This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json) Hash identifier: MXIrHFMROCh2ZkGasalUkm3IuR9Adqb5IYX6UVgekco= Subject key identifier: 6D:A5:53:C7:2B:0B:97:25:D5:7D:1A:B5:0A:34:CC:52:D9:5D:A3:19 Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019B25BF572890B30294CB44C0FEDB33274E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft Manifest number: 23 Signing time: Tue 16 Dec 2025 06:00:55 +0000 Manifest this update: Tue 16 Dec 2025 06:00:55 +0000 Manifest next update: Wed 17 Dec 2025 06:00:55 +0000 Files and hashes: 1: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: QYji2TM6xsz/4TQmKUlrtxng2ky6KNh+9SNo5gZ3W6Y=) 2: bXQQO-5FgjU20JSCz7rPcw-iRKU.asa (hash: aES9ZMqFehWngEWgwHEJa4mqXVCMVwiTLBnp67II/DE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:57:28:90:b3:02:94:cb:44:c0:fe:db:33:27:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Dec 16 06:00:55 2025 GMT Not After : Dec 17 06:00:55 2025 GMT Subject: CN=6da553c72b0b9725d57d1ab50a34cc52d95da319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:b2:e7:49:3d:e2:44:88:56:cf:a3:95:31: ce:4e:22:54:11:db:e6:8e:50:35:e0:4b:ae:75:9b: e0:31:5f:73:24:91:bf:a2:35:37:b8:21:30:da:2c: ec:5c:63:51:e8:3a:3d:3d:7a:97:0d:a5:0c:79:20: 42:cb:c9:8b:6b:00:2c:96:cb:5d:aa:5e:af:81:db: 4c:0c:ae:d4:d9:2f:b0:57:af:86:a8:58:2c:b7:66: f7:60:eb:1f:f5:3d:dd:f7:c4:46:42:3a:4d:39:6b: cd:12:b0:25:fb:f0:69:72:1e:5f:8e:30:65:72:f4: ce:93:42:75:79:60:2f:ba:03:fb:e2:0c:35:c0:57: 76:2d:a1:e4:37:18:04:bc:4b:88:66:40:db:db:06: cf:10:03:ad:7f:a0:bf:f8:c9:d7:19:fb:ab:40:c3: 4f:23:c0:a2:d8:02:56:95:2d:92:46:0f:d5:e2:04: 77:06:c8:82:cc:ae:eb:cb:09:0e:f5:e4:07:5a:f0: d9:d9:1e:80:2b:ac:3e:00:4f:79:80:9f:7f:1d:ac: 8a:0f:af:d4:1e:7f:3f:44:54:21:8e:9b:60:79:3d: 3f:58:d6:0d:4e:32:69:46:0c:9e:84:c3:02:ab:51: 39:68:2e:ec:24:73:e0:24:d1:55:5c:64:1d:ab:27: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:53:C7:2B:0B:97:25:D5:7D:1A:B5:0A:34:CC:52:D9:5D:A3:19 X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d6:38:c9:45:1a:31:3d:3b:f9:ec:18:91:1d:56:c9:6b:96: 08:79:69:ff:b6:54:bb:d5:92:a6:2e:bc:c5:4d:a8:5f:bd:53: c8:30:1d:7d:82:2d:d4:92:23:3a:a8:7b:8e:8f:05:1d:5f:8b: 9f:92:ac:31:71:89:f1:34:c2:83:fb:82:a4:01:38:7b:ab:5c: 4f:36:47:7e:85:0b:9d:bd:d5:3b:7f:98:7a:36:12:6d:5b:43: c6:1d:f4:61:22:9c:9f:91:64:04:02:e1:4c:ac:dd:20:0a:44: 4d:9e:bf:d0:70:00:2f:97:77:59:a6:5f:c0:b5:f0:30:4d:5c: ee:27:a9:26:f7:75:bb:b2:7a:7b:14:3e:ed:ea:bb:d4:74:89: 04:8a:0a:5a:18:bb:e6:0f:98:58:6e:ff:66:15:97:78:06:34: e5:91:15:94:18:66:be:6e:37:32:ef:aa:9c:62:d0:a7:ec:79: d3:03:e6:6d:97:e9:eb:10:2e:ea:bd:04:2b:3b:8c:bd:88:0b: b9:10:2d:86:31:30:ea:73:65:da:13:dd:50:36:d1:f9:e6:75: 7e:8c:8f:5e:07:19:87:f9:eb:40:b1:d1:cb:ba:e1:bb:d5:86: 12:0b:db:cd:e8:cb:2d:2c:80:51:43:fb:4a:6e:f0:67:2e:53: fd:9c:b8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv1cokLMClMtEwP7bMydOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjUxMjE2MDYwMDU1WhcNMjUxMjE3MDYwMDU1WjAzMTEwLwYDVQQD Eyg2ZGE1NTNjNzJiMGI5NzI1ZDU3ZDFhYjUwYTM0Y2M1MmQ5NWRhMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ASy50k94kSIVs+jlTHOTiJUEdvm jlA14EuudZvgMV9zJJG/ojU3uCEw2izsXGNR6Do9PXqXDaUMeSBCy8mLawAslstd ql6vgdtMDK7U2S+wV6+GqFgst2b3YOsf9T3d98RGQjpNOWvNErAl+/Bpch5fjjBl cvTOk0J1eWAvugP74gw1wFd2LaHkNxgEvEuIZkDb2wbPEAOtf6C/+MnXGfurQMNP I8Ci2AJWlS2SRg/V4gR3BsiCzK7rywkO9eQHWvDZ2R6AK6w+AE95gJ9/HayKD6/U Hn8/RFQhjptgeT0/WNYNTjJpRgyehMMCq1E5aC7sJHPgJNFVXGQdqyfVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2lU8crC5cl1X0atQo0zFLZXaMZMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtY4yUUa MT07+ewYkR1WyWuWCHlp/7ZUu9WSpi68xU2oX71TyDAdfYIt1JIjOqh7jo8FHV+L n5KsMXGJ8TTCg/uCpAE4e6tcTzZHfoULnb3VO3+YejYSbVtDxh30YSKcn5FkBALh TKzdIApETZ6/0HAAL5d3WaZfwLXwME1c7iepJvd1u7J6exQ+7eq71HSJBIoKWhi7 5g+YWG7/ZhWXeAY05ZEVlBhmvm43Mu+qnGLQp+x50wPmbZfp6xAu6r0EKzuMvYgL uRAthjEw6nNl2hPdUDbR+eZ1foyPXgcZh/nrQLHRy7rhu9WGEgvbzejLLSyAUUP7 Sm7wZy5T/Zy4hw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:43:39 2025 by rpki-client