This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json) Hash identifier: syu/Hn4vlW/MZgy/fJYegsjf3tWap6liSy3xID+kDnc= Subject key identifier: 8F:37:8F:8B:C0:36:C5:AF:7D:6C:11:82:C3:CC:D9:C5:F5:F5:94:0E Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635 Certificate serial: 019B44378F9372B92316A0F29E443D70787E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft Manifest number: 0FD5 Signing time: Mon 22 Dec 2025 04:00:50 +0000 Manifest this update: Mon 22 Dec 2025 04:00:50 +0000 Manifest next update: Tue 23 Dec 2025 04:00:50 +0000 Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=) 2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: a8TmURaeW+2XD1M2zEdvlGqBWFkJ8gAQOK/wYZU7nzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:8f:93:72:b9:23:16:a0:f2:9e:44:3d:70:78:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635 Validity Not Before: Dec 22 04:00:50 2025 GMT Not After : Dec 23 04:00:50 2025 GMT Subject: CN=8f378f8bc036c5af7d6c1182c3ccd9c5f5f5940e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:44:6d:90:ed:79:32:ae:26:72:f9:ed:b3: 75:8c:af:9e:e4:f4:80:99:1e:34:2e:27:02:da:76: 4f:73:4e:f0:f8:ce:cc:d8:16:65:d6:a9:f7:41:e8: 84:0c:17:9d:30:6a:4c:37:9d:b3:55:e7:8a:c8:61: ac:54:a1:e1:b8:96:51:63:fe:03:03:14:70:bd:64: 02:75:eb:b8:b0:a2:95:44:a7:44:2b:a5:75:88:61: 0a:11:2a:2b:c9:f4:a9:c0:6e:d4:fd:37:8e:83:38: dd:ed:54:53:60:1d:1b:69:9e:30:32:1b:32:88:b4: af:5d:ed:36:87:03:06:a5:79:83:b3:75:6c:f3:32: e6:01:4d:28:37:c6:50:3b:4a:27:71:86:24:1e:a8: 33:66:e9:11:9d:4a:eb:77:08:82:b8:fd:03:e5:ee: 4d:26:19:39:de:59:8a:84:32:31:65:cc:c1:bd:ac: c5:b4:cf:2a:72:85:a9:f4:de:ef:ee:88:c1:cd:b5: 2f:96:38:1c:85:c8:c9:59:59:c4:7c:61:e9:10:32: 26:e8:92:7d:ba:81:5d:b6:76:ad:b1:7c:82:25:7f: ce:5c:91:20:93:73:41:7b:3d:70:45:83:2d:35:85: d8:d1:f3:35:2c:b8:76:c7:3a:52:f6:ab:f8:5d:e6: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:8F:8B:C0:36:C5:AF:7D:6C:11:82:C3:CC:D9:C5:F5:F5:94:0E X509v3 Authority Key Identifier: keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:58:5a:f7:84:6b:38:7f:9b:ed:bc:ab:24:3b:3f:57:48:6b: 1a:da:53:a8:4c:70:34:f3:6f:b9:b3:46:b7:f4:ad:b8:c5:57: e5:ae:7e:23:8c:a0:40:c8:25:dc:34:7b:a0:8a:d0:e1:8f:4a: b4:a1:35:41:c0:4e:8a:ce:cc:22:30:5d:65:00:f1:d6:a2:32: e7:d6:50:16:53:21:00:71:8b:89:c3:f7:a1:c3:4f:44:6b:43: 0d:d3:f3:ef:05:29:08:54:38:4b:5b:4d:96:96:40:86:f5:e7: ad:39:20:1d:ce:81:79:bc:ee:f4:8e:2a:17:39:a0:68:ec:ae: 5d:9a:39:15:80:90:6b:72:8d:fe:92:c2:40:0d:4a:31:20:87: 74:03:24:f7:39:00:42:33:12:45:3c:14:66:38:f3:56:3a:1b: b3:6f:de:57:57:39:9f:a6:5b:4e:60:51:e9:30:9c:3c:ff:bd: 23:a6:7f:83:2d:80:b2:41:7e:eb:a9:ad:08:ad:81:3d:81:15: 91:7b:e8:d3:fd:41:a5:eb:4c:a1:1b:50:be:aa:df:99:e3:7e: 95:ba:2e:55:41:49:56:18:f2:12:92:c6:f5:c2:a7:a6:4b:ad: 39:13:57:ec:99:62:34:7a:90:21:b3:f4:5a:22:66:8d:50:26: 89:12:26:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN4+TcrkjFqDynkQ9cHh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx ODM2MzUwHhcNMjUxMjIyMDQwMDUwWhcNMjUxMjIzMDQwMDUwWjAzMTEwLwYDVQQD Eyg4ZjM3OGY4YmMwMzZjNWFmN2Q2YzExODJjM2NjZDljNWY1ZjU5NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyVEbZDteTKuJnL57bN1jK+e5PSA mR40LicC2nZPc07w+M7M2BZl1qn3QeiEDBedMGpMN52zVeeKyGGsVKHhuJZRY/4D AxRwvWQCdeu4sKKVRKdEK6V1iGEKESoryfSpwG7U/TeOgzjd7VRTYB0baZ4wMhsy iLSvXe02hwMGpXmDs3Vs8zLmAU0oN8ZQO0oncYYkHqgzZukRnUrrdwiCuP0D5e5N Jhk53lmKhDIxZczBvazFtM8qcoWp9N7v7ojBzbUvljgchcjJWVnEfGHpEDIm6JJ9 uoFdtnatsXyCJX/OXJEgk3NBez1wRYMtNYXY0fM1LLh2xzpS9qv4XeaRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI83j4vANsWvfWwRgsPM2cX19ZQOMB8GA1UdIwQY MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4 LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVha94Rr OH+b7byrJDs/V0hrGtpTqExwNPNvubNGt/StuMVX5a5+I4ygQMgl3DR7oIrQ4Y9K tKE1QcBOis7MIjBdZQDx1qIy59ZQFlMhAHGLicP3ocNPRGtDDdPz7wUpCFQ4S1tN lpZAhvXnrTkgHc6Bebzu9I4qFzmgaOyuXZo5FYCQa3KN/pLCQA1KMSCHdAMk9zkA QjMSRTwUZjjzVjobs2/eV1c5n6ZbTmBR6TCcPP+9I6Z/gy2AskF+66mtCK2BPYEV kXvo0/1BpetMoRtQvqrfmeN+lbouVUFJVhjyEpLG9cKnpkutORNX7JliNHqQIbP0 WiJmjVAmiRImfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:15:23 2025 by rpki-client