This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json) Hash identifier: rqXO40PA4nvBf43arpxvwAy5N1fGKRv81XMj+ovu7zU= Subject key identifier: 4F:AB:BB:EB:FA:59:D2:7D:DF:37:66:0C:BB:1B:2F:06:BA:DC:10:10 Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d Certificate serial: 019B30430E69849513AAA599564D40FDD9DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft Manifest number: 08CB Signing time: Thu 18 Dec 2025 07:00:59 +0000 Manifest this update: Thu 18 Dec 2025 07:00:59 +0000 Manifest next update: Fri 19 Dec 2025 07:00:59 +0000 Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=) 2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: zgNrvI/Ak41w2piVHM9XNc8s7c6obu/y0HO6U8vHDTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:0e:69:84:95:13:aa:a5:99:56:4d:40:fd:d9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d Validity Not Before: Dec 18 07:00:59 2025 GMT Not After : Dec 19 07:00:59 2025 GMT Subject: CN=4fabbbebfa59d27ddf37660cbb1b2f06badc1010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:b0:88:30:58:4d:5e:65:2f:d6:e6:4b:f0: 76:f2:38:39:bf:c7:14:8c:ed:ec:b2:e6:f2:18:ed: 1e:dd:ac:76:bd:dd:fc:22:d6:d7:00:05:07:72:0e: 39:5e:63:f2:80:d1:35:25:14:6c:57:1f:cc:60:b3: 9c:de:1b:d7:e8:4f:07:17:c3:0e:53:33:5a:55:88: 4e:e7:76:5c:b6:17:a5:93:b8:5a:f0:34:b4:55:71: f4:06:56:52:4e:01:b8:ff:6f:31:fe:84:90:85:d2: 80:6e:8f:1a:63:82:1b:1f:f1:c6:c4:ca:b3:b4:d9: 62:4e:63:08:4e:6e:70:fe:6f:75:9b:04:01:7f:ea: 7d:59:37:3c:7f:9c:c9:ef:8f:f1:6f:02:79:cf:8d: 67:08:e1:3b:3f:b1:a2:9f:df:59:6b:de:cd:0a:f5: fb:2a:9e:7c:21:e9:56:6f:fb:83:2e:b9:b8:dc:1a: c1:6e:13:96:22:15:1f:89:82:b7:2b:3c:e0:0a:c4: 43:03:74:23:3b:eb:cc:9a:7c:ec:72:fa:82:d8:cd: 54:b0:0d:92:73:d3:d8:e3:7c:b9:87:63:9e:4f:4f: cc:4f:0d:d4:12:34:25:39:e9:29:ca:fe:94:44:62: 8f:98:78:ce:8a:c7:41:38:cf:66:3a:c3:ed:7a:b6: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AB:BB:EB:FA:59:D2:7D:DF:37:66:0C:BB:1B:2F:06:BA:DC:10:10 X509v3 Authority Key Identifier: keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:49:44:40:17:52:27:76:aa:54:a2:d9:c1:d5:1d:e8:ae:29: 52:3e:eb:4f:91:99:c9:76:d3:63:c2:87:8e:94:cb:79:71:e2: 69:2a:05:0c:1c:93:36:33:dd:e1:31:bc:80:25:b4:c5:e0:e4: b7:d0:f6:15:82:02:ab:a2:22:12:0a:d8:2b:5b:45:fe:50:7c: fb:0e:58:78:41:8b:d6:32:dc:4a:4a:98:32:5a:62:57:bf:c5: aa:9d:38:37:31:87:e6:65:a1:79:35:19:ed:66:c7:45:ef:3f: 0c:63:c7:7b:54:cb:fb:18:ee:47:64:21:9e:fc:a5:36:11:2a: cf:22:16:21:f2:14:75:62:5e:fe:a9:97:e6:f6:ae:cb:2e:f3: d8:e1:63:e5:58:9a:4c:ec:d6:c4:f7:8a:c4:38:17:59:87:8f: 07:b7:b4:96:c7:ae:b0:d1:87:04:65:da:d1:32:0e:85:65:0c: 5b:1e:55:bc:9c:02:7a:be:eb:b0:d5:25:a7:e7:ce:bb:2e:06: 77:91:b5:07:c5:6e:df:1f:8b:25:75:d8:32:3f:6c:05:85:38: b0:13:71:2e:1d:81:19:51:7d:b7:eb:d6:a8:20:7d:1e:3a:b4: 21:04:9e:cd:86:d7:f0:31:53:40:3d:d9:22:79:b5:79:42:4c: a3:16:dc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQw5phJUTqqWZVk1A/dneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2 MmU1OWQwHhcNMjUxMjE4MDcwMDU5WhcNMjUxMjE5MDcwMDU5WjAzMTEwLwYDVQQD Eyg0ZmFiYmJlYmZhNTlkMjdkZGYzNzY2MGNiYjFiMmYwNmJhZGMxMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwViwiDBYTV5lL9bmS/B28jg5v8cU jO3ssubyGO0e3ax2vd38ItbXAAUHcg45XmPygNE1JRRsVx/MYLOc3hvX6E8HF8MO UzNaVYhO53Zcthelk7ha8DS0VXH0BlZSTgG4/28x/oSQhdKAbo8aY4IbH/HGxMqz tNliTmMITm5w/m91mwQBf+p9WTc8f5zJ74/xbwJ5z41nCOE7P7Gin99Za97NCvX7 Kp58IelWb/uDLrm43BrBbhOWIhUfiYK3KzzgCsRDA3QjO+vMmnzscvqC2M1UsA2S c9PY43y5h2OeT0/MTw3UEjQlOekpyv6URGKPmHjOisdBOM9mOsPterZnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+ru+v6WdJ93zdmDLsbLwa63BAQMB8GA1UdIwQY MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt Y2E4YjI3NThiZTE1LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1 LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUlEQBdS J3aqVKLZwdUd6K4pUj7rT5GZyXbTY8KHjpTLeXHiaSoFDByTNjPd4TG8gCW0xeDk t9D2FYICq6IiEgrYK1tF/lB8+w5YeEGL1jLcSkqYMlpiV7/Fqp04NzGH5mWheTUZ 7WbHRe8/DGPHe1TL+xjuR2QhnvylNhEqzyIWIfIUdWJe/qmX5vauyy7z2OFj5Via TOzWxPeKxDgXWYePB7e0lseusNGHBGXa0TIOhWUMWx5VvJwCer7rsNUlp+fOuy4G d5G1B8Vu3x+LJXXYMj9sBYU4sBNxLh2BGVF9t+vWqCB9Hjq0IQSezYbX8DFTQD3Z Inm1eUJMoxbcjw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:32 2025 by rpki-client