This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json) Hash identifier: TQN34E0KeT4w67z7sH0r2Z3d/9kS6GxYDgD2Hgf7CbQ= Subject key identifier: A5:44:F8:CE:76:07:72:EA:06:79:0D:11:27:4B:0D:11:59:95:51:9D Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Certificate serial: 019B44A5E541D20D82324CC17E173EAE6859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft Manifest number: 02FF Signing time: Mon 22 Dec 2025 06:01:21 +0000 Manifest this update: Mon 22 Dec 2025 06:01:21 +0000 Manifest next update: Tue 23 Dec 2025 06:01:21 +0000 Files and hashes: 1: 52rM1TLXeNL9F-vxMnLogxZvGbg.roa (hash: t74CQPsg3SU8+YzT6bR/4fFoJ3HTMThAu9/OMJSg+7c=) 2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: LJ4l5O2HWeWnbT5v0BPweiIGrgbrl64x0SmEVJRC/uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:e5:41:d2:0d:82:32:4c:c1:7e:17:3e:ae:68:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Validity Not Before: Dec 22 06:01:21 2025 GMT Not After : Dec 23 06:01:21 2025 GMT Subject: CN=a544f8ce760772ea06790d11274b0d115995519d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:52:16:fc:03:e1:8d:36:a0:3e:75:f5:c7: 56:66:4f:a4:c4:b6:63:51:fd:fc:6e:69:e9:2f:c7: f5:2d:d7:4a:bc:bd:85:0f:15:05:13:11:46:2e:49: ae:d3:7d:ad:b5:61:f3:6f:fe:26:4e:5f:0c:b6:af: 4b:44:9e:e4:cf:86:c9:8e:41:1f:63:54:fc:76:14: 95:5d:19:a7:80:41:36:9a:ed:0e:e8:6f:27:df:41: dd:72:db:a0:e2:e9:13:96:6f:17:52:9d:62:d7:e4: 1e:58:eb:05:2d:77:46:71:2b:26:92:5f:2f:80:54: dd:a7:0f:c2:be:30:88:ae:9c:e0:f2:d9:9c:4a:3c: f6:76:48:ad:a5:d9:92:63:aa:db:6b:c8:99:8e:65: 3c:61:6a:2b:11:1e:15:c0:0c:11:7e:a6:58:f8:a2: 67:e9:f9:11:2f:fe:13:72:de:a2:6c:91:9c:5c:09: 69:db:16:a4:b0:bd:4f:84:0d:26:82:76:8e:63:a3: 9c:5b:f6:e8:12:ab:e9:9d:13:0e:81:f8:9d:d3:06: c5:16:43:e8:8b:ef:eb:4a:96:c5:18:68:b9:eb:d1: 36:0b:14:b3:f2:59:a3:18:c1:71:40:cd:cc:d3:82: ae:72:82:40:fd:54:e4:68:a3:0d:0a:d8:6c:79:cd: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:F8:CE:76:07:72:EA:06:79:0D:11:27:4B:0D:11:59:95:51:9D X509v3 Authority Key Identifier: keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7b:f5:4b:b4:c2:7d:1e:22:2b:21:95:01:f1:f9:de:40:2c: b4:52:77:14:ed:19:4a:59:f9:bc:1d:51:ee:69:8a:c6:2f:0c: 64:21:0a:72:c9:ca:35:b3:96:ed:cd:06:d4:35:b2:bc:1d:85: ab:21:97:8d:4e:5d:dc:81:5b:64:a6:1b:25:b2:9b:03:40:b5: 9c:00:af:ee:b3:cf:40:ec:ab:05:4a:df:bb:e7:54:c7:b1:e5: 65:88:f4:4e:b0:2b:59:df:cc:fa:b3:45:16:92:74:99:69:5e: 3d:37:73:2b:f8:54:9f:9e:9e:61:e7:f8:15:25:4b:64:8f:89: cc:92:ee:86:a2:01:e6:52:32:38:f8:ca:71:99:94:d9:68:e9: 3b:67:d5:2f:51:9e:58:59:8b:ab:68:f5:69:08:8a:3a:02:c8: 4b:b6:81:71:28:f5:b9:60:31:07:1b:03:05:fe:07:ca:0d:01: d3:6e:49:cd:80:e4:5f:69:c0:60:b2:d3:c0:32:32:e5:0e:e2: fd:da:86:bb:bf:d3:2b:dc:2a:b4:76:96:62:82:4c:90:91:c4: 99:f1:21:c5:86:15:5e:9c:6f:82:91:c1:c2:bf:3b:72:c7:24: bc:da:a9:c1:d5:b7:15:ed:48:c6:7b:af:32:16:be:ac:ee:e5: 65:bf:1e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpeVB0g2CMkzBfhc+rmhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk NjY5NzMwHhcNMjUxMjIyMDYwMTIxWhcNMjUxMjIzMDYwMTIxWjAzMTEwLwYDVQQD EyhhNTQ0ZjhjZTc2MDc3MmVhMDY3OTBkMTEyNzRiMGQxMTU5OTU1MTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK9SFvwD4Y02oD519cdWZk+kxLZj Uf38bmnpL8f1LddKvL2FDxUFExFGLkmu032ttWHzb/4mTl8Mtq9LRJ7kz4bJjkEf Y1T8dhSVXRmngEE2mu0O6G8n30Hdctug4ukTlm8XUp1i1+QeWOsFLXdGcSsmkl8v gFTdpw/CvjCIrpzg8tmcSjz2dkitpdmSY6rba8iZjmU8YWorER4VwAwRfqZY+KJn 6fkRL/4Tct6ibJGcXAlp2xaksL1PhA0mgnaOY6OcW/boEqvpnRMOgfid0wbFFkPo i+/rSpbFGGi569E2CxSz8lmjGMFxQM3M04KucoJA/VTkaKMNCthsec2DowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVE+M52B3LqBnkNESdLDRFZlVGdMB8GA1UdIwQY MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt OGE1NDVjYjM1YTlhLzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHv1S7TC fR4iKyGVAfH53kAstFJ3FO0ZSln5vB1R7mmKxi8MZCEKcsnKNbOW7c0G1DWyvB2F qyGXjU5d3IFbZKYbJbKbA0C1nACv7rPPQOyrBUrfu+dUx7HlZYj0TrArWd/M+rNF FpJ0mWlePTdzK/hUn56eYef4FSVLZI+JzJLuhqIB5lIyOPjKcZmU2WjpO2fVL1Ge WFmLq2j1aQiKOgLIS7aBcSj1uWAxBxsDBf4Hyg0B025JzYDkX2nAYLLTwDIy5Q7i /dqGu7/TK9wqtHaWYoJMkJHEmfEhxYYVXpxvgpHBwr87csckvNqpwdW3Fe1Ixnuv Mha+rO7lZb8elQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:29 2025 by rpki-client