This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json) Hash identifier: fFHCqhoiUxsvXteXuvy9/KvDHHy+UKOznmRwkv2Y8qc= Subject key identifier: 47:FD:CD:D5:B0:11:5F:B3:D1:63:4B:61:5E:60:A4:95:76:39:49:BA Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f Certificate serial: 019B390F1D2131F5B313F8F4B222E56861A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft Manifest number: 1467 Signing time: Sat 20 Dec 2025 00:00:50 +0000 Manifest this update: Sat 20 Dec 2025 00:00:50 +0000 Manifest next update: Sun 21 Dec 2025 00:00:50 +0000 Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=) 2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: CX7seRj0li+nO58TYbxpx2rQKFrMA3AUQB1fc57eBNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:1d:21:31:f5:b3:13:f8:f4:b2:22:e5:68:61:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f Validity Not Before: Dec 20 00:00:50 2025 GMT Not After : Dec 21 00:00:50 2025 GMT Subject: CN=47fdcdd5b0115fb3d1634b615e60a495763949ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:51:8a:45:db:a9:41:e3:53:09:d2:ca:18: 1e:24:7f:57:32:41:6b:69:ad:42:3f:05:ea:a0:85: c8:5c:02:4d:4d:43:85:45:c9:b3:21:bd:5e:e9:98: ff:11:78:aa:b8:41:91:3b:aa:72:9a:1c:52:cd:6c: 58:23:22:d7:01:33:f7:9d:a4:28:80:4f:83:e1:43: df:0d:1c:cd:5d:a8:58:c2:13:b1:8f:39:da:bb:57: 4c:65:e2:98:3a:a0:84:df:f3:7e:55:bb:ea:d7:31: 94:3b:68:82:19:dc:20:c6:ac:19:9b:e4:46:24:10: 30:3f:0b:d7:22:2e:7c:af:1a:c9:8f:57:62:ee:c4: b5:56:39:9a:f7:7d:96:cf:05:e3:a1:4b:2d:4b:e6: b7:a6:36:50:2d:42:1a:16:80:f6:66:a0:ce:69:49: 24:df:86:95:75:59:92:6f:fb:ec:1d:bb:2f:e4:c9: e7:71:bb:8e:3b:cf:1f:6b:8d:ae:05:40:10:9b:86: 2b:0c:c1:02:51:dd:5d:db:92:6f:b1:5a:71:aa:65: 31:a9:b1:86:95:74:2a:a0:60:30:55:37:28:ca:db: 34:1e:af:30:98:af:10:28:fe:00:2c:63:a6:1b:53: b2:3b:76:4a:1d:84:c9:a5:5d:79:00:78:4d:0d:bc: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FD:CD:D5:B0:11:5F:B3:D1:63:4B:61:5E:60:A4:95:76:39:49:BA X509v3 Authority Key Identifier: keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e5:43:70:b1:5b:a7:00:87:f4:dd:00:bb:cc:c6:62:88:70: eb:88:b0:d7:96:cd:02:58:e9:0c:ad:f1:e6:c0:45:df:d0:60: 9a:81:02:6b:e4:fb:99:2e:49:0c:bd:16:8e:7a:67:ff:4f:92: 9a:e7:76:bf:e9:a7:2d:cf:b0:78:6c:0f:7a:17:51:ed:17:06: 1c:04:82:72:94:ca:5a:8a:89:0f:45:4f:be:59:81:08:e4:0f: 41:b4:cb:cc:4b:18:f7:fa:eb:e4:c9:b4:33:9c:a9:f6:6b:09: f5:22:23:4d:47:0d:c8:1d:d8:52:8b:0e:d2:b9:5b:88:98:91: b4:b8:3b:45:54:5d:ba:10:65:39:d3:ac:87:5f:26:f2:b9:97: 8a:46:85:35:39:12:a8:dc:c9:ac:d5:7e:e5:69:b6:4e:67:e6: aa:aa:fa:42:42:9b:99:77:d9:79:91:ae:da:fd:0b:49:cd:8b: 58:dd:68:5e:9d:35:12:c0:95:01:77:c9:2b:e0:e6:8f:a1:cf: a3:28:cc:1a:0e:6f:cd:af:b6:c7:7d:13:ee:75:de:a5:6d:8d: 6f:b1:6b:4b:e5:49:05:a4:ae:0d:a0:60:31:ce:70:f3:77:9c: df:fd:c4:cc:68:0c:17:a6:52:73:ff:d5:d1:38:0f:0a:8f:bf: e3:a1:0c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dx0hMfWzE/j0siLlaGGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE3ZDZiMDNlMmZlNWY4OTExY2JlYjVmYWUyZGNhM2Jk NjY3N2YwHhcNMjUxMjIwMDAwMDUwWhcNMjUxMjIxMDAwMDUwWjAzMTEwLwYDVQQD Eyg0N2ZkY2RkNWIwMTE1ZmIzZDE2MzRiNjE1ZTYwYTQ5NTc2Mzk0OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomZRikXbqUHjUwnSyhgeJH9XMkFr aa1CPwXqoIXIXAJNTUOFRcmzIb1e6Zj/EXiquEGRO6pymhxSzWxYIyLXATP3naQo gE+D4UPfDRzNXahYwhOxjznau1dMZeKYOqCE3/N+Vbvq1zGUO2iCGdwgxqwZm+RG JBAwPwvXIi58rxrJj1di7sS1Vjma932WzwXjoUstS+a3pjZQLUIaFoD2ZqDOaUkk 34aVdVmSb/vsHbsv5MnncbuOO88fa42uBUAQm4YrDMECUd1d25JvsVpxqmUxqbGG lXQqoGAwVTcoyts0Hq8wmK8QKP4ALGOmG1OyO3ZKHYTJpV15AHhNDbyXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf9zdWwEV+z0WNLYV5gpJV2OUm6MB8GA1UdIwQY MBaAFE9hfWsD4v5fiRHL61+uLco71md/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMt MDI3YzdmN2RjNmQ1LzEvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMtMDI3YzdmN2RjNmQ1 LzEvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeVDcLFb pwCH9N0Au8zGYohw64iw15bNAljpDK3x5sBF39BgmoECa+T7mS5JDL0Wjnpn/0+S mud2v+mnLc+weGwPehdR7RcGHASCcpTKWoqJD0VPvlmBCOQPQbTLzEsY9/rr5Mm0 M5yp9msJ9SIjTUcNyB3YUosO0rlbiJiRtLg7RVRduhBlOdOsh18m8rmXikaFNTkS qNzJrNV+5Wm2Tmfmqqr6QkKbmXfZeZGu2v0LSc2LWN1oXp01EsCVAXfJK+Dmj6HP oyjMGg5vza+2x30T7nXepW2Nb7FrS+VJBaSuDaBgMc5w83ec3/3EzGgMF6ZSc//V 0TgPCo+/46EMfg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:53 2025 by rpki-client