This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json) Hash identifier: WUDlbFd2XAqd2lPNiASq+EeLwQ/b04GxKw4Cm3l/NG8= Subject key identifier: 33:1D:88:F1:2A:4B:3A:47:A4:DD:22:99:A0:47:AC:64:78:06:76:20 Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17 Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117 Certificate serial: 019B74B5BA93D0423EC625168E3961719A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 14:00:25 +0000 Manifest this update: Wed 31 Dec 2025 14:00:25 +0000 Manifest next update: Thu 01 Jan 2026 14:00:25 +0000 Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: zYGiIV6wvU7gCE4Kb1y4mGOMMre74qxdj2yRxn2CQbU=) 2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b5:ba:93:d0:42:3e:c6:25:16:8e:39:61:71:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117 Validity Not Before: Dec 31 14:00:25 2025 GMT Not After : Jan 1 14:00:25 2026 GMT Subject: CN=331d88f12a4b3a47a4dd2299a047ac6478067620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:f3:be:05:99:64:55:1d:21:46:89:50:39: 5f:00:a6:e7:e3:a3:95:2f:e2:0d:ef:9b:8d:6d:a6: 80:aa:95:d2:11:b3:63:d3:9c:58:6f:ae:f8:07:09: 91:fa:f5:a6:3f:8b:7c:91:ff:d3:b3:6b:5f:f3:51: 0d:9e:71:1d:bc:7a:a7:07:b7:8d:1a:a2:df:2f:6d: fe:12:44:18:7d:95:f4:47:7c:d8:1f:f1:11:dd:08: 72:bb:31:98:ff:4e:9e:b8:56:06:5a:00:e3:75:09: 70:16:07:09:ac:7b:73:cd:d6:b8:a8:eb:ba:e7:5c: 47:26:1f:80:d4:c6:fe:65:33:39:c7:20:a9:2b:60: e5:5f:1c:50:11:30:f0:0c:06:29:f9:04:ce:58:78: 31:46:b9:ad:e6:a2:ba:cd:78:c9:ab:be:0d:84:fa: 8f:44:5d:88:29:7b:e3:76:7e:48:5b:00:e0:a1:96: 33:68:2b:46:90:9c:45:e2:37:70:ad:d5:9e:7e:1d: a2:1d:a7:e2:58:b1:ed:54:a4:38:97:9a:cf:d1:f9: ee:9f:3c:83:5a:07:e4:5f:e6:69:41:34:fa:48:da: cb:d0:57:43:d7:76:3c:4a:f0:1c:5a:c9:6f:29:fe: 30:5c:cf:c3:f5:a6:4f:01:94:b5:97:ad:60:92:65: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:88:F1:2A:4B:3A:47:A4:DD:22:99:A0:47:AC:64:78:06:76:20 X509v3 Authority Key Identifier: keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d3:34:7d:e6:5f:f8:f3:36:84:bb:ec:3f:61:74:dd:00:5a: 63:a7:f2:37:5c:f7:d2:74:db:e0:a8:b3:55:15:81:ed:7a:a1: 3e:47:6c:e9:f8:b9:c6:2d:45:ff:4d:60:85:98:d1:28:f2:2a: f7:e3:50:56:b1:5b:6a:a0:8c:e8:05:08:1a:7d:47:37:65:13: d1:68:10:f2:05:ad:0c:75:a3:02:ef:eb:d4:c6:d2:47:f2:11: 9d:6c:75:07:1e:5e:2d:92:8e:92:eb:af:f5:2b:b8:06:aa:83: 7d:d3:96:63:e7:2a:92:98:0f:9b:ef:4f:19:ca:cc:90:3c:6c: c9:10:3a:e1:32:ce:cc:e0:57:9a:38:bd:01:60:8c:63:2b:e2: af:4c:df:bf:e4:75:e6:ed:49:22:92:f4:56:b8:29:5e:3c:3d: 63:42:2f:09:83:92:cd:b5:92:6a:fb:e0:31:bb:57:74:20:31: c2:5c:45:14:f7:ef:50:a0:bc:f8:cd:89:a9:a9:55:cd:29:88: b5:9c:7d:b9:9c:ef:81:da:1d:c2:f8:50:0a:cb:83:67:eb:04: 16:68:ea:28:c5:d3:8f:52:d6:72:98:ec:57:09:3a:bf:a5:02: b1:f6:a7:37:70:88:91:ed:14:1a:95:53:3e:48:82:b3:74:3a: 84:86:5f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0tbqT0EI+xiUWjjlhcZpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOWQ1ZmJhYWY3NmE4MGE2NWUwZTkyYzAyMDYxZTg5NWIy YjgxMTcwHhcNMjUxMjMxMTQwMDI1WhcNMjYwMTAxMTQwMDI1WjAzMTEwLwYDVQQD EygzMzFkODhmMTJhNGIzYTQ3YTRkZDIyOTlhMDQ3YWM2NDc4MDY3NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK/zvgWZZFUdIUaJUDlfAKbn46OV L+IN75uNbaaAqpXSEbNj05xYb674BwmR+vWmP4t8kf/Ts2tf81ENnnEdvHqnB7eN GqLfL23+EkQYfZX0R3zYH/ER3QhyuzGY/06euFYGWgDjdQlwFgcJrHtzzda4qOu6 51xHJh+A1Mb+ZTM5xyCpK2DlXxxQETDwDAYp+QTOWHgxRrmt5qK6zXjJq74NhPqP RF2IKXvjdn5IWwDgoZYzaCtGkJxF4jdwrdWefh2iHafiWLHtVKQ4l5rP0fnunzyD WgfkX+ZpQTT6SNrL0FdD13Y8SvAcWslvKf4wXM/D9aZPAZS1l61gkmUe7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMdiPEqSzpHpN0imaBHrGR4BnYgMB8GA1UdIwQY MBaAFE+dX7qvdqgKZeDpLAIGHolbK4EXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTct NjBmNmZhOTExMGUyLzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTctNjBmNmZhOTExMGUy LzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNM0feZf +PM2hLvsP2F03QBaY6fyN1z30nTb4KizVRWB7XqhPkds6fi5xi1F/01ghZjRKPIq 9+NQVrFbaqCM6AUIGn1HN2UT0WgQ8gWtDHWjAu/r1MbSR/IRnWx1Bx5eLZKOkuuv 9Su4BqqDfdOWY+cqkpgPm+9PGcrMkDxsyRA64TLOzOBXmji9AWCMYyvir0zfv+R1 5u1JIpL0VrgpXjw9Y0IvCYOSzbWSavvgMbtXdCAxwlxFFPfvUKC8+M2JqalVzSmI tZx9uZzvgdodwvhQCsuDZ+sEFmjqKMXTj1LWcpjsVwk6v6UCsfanN3CIke0UGpVT PkiCs3Q6hIZfmw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:56 2025 by rpki-client