This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json) Hash identifier: oiobOSysLqLg8XrxVdXfouALEsVsxeadhAV/Qo58Pec= Subject key identifier: B3:AB:96:DD:35:1D:A2:D4:B5:AC:52:37:30:45:CD:02:DB:E2:1F:BC Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Certificate serial: 019B424A510BD19A955A67FCF461D058038A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft Manifest number: 12E2 Signing time: Sun 21 Dec 2025 19:02:05 +0000 Manifest this update: Sun 21 Dec 2025 19:02:05 +0000 Manifest next update: Mon 22 Dec 2025 19:02:05 +0000 Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: RtoUXrSX1Dq10iA9JNS2gpVewnotexycZi2jaexIId0=) 2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=) 3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:51:0b:d1:9a:95:5a:67:fc:f4:61:d0:58:03:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Validity Not Before: Dec 21 19:02:05 2025 GMT Not After : Dec 22 19:02:05 2025 GMT Subject: CN=b3ab96dd351da2d4b5ac52373045cd02dbe21fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:bd:2c:83:30:bc:03:01:ec:3b:35:b9:d6: 69:9d:5b:a6:ea:68:c3:b3:70:fc:83:84:da:0b:f8: 99:ae:87:6b:9b:47:bb:81:21:7d:13:28:7e:7c:77: ca:6c:1d:c5:22:0a:15:ce:5d:7d:23:c0:c0:ca:c3: e5:6e:73:bb:30:4f:aa:25:94:19:34:db:51:a4:71: 7f:76:49:cd:c7:91:08:0d:c5:5e:22:bb:b9:80:a4: 34:16:e0:95:ca:13:c3:15:d1:3b:e3:6d:7e:41:70: 58:a1:f6:45:7d:e2:52:1e:c7:cf:af:3e:d8:20:eb: ab:7c:4f:ae:80:52:08:1a:d5:e8:1a:ee:4f:a0:43: 36:8c:5c:ce:1b:d7:56:14:ef:b3:a8:2b:71:e6:4c: 33:3c:49:17:be:0c:5a:d1:01:ae:41:e9:80:37:71: 63:38:b7:4b:42:c0:34:ff:5e:ce:7c:94:ba:06:4a: f9:eb:a6:26:8e:60:4c:40:0d:04:fc:3f:d3:6f:e7: 0d:49:51:67:23:4d:ab:39:bf:ce:8b:a3:22:99:f6: cb:06:18:34:3e:32:10:d5:f9:63:f9:7a:46:7f:19: e6:a6:9f:94:5c:93:1f:b7:f2:56:f4:ba:04:87:23: db:9e:b6:8f:5e:68:2a:99:7d:a5:7d:24:0e:df:77: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:96:DD:35:1D:A2:D4:B5:AC:52:37:30:45:CD:02:DB:E2:1F:BC X509v3 Authority Key Identifier: keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:81:0e:ab:cc:96:1a:69:7d:ff:be:16:da:cc:98:e4:6e:3f: 11:10:9f:86:28:0e:7e:e9:01:a5:c6:84:c2:b2:92:89:02:91: 5f:6a:78:13:18:92:63:52:ab:ee:59:1f:85:02:b4:58:87:82: c4:41:46:a6:45:1c:61:a3:cc:88:93:b7:f3:60:79:ef:7d:56: 2c:8b:a2:d6:33:65:78:3d:38:d6:d4:ec:dd:cb:dd:fb:c3:6d: a9:9a:df:a6:ab:cf:98:e8:e7:71:f2:a2:16:98:e1:e8:fc:06: 88:80:c1:29:90:29:5a:6f:da:0d:40:2e:8f:5e:14:c0:f9:d7: 95:2d:86:84:62:6f:43:82:a6:0b:c4:f2:77:37:55:e2:5d:cb: 79:fd:15:00:79:01:3b:42:98:15:4f:f8:60:f4:6e:f8:85:61: 17:a9:9e:c7:e4:40:c7:26:46:8f:a5:13:5b:da:f8:cf:b2:16: 93:8c:e0:56:46:4d:ff:ec:a1:00:6d:dd:28:9f:36:b5:85:66: 60:73:f5:c0:8d:0e:44:af:fc:ae:8f:16:41:e4:8a:48:1f:11: 44:9f:55:2d:12:42:fc:52:ce:45:d4:77:db:5e:67:23:70:3b: 60:16:bf:68:ee:b5:1b:73:7d:fd:49:e3:42:da:a7:36:76:e9: d0:3d:47:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSlEL0ZqVWmf89GHQWAOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2 NTlhMGIwHhcNMjUxMjIxMTkwMjA1WhcNMjUxMjIyMTkwMjA1WjAzMTEwLwYDVQQD EyhiM2FiOTZkZDM1MWRhMmQ0YjVhYzUyMzczMDQ1Y2QwMmRiZTIxZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo29LIMwvAMB7Ds1udZpnVum6mjD s3D8g4TaC/iZrodrm0e7gSF9Eyh+fHfKbB3FIgoVzl19I8DAysPlbnO7ME+qJZQZ NNtRpHF/dknNx5EIDcVeIru5gKQ0FuCVyhPDFdE7421+QXBYofZFfeJSHsfPrz7Y IOurfE+ugFIIGtXoGu5PoEM2jFzOG9dWFO+zqCtx5kwzPEkXvgxa0QGuQemAN3Fj OLdLQsA0/17OfJS6Bkr566YmjmBMQA0E/D/Tb+cNSVFnI02rOb/Oi6MimfbLBhg0 PjIQ1flj+XpGfxnmpp+UXJMft/JW9LoEhyPbnraPXmgqmX2lfSQO33fhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOrlt01HaLUtaxSNzBFzQLb4h+8MB8GA1UdIwQY MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt N2UyODA3NTJkYTIxLzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoEOq8yW Gml9/74W2syY5G4/ERCfhigOfukBpcaEwrKSiQKRX2p4ExiSY1Kr7lkfhQK0WIeC xEFGpkUcYaPMiJO382B5731WLIui1jNleD041tTs3cvd+8NtqZrfpqvPmOjncfKi Fpjh6PwGiIDBKZApWm/aDUAuj14UwPnXlS2GhGJvQ4KmC8TydzdV4l3Lef0VAHkB O0KYFU/4YPRu+IVhF6mex+RAxyZGj6UTW9r4z7IWk4zgVkZN/+yhAG3dKJ82tYVm YHP1wI0ORK/8ro8WQeSKSB8RRJ9VLRJC/FLORdR3215nI3A7YBa/aO61G3N9/Unj QtqnNnbp0D1HWA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:28 2025 by rpki-client