This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json) Hash identifier: 8kHhzR72F5ARc1cvswgKLxtD847slpt2w2oW2YC5QWk= Subject key identifier: CB:17:CF:8B:DF:75:7E:3D:D7:81:20:75:42:A9:C3:6A:38:6B:B5:F3 Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Certificate serial: 019B2C662E79D1B34E83C441E0ECB3386A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft Manifest number: 10A9 Signing time: Wed 17 Dec 2025 13:00:52 +0000 Manifest this update: Wed 17 Dec 2025 13:00:52 +0000 Manifest next update: Thu 18 Dec 2025 13:00:52 +0000 Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=) 2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: 9I7PGG9Y1oeBQFcm7Zsx5s3mWr1mDtyf555lJfFMgYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:2e:79:d1:b3:4e:83:c4:41:e0:ec:b3:38:6a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Validity Not Before: Dec 17 13:00:52 2025 GMT Not After : Dec 18 13:00:52 2025 GMT Subject: CN=cb17cf8bdf757e3dd781207542a9c36a386bb5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:df:69:cb:70:6b:4b:58:29:08:7c:51:87: f5:32:98:a1:52:7e:70:c2:e2:57:92:57:62:9e:2c: 21:71:cf:9b:7e:9a:d0:3a:ca:2b:4d:17:0c:42:c0: fb:b9:ef:4f:26:6e:7f:0b:60:43:10:f0:0f:cf:10: 7b:78:61:96:68:a2:98:4d:5a:a5:c3:e5:7d:0f:11: 9a:cf:ea:71:50:9e:4d:3b:37:98:05:75:14:fd:03: 3c:ad:f2:95:cc:94:e8:aa:2a:7d:fc:40:4b:3e:78: 11:46:25:72:12:a4:67:7c:a0:17:d8:5d:1d:9d:86: ed:8e:4d:4f:42:e1:08:07:c0:c8:22:c2:1e:40:5e: e6:64:40:65:34:04:43:2b:02:e3:59:41:c8:af:91: 03:2f:12:e9:e6:bf:dd:98:24:08:c4:66:7f:2e:7a: 22:83:57:81:a0:2b:26:ac:0a:8c:0d:86:84:d8:cf: 52:0a:b5:3d:9a:40:cf:9f:98:42:03:64:d4:74:ae: b8:98:36:50:b3:7e:e7:d9:df:0b:16:fe:99:01:4e: d3:70:70:3d:c3:83:e8:19:6b:51:ef:07:48:46:e6: 68:f9:27:38:c6:3e:05:7c:22:99:1f:eb:28:23:fc: ea:2b:60:3e:11:89:c0:e1:ee:08:7d:3a:8d:7b:7c: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:17:CF:8B:DF:75:7E:3D:D7:81:20:75:42:A9:C3:6A:38:6B:B5:F3 X509v3 Authority Key Identifier: keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:25:ff:a7:6f:60:88:c0:98:41:fa:35:04:de:cd:75:91:99: 84:a3:e3:19:9f:0e:21:b9:28:11:24:4a:3c:27:e7:98:d0:17: bb:e0:87:f7:f4:4a:07:8b:01:f3:ce:3f:c0:17:7c:f1:e1:ed: f3:66:53:71:4e:63:55:5c:1a:a2:0d:00:4a:85:93:3a:d4:2e: 5a:40:90:0f:4c:8f:80:1d:ef:8a:07:c9:82:8c:96:0d:d4:b9: cd:62:3c:9c:d8:b5:8d:40:2b:79:96:c0:11:f4:ae:78:d1:e9: 49:43:00:54:9b:ba:e2:3b:79:64:83:ab:c8:f1:71:40:f6:94: 97:8f:cb:f4:bc:fd:0e:ba:ca:c2:3f:5a:0f:c7:54:a5:22:6e: 46:41:bf:86:80:c5:ed:0c:58:16:90:7a:a8:ae:b0:12:36:de: 3f:32:cf:3e:ff:e3:60:67:4b:bf:1a:fe:fb:ea:ae:f0:02:9d: 75:ac:b4:d2:26:4a:86:96:f2:1f:14:20:84:3a:cb:ff:e3:51: dc:17:29:ab:35:4f:cc:f2:6b:f9:db:d0:38:12:1d:52:59:3c: c0:18:66:b4:19:9a:0f:c8:46:08:33:8b:2c:a5:0a:5a:31:69: 0a:5e:fc:4a:59:f5:6f:82:c1:3d:6d:f0:4a:b8:d2:91:b0:bc: b1:84:48:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZi550bNOg8RB4OyzOGozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0 ZjRkYzAwHhcNMjUxMjE3MTMwMDUyWhcNMjUxMjE4MTMwMDUyWjAzMTEwLwYDVQQD EyhjYjE3Y2Y4YmRmNzU3ZTNkZDc4MTIwNzU0MmE5YzM2YTM4NmJiNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjvfactwa0tYKQh8UYf1MpihUn5w wuJXkldiniwhcc+bfprQOsorTRcMQsD7ue9PJm5/C2BDEPAPzxB7eGGWaKKYTVql w+V9DxGaz+pxUJ5NOzeYBXUU/QM8rfKVzJToqip9/EBLPngRRiVyEqRnfKAX2F0d nYbtjk1PQuEIB8DIIsIeQF7mZEBlNARDKwLjWUHIr5EDLxLp5r/dmCQIxGZ/Lnoi g1eBoCsmrAqMDYaE2M9SCrU9mkDPn5hCA2TUdK64mDZQs37n2d8LFv6ZAU7TcHA9 w4PoGWtR7wdIRuZo+Sc4xj4FfCKZH+soI/zqK2A+EYnA4e4IfTqNe3yuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsXz4vfdX4914EgdUKpw2o4a7XzMB8GA1UdIwQY MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCX/p29g iMCYQfo1BN7NdZGZhKPjGZ8OIbkoESRKPCfnmNAXu+CH9/RKB4sB884/wBd88eHt 82ZTcU5jVVwaog0ASoWTOtQuWkCQD0yPgB3vigfJgoyWDdS5zWI8nNi1jUAreZbA EfSueNHpSUMAVJu64jt5ZIOryPFxQPaUl4/L9Lz9DrrKwj9aD8dUpSJuRkG/hoDF 7QxYFpB6qK6wEjbePzLPPv/jYGdLvxr+++qu8AKdday00iZKhpbyHxQghDrL/+NR 3BcpqzVPzPJr+dvQOBIdUlk8wBhmtBmaD8hGCDOLLKUKWjFpCl78Sln1b4LBPW3w SrjSkbC8sYRI7w== -----END CERTIFICATE-----Generated at Wed Dec 17 22:26:29 2025 by rpki-client