This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json) Hash identifier: g9g2CPtC1Bko0y0K8GdCeywDawLBLEFrm3y0ThIjHME= Subject key identifier: B6:9A:FC:A8:EB:B6:62:BD:08:57:C9:0E:B5:7F:3E:ED:D0:B8:6F:4F Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Certificate serial: 019B3D230042B02D1969C4181798B7515327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft Manifest number: 0CDC Signing time: Sat 20 Dec 2025 19:01:02 +0000 Manifest this update: Sat 20 Dec 2025 19:01:02 +0000 Manifest next update: Sun 21 Dec 2025 19:01:02 +0000 Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=) 2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=) 3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: FWID1CDixGx3zzFxl1xo1G3RphF8V2GHZ54ZIxoIzPk=) 4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:00:42:b0:2d:19:69:c4:18:17:98:b7:51:53:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Validity Not Before: Dec 20 19:01:02 2025 GMT Not After : Dec 21 19:01:02 2025 GMT Subject: CN=b69afca8ebb662bd0857c90eb57f3eedd0b86f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:3a:9d:c1:91:05:0b:10:01:a1:0d:4c:75: ff:b5:0d:90:7c:7d:b2:21:70:e6:6b:7d:2e:b3:36: 4b:29:aa:ad:fd:be:ce:e7:6a:39:76:6c:c8:f3:15: 19:af:e4:32:01:36:5f:e9:62:01:63:01:43:a4:f5: 69:33:5c:1f:1c:b9:53:d2:b7:55:41:1d:46:5f:da: b7:c3:6a:c4:38:92:a3:12:b7:12:d0:97:a1:30:da: 61:85:d2:26:cd:9e:19:b5:1f:5d:d1:24:74:af:78: 0f:73:c1:8a:97:70:e5:8f:60:b3:32:25:e7:06:91: 06:63:55:d1:e7:39:48:ef:a7:c0:a3:b0:26:69:e7: e1:76:4f:b2:5d:89:7d:93:17:b3:3c:cd:9a:41:14: 53:f2:6e:c8:f6:90:ab:15:af:13:59:49:0a:23:f3: 56:d2:23:7b:ad:3b:5e:54:44:e2:82:bc:cd:21:f5: e0:ce:fb:7b:e6:9c:f3:c8:0c:b2:17:b2:82:62:a7: 61:60:61:3f:07:8e:f2:bc:a5:6c:a8:f7:23:ff:cd: b9:ed:0b:a2:3e:1c:cf:09:24:4c:01:0c:1f:5e:72: e6:f8:ba:c5:05:ab:82:a5:ad:7f:cd:04:5f:7a:d1: 8f:17:4b:69:b2:c8:ed:39:b2:38:05:65:4e:3d:a7: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:FC:A8:EB:B6:62:BD:08:57:C9:0E:B5:7F:3E:ED:D0:B8:6F:4F X509v3 Authority Key Identifier: keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:74:e3:d4:1d:d9:5f:bf:7b:de:08:1f:51:e4:8e:2a:dd:35: 0c:1d:e6:60:c7:f7:b9:1b:33:c3:55:bf:6a:de:bc:56:15:d4: 01:1a:84:cc:cd:fa:ca:cf:14:6e:7c:07:cf:ca:08:cf:61:2a: 29:85:93:d5:1c:19:be:a5:1d:78:4f:58:d2:43:f5:ae:fb:9c: d8:74:28:0b:27:24:cd:a3:bc:4e:03:8d:d7:c8:57:6a:0c:6a: 2e:7c:6f:e2:b2:06:4d:42:cc:03:34:dc:94:d4:09:e1:ea:36: cb:f1:06:82:54:0b:e8:46:ab:bc:ed:bb:e3:6c:a2:50:9d:ef: 06:5c:38:f8:17:2a:2d:d2:c8:44:3a:f7:06:dc:c6:61:c6:ed: 46:bc:5c:0c:3e:d3:08:8b:d3:d9:3b:54:d9:6a:24:72:e8:9d: 8a:c8:51:ed:95:b7:56:9a:d8:b8:bb:ad:d8:ab:c1:92:60:b6: 35:57:c7:28:da:5f:34:ed:3b:ce:c4:c9:53:95:af:0c:e1:07: 25:7f:c4:e3:6f:30:17:e6:79:86:6b:5b:ae:79:bb:54:c6:15: 53:ca:a7:17:01:66:3d:52:18:8e:d5:7a:cb:2b:68:23:b2:10: ff:42:91:fe:17:9d:9a:17:1b:58:4d:9f:d3:24:07:d7:28:7c: e3:bd:c3:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwBCsC0ZacQYF5i3UVMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy NjExMjAwHhcNMjUxMjIwMTkwMTAyWhcNMjUxMjIxMTkwMTAyWjAzMTEwLwYDVQQD EyhiNjlhZmNhOGViYjY2MmJkMDg1N2M5MGViNTdmM2VlZGQwYjg2ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofY6ncGRBQsQAaENTHX/tQ2QfH2y IXDma30uszZLKaqt/b7O52o5dmzI8xUZr+QyATZf6WIBYwFDpPVpM1wfHLlT0rdV QR1GX9q3w2rEOJKjErcS0JehMNphhdImzZ4ZtR9d0SR0r3gPc8GKl3Dlj2CzMiXn BpEGY1XR5zlI76fAo7Amaefhdk+yXYl9kxezPM2aQRRT8m7I9pCrFa8TWUkKI/NW 0iN7rTteVETigrzNIfXgzvt75pzzyAyyF7KCYqdhYGE/B47yvKVsqPcj/8257Qui PhzPCSRMAQwfXnLm+LrFBauCpa1/zQRfetGPF0tpssjtObI4BWVOPacRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaa/KjrtmK9CFfJDrV/Pu3QuG9PMB8GA1UdIwQY MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3Tj1B3Z X7973ggfUeSOKt01DB3mYMf3uRszw1W/at68VhXUARqEzM36ys8UbnwHz8oIz2Eq KYWT1RwZvqUdeE9Y0kP1rvuc2HQoCyckzaO8TgON18hXagxqLnxv4rIGTULMAzTc lNQJ4eo2y/EGglQL6EarvO2742yiUJ3vBlw4+BcqLdLIRDr3BtzGYcbtRrxcDD7T CIvT2TtU2WokcuidishR7ZW3VprYuLut2KvBkmC2NVfHKNpfNO07zsTJU5WvDOEH JX/E428wF+Z5hmtbrnm7VMYVU8qnFwFmPVIYjtV6yytoI7IQ/0KR/hedmhcbWE2f 0yQH1yh8473DIw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:30 2025 by rpki-client