This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft File: T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json) Hash identifier: 2n+v0QPHL7fixRaZ+dTi90UDxGFq3e31/8iDtB9RoOY= Subject key identifier: B5:00:5E:3D:75:1D:C4:72:53:AE:63:81:B5:58:7C:BB:21:26:E3:4C Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Certificate serial: 019B3F111779D61B5EA240B920083A3E3E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 04:00:43 +0000 Manifest this update: Sun 21 Dec 2025 04:00:43 +0000 Manifest next update: Mon 22 Dec 2025 04:00:43 +0000 Files and hashes: 1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: 95paZZxoyPIn2V+zcTPzl9sd+Kt5vnFOSCxcTI3z7Wc=) 2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=) 3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=) 4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=) 5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:17:79:d6:1b:5e:a2:40:b9:20:08:3a:3e:3e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Validity Not Before: Dec 21 04:00:43 2025 GMT Not After : Dec 22 04:00:43 2025 GMT Subject: CN=b5005e3d751dc47253ae6381b5587cbb2126e34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:ce:e8:cd:93:34:96:8f:e4:b3:e8:11:54: 92:05:c2:f2:ca:af:f3:92:dc:55:9f:65:2d:6a:5d: 77:d0:9f:b9:93:58:a6:78:c2:a1:28:27:d2:9a:4c: ff:6c:4d:f6:8f:7d:35:98:7b:d2:f5:41:2f:0f:21: 42:f3:1a:2b:8f:df:a0:87:6c:d8:58:9b:0f:2e:ce: ee:d1:3a:aa:15:ef:3c:00:97:4d:9b:84:92:7e:68: c0:e1:eb:f9:5c:1f:9d:79:7c:14:9a:c2:a4:e0:80: 47:10:7c:46:38:0f:20:a5:36:5f:7a:b1:43:e0:56: 65:b2:80:d9:c1:06:6d:ad:0b:03:3f:1e:fd:a1:f0: 29:d3:7b:bd:9b:99:8d:91:4f:ff:0d:6c:85:04:8f: d5:61:d1:4c:5a:02:11:a8:fa:58:c6:89:a3:cc:01: 79:ea:69:7a:49:87:31:0c:16:89:93:98:45:69:31: b2:6b:53:d2:af:89:21:ca:74:5f:67:6e:b0:56:6b: ec:d5:74:7e:e1:0f:09:15:76:e1:fc:35:5d:88:45: 28:30:7d:7b:ba:2b:89:25:30:48:da:35:0f:d8:69: 7c:4d:65:9b:7f:9a:05:fa:0b:50:8c:11:1a:b9:a4: ea:b0:1f:b7:29:d4:a8:c8:9d:e0:01:6e:09:a5:07: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:00:5E:3D:75:1D:C4:72:53:AE:63:81:B5:58:7C:BB:21:26:E3:4C X509v3 Authority Key Identifier: keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a6:b7:82:e8:db:8e:15:4d:40:84:6e:91:03:da:c6:ef:64: cb:f7:20:ba:c4:20:34:6b:13:a7:7e:ca:99:94:59:6c:3b:5d: f1:16:bb:39:1a:97:f3:c3:f8:a8:0e:b6:ed:bc:61:e1:83:85: 97:c0:02:a5:ee:8e:41:d4:f1:ce:43:16:85:a9:e1:d1:5b:05: a9:33:fc:17:d0:8f:a3:2a:31:e4:6d:89:41:f7:a0:23:9e:1a: fa:a3:28:cd:ce:37:fc:8b:94:b0:ed:9a:66:9c:af:34:61:39: 3e:56:95:51:ad:95:28:a2:a8:4e:bd:e4:99:26:28:83:ab:ec: bc:7c:06:58:b0:a9:e0:e7:09:ae:4c:c9:c4:d6:35:30:50:c8: 86:cd:55:61:40:51:82:a5:ed:b3:76:23:bd:a3:9b:c2:31:3a: 2a:ea:1a:46:af:09:6b:20:d2:02:2d:9a:64:12:13:8c:99:60: 31:30:ce:45:06:38:38:c8:1c:d6:c1:e1:10:4e:64:8f:17:92: 38:18:62:bc:3b:14:09:48:76:58:e6:df:23:fa:c7:c6:29:c1: 70:93:b2:f7:73:42:c3:e4:32:a2:2b:ae:0d:82:f4:b0:a8:3f: f8:68:2e:23:d9:7e:73:e7:e9:0b:ea:52:1c:05:c2:51:1f:f9: d0:50:54:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERd51hteokC5IAg6Pj5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3 MTFlMWUwHhcNMjUxMjIxMDQwMDQzWhcNMjUxMjIyMDQwMDQzWjAzMTEwLwYDVQQD EyhiNTAwNWUzZDc1MWRjNDcyNTNhZTYzODFiNTU4N2NiYjIxMjZlMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcTO6M2TNJaP5LPoEVSSBcLyyq/z ktxVn2Utal130J+5k1imeMKhKCfSmkz/bE32j301mHvS9UEvDyFC8xorj9+gh2zY WJsPLs7u0TqqFe88AJdNm4SSfmjA4ev5XB+deXwUmsKk4IBHEHxGOA8gpTZferFD 4FZlsoDZwQZtrQsDPx79ofAp03u9m5mNkU//DWyFBI/VYdFMWgIRqPpYxomjzAF5 6ml6SYcxDBaJk5hFaTGya1PSr4khynRfZ26wVmvs1XR+4Q8JFXbh/DVdiEUoMH17 uiuJJTBI2jUP2Gl8TWWbf5oF+gtQjBEauaTqsB+3KdSoyJ3gAW4JpQeGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUAXj11HcRyU65jgbVYfLshJuNMMB8GA1UdIwQY MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct NTI4YTYzYmU0Yzg3LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3 LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKa3gujb jhVNQIRukQPaxu9ky/cgusQgNGsTp37KmZRZbDtd8Ra7ORqX88P4qA627bxh4YOF l8ACpe6OQdTxzkMWhanh0VsFqTP8F9CPoyox5G2JQfegI54a+qMozc43/IuUsO2a ZpyvNGE5PlaVUa2VKKKoTr3kmSYog6vsvHwGWLCp4OcJrkzJxNY1MFDIhs1VYUBR gqXts3YjvaObwjE6KuoaRq8JayDSAi2aZBITjJlgMTDORQY4OMgc1sHhEE5kjxeS OBhivDsUCUh2WObfI/rHxinBcJOy93NCw+QyoiuuDYL0sKg/+GguI9l+c+fpC+pS HAXCUR/50FBUpA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:43 2025 by rpki-client