This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json) Hash identifier: jTqoD/nGAFIZMEWIjyZY2im4MDZ83gNXTT7Lvh/x9Hw= Subject key identifier: 05:8F:9C:33:5A:2C:87:09:CC:92:61:C4:92:A1:BA:93:42:4E:9B:1E Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e Certificate serial: 019B2FD51B6B2CFDC0D1848EB26E283C7A96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft Manifest number: 0866 Signing time: Thu 18 Dec 2025 05:00:53 +0000 Manifest this update: Thu 18 Dec 2025 05:00:53 +0000 Manifest next update: Fri 19 Dec 2025 05:00:53 +0000 Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: nNex7SK5JVm81tzCs7mxuEvKODUUWXCuzUKp2jl35w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:1b:6b:2c:fd:c0:d1:84:8e:b2:6e:28:3c:7a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e Validity Not Before: Dec 18 05:00:53 2025 GMT Not After : Dec 19 05:00:53 2025 GMT Subject: CN=058f9c335a2c8709cc9261c492a1ba93424e9b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:35:39:b2:d5:5c:16:d1:27:da:5b:92:20: 5b:7c:0a:9b:57:e4:fa:5a:10:df:c5:2e:bc:71:6a: e2:75:31:28:b0:ce:ce:15:90:e6:20:17:2d:a2:03: 4c:a1:76:c2:5a:ce:8f:4f:54:e3:43:a0:da:c2:bb: a0:71:ce:d4:f7:10:6f:d4:c3:ef:dd:26:e2:c4:26: bc:92:4e:e5:93:f3:62:96:a9:cf:17:8b:cd:73:75: 1f:b1:12:51:2f:17:6f:1b:41:d1:51:3c:a7:e0:58: 05:49:bc:c5:4f:ec:57:35:df:0d:d6:e5:fe:b6:93: 69:ed:51:e7:f6:7b:f5:60:e9:cc:2f:0f:99:a6:22: 55:b0:f8:3a:17:d3:75:33:d7:15:98:3f:b1:da:ab: f6:5c:16:d8:45:26:6a:bb:7b:63:3e:96:5e:c9:3c: 59:6e:a6:c7:d2:fd:17:d0:be:ea:21:4d:54:a6:d2: 53:04:5d:21:ec:6f:1b:3f:00:ae:bc:bf:64:d2:c0: 10:99:90:05:12:19:34:ce:f6:f0:7c:17:d8:2b:a7: c4:9e:74:58:ec:68:44:b3:72:e4:47:3f:37:15:8e: 89:a4:12:64:41:b5:40:a2:e6:ae:14:d2:6a:40:77: cd:21:a1:fc:88:0d:07:25:a1:65:e2:ce:43:55:b0: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8F:9C:33:5A:2C:87:09:CC:92:61:C4:92:A1:BA:93:42:4E:9B:1E X509v3 Authority Key Identifier: keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5f:eb:73:5b:e7:fd:e1:79:4a:f5:7e:73:d6:f4:80:db:71: 11:bc:ca:78:4d:da:00:be:f1:f6:ba:e4:df:c4:46:f1:23:3c: 73:7c:44:78:23:a1:7f:f9:dc:e6:8c:0c:a4:72:13:a3:b6:ae: 27:cf:a4:18:17:3f:e4:e2:70:4a:d7:bb:24:f2:2f:d7:dc:7a: 88:e5:23:b6:93:3f:65:69:c3:62:ab:cd:d2:28:52:73:74:c5: 83:be:7d:b9:2e:fb:d9:a7:78:83:d0:39:84:81:fe:fc:25:9b: 06:e5:20:26:23:d4:0e:1a:75:9d:af:08:ad:ce:46:69:d6:74: 2b:2c:10:88:15:38:83:6f:a5:c4:9c:03:88:3b:22:bb:41:2d: bb:af:ed:cc:b4:4d:e4:a7:1f:4c:35:e3:20:a1:ea:e1:f1:58: 64:1a:45:aa:98:2d:81:b3:74:ca:a8:4a:d4:8e:61:6a:2b:ba: 93:cf:06:38:04:35:a0:c9:cf:d5:fa:79:2c:86:f8:ab:55:fe: 87:50:24:85:29:1d:b6:ff:3a:45:dd:62:70:0d:34:73:96:77: 68:52:1f:7f:e6:55:d6:8e:49:a1:e2:30:af:5a:42:4b:f9:6b: 7f:0d:91:5d:2c:44:c6:3e:2f:97:8e:53:3f:ff:9b:57:b9:b9: 4b:c5:c1:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1RtrLP3A0YSOsm4oPHqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYTg5M2UzM2E4MjFmZjY2ZDM4ZjBlYmNlNDk5MTFmM2E1 Zjk2NGUwHhcNMjUxMjE4MDUwMDUzWhcNMjUxMjE5MDUwMDUzWjAzMTEwLwYDVQQD EygwNThmOWMzMzVhMmM4NzA5Y2M5MjYxYzQ5MmExYmE5MzQyNGU5YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWs1ObLVXBbRJ9pbkiBbfAqbV+T6 WhDfxS68cWridTEosM7OFZDmIBctogNMoXbCWs6PT1TjQ6Dawrugcc7U9xBv1MPv 3SbixCa8kk7lk/NilqnPF4vNc3UfsRJRLxdvG0HRUTyn4FgFSbzFT+xXNd8N1uX+ tpNp7VHn9nv1YOnMLw+ZpiJVsPg6F9N1M9cVmD+x2qv2XBbYRSZqu3tjPpZeyTxZ bqbH0v0X0L7qIU1UptJTBF0h7G8bPwCuvL9k0sAQmZAFEhk0zvbwfBfYK6fEnnRY 7GhEs3LkRz83FY6JpBJkQbVAouauFNJqQHfNIaH8iA0HJaFl4s5DVbBe3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWPnDNaLIcJzJJhxJKhupNCTpseMB8GA1UdIwQY MBaAFE+ok+M6gh/2bTjw685JkR86X5ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAt ZmY3ZjQ4ZjkzZjAxLzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAtZmY3ZjQ4ZjkzZjAx LzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV/rc1vn /eF5SvV+c9b0gNtxEbzKeE3aAL7x9rrk38RG8SM8c3xEeCOhf/nc5owMpHITo7au J8+kGBc/5OJwSte7JPIv19x6iOUjtpM/ZWnDYqvN0ihSc3TFg759uS772ad4g9A5 hIH+/CWbBuUgJiPUDhp1na8Irc5GadZ0KywQiBU4g2+lxJwDiDsiu0Etu6/tzLRN 5KcfTDXjIKHq4fFYZBpFqpgtgbN0yqhK1I5haiu6k88GOAQ1oMnP1fp5LIb4q1X+ h1AkhSkdtv86Rd1icA00c5Z3aFIff+ZV1o5JoeIwr1pCS/lrfw2RXSxExj4vl45T P/+bV7m5S8XBHg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:55:01 2025 by rpki-client