This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft File: T7murXluvL6SUPqiksQOioWIx50.mft (raw, json) Hash identifier: 5Vxk1XiX43Z4UDgGd5jhB+ZZrdkKAmbitsys0tPc0KQ= Subject key identifier: 48:12:8D:1D:A6:39:AA:17:A7:A8:2D:24:77:51:AF:F1:6D:F6:D0:BC Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D Certificate issuer: /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d Certificate serial: 019B34C55223170CF45E57370336DCF71571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft Manifest number: 1268 Signing time: Fri 19 Dec 2025 04:01:45 +0000 Manifest this update: Fri 19 Dec 2025 04:01:45 +0000 Manifest next update: Sat 20 Dec 2025 04:01:45 +0000 Files and hashes: 1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: ZlOU+AgvkP0I9sZQmbD7MlGas1i33gsvQ0MAFU0Pjmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:52:23:17:0c:f4:5e:57:37:03:36:dc:f7:15:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d Validity Not Before: Dec 19 04:01:45 2025 GMT Not After : Dec 20 04:01:45 2025 GMT Subject: CN=48128d1da639aa17a7a82d247751aff16df6d0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:7f:0e:c3:b9:6b:c5:61:64:20:e9:ec:bf: ec:dc:c7:ce:c4:42:97:5e:fa:2c:d8:83:03:e3:c0: 5f:be:40:19:e4:a4:9e:2e:53:28:3b:45:28:7a:63: 68:b7:8e:a6:3f:bb:71:9d:b6:0e:c2:69:50:8b:21: 92:9a:f7:ef:66:64:0c:1d:a0:da:43:4b:35:ba:df: 95:fb:73:a1:c2:53:0e:c2:63:1a:44:07:36:d3:84: 0a:d0:22:e3:68:89:6b:92:a0:be:28:10:f6:ef:e7: 83:d7:86:a2:e8:19:b2:1e:c8:45:84:e7:55:6e:c9: f4:0c:ba:af:9c:5a:e3:e1:c6:01:e9:bc:a2:4e:8d: d5:6a:5c:6c:dc:a6:73:ca:53:f4:9d:ee:73:31:f2: a3:6e:b3:04:22:20:a5:4f:2a:af:e4:b4:13:e2:45: 05:3e:b9:c3:57:96:73:33:26:65:99:27:7d:11:31: 9c:44:67:b0:93:23:29:20:52:3a:b9:52:7f:8f:50: 63:f3:f4:c4:13:a5:66:d3:69:26:98:08:43:61:91: a2:85:5b:84:fd:be:6a:30:71:f7:08:75:a9:77:90: 69:be:13:8e:2a:bd:b1:43:ce:ab:2c:8b:c5:bc:ec: c1:6e:2b:b1:b9:94:9a:f7:63:e0:2c:63:4a:ec:ce: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:12:8D:1D:A6:39:AA:17:A7:A8:2D:24:77:51:AF:F1:6D:F6:D0:BC X509v3 Authority Key Identifier: keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f3:dd:7a:1f:9f:86:f5:3c:a8:e6:28:54:5a:06:ed:14:8b: 54:0d:e4:f6:65:f9:2e:a5:0b:28:2a:c5:5d:ce:51:f4:00:41: 76:90:9b:8f:10:e5:37:90:2b:39:18:e2:1e:2e:cb:6b:bd:ef: ee:28:aa:aa:26:3f:15:34:ba:2d:5f:58:c3:0d:2b:04:bd:6e: 68:1d:da:7e:ee:a9:3e:f7:9e:cb:8b:38:fe:90:ab:ae:f8:c8: 2e:68:e7:b1:50:86:28:3e:49:2d:22:a4:04:cc:62:a1:40:87: 85:40:00:61:01:96:85:5f:c6:a1:a6:21:f6:52:ee:f5:68:6a: ce:4a:fb:76:d0:8b:60:bb:31:66:09:7a:cc:90:97:61:82:aa: a4:ed:5f:1f:a5:72:58:25:7f:64:db:61:35:14:19:fd:d6:6e: 59:1d:57:41:53:c4:03:91:98:7b:9d:b2:a4:ca:51:d8:2e:c0: 1b:19:f6:16:af:3a:38:8a:f1:a6:05:2a:0c:73:49:7c:9f:92: 22:f3:f4:de:6f:cd:6e:21:6a:cd:81:5f:ce:8e:d8:52:d6:6c: f6:68:88:90:dc:2d:f4:50:fa:76:e6:ec:03:2f:42:24:e0:dd: 9c:44:33:19:03:d7:5b:50:6c:89:6a:73:b8:46:20:1d:73:32: 85:e7:be:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xVIjFwz0Xlc3Azbc9xVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjlhZWFkNzk2ZWJjYmU5MjUwZmFhMjkyYzQwZThhODU4 OGM3OWQwHhcNMjUxMjE5MDQwMTQ1WhcNMjUxMjIwMDQwMTQ1WjAzMTEwLwYDVQQD Eyg0ODEyOGQxZGE2MzlhYTE3YTdhODJkMjQ3NzUxYWZmMTZkZjZkMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9t/DsO5a8VhZCDp7L/s3MfOxEKX Xvos2IMD48BfvkAZ5KSeLlMoO0UoemNot46mP7txnbYOwmlQiyGSmvfvZmQMHaDa Q0s1ut+V+3OhwlMOwmMaRAc204QK0CLjaIlrkqC+KBD27+eD14ai6BmyHshFhOdV bsn0DLqvnFrj4cYB6byiTo3Valxs3KZzylP0ne5zMfKjbrMEIiClTyqv5LQT4kUF PrnDV5ZzMyZlmSd9ETGcRGewkyMpIFI6uVJ/j1Bj8/TEE6Vm02kmmAhDYZGihVuE /b5qMHH3CHWpd5BpvhOOKr2xQ86rLIvFvOzBbiuxuZSa92PgLGNK7M5ilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgSjR2mOaoXp6gtJHdRr/Ft9tC8MB8GA1UdIwQY MBaAFE+5rq15bry+klD6opLEDoqFiMedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5Mjct NzZhOTEwOWE2MmU3LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5MjctNzZhOTEwOWE2MmU3 LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvPdeh+f hvU8qOYoVFoG7RSLVA3k9mX5LqULKCrFXc5R9ABBdpCbjxDlN5ArORjiHi7La73v 7iiqqiY/FTS6LV9Yww0rBL1uaB3afu6pPveey4s4/pCrrvjILmjnsVCGKD5JLSKk BMxioUCHhUAAYQGWhV/GoaYh9lLu9Whqzkr7dtCLYLsxZgl6zJCXYYKqpO1fH6Vy WCV/ZNthNRQZ/dZuWR1XQVPEA5GYe52ypMpR2C7AGxn2Fq86OIrxpgUqDHNJfJ+S IvP03m/NbiFqzYFfzo7YUtZs9miIkNwt9FD6dubsAy9CJODdnEQzGQPXW1BsiWpz uEYgHXMyhee+pw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:23 2025 by rpki-client