea:9c:26:f4:58:f8: 43:5a:d2:e5:64:c5:89:e3:4b:d4:84:5b:f5:11:1e:e5:48:42: 2a:c2:58:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gIrvR2GugDeUXwbIy+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3 MTFlMWUwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EygxMDhiY2I3ZDA1ZTU3NWJjYTdlNjM4ODkwYTJjMDJjNmVjYzU4MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpq/xr5qQYZumQBCf5T8ctLU7eeT /Jl77SCPA6a7jaHLebHqvAu4hdc4fndYLS9p6FzzVw4Tf7DwEl645Nc2bKEKs0zk sYwS1w2qDx5UDcqiDX2CScpxS3FOY1gtvsomCouCRvGJa6CQqpxNR0SV4nehC9+j pkC9mfUx8285HX86N7INazKIWQbNQRMr5lHSbl79k4HKDj/Dp31kJRgksIuPVQ4F /mU1VEYY0g4W5vkKT4raWIwWVhOnjrmHgmcB64tgrF3MNE/jf5FnUuwKD5fFXjZR Cslr5hr7p5OPL2bfcYF4bwSkgsc8hDqz30jlXnJ7EtMt0NsXK+Kd0/UPKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCLy30F5XW8p+Y4iQosAsbsxYAaMB8GA1UdIwQY MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct NTI4YTYzYmU0Yzg3LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3 LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR79LvTzD xkcbp9jYxMmnCA2igSBP2CaUjk2JrEbLL9ZJdTV+/QZRcJWp2PIa0O/zvdK4DWPb A3BWE/bT6Ka0HYUz+ViMvqbzE7RyctKkYQwFC4m9C/XT0ReYjIp+BuSu/6TndQo0 WZTHUUs7Q11VfjQw2YurjLTCXPuhKyTizD+HbhSJnwWzmWBshJO2hMcQzSBzw2o8 KynjAtT7TNVx2REq9Vb4zDJ8Ue3kmGmcGrHZDiG3IU9YQriEOOp/eWNjhQP/H11n kOgiuA9zCVwImVVnbNCjqTVmcmkJC9+6RjBJWFfR6pwm9Fj4Q1rS5WTFieNL1IRb 9REe5UhCKsJY3A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:31 2025 by rpki-client