This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json) Hash identifier: Cd0CFcK2k9vLKuh3rC5NAQ7kPtsBRjfw358IOG0hHUs= Subject key identifier: A0:B2:C5:50:F5:97:2F:A1:34:0E:98:C2:7E:E3:96:B3:FC:D9:2C:55 Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Certificate serial: 019B45133532D4BAD5060148E1580B87AA21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft Manifest number: 067B Signing time: Mon 22 Dec 2025 08:00:45 +0000 Manifest this update: Mon 22 Dec 2025 08:00:45 +0000 Manifest next update: Tue 23 Dec 2025 08:00:45 +0000 Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: Q4UzO1Pv4UcWkaXErtuu7B2GMast+QbEGgR5Uwv62bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:35:32:d4:ba:d5:06:01:48:e1:58:0b:87:aa:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Validity Not Before: Dec 22 08:00:45 2025 GMT Not After : Dec 23 08:00:45 2025 GMT Subject: CN=a0b2c550f5972fa1340e98c27ee396b3fcd92c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:07:db:f0:36:6d:e6:eb:da:f6:8a:2c:a7: 28:90:11:f8:a1:ac:86:4a:db:73:b4:87:6f:42:f4: cf:e1:e9:7c:7e:95:fb:90:38:02:82:97:f0:b9:e6: 2b:69:32:69:33:fd:7a:fa:ff:69:31:37:ce:59:8f: 34:3c:10:16:42:21:c8:44:b4:a4:57:b6:b6:e1:61: e0:c8:fd:3e:e1:b3:06:33:95:df:62:03:68:5e:e1: bc:27:ba:07:96:d4:cb:0f:fc:85:66:89:4c:1c:33: 6d:5d:e4:db:d6:e8:0e:c8:af:99:7c:0d:bc:19:25: dd:9b:b9:f0:a2:30:90:b2:78:bc:78:d9:5f:76:29: 87:7b:07:ee:69:c6:67:5a:77:25:2b:b0:9a:62:48: cb:3d:d9:7c:5d:3b:2d:02:b5:9f:43:b2:a7:ab:d4: e6:5b:3a:6f:11:41:88:7c:10:fb:db:50:80:99:eb: 91:76:79:9b:9c:dd:50:90:96:f5:4e:d0:cc:84:18: 35:2a:df:2a:1a:fd:51:05:6c:73:06:c6:b9:40:84: 6a:c4:cd:a7:37:9c:fe:32:0d:a0:d9:c3:b1:7f:b6: 6a:33:ac:20:84:bc:27:05:7d:81:c3:52:1c:4e:05: 9d:10:67:0a:6d:c1:46:5b:3a:cb:86:e2:bd:29:5f: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:C5:50:F5:97:2F:A1:34:0E:98:C2:7E:E3:96:B3:FC:D9:2C:55 X509v3 Authority Key Identifier: keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c1:19:2d:02:13:65:95:58:6c:72:d0:d6:f4:c1:1f:6e:98: 85:8d:24:0e:b5:8c:ef:0e:b4:b2:58:05:6f:43:9d:3c:40:1d: ff:0e:9a:f0:27:7a:11:83:1b:e1:76:19:b1:85:ff:90:bb:94: 15:50:84:ec:41:8c:16:fa:83:66:a8:76:35:67:27:7b:e3:2b: 47:26:91:b3:01:4e:33:59:d9:68:97:5f:b9:13:da:ae:40:47: 93:c6:66:c2:a7:12:2c:d4:e2:6b:54:11:49:82:ad:dd:81:68: 3a:33:33:2c:ff:74:dc:86:45:37:bd:a1:0f:76:d9:68:2a:e1: c0:37:07:3d:34:a5:54:f5:9a:eb:9a:59:fc:cc:11:47:1a:79: 7c:00:e3:7c:11:de:16:35:3e:8a:4e:00:b2:26:3e:93:e2:d5: 05:19:df:18:c7:c8:a4:dd:bd:f8:4a:d1:ad:ae:82:e6:b0:8a: 16:17:ae:8c:69:26:cc:ba:bb:3e:e2:fc:ec:3a:13:d8:88:a3: 30:49:8b:52:67:23:d0:62:71:7b:96:11:73:28:3c:00:6f:fd: 07:d8:0e:52:36:27:75:3e:3d:eb:c8:9e:9b:57:11:d4:52:bd: 30:c7:2a:46:2c:bc:e0:2e:d3:e4:34:9c:18:37:35:ef:8e:ca: 04:de:93:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEzUy1LrVBgFI4VgLh6ohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz NDYzZWMwHhcNMjUxMjIyMDgwMDQ1WhcNMjUxMjIzMDgwMDQ1WjAzMTEwLwYDVQQD EyhhMGIyYzU1MGY1OTcyZmExMzQwZTk4YzI3ZWUzOTZiM2ZjZDkyYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm4H2/A2bebr2vaKLKcokBH4oayG SttztIdvQvTP4el8fpX7kDgCgpfwueYraTJpM/16+v9pMTfOWY80PBAWQiHIRLSk V7a24WHgyP0+4bMGM5XfYgNoXuG8J7oHltTLD/yFZolMHDNtXeTb1ugOyK+ZfA28 GSXdm7nwojCQsni8eNlfdimHewfuacZnWnclK7CaYkjLPdl8XTstArWfQ7Knq9Tm WzpvEUGIfBD721CAmeuRdnmbnN1QkJb1TtDMhBg1Kt8qGv1RBWxzBsa5QIRqxM2n N5z+Mg2g2cOxf7ZqM6wghLwnBX2Bw1IcTgWdEGcKbcFGWzrLhuK9KV/eVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCyxVD1ly+hNA6Ywn7jlrP82SxVMB8GA1UdIwQY MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsEZLQIT ZZVYbHLQ1vTBH26YhY0kDrWM7w60slgFb0OdPEAd/w6a8Cd6EYMb4XYZsYX/kLuU FVCE7EGMFvqDZqh2NWcne+MrRyaRswFOM1nZaJdfuRParkBHk8ZmwqcSLNTia1QR SYKt3YFoOjMzLP903IZFN72hD3bZaCrhwDcHPTSlVPWa65pZ/MwRRxp5fADjfBHe FjU+ik4AsiY+k+LVBRnfGMfIpN29+ErRra6C5rCKFheujGkmzLq7PuL87DoT2Iij MEmLUmcj0GJxe5YRcyg8AG/9B9gOUjYndT4968iem1cR1FK9MMcqRiy84C7T5DSc GDc1747KBN6T8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:40 2025 by rpki-client