This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json) Hash identifier: vIvgbZ3W1lE2whuOGKkOEieg2DsQGNyW2QoNl9VtRiM= Subject key identifier: 67:FC:63:C7:8E:3B:5D:78:42:C4:F0:68:2B:A7:9F:57:E9:90:22:7F Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Certificate serial: 019B292FDA25390B6A087461CCB3B3DF317F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft Manifest number: 033E Signing time: Tue 16 Dec 2025 22:02:40 +0000 Manifest this update: Tue 16 Dec 2025 22:02:40 +0000 Manifest next update: Wed 17 Dec 2025 22:02:40 +0000 Files and hashes: 1: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (hash: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=) 2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: lPmbS+yov0cw/fUilM8FE+6jaklQ0TjV5iTiVo/PKTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:da:25:39:0b:6a:08:74:61:cc:b3:b3:df:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Validity Not Before: Dec 16 22:02:40 2025 GMT Not After : Dec 17 22:02:40 2025 GMT Subject: CN=67fc63c78e3b5d7842c4f0682ba79f57e990227f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:67:d8:b0:ca:ae:49:80:68:e8:f4:1a:f6: a4:ba:2a:30:cd:cd:f9:fa:12:86:78:b4:7f:ca:1d: 00:9b:c8:52:52:55:07:b0:37:18:07:cf:19:3a:06: 94:4b:db:38:fa:83:a9:0c:a2:2a:b6:cc:cc:d5:99: 7b:59:b0:22:2b:70:13:6e:78:e4:9c:c6:82:5f:2b: 87:13:92:b4:42:08:53:ed:60:e7:63:f1:2e:4a:ad: 5e:7e:a2:34:1b:91:53:66:a9:46:e2:e7:9e:66:e8: 94:e7:27:a2:09:3b:99:f1:f6:f6:5c:7b:ba:d0:40: df:4f:f1:8a:df:ea:b0:bd:d5:2a:89:f6:cb:e4:55: 12:06:bf:03:f0:e6:17:22:87:ff:50:66:e1:8e:b4: fd:b3:01:fc:c1:93:5f:b8:f7:23:2f:8e:1f:2a:58: 9d:76:73:18:bc:32:16:08:11:b2:8d:27:3e:05:be: 95:2e:b8:41:4d:13:c1:6b:32:75:d1:16:47:ef:08: 28:44:19:15:06:05:5c:f8:42:1a:f7:bc:59:bb:7b: 6c:e9:d0:8a:35:57:67:21:7a:a8:d4:ab:41:49:2e: 39:e5:84:10:1b:95:a6:2c:ec:26:9e:52:11:13:0d: 6e:40:ed:2f:87:d1:e1:3e:1d:b5:0f:d8:4a:b2:4c: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:63:C7:8E:3B:5D:78:42:C4:F0:68:2B:A7:9F:57:E9:90:22:7F X509v3 Authority Key Identifier: keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d3:df:01:ff:f2:ea:ec:6c:db:a6:7e:b9:96:69:a9:a4:cb: 6e:60:10:fd:a2:f0:b2:2e:7b:c8:86:59:18:ba:4e:1e:7f:ea: d7:fc:80:a8:28:41:a5:3b:71:30:05:87:0e:02:8f:21:f7:ba: 39:98:71:3d:ac:93:02:6d:16:c8:58:dd:fe:f5:83:84:17:62: fd:7a:4b:54:05:0e:8d:92:22:ee:d8:d1:44:b6:df:5f:fa:00: 44:af:2e:72:02:9c:57:c9:b2:80:e9:3d:1c:67:e9:63:a5:5a: 40:ff:d9:52:1e:10:b1:b5:db:69:66:83:ca:53:bf:d5:fb:f9: 78:22:f4:32:8a:9f:e1:56:ad:61:87:cb:a5:d5:73:17:ea:15: e5:08:96:d2:3f:bf:e3:5b:91:b4:a3:7b:7b:27:dd:81:c2:73: 7d:67:b2:02:cf:79:ce:fa:43:e6:06:a3:8c:f6:9e:eb:ff:d0: ad:fe:20:bf:36:26:60:47:96:a2:ce:81:19:87:d0:8f:c2:52: 41:14:0b:e0:0e:0f:cc:bc:5b:a8:b2:b5:43:fe:9a:b9:8d:1c: be:c2:05:2f:15:c0:f4:22:ab:d3:f1:b6:c7:a5:e0:5f:fc:7e: e2:88:30:e7:c9:ce:a0:06:51:bd:f8:12:f2:e4:5e:39:04:7f: f7:38:4b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL9olOQtqCHRhzLOz3zF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDAxZGMxM2U1MGU5Y2MzZDQyZDkxM2VhNjViMTU1NGM5 NWE1NDgwHhcNMjUxMjE2MjIwMjQwWhcNMjUxMjE3MjIwMjQwWjAzMTEwLwYDVQQD Eyg2N2ZjNjNjNzhlM2I1ZDc4NDJjNGYwNjgyYmE3OWY1N2U5OTAyMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu59n2LDKrkmAaOj0Gvakuiowzc35 +hKGeLR/yh0Am8hSUlUHsDcYB88ZOgaUS9s4+oOpDKIqtszM1Zl7WbAiK3ATbnjk nMaCXyuHE5K0QghT7WDnY/EuSq1efqI0G5FTZqlG4ueeZuiU5yeiCTuZ8fb2XHu6 0EDfT/GK3+qwvdUqifbL5FUSBr8D8OYXIof/UGbhjrT9swH8wZNfuPcjL44fKlid dnMYvDIWCBGyjSc+Bb6VLrhBTRPBazJ10RZH7wgoRBkVBgVc+EIa97xZu3ts6dCK NVdnIXqo1KtBSS455YQQG5WmLOwmnlIREw1uQO0vh9HhPh21D9hKskyvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf8Y8eOO114QsTwaCunn1fpkCJ/MB8GA1UdIwQY MBaAFE9AHcE+UOnMPULZE+plsVVMlaVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4Njkt M2EwNWJiNzUzMGM2LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4NjktM2EwNWJiNzUzMGM2 LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNPfAf/y 6uxs26Z+uZZpqaTLbmAQ/aLwsi57yIZZGLpOHn/q1/yAqChBpTtxMAWHDgKPIfe6 OZhxPayTAm0WyFjd/vWDhBdi/XpLVAUOjZIi7tjRRLbfX/oARK8ucgKcV8mygOk9 HGfpY6VaQP/ZUh4QsbXbaWaDylO/1fv5eCL0Moqf4VatYYfLpdVzF+oV5QiW0j+/ 41uRtKN7eyfdgcJzfWeyAs95zvpD5gajjPae6//Qrf4gvzYmYEeWos6BGYfQj8JS QRQL4A4PzLxbqLK1Q/6auY0cvsIFLxXA9CKr0/G2x6XgX/x+4ogw58nOoAZRvfgS 8uReOQR/9zhLsw== -----END CERTIFICATE-----Generated at Wed Dec 17 00:27:03 2025 by rpki-client