This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json) Hash identifier: fDRnV9jTc8KF4GwmQHkDvUZLMc1EP0k3ySMjo+OFarM= Subject key identifier: D6:06:A3:BC:BF:85:26:72:97:BC:3F:62:33:1C:8A:32:26:1E:E3:04 Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019B27E4B07999A93D6D4B912B93CACF44B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft Manifest number: 0C1A Signing time: Tue 16 Dec 2025 16:00:57 +0000 Manifest this update: Tue 16 Dec 2025 16:00:57 +0000 Manifest next update: Wed 17 Dec 2025 16:00:57 +0000 Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=) 2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: Z0EFDFWygwcxaI22DiYoiFojX8KHH82lEdLWKMW9FIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:b0:79:99:a9:3d:6d:4b:91:2b:93:ca:cf:44:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Dec 16 16:00:57 2025 GMT Not After : Dec 17 16:00:57 2025 GMT Subject: CN=d606a3bcbf85267297bc3f62331c8a32261ee304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:f5:9f:b4:b2:44:fd:e6:da:86:ac:dd:cf: 3e:d9:63:2b:fd:0f:d7:ec:4a:72:04:78:80:73:da: 23:ee:91:8e:f9:a0:64:9d:dc:dc:38:cf:22:cb:34: 93:e6:ca:26:80:bf:ea:77:36:31:d2:24:d8:1e:41: 28:8f:12:b0:00:6a:2c:8e:8f:fe:14:8a:f9:88:46: d7:19:96:e1:17:30:91:35:53:c2:d2:8b:b8:c0:d0: 18:2a:f5:06:3a:25:31:26:96:06:c4:ab:5f:af:94: f5:07:f0:ef:56:29:7c:ed:d7:5a:e1:5d:bd:91:c3: ca:fe:35:ae:56:f9:f8:46:32:e5:fc:ab:8d:f3:1e: 7c:9d:5a:0f:b5:6a:66:79:54:a9:6c:9f:83:eb:18: 05:51:16:ba:d8:e4:0f:e8:53:c4:c0:fc:77:2a:e0: 3c:6b:2f:4c:93:e7:e2:91:5a:15:9e:14:50:fd:1b: 23:8a:0a:90:8d:8b:11:c3:d6:40:94:e0:b9:cb:00: 0e:c4:6d:77:27:37:a6:dd:9c:b2:23:e6:14:c9:df: cc:55:c5:60:d2:a0:09:fc:cf:c0:d7:8b:cf:70:0d: 87:dd:20:26:54:d6:ca:bb:9b:31:74:c6:d8:39:a1: ca:1e:b2:28:2d:7a:26:0e:75:4f:5d:fa:bc:8a:20: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:06:A3:BC:BF:85:26:72:97:BC:3F:62:33:1C:8A:32:26:1E:E3:04 X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:0b:39:8f:82:72:5c:a3:6a:08:f2:83:59:ad:72:94:11:8c: e9:ee:97:ae:80:3b:ac:7f:46:7c:8b:34:60:f6:d7:7e:ce:dd: b8:69:e4:7d:dd:fb:9a:e3:98:dc:a4:8c:a1:79:a2:1d:3a:58: 36:7c:5f:ce:b1:4b:f3:05:4e:43:cb:04:0b:a3:4e:83:59:35: 61:b9:45:63:9c:a3:c7:96:b9:f2:06:35:7e:df:9a:39:2b:a7: d1:39:24:5c:95:a4:b2:5c:07:8a:37:db:fd:30:1f:02:0b:68: 2a:e1:43:ec:e0:73:b8:52:ec:8b:85:46:64:98:f3:89:6f:cf: 76:c8:8d:62:02:da:56:37:ad:36:8b:d5:40:a0:44:11:95:af: 96:03:9a:72:d6:8c:4b:28:49:e1:d9:20:08:e0:e9:8d:2e:76: 7f:e0:a5:e7:ac:db:12:27:33:a6:72:36:40:99:7b:99:6b:ee: e9:c6:e4:fa:c7:56:11:bb:6d:91:6e:41:e0:bc:6d:9e:33:8a: 5c:45:b4:c2:43:81:fc:ac:c7:ee:ae:ad:ec:12:13:56:e1:fa: c9:ab:a2:e3:c4:66:11:f6:59:a3:b0:cd:a5:80:e7:a5:42:9d: 36:1e:2e:03:a9:c1:1b:9d:e0:15:b8:68:e9:09:08:37:ff:75: de:d6:95:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5LB5mak9bUuRK5PKz0SxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjUxMjE2MTYwMDU3WhcNMjUxMjE3MTYwMDU3WjAzMTEwLwYDVQQD EyhkNjA2YTNiY2JmODUyNjcyOTdiYzNmNjIzMzFjOGEzMjI2MWVlMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ71n7SyRP3m2oas3c8+2WMr/Q/X 7EpyBHiAc9oj7pGO+aBkndzcOM8iyzST5somgL/qdzYx0iTYHkEojxKwAGosjo/+ FIr5iEbXGZbhFzCRNVPC0ou4wNAYKvUGOiUxJpYGxKtfr5T1B/DvVil87dda4V29 kcPK/jWuVvn4RjLl/KuN8x58nVoPtWpmeVSpbJ+D6xgFURa62OQP6FPEwPx3KuA8 ay9Mk+fikVoVnhRQ/RsjigqQjYsRw9ZAlOC5ywAOxG13Jzem3ZyyI+YUyd/MVcVg 0qAJ/M/A14vPcA2H3SAmVNbKu5sxdMbYOaHKHrIoLXomDnVPXfq8iiCMwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYGo7y/hSZyl7w/YjMcijImHuMEMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ws5j4Jy XKNqCPKDWa1ylBGM6e6XroA7rH9GfIs0YPbXfs7duGnkfd37muOY3KSMoXmiHTpY NnxfzrFL8wVOQ8sEC6NOg1k1YblFY5yjx5a58gY1ft+aOSun0TkkXJWkslwHijfb /TAfAgtoKuFD7OBzuFLsi4VGZJjziW/PdsiNYgLaVjetNovVQKBEEZWvlgOactaM SyhJ4dkgCODpjS52f+Cl56zbEiczpnI2QJl7mWvu6cbk+sdWEbttkW5B4LxtnjOK XEW0wkOB/KzH7q6t7BITVuH6yaui48RmEfZZo7DNpYDnpUKdNh4uA6nBG53gFbho 6QkIN/913taVbQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:30:43 2025 by rpki-client