This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json) Hash identifier: pWjyVOMZ1O873mO188OOmyMgthjmvZ0hMULlXIiuAGI= Subject key identifier: 25:40:D7:F2:A9:41:3B:49:9B:76:6B:4F:78:94:60:8A:5B:FF:0F:38 Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729 Certificate serial: 019B32316D90EC9DB17487B78DBE42406793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 16:00:58 +0000 Manifest this update: Thu 18 Dec 2025 16:00:58 +0000 Manifest next update: Fri 19 Dec 2025 16:00:58 +0000 Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=) 2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: a59Mzp1ArXO+ZX+pvpJ/vvp78xckelkEMLeOce+V5+4=) 3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:6d:90:ec:9d:b1:74:87:b7:8d:be:42:40:67:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729 Validity Not Before: Dec 18 16:00:58 2025 GMT Not After : Dec 19 16:00:58 2025 GMT Subject: CN=2540d7f2a9413b499b766b4f7894608a5bff0f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:54:73:8f:95:4c:c3:27:1d:1f:0d:27:81: 85:e9:41:5e:ae:ac:a7:e5:85:49:06:e8:79:fb:f8: 2d:3f:5e:5e:ee:fd:e2:94:23:b7:92:37:b4:b4:ea: 60:40:51:bc:81:79:c1:a1:14:88:97:5a:69:36:fe: 20:3c:99:7b:ab:db:4d:79:5a:62:53:69:c9:18:e9: d3:31:be:12:e4:07:a2:f6:7f:6d:c4:01:51:d0:b8: 99:78:7c:d8:a6:04:1c:4b:98:09:47:ad:55:3c:16: 04:37:ea:61:8b:65:03:20:8b:5f:f6:5f:5d:1c:f4: 9b:1d:d4:dd:7c:23:e3:a6:44:0f:47:63:a0:17:a0: d4:bd:92:4b:36:05:ad:c2:a8:e0:36:c2:2e:17:a0: 54:62:fe:41:8f:44:83:10:92:d6:8b:48:bc:19:4f: 1d:7e:85:1b:5e:15:0e:68:85:f4:a6:fc:a3:11:c0: a1:12:26:3a:a4:f1:37:47:fe:7e:50:b8:c7:7e:9d: 4c:dd:ec:b6:60:ba:dd:04:30:b6:2c:ec:29:49:9e: 65:63:eb:e9:77:6e:97:32:8b:90:ff:d4:83:f0:cf: be:48:74:e6:ee:6d:f6:00:67:55:dd:0c:85:f4:0b: 14:84:cf:82:f8:20:a2:a0:d5:c4:d4:37:e3:fb:35: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:D7:F2:A9:41:3B:49:9B:76:6B:4F:78:94:60:8A:5B:FF:0F:38 X509v3 Authority Key Identifier: keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:10:f2:2c:d8:0e:37:12:62:75:89:f4:df:ca:56:e0:67:4a: 4f:8b:75:9b:8c:c6:6e:29:08:2f:e8:93:f7:94:b9:d4:7b:52: 0a:ed:90:70:c1:4a:f3:d2:7c:7a:e8:e8:12:b5:d2:68:93:6d: 1d:63:5e:b4:9e:c9:40:0f:de:2e:b0:4b:6c:13:5b:a9:52:4f: 9b:b3:d4:d6:f9:e2:44:d7:45:ee:4b:3f:e1:b6:e5:0d:45:d7: 8f:55:a8:6d:05:a5:2c:25:2f:12:a8:ee:0a:26:56:b3:7e:7f: f0:c5:c7:80:cb:6f:23:5f:8e:e9:7e:10:ed:e4:db:3e:58:47: 6a:59:ca:61:a1:62:78:ab:ce:06:18:ff:2a:d8:7e:41:15:2e: 1a:f7:a7:28:8d:2f:58:ae:4f:bb:6a:44:52:bd:23:b2:09:c9: c4:eb:16:5a:87:33:d2:f5:f8:6a:df:f5:e8:7d:2d:2b:1e:f4: 99:d7:b2:44:5d:2c:10:db:4b:74:b5:54:b9:b9:5b:53:b7:69: e9:29:1b:dc:3b:79:a5:ca:44:43:ee:69:4e:f6:b0:cd:8d:85: 38:31:17:9d:ed:83:64:f7:27:38:f8:3d:c7:62:ea:2c:b2:16: 4b:83:be:99:a7:b0:31:88:f4:e7:3c:10:ef:d3:a2:05:d3:93: 7b:ab:94:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMW2Q7J2xdIe3jb5CQGeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY2NDZjOTNjMjk3NDc4OWVjZWY3YjQ0NDY1NmVlNjQx NjE3MjkwHhcNMjUxMjE4MTYwMDU4WhcNMjUxMjE5MTYwMDU4WjAzMTEwLwYDVQQD EygyNTQwZDdmMmE5NDEzYjQ5OWI3NjZiNGY3ODk0NjA4YTViZmYwZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL5Uc4+VTMMnHR8NJ4GF6UFerqyn 5YVJBuh5+/gtP15e7v3ilCO3kje0tOpgQFG8gXnBoRSIl1ppNv4gPJl7q9tNeVpi U2nJGOnTMb4S5Aei9n9txAFR0LiZeHzYpgQcS5gJR61VPBYEN+phi2UDIItf9l9d HPSbHdTdfCPjpkQPR2OgF6DUvZJLNgWtwqjgNsIuF6BUYv5Bj0SDEJLWi0i8GU8d foUbXhUOaIX0pvyjEcChEiY6pPE3R/5+ULjHfp1M3ey2YLrdBDC2LOwpSZ5lY+vp d26XMouQ/9SD8M++SHTm7m32AGdV3QyF9AsUhM+C+CCioNXE1Dfj+zXnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVA1/KpQTtJm3ZrT3iUYIpb/w84MB8GA1UdIwQY MBaAFE/WZGyTwpdHiezve0RGVu5kFhcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEt NzZhNTM4NWM1MTVhLzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEtNzZhNTM4NWM1MTVh LzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxDyLNgO NxJidYn038pW4GdKT4t1m4zGbikIL+iT95S51HtSCu2QcMFK89J8eujoErXSaJNt HWNetJ7JQA/eLrBLbBNbqVJPm7PU1vniRNdF7ks/4bblDUXXj1WobQWlLCUvEqju CiZWs35/8MXHgMtvI1+O6X4Q7eTbPlhHalnKYaFieKvOBhj/Kth+QRUuGvenKI0v WK5Pu2pEUr0jsgnJxOsWWocz0vX4at/16H0tKx70mdeyRF0sENtLdLVUublbU7dp 6Skb3Dt5pcpEQ+5pTvawzY2FODEXne2DZPcnOPg9x2LqLLIWS4O+maewMYj05zwQ 79OiBdOTe6uUzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:23:00 2025 by rpki-client