This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json) Hash identifier: jV0ySW9oss9v8J6dKGs6x3Un+uhC7FNnZ6mwNZETTVA= Subject key identifier: 8C:64:DC:5B:FE:D2:F1:84:C9:42:04:C9:C6:EC:EE:0B:B5:C5:2A:00 Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de Certificate serial: 019B2F67BC8348CC8DD849FFC4AC0977CA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft Manifest number: 16BF Signing time: Thu 18 Dec 2025 03:01:26 +0000 Manifest this update: Thu 18 Dec 2025 03:01:26 +0000 Manifest next update: Fri 19 Dec 2025 03:01:26 +0000 Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: zcTJ8J25KWOBLON2D0/xH1T1q7k+P9aJkgT2KzNQW7E=) 2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:bc:83:48:cc:8d:d8:49:ff:c4:ac:09:77:ca:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de Validity Not Before: Dec 18 03:01:26 2025 GMT Not After : Dec 19 03:01:26 2025 GMT Subject: CN=8c64dc5bfed2f184c94204c9c6ecee0bb5c52a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:13:80:17:a5:d4:3f:d8:e8:ac:e6:68:9e: b3:48:6e:02:0b:d5:a0:39:82:fa:1a:ca:f7:b0:0c: 24:13:22:3f:3f:4f:86:14:1c:e4:ea:d5:24:1f:07: bf:e0:69:01:9b:2d:58:a1:69:9a:45:04:36:9a:ca: 94:c1:db:cd:a9:d3:db:87:05:56:38:70:01:44:5a: db:89:62:50:51:a2:53:bd:5a:b4:f3:79:ce:31:db: ab:c5:1f:da:99:77:23:6c:8a:f1:37:8a:2c:51:9b: 32:f8:b7:de:ec:4e:cb:ab:f2:4e:b6:8f:42:fc:3c: 4c:3f:80:5c:7a:a9:8e:be:56:4e:fd:f8:a1:7c:44: fa:61:bf:51:38:3e:91:0a:bb:fa:81:99:bd:d9:6d: 63:01:94:ce:d3:85:d4:e8:1a:74:8f:fb:51:9b:f1: 72:f4:75:44:57:67:d0:9e:29:c7:4a:0d:33:2f:9e: a2:35:6c:ad:b1:79:83:02:10:2b:34:36:09:b9:77: 85:a5:45:14:1a:22:de:20:93:09:39:80:7b:c9:5a: 97:9e:2b:e6:f4:64:a3:76:f2:88:2d:39:e5:de:78: 0a:09:20:95:4d:47:07:3e:3d:47:f3:69:37:0f:32: b7:ec:ff:68:a2:e0:98:5f:8b:d1:3f:c4:0d:97:81: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:DC:5B:FE:D2:F1:84:C9:42:04:C9:C6:EC:EE:0B:B5:C5:2A:00 X509v3 Authority Key Identifier: keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e8:38:8a:dc:af:85:d4:74:55:fa:f0:d8:0c:41:07:f6:7d: 41:80:42:05:d3:a1:12:83:70:1f:bc:9a:d6:2f:ed:79:4a:c4: d4:7c:b7:fc:6b:66:5b:e1:a3:b2:98:f9:2b:fc:eb:74:06:4a: 28:c6:2d:9a:3c:ae:77:25:64:4d:70:02:2b:b3:08:1a:0f:00: 57:f2:3f:7a:7c:48:11:ed:75:f3:d2:9c:a2:5b:7a:98:20:cb: 06:6d:e7:27:35:06:c8:29:25:eb:09:2a:82:f5:25:00:c5:80: 5d:5a:d6:10:ca:47:03:5e:b2:0a:dd:ea:d3:2b:c3:be:d7:95: bf:e5:3b:76:e8:1b:a1:04:8f:87:33:0a:82:10:9e:d1:af:e0: c4:f5:e7:9a:66:b4:0d:c1:81:29:6a:57:6f:23:af:5a:1e:0b: f3:62:c2:a6:83:d0:80:ec:3c:62:51:d4:0c:8f:13:e3:af:bc: 9d:09:01:fb:55:c1:e8:b8:cf:fb:15:8e:a7:eb:74:94:74:bc: fc:3f:d7:e5:87:2f:7f:b0:45:73:11:db:58:c6:f1:39:a1:09: 77:9e:65:3b:29:48:f7:40:b0:c6:67:f9:c6:98:86:d2:c8:5d: 94:9f:d2:f2:e9:37:bb:4e:92:1c:95:a3:9c:89:f6:58:6f:82: e6:5b:49:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7yDSMyN2En/xKwJd8oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODA0NWNjZjUwOTc3ZWJjMzA2NmEzY2VlZDhmZDMyZjFm MDIzZGUwHhcNMjUxMjE4MDMwMTI2WhcNMjUxMjE5MDMwMTI2WjAzMTEwLwYDVQQD Eyg4YzY0ZGM1YmZlZDJmMTg0Yzk0MjA0YzljNmVjZWUwYmI1YzUyYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCATgBel1D/Y6KzmaJ6zSG4CC9Wg OYL6Gsr3sAwkEyI/P0+GFBzk6tUkHwe/4GkBmy1YoWmaRQQ2msqUwdvNqdPbhwVW OHABRFrbiWJQUaJTvVq083nOMdurxR/amXcjbIrxN4osUZsy+Lfe7E7Lq/JOto9C /DxMP4BceqmOvlZO/fihfET6Yb9ROD6RCrv6gZm92W1jAZTO04XU6Bp0j/tRm/Fy 9HVEV2fQninHSg0zL56iNWytsXmDAhArNDYJuXeFpUUUGiLeIJMJOYB7yVqXnivm 9GSjdvKILTnl3ngKCSCVTUcHPj1H82k3DzK37P9oouCYX4vRP8QNl4FsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxk3Fv+0vGEyUIEycbs7gu1xSoAMB8GA1UdIwQY MBaAFE+ARcz1CXfrwwZqPO7Y/TLx8CPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYt NDBjODY5N2JiZGU5LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYtNDBjODY5N2JiZGU5 LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+g4ityv hdR0Vfrw2AxBB/Z9QYBCBdOhEoNwH7ya1i/teUrE1Hy3/GtmW+Gjspj5K/zrdAZK KMYtmjyudyVkTXACK7MIGg8AV/I/enxIEe1189Kcolt6mCDLBm3nJzUGyCkl6wkq gvUlAMWAXVrWEMpHA16yCt3q0yvDvteVv+U7dugboQSPhzMKghCe0a/gxPXnmma0 DcGBKWpXbyOvWh4L82LCpoPQgOw8YlHUDI8T46+8nQkB+1XB6LjP+xWOp+t0lHS8 /D/X5Ycvf7BFcxHbWMbxOaEJd55lOylI90Cwxmf5xpiG0shdlJ/S8uk3u06SHJWj nIn2WG+C5ltJkw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:02 2025 by rpki-client