This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json) Hash identifier: WqbCLj6u45wYVOJFGLRNTWAjRHy3RQVp4Z2QJEknJYI= Subject key identifier: F2:B2:35:8F:98:7E:77:C7:63:E7:9B:C4:E6:F3:DD:1F:83:E4:6C:B5 Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Certificate serial: 019B360E53B76F199D80D5C4BC249FEAC648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft Manifest number: 10AE Signing time: Fri 19 Dec 2025 10:01:07 +0000 Manifest this update: Fri 19 Dec 2025 10:01:07 +0000 Manifest next update: Sat 20 Dec 2025 10:01:07 +0000 Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=) 2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: DVxP3osNaGYeLcfxJDSKuWdJW9FcaPHDl0ly8sDINY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:53:b7:6f:19:9d:80:d5:c4:bc:24:9f:ea:c6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Validity Not Before: Dec 19 10:01:07 2025 GMT Not After : Dec 20 10:01:07 2025 GMT Subject: CN=f2b2358f987e77c763e79bc4e6f3dd1f83e46cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:fb:7b:0d:d0:4b:78:d4:74:7c:1a:45:75: 12:8c:c8:b3:e3:3a:6f:96:0c:2c:d0:e4:93:bb:5d: 97:d1:ad:24:13:d3:02:ac:b8:13:36:99:e1:d1:7e: c5:36:af:15:7c:fb:b7:00:05:5e:cc:e9:fe:d9:38: 56:3d:a6:67:4f:e9:b6:84:a5:e3:a7:3d:0a:70:69: 6b:5d:60:32:f1:da:72:9d:63:af:e1:57:a2:49:ba: 69:85:69:f6:36:55:0d:bc:f5:f4:69:61:e0:a1:21: e0:fd:3e:95:75:29:2a:be:ba:4c:28:c9:ad:82:56: 5c:77:44:30:b6:95:a1:72:71:5f:76:47:cb:cb:99: e7:06:70:c7:c1:44:d2:c1:9d:f7:d3:c6:8b:43:9f: 64:7b:42:43:07:94:d7:73:33:10:9c:de:59:a0:bf: 15:04:4d:9f:07:3e:17:eb:2d:bd:60:dc:11:4f:f6: 87:d2:96:01:40:9d:a9:22:7e:33:96:d9:f8:dd:49: 3c:23:8f:5d:4a:e5:53:c0:d5:a5:13:b8:2d:04:a8: 5a:42:b4:58:db:c9:f2:34:9a:7b:ec:ea:60:37:3d: 66:2a:a0:86:c6:88:f8:b4:05:ff:d9:1e:28:ea:3e: 30:81:c6:4e:46:48:f2:62:37:d9:1a:4e:d7:87:16: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:35:8F:98:7E:77:C7:63:E7:9B:C4:E6:F3:DD:1F:83:E4:6C:B5 X509v3 Authority Key Identifier: keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:d9:f3:e2:84:30:8e:22:ea:7c:3d:fa:3e:d6:29:25:65: 6f:9e:2c:69:bb:54:93:ff:49:6b:72:31:fc:ce:11:71:9c:0e: 3a:e9:8d:a7:64:28:69:fd:03:b8:4e:0c:7c:04:41:4d:b4:07: 29:53:66:5b:e7:1f:80:c8:4c:d1:29:9d:5c:10:ae:96:74:ae: 30:03:05:ca:0b:f6:c2:95:a8:fd:18:95:3a:ad:02:87:31:ea: 61:73:7d:73:e6:a7:b4:ff:2c:e8:04:dd:da:32:09:61:fd:5e: 8b:b1:ec:65:9e:e2:16:f6:e9:90:55:d0:41:36:1e:1e:c2:b6: 5f:5d:20:be:6b:28:3f:24:f1:d1:51:a8:40:d1:5a:fe:98:24: e5:33:b7:71:94:24:ab:80:12:3f:17:ae:8d:b1:1f:7d:33:29: 39:02:69:f4:37:de:a3:7b:c2:d9:90:a8:65:2a:13:e8:3b:70: bc:52:e7:b8:d9:bf:bc:c8:98:b4:52:06:6f:2e:ba:33:cb:23: 84:77:52:38:56:66:ca:5f:c3:c6:ec:d2:de:38:15:ee:3a:11: 0a:05:55:6e:a4:82:b5:f0:10:29:bc:93:c9:16:84:e3:51:86: f2:ac:8b:58:4f:76:3e:d5:0b:3c:f4:ed:8a:0a:18:11:9c:f4: f2:67:a1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlO3bxmdgNXEvCSf6sZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0 ZjRkYzAwHhcNMjUxMjE5MTAwMTA3WhcNMjUxMjIwMTAwMTA3WjAzMTEwLwYDVQQD EyhmMmIyMzU4Zjk4N2U3N2M3NjNlNzliYzRlNmYzZGQxZjgzZTQ2Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSX7ew3QS3jUdHwaRXUSjMiz4zpv lgws0OSTu12X0a0kE9MCrLgTNpnh0X7FNq8VfPu3AAVezOn+2ThWPaZnT+m2hKXj pz0KcGlrXWAy8dpynWOv4VeiSbpphWn2NlUNvPX0aWHgoSHg/T6VdSkqvrpMKMmt glZcd0QwtpWhcnFfdkfLy5nnBnDHwUTSwZ3308aLQ59ke0JDB5TXczMQnN5ZoL8V BE2fBz4X6y29YNwRT/aH0pYBQJ2pIn4zltn43Uk8I49dSuVTwNWlE7gtBKhaQrRY 28nyNJp77OpgNz1mKqCGxoj4tAX/2R4o6j4wgcZORkjyYjfZGk7XhxbPVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKyNY+YfnfHY+ebxObz3R+D5Gy1MB8GA1UdIwQY MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr7Z8+KE MI4i6nw9+j7WKSVlb54sabtUk/9Ja3Ix/M4RcZwOOumNp2Qoaf0DuE4MfARBTbQH KVNmW+cfgMhM0SmdXBCulnSuMAMFygv2wpWo/RiVOq0ChzHqYXN9c+antP8s6ATd 2jIJYf1ei7HsZZ7iFvbpkFXQQTYeHsK2X10gvmsoPyTx0VGoQNFa/pgk5TO3cZQk q4ASPxeujbEffTMpOQJp9Dfeo3vC2ZCoZSoT6DtwvFLnuNm/vMiYtFIGby66M8sj hHdSOFZmyl/DxuzS3jgV7joRCgVVbqSCtfAQKbyTyRaE41GG8qyLWE92PtULPPTt igoYEZz08mehcw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:22:16 2025 by rpki-client