This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json) Hash identifier: lbIz8vn9b01K7w6W4PnQXEZecQLdaWhG7RkVw80unfw= Subject key identifier: 3F:A5:A5:48:80:5F:F3:5C:19:A3:32:19:64:D1:30:02:EC:18:C0:B3 Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a Certificate serial: 019B5977C0F3F50FE68B6468D86A8E6FE8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft Manifest number: 0323 Signing time: Fri 26 Dec 2025 07:02:58 +0000 Manifest this update: Fri 26 Dec 2025 07:02:58 +0000 Manifest next update: Sat 27 Dec 2025 07:02:58 +0000 Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: ZdJReh3Xup2NN4CusFC9Cnogmh2NWueERNHwT69c+8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:c0:f3:f5:0f:e6:8b:64:68:d8:6a:8e:6f:e8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a Validity Not Before: Dec 26 07:02:58 2025 GMT Not After : Dec 27 07:02:58 2025 GMT Subject: CN=3fa5a548805ff35c19a3321964d13002ec18c0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:77:ea:35:f4:09:8b:98:b0:2b:38:b4:5b: 99:9b:79:54:8b:cb:f3:ef:66:8d:30:e1:78:9c:21: a3:a8:e4:06:10:56:a3:4f:f2:60:f5:17:a3:2f:ee: 49:2f:fb:aa:19:30:e8:9f:cb:c7:60:79:b5:ba:12: 7f:3e:8e:fd:49:43:ef:35:b2:9d:b7:ac:aa:f1:0d: 26:d6:27:72:8e:40:a0:cf:5e:4e:98:52:f3:b7:d6: df:af:d8:50:30:1b:1e:0f:42:fd:76:65:84:a0:a6: 8f:d4:10:39:77:90:92:33:12:61:de:2d:3b:bb:a4: c3:7f:01:5c:84:8a:6a:e5:16:e7:ff:85:83:bc:e3: 1b:c1:ec:21:cc:58:4c:e1:ce:91:af:f9:f7:fe:31: 87:2d:96:9d:15:f6:6f:87:be:d3:98:a0:61:2c:5b: 8c:e9:cb:bc:aa:c0:23:11:df:74:e5:3c:7d:ec:e5: bf:92:83:27:22:4d:d3:41:52:79:eb:0b:d4:df:26: 1b:ec:5a:5f:32:e8:7a:e5:52:54:66:74:e2:38:f2: 05:6a:c8:bd:10:cf:a1:58:8d:c8:a0:24:a4:fb:c0: 34:e0:9e:62:c4:a5:87:68:d0:de:de:c4:11:4a:cd: aa:39:8d:4d:6d:61:70:40:3e:5d:4d:2d:09:07:1f: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:A5:48:80:5F:F3:5C:19:A3:32:19:64:D1:30:02:EC:18:C0:B3 X509v3 Authority Key Identifier: keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a8:c8:3a:d2:89:d1:e3:58:b9:3d:b5:32:e2:71:e6:e1:9b: 17:25:bc:21:8f:00:de:9f:58:20:42:cd:47:47:41:e2:4c:83: c5:13:7b:a1:16:c4:7c:2b:11:bc:5a:41:7c:5c:29:af:0f:45: 22:11:2e:c8:9d:af:3b:e5:5c:2e:df:67:ff:f4:60:4c:c5:34: 5c:43:92:43:46:8e:f0:cb:c5:7f:19:9b:37:55:4a:de:18:c0: cf:4c:4f:75:e6:df:4f:3b:6a:22:71:01:0d:60:e3:16:1c:05: 0d:8b:9a:88:f7:78:88:ab:be:27:24:45:dc:42:b9:8f:b9:07: 4a:76:76:5a:cf:26:4e:e9:5b:20:f0:72:a4:03:ac:fa:d3:67: 37:64:f0:39:c5:c9:87:80:b5:bf:c4:7c:d5:c1:ad:18:10:eb: 65:9f:cf:81:0e:92:ef:9b:7b:0f:2c:a7:35:ef:8a:d8:5d:65: fd:a1:e6:a2:86:26:f9:07:72:d8:f9:2e:57:bf:db:15:61:33: 9b:03:a0:37:05:7a:95:01:8a:b7:0b:ba:ed:34:e9:49:28:d0: a1:44:87:d3:bb:be:e2:25:7c:8d:aa:75:6d:00:cf:8c:dc:a8: d7:82:a7:86:2c:74:be:59:2b:2f:2f:cc:1f:25:16:81:30:8b: e3:43:c0:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd8Dz9Q/mi2Ro2GqOb+jGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODVlYzczZGMxODFmOTkzNTY1OWY1OGFlZDIwODUzMmEy YzJhNmEwHhcNMjUxMjI2MDcwMjU4WhcNMjUxMjI3MDcwMjU4WjAzMTEwLwYDVQQD EygzZmE1YTU0ODgwNWZmMzVjMTlhMzMyMTk2NGQxMzAwMmVjMThjMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT936jX0CYuYsCs4tFuZm3lUi8vz 72aNMOF4nCGjqOQGEFajT/Jg9RejL+5JL/uqGTDon8vHYHm1uhJ/Po79SUPvNbKd t6yq8Q0m1idyjkCgz15OmFLzt9bfr9hQMBseD0L9dmWEoKaP1BA5d5CSMxJh3i07 u6TDfwFchIpq5Rbn/4WDvOMbwewhzFhM4c6Rr/n3/jGHLZadFfZvh77TmKBhLFuM 6cu8qsAjEd905Tx97OW/koMnIk3TQVJ56wvU3yYb7FpfMuh65VJUZnTiOPIFasi9 EM+hWI3IoCSk+8A04J5ixKWHaNDe3sQRSs2qOY1NbWFwQD5dTS0JBx8GgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+lpUiAX/NcGaMyGWTRMALsGMCzMB8GA1UdIwQY MBaAFLeF7HPcGB+ZNWWfWK7SCFMqLCpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2Et NjNjMmJhNGM5OTZjLzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lODU0MTgtNjRiMy00NDRiLTkxM2EtNjNjMmJhNGM5OTZj LzEvdDRYc2M5d1lINWsxWlo5WXJ0SUlVeW9zS21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKjIOtKJ 0eNYuT21MuJx5uGbFyW8IY8A3p9YIELNR0dB4kyDxRN7oRbEfCsRvFpBfFwprw9F IhEuyJ2vO+VcLt9n//RgTMU0XEOSQ0aO8MvFfxmbN1VK3hjAz0xPdebfTztqInEB DWDjFhwFDYuaiPd4iKu+JyRF3EK5j7kHSnZ2Ws8mTulbIPBypAOs+tNnN2TwOcXJ h4C1v8R81cGtGBDrZZ/PgQ6S75t7DyynNe+K2F1l/aHmooYm+Qdy2PkuV7/bFWEz mwOgNwV6lQGKtwu67TTpSSjQoUSH07u+4iV8jap1bQDPjNyo14Knhix0vlkrLy/M HyUWgTCL40PAJA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:25:12 2025 by rpki-client