This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json) Hash identifier: XfrtmJyBUYh2hyEeCW1KIr4PVVbG6jlXgLXgGCPfiHw= Subject key identifier: DE:ED:50:84:CF:24:52:C8:A4:F4:F7:9A:51:B0:1F:06:98:41:20:FC Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019B3FED1566EE405ECB8AD7F25AE6402A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 08:01:00 +0000 Manifest this update: Sun 21 Dec 2025 08:01:00 +0000 Manifest next update: Mon 22 Dec 2025 08:01:00 +0000 Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=) 2: HH1S4SS-_tmNDJ-9u5sDwZE2P3c.roa (hash: mZlHYb8CS1tgrT2PVpbkRsXSqxGpm2slViLC+J0/iAU=) 3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: Xh5Hc4SufBKGl76mOOzKfRw5dZnrl5cY/ptgoGF3fFw=) 4: hh03zFpevYjY3E83dBgNmLTmAnY.roa (hash: jMJgwZh9RPXCIiUSToKAvjp/ihJCeCstbqBegzy2I2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:15:66:ee:40:5e:cb:8a:d7:f2:5a:e6:40:2a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Dec 21 08:01:00 2025 GMT Not After : Dec 22 08:01:00 2025 GMT Subject: CN=deed5084cf2452c8a4f4f79a51b01f06984120fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f0:a8:07:c7:b3:61:95:28:3f:e2:ec:b1:b5: f1:ac:44:34:6e:85:56:3c:c9:59:93:f1:34:32:1b: 03:b5:4d:0d:bf:24:3d:80:d1:73:97:01:1a:0e:93: 06:2b:e1:c3:b9:56:fe:3d:0f:a8:0e:19:fa:15:41: 9d:f1:6d:9e:e9:a3:69:cc:9a:7c:02:b9:e2:d0:25: d4:ba:00:f8:a4:8c:c0:c2:42:80:23:53:fc:47:ce: fb:86:4e:12:d2:4a:1a:0d:bd:a0:02:84:57:9e:2a: 4d:70:07:99:07:aa:b7:40:f6:f3:e8:ec:c3:da:d2: d7:ed:6a:53:74:66:96:64:fc:3f:90:87:fe:4c:f2: 82:b5:8c:60:e6:14:0f:db:fd:53:ad:50:1d:44:54: 57:26:35:bc:47:d0:fc:a2:d7:cf:ad:48:09:20:a5: 22:97:1c:33:40:1b:c6:a6:6c:e0:e0:68:86:25:51: f7:ca:23:c6:19:ff:16:df:83:59:7c:7a:0a:22:63: 9a:69:c9:2b:a8:ca:17:e6:a8:e2:e4:89:7c:52:42: 23:11:f8:c2:85:3f:c9:a7:9a:a0:53:2a:1c:04:55: 3b:9e:0a:7b:ef:38:b6:cc:be:48:c0:4e:94:b7:72: 38:c3:c2:2d:2c:af:08:9b:af:c4:8d:f9:06:a2:79: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:50:84:CF:24:52:C8:A4:F4:F7:9A:51:B0:1F:06:98:41:20:FC X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:0d:fc:67:fa:24:28:9c:a5:e5:a6:f4:ec:85:f3:ca:e5: e0:37:eb:90:c9:68:e9:34:b9:61:71:3f:83:eb:79:02:2d:73: 18:f6:07:2c:e2:e6:99:7e:f6:7e:7f:48:5b:d5:33:44:b1:dd: f9:99:54:92:83:5d:c7:f4:d3:a2:f5:61:d5:fc:a4:f7:85:45: 76:a0:51:98:42:bd:51:b1:80:26:fa:82:04:7f:9b:34:38:c4: 00:38:4f:11:8a:a8:5b:e1:dd:d5:14:ce:e8:dd:8f:0b:ab:58: 37:ef:f4:0b:60:30:78:85:9c:57:6b:33:b5:1b:19:e1:0a:8f: 90:a3:f6:e2:cd:02:ac:c9:76:1d:7a:50:f6:6f:73:b5:e7:3c: 6c:98:8e:40:40:8d:9c:39:76:44:1c:f9:0a:14:e8:e0:89:72: 31:7e:d8:e4:f3:aa:aa:14:44:78:25:51:9b:fe:8e:47:ab:d2: b5:4f:52:10:1f:15:a5:3e:ff:13:cb:d6:54:c9:ad:f0:1f:34: 9c:79:95:66:3d:dd:16:47:69:3a:e7:f9:61:31:61:4f:17:0f: a7:c8:bc:e1:36:90:89:ca:b5:31:0c:bd:be:c3:ab:d8:14:6b: dd:dd:62:c6:2c:50:ee:ff:b4:dd:91:50:e4:98:68:e5:8c:9a: fd:d1:12:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7RVm7kBey4rX8lrmQCqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjUxMjIxMDgwMTAwWhcNMjUxMjIyMDgwMTAwWjAzMTEwLwYDVQQD EyhkZWVkNTA4NGNmMjQ1MmM4YTRmNGY3OWE1MWIwMWYwNjk4NDEyMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/CoB8ezYZUoP+LssbXxrEQ0boVW PMlZk/E0MhsDtU0NvyQ9gNFzlwEaDpMGK+HDuVb+PQ+oDhn6FUGd8W2e6aNpzJp8 Arni0CXUugD4pIzAwkKAI1P8R877hk4S0koaDb2gAoRXnipNcAeZB6q3QPbz6OzD 2tLX7WpTdGaWZPw/kIf+TPKCtYxg5hQP2/1TrVAdRFRXJjW8R9D8otfPrUgJIKUi lxwzQBvGpmzg4GiGJVH3yiPGGf8W34NZfHoKImOaackrqMoX5qji5Il8UkIjEfjC hT/Jp5qgUyocBFU7ngp77zi2zL5IwE6Ut3I4w8ItLK8Im6/EjfkGonkEFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7tUITPJFLIpPT3mlGwHwaYQSD8MB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIAN/Gf6 JCicpeWm9OyF88rl4DfrkMlo6TS5YXE/g+t5Ai1zGPYHLOLmmX72fn9IW9UzRLHd +ZlUkoNdx/TTovVh1fyk94VFdqBRmEK9UbGAJvqCBH+bNDjEADhPEYqoW+Hd1RTO 6N2PC6tYN+/0C2AweIWcV2sztRsZ4QqPkKP24s0CrMl2HXpQ9m9ztec8bJiOQECN nDl2RBz5ChTo4IlyMX7Y5POqqhREeCVRm/6OR6vStU9SEB8VpT7/E8vWVMmt8B80 nHmVZj3dFkdpOuf5YTFhTxcPp8i84TaQicq1MQy9vsOr2BRr3d1ixixQ7v+03ZFQ 5Jho5Yya/dESlw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:46:52 2025 by rpki-client