This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json) Hash identifier: ut4NM4Q673Q5hZOLBzKY4ke+mIX5+NUqswdiQX45AXY= Subject key identifier: 2A:6B:CE:8D:81:3B:6F:0E:D6:A3:C8:86:C6:27:8F:36:73:58:DE:F0 Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729 Certificate serial: 019B476F8FC56A3A0A44DAB70E876C1BBD89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 19:00:52 +0000 Manifest this update: Mon 22 Dec 2025 19:00:52 +0000 Manifest next update: Tue 23 Dec 2025 19:00:52 +0000 Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=) 2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: VnkcBOJytDH4D59SuKQb/1EbwrY2uv6v0IgZlqM58cM=) 3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:8f:c5:6a:3a:0a:44:da:b7:0e:87:6c:1b:bd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729 Validity Not Before: Dec 22 19:00:52 2025 GMT Not After : Dec 23 19:00:52 2025 GMT Subject: CN=2a6bce8d813b6f0ed6a3c886c6278f367358def0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:37:63:d7:cc:a4:12:2d:95:ff:26:d8:7f: ff:d3:39:f8:01:52:06:8e:a7:25:18:82:8c:cf:08: 4b:76:9d:17:50:83:ce:fc:37:48:fa:42:65:ce:36: 16:87:eb:fe:71:ca:59:86:ab:e7:89:11:15:fa:ff: 73:1c:50:cb:f9:d9:da:c7:5a:02:e9:a0:da:ec:aa: 53:6f:2e:0f:e6:1b:24:6e:38:76:41:c4:25:48:d4: 54:89:4a:c4:1b:50:0c:17:d1:88:7a:ff:79:10:1b: 7a:33:8b:c8:8b:2d:01:8e:94:14:ad:0a:7f:be:d9: f8:35:64:35:79:a3:58:31:2d:46:79:8f:19:a0:59: d5:f9:6f:20:29:ea:a1:b1:f9:e5:c5:f0:26:72:e5: ad:51:61:ec:34:b2:4d:5b:44:5a:ce:fd:37:22:a3: ed:82:18:7b:b4:1f:14:08:ac:ea:c8:f4:d7:08:8a: 60:72:a4:0c:4d:b4:6d:8b:8e:0c:94:c0:64:a8:39: 53:2a:be:36:12:bd:b3:6c:78:04:51:a1:6b:62:04: 22:fe:8f:a4:2e:a7:74:69:a7:0e:43:8c:2a:69:7f: 3b:42:c6:5a:06:9d:d4:5c:c2:11:9c:25:78:87:6e: a1:66:f2:60:39:c5:85:ba:13:d1:97:dd:e4:2a:8f: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6B:CE:8D:81:3B:6F:0E:D6:A3:C8:86:C6:27:8F:36:73:58:DE:F0 X509v3 Authority Key Identifier: keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a5:f6:75:a9:ad:1a:3d:2e:c2:05:11:ad:79:b3:31:cc:33: 77:5a:df:c1:04:70:0e:c0:97:5c:8a:05:04:fe:0d:9e:b4:c1: 1f:5b:7b:3c:67:b9:55:c0:f6:50:19:ec:7a:e6:91:f9:a0:70: 05:89:c5:c3:06:ce:34:00:f6:7e:92:3c:95:1d:ea:d4:f7:39: 67:05:c3:ec:82:7f:a2:84:93:90:72:37:78:73:5e:97:00:60: 08:7d:8f:0d:8b:ca:10:10:04:61:ad:68:0c:f3:af:85:b0:66: c9:9d:2f:86:d3:64:b2:75:30:a8:0d:a1:83:f3:0d:f3:ef:a8: 39:b2:d8:ec:ca:82:cc:96:04:c3:d3:10:38:52:bc:3a:66:77: 2f:d1:b6:73:82:0a:76:b9:e4:43:05:7b:95:6c:0d:24:e7:bd: 04:e3:e2:ea:a8:2b:5d:d9:52:5d:d3:e0:1a:60:36:88:50:9d: 5f:0a:87:00:95:78:ff:66:4c:c6:c6:b7:9a:be:a4:fa:9d:85: ee:1b:3d:9e:52:03:a4:7d:2a:ca:3d:cb:4d:95:6c:d0:d7:30: b4:83:24:51:13:34:f0:03:1d:79:9f:30:cd:8d:a4:ec:f7:09: 72:d1:0b:c0:f9:45:6c:6d:6d:9b:4e:9c:90:01:67:98:6c:70: fe:d7:64:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb4/FajoKRNq3DodsG72JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY2NDZjOTNjMjk3NDc4OWVjZWY3YjQ0NDY1NmVlNjQx NjE3MjkwHhcNMjUxMjIyMTkwMDUyWhcNMjUxMjIzMTkwMDUyWjAzMTEwLwYDVQQD EygyYTZiY2U4ZDgxM2I2ZjBlZDZhM2M4ODZjNjI3OGYzNjczNThkZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dU3Y9fMpBItlf8m2H//0zn4AVIG jqclGIKMzwhLdp0XUIPO/DdI+kJlzjYWh+v+ccpZhqvniREV+v9zHFDL+dnax1oC 6aDa7KpTby4P5hskbjh2QcQlSNRUiUrEG1AMF9GIev95EBt6M4vIiy0BjpQUrQp/ vtn4NWQ1eaNYMS1GeY8ZoFnV+W8gKeqhsfnlxfAmcuWtUWHsNLJNW0Razv03IqPt ghh7tB8UCKzqyPTXCIpgcqQMTbRti44MlMBkqDlTKr42Er2zbHgEUaFrYgQi/o+k Lqd0aacOQ4wqaX87QsZaBp3UXMIRnCV4h26hZvJgOcWFuhPRl93kKo+NhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCprzo2BO28O1qPIhsYnjzZzWN7wMB8GA1UdIwQY MBaAFE/WZGyTwpdHiezve0RGVu5kFhcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEt NzZhNTM4NWM1MTVhLzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEtNzZhNTM4NWM1MTVh LzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKX2damt Gj0uwgURrXmzMcwzd1rfwQRwDsCXXIoFBP4NnrTBH1t7PGe5VcD2UBnseuaR+aBw BYnFwwbONAD2fpI8lR3q1Pc5ZwXD7IJ/ooSTkHI3eHNelwBgCH2PDYvKEBAEYa1o DPOvhbBmyZ0vhtNksnUwqA2hg/MN8++oObLY7MqCzJYEw9MQOFK8OmZ3L9G2c4IK drnkQwV7lWwNJOe9BOPi6qgrXdlSXdPgGmA2iFCdXwqHAJV4/2ZMxsa3mr6k+p2F 7hs9nlIDpH0qyj3LTZVs0NcwtIMkURM08AMdeZ8wzY2k7PcJctELwPlFbG1tm06c kAFnmGxw/tdk7A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:56:47 2025 by rpki-client