This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json) Hash identifier: 7Id0dlkMRk3o4pKqgk8XCTuCQ4KaWGDyy/ZZkMmuOiI= Subject key identifier: FE:97:25:7C:C8:42:C1:8E:42:54:52:D2:B8:DF:30:F0:C8:69:56:8E Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Certificate serial: 019B533CB2FC01A0C7F9FDC34C8362CD7850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft Manifest number: 02E5 Signing time: Thu 25 Dec 2025 02:00:45 +0000 Manifest this update: Thu 25 Dec 2025 02:00:45 +0000 Manifest next update: Fri 26 Dec 2025 02:00:45 +0000 Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: JZZwL5X9BpSMCIW6HtZJYAFdMPqntWoqOOpIKSnVo60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:b2:fc:01:a0:c7:f9:fd:c3:4c:83:62:cd:78:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Validity Not Before: Dec 25 02:00:45 2025 GMT Not After : Dec 26 02:00:45 2025 GMT Subject: CN=fe97257cc842c18e425452d2b8df30f0c869568e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:94:a3:fe:65:b9:81:f9:fc:80:43:ca:f1: a2:d5:e6:9f:92:3d:b2:28:ba:a2:be:d7:15:f2:70: 91:0d:d4:3a:e0:35:46:38:f2:24:3e:f3:6f:16:35: 8a:6f:1e:b8:0d:2d:88:22:f7:e3:89:41:14:63:85: a1:37:3d:09:cf:2e:50:cf:38:e7:b3:e0:a4:25:d2: 4c:64:2a:c5:14:1a:66:46:89:14:87:58:1f:e4:d6: bc:22:77:da:a6:17:48:84:08:7a:9e:f6:7c:7e:f2: d5:12:23:4f:6b:48:06:34:0f:26:2c:2f:3e:df:c9: 70:af:7e:c8:d1:54:a6:d7:24:f4:02:38:61:39:7d: c1:16:3a:ca:5e:00:ee:d9:6f:a1:88:36:c9:45:3d: 7c:60:d7:ae:cf:86:64:a5:67:9a:f0:9a:0d:73:2f: 9b:a0:b1:c0:1c:48:87:97:c3:bb:9a:16:c4:ce:ad: e2:69:75:d5:dc:53:83:84:0e:81:9d:5e:7c:28:db: 0c:bb:9c:b7:2c:b1:bb:c8:d0:a2:f9:93:32:4e:6b: 1c:f7:5a:ac:69:3f:07:d4:67:b8:8e:90:fd:c4:96: 05:3b:12:84:ba:4d:6d:91:fa:da:ae:85:c3:1f:4e: 49:c4:bd:8b:b5:e5:5c:08:25:12:ce:51:b1:a1:30: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:97:25:7C:C8:42:C1:8E:42:54:52:D2:B8:DF:30:F0:C8:69:56:8E X509v3 Authority Key Identifier: keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:85:43:4d:8a:74:cb:12:08:f9:bc:0b:57:11:82:16:30:10: 56:19:24:37:c4:08:87:ed:36:cc:c0:37:1c:bb:2d:42:3e:9d: e8:38:af:7f:bd:b0:aa:2a:9b:5c:12:f1:1f:de:df:89:f9:92: da:08:40:eb:b9:b8:23:f5:a0:4f:5a:eb:ac:b4:0c:38:8c:85: e4:a8:03:50:56:50:49:20:bf:e1:af:ad:83:36:0f:27:3c:62: aa:01:54:67:97:9c:9b:95:13:cd:d9:a1:2b:85:cc:80:a5:53: 02:29:8a:e7:64:cd:0c:63:01:cf:9e:5b:97:84:74:9a:ed:53: 70:09:9d:5f:07:0d:24:4e:91:04:8b:cb:71:5b:73:ba:34:35: f4:02:6b:6b:1f:10:01:fe:c9:13:dd:10:d9:b6:3c:9e:7f:0b: ba:84:c3:f7:31:27:32:22:bb:77:99:0d:32:04:5b:4d:dc:13: e7:4a:85:1d:21:27:61:34:91:db:ab:98:cf:89:14:c5:fe:e8: a0:84:44:f4:0d:ce:5a:c3:ea:4b:f3:b9:b7:a3:29:ab:b8:dd: d0:02:eb:3b:b6:45:9e:6d:f1:ef:cc:ca:5e:ee:b9:bf:a0:6a: fc:e4:d6:b3:7c:7a:e9:06:1e:52:a4:be:7d:13:60:40:b8:1a: 77:9f:f5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPLL8AaDH+f3DTINizXhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz M2M5N2IwHhcNMjUxMjI1MDIwMDQ1WhcNMjUxMjI2MDIwMDQ1WjAzMTEwLwYDVQQD EyhmZTk3MjU3Y2M4NDJjMThlNDI1NDUyZDJiOGRmMzBmMGM4Njk1NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9yUo/5luYH5/IBDyvGi1eafkj2y KLqivtcV8nCRDdQ64DVGOPIkPvNvFjWKbx64DS2IIvfjiUEUY4WhNz0Jzy5Qzzjn s+CkJdJMZCrFFBpmRokUh1gf5Na8InfaphdIhAh6nvZ8fvLVEiNPa0gGNA8mLC8+ 38lwr37I0VSm1yT0AjhhOX3BFjrKXgDu2W+hiDbJRT18YNeuz4ZkpWea8JoNcy+b oLHAHEiHl8O7mhbEzq3iaXXV3FODhA6BnV58KNsMu5y3LLG7yNCi+ZMyTmsc91qs aT8H1Ge4jpD9xJYFOxKEuk1tkfraroXDH05JxL2LteVcCCUSzlGxoTDXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6XJXzIQsGOQlRS0rjfMPDIaVaOMB8GA1UdIwQY MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4VDTYp0 yxII+bwLVxGCFjAQVhkkN8QIh+02zMA3HLstQj6d6Divf72wqiqbXBLxH97fifmS 2ghA67m4I/WgT1rrrLQMOIyF5KgDUFZQSSC/4a+tgzYPJzxiqgFUZ5ecm5UTzdmh K4XMgKVTAimK52TNDGMBz55bl4R0mu1TcAmdXwcNJE6RBIvLcVtzujQ19AJrax8Q Af7JE90Q2bY8nn8LuoTD9zEnMiK7d5kNMgRbTdwT50qFHSEnYTSR26uYz4kUxf7o oIRE9A3OWsPqS/O5t6Mpq7jd0ALrO7ZFnm3x78zKXu65v6Bq/OTWs3x66QYeUqS+ fRNgQLgad5/1ww== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:02 2025 by rpki-client