This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json) Hash identifier: 8sHxrgBqBIS/P82t68wmI2spqn73wgdhsrHbhU3yqbo= Subject key identifier: 53:89:CA:A9:62:05:61:C0:33:09:07:91:6C:C9:AB:14:DD:B3:3A:56 Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Certificate serial: 019AF31D0E242C6126D776FCCE43D94F1172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft Manifest number: 0322 Signing time: Sat 06 Dec 2025 10:02:38 +0000 Manifest this update: Sat 06 Dec 2025 10:02:38 +0000 Manifest next update: Sun 07 Dec 2025 10:02:38 +0000 Files and hashes: 1: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (hash: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=) 2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: xhdA6Vg/ZY/Rw/Km0391n04WKeOP4M7H5jBctQrgK2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:0e:24:2c:61:26:d7:76:fc:ce:43:d9:4f:11:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Validity Not Before: Dec 6 10:02:38 2025 GMT Not After : Dec 7 10:02:38 2025 GMT Subject: CN=5389caa9620561c0330907916cc9ab14ddb33a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:e2:f2:b7:2e:14:84:4c:d4:de:73:59:be: 47:cb:be:b5:59:83:93:13:ca:d3:7e:62:15:ac:78: 2c:eb:57:a1:f8:2a:30:11:4b:db:98:93:4d:27:ba: f0:f3:f8:24:32:6a:f8:dd:78:92:6e:04:a5:50:d7: 2a:99:f2:16:84:56:e3:b6:f0:da:7f:70:3c:db:84: 7b:35:f5:23:cd:90:56:1f:2b:71:73:3c:f3:e8:b9: c5:ae:10:21:d2:8e:9c:0c:db:63:2f:a6:10:9a:b3: 0e:96:02:de:62:bb:84:4c:d6:1a:8c:b4:58:f2:75: 30:5e:64:5a:a4:ed:28:1d:99:c4:2e:cb:7b:54:d1: 69:ef:9b:c5:f9:cc:03:c6:72:45:86:67:72:36:c6: 36:e7:8b:89:6d:69:1b:cb:65:7e:dd:c3:d2:d7:80: ae:2e:76:f8:d0:fb:62:50:a9:3a:c8:c0:4b:55:c4: 53:a5:05:32:f1:5f:84:9e:8f:c8:30:9a:70:ef:d9: 09:3f:3d:93:29:e7:0e:58:eb:3d:ef:8f:dd:0d:95: 86:d5:40:99:37:c9:74:e8:0a:b0:d0:7b:bc:15:69: fb:f1:43:80:65:03:31:a6:ec:89:5d:86:a5:aa:18: 62:58:49:15:dd:72:39:c6:e8:4b:ec:36:59:ff:69: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:CA:A9:62:05:61:C0:33:09:07:91:6C:C9:AB:14:DD:B3:3A:56 X509v3 Authority Key Identifier: keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:1f:4a:c8:68:6d:27:51:f9:70:84:df:3c:30:91:18:55: 79:db:10:44:d8:4c:c6:68:1d:e0:33:f6:c2:73:38:c4:62:04: 0c:95:e4:9a:f1:f8:72:71:d2:24:ef:53:9d:c7:5d:81:70:2e: cf:09:67:cc:1a:d7:7f:51:61:78:d5:d0:f8:90:8c:db:19:54: c7:ce:13:12:b2:f3:9b:79:37:b1:f9:ee:29:9a:08:88:eb:a9: 69:7a:69:37:38:28:35:a3:ba:fb:f1:ca:c6:30:61:bb:ab:38: e3:94:bc:b1:17:e7:26:8c:75:07:25:23:50:c7:80:9e:78:77: 39:2e:8c:b3:6e:09:20:96:38:eb:85:c5:07:4e:0b:7c:98:45: c1:5a:e9:99:3b:eb:02:46:e3:64:d3:b6:c6:27:be:92:53:80: 3f:e7:1d:8e:d2:21:19:5a:7d:f9:81:c3:f8:fb:c4:c2:b7:c0: da:17:5d:47:89:03:22:32:ca:97:23:6f:5f:ff:5f:24:e5:70: c6:32:ae:58:02:39:5d:81:45:ba:5d:aa:17:42:25:fd:da:21: 0a:c4:4d:e1:3b:14:d9:24:6d:71:80:14:79:c5:41:c4:71:e0: 7f:04:38:7c:0e:c8:19:03:d3:a5:80:c7:1a:bf:93:b7:c4:22: 66:6b:e0:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQ4kLGEm13b8zkPZTxFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDAxZGMxM2U1MGU5Y2MzZDQyZDkxM2VhNjViMTU1NGM5 NWE1NDgwHhcNMjUxMjA2MTAwMjM4WhcNMjUxMjA3MTAwMjM4WjAzMTEwLwYDVQQD Eyg1Mzg5Y2FhOTYyMDU2MWMwMzMwOTA3OTE2Y2M5YWIxNGRkYjMzYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpTi8rcuFIRM1N5zWb5Hy761WYOT E8rTfmIVrHgs61eh+CowEUvbmJNNJ7rw8/gkMmr43XiSbgSlUNcqmfIWhFbjtvDa f3A824R7NfUjzZBWHytxczzz6LnFrhAh0o6cDNtjL6YQmrMOlgLeYruETNYajLRY 8nUwXmRapO0oHZnELst7VNFp75vF+cwDxnJFhmdyNsY254uJbWkby2V+3cPS14Cu Lnb40PtiUKk6yMBLVcRTpQUy8V+Eno/IMJpw79kJPz2TKecOWOs974/dDZWG1UCZ N8l06Aqw0Hu8FWn78UOAZQMxpuyJXYalqhhiWEkV3XI5xuhL7DZZ/2ntkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOJyqliBWHAMwkHkWzJqxTdszpWMB8GA1UdIwQY MBaAFE9AHcE+UOnMPULZE+plsVVMlaVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4Njkt M2EwNWJiNzUzMGM2LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4NjktM2EwNWJiNzUzMGM2 LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVofSsho bSdR+XCE3zwwkRhVedsQRNhMxmgd4DP2wnM4xGIEDJXkmvH4cnHSJO9TncddgXAu zwlnzBrXf1FheNXQ+JCM2xlUx84TErLzm3k3sfnuKZoIiOupaXppNzgoNaO6+/HK xjBhu6s445S8sRfnJox1ByUjUMeAnnh3OS6Ms24JIJY464XFB04LfJhFwVrpmTvr AkbjZNO2xie+klOAP+cdjtIhGVp9+YHD+PvEwrfA2hddR4kDIjLKlyNvX/9fJOVw xjKuWAI5XYFFul2qF0Il/dohCsRN4TsU2SRtcYAUecVBxHHgfwQ4fA7IGQPTpYDH Gr+Tt8QiZmvgYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:09:52 2025 by rpki-client