This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft File: T03F1MB2_YQmOrcubxe1_0rLhEg.mft (raw, json) Hash identifier: gf6Ycpp3LsQnWjPn8eWQZSPH/QXg/TzQxq3/L9+nbLU= Subject key identifier: BA:91:27:C4:8E:10:CE:94:FC:B9:12:70:43:7E:2E:CA:3D:9E:EF:A0 Authority key identifier: 4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48 Certificate issuer: /CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448 Certificate serial: 019B251A4EB5B188879DF2BA9107513BA671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft Manifest number: 0A99 Signing time: Tue 16 Dec 2025 03:00:39 +0000 Manifest this update: Tue 16 Dec 2025 03:00:39 +0000 Manifest next update: Wed 17 Dec 2025 03:00:39 +0000 Files and hashes: 1: T03F1MB2_YQmOrcubxe1_0rLhEg.crl (hash: NGmB64Jk0hPTcwLBjfbbdGE9wnNm/cx31B9ct8tg174=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:4e:b5:b1:88:87:9d:f2:ba:91:07:51:3b:a6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448 Validity Not Before: Dec 16 03:00:39 2025 GMT Not After : Dec 17 03:00:39 2025 GMT Subject: CN=ba9127c48e10ce94fcb91270437e2eca3d9eefa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:a4:30:1e:dd:ff:5d:9e:01:05:ae:be:2d: 9c:d5:7a:6f:ba:9d:d9:68:8c:5a:2d:f8:6f:b7:af: ce:cc:05:80:08:88:95:3b:15:b1:f8:b3:54:63:92: 81:31:4a:73:f4:e5:ea:ac:c1:bc:1b:24:13:bf:ae: d9:b3:c3:39:8c:ce:68:4e:8f:04:fd:b2:87:14:a8: 9a:92:60:9f:9f:4c:db:30:c3:34:0b:95:f7:7a:ae: 9c:75:ab:19:fb:fd:7f:0d:ed:9c:3b:35:6b:8d:ec: 37:6b:6f:04:01:df:d5:cf:b9:f5:36:a2:79:30:fe: 17:5a:28:67:c3:4c:49:75:8d:9d:65:bc:b6:c9:17: ac:8b:00:0c:94:02:dd:7c:fc:3e:02:5e:f0:97:a9: 2a:b3:4e:33:09:95:0b:3a:5b:fb:5d:9a:a8:10:85: 78:7b:ca:9b:48:62:09:95:e5:e2:f4:1f:10:39:34: a3:81:c5:21:ea:10:7d:26:39:f5:38:8d:0a:3d:d9: 3d:06:6c:76:1c:fb:4f:16:c2:90:e0:51:33:5d:92: f6:8e:1c:73:b5:f7:fe:63:c1:73:88:ab:e8:4c:1b: ae:b7:a4:f7:39:85:eb:1e:64:df:8e:7e:57:ee:de: 69:42:78:f6:e8:55:b2:44:30:a8:d9:d2:a4:dc:3e: c5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:27:C4:8E:10:CE:94:FC:B9:12:70:43:7E:2E:CA:3D:9E:EF:A0 X509v3 Authority Key Identifier: keyid:4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cc:15:39:3b:5b:28:e0:c7:01:90:ca:1f:0c:df:55:b3:d1: ce:49:c8:a9:52:3b:83:e4:1c:62:97:be:6f:ad:b2:0a:9e:0d: 9d:57:05:a5:9d:f9:f8:f8:bd:6a:a5:54:01:9f:e9:41:d3:2d: b2:cb:eb:bc:05:58:03:4f:91:e5:82:b2:15:77:fc:18:f8:30: 36:f4:cf:93:c7:d1:96:a9:14:40:81:53:4f:cc:3f:73:15:fe: 85:04:fe:22:a0:8d:fe:5b:48:d9:d9:8f:0b:7f:ec:1d:24:41: 5a:8f:8f:55:5a:4f:ba:ae:bf:38:7f:08:e2:da:4b:02:a1:87: 73:4c:6c:8b:7e:09:b3:6f:44:7d:15:22:90:60:84:94:e9:2b: b1:70:0f:9d:23:0f:36:c9:b7:c2:f4:f9:7a:db:77:53:bd:f9: 51:c5:7d:8b:86:7b:54:1b:c8:58:f2:ce:37:08:32:3f:49:1a: 23:1c:1d:64:2b:fb:f3:6e:01:62:32:2f:59:61:4b:ab:ef:10: 97:25:e4:7c:29:a2:eb:4f:1e:e8:dc:9a:7d:52:e3:74:c9:d2: bb:b4:3d:b8:b5:43:17:fa:c4:98:d6:9e:97:43:d9:45:36:b2: 68:36:06:2f:92:fb:fe:4c:bd:63:c2:2a:25:c7:0e:3b:88:9b: 38:28:c0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGk61sYiHnfK6kQdRO6ZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGRjNWQ0YzA3NmZkODQyNjNhYjcyZTZmMTdiNWZmNGFj Yjg0NDgwHhcNMjUxMjE2MDMwMDM5WhcNMjUxMjE3MDMwMDM5WjAzMTEwLwYDVQQD EyhiYTkxMjdjNDhlMTBjZTk0ZmNiOTEyNzA0MzdlMmVjYTNkOWVlZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK+kMB7d/12eAQWuvi2c1Xpvup3Z aIxaLfhvt6/OzAWACIiVOxWx+LNUY5KBMUpz9OXqrMG8GyQTv67Zs8M5jM5oTo8E /bKHFKiakmCfn0zbMMM0C5X3eq6cdasZ+/1/De2cOzVrjew3a28EAd/Vz7n1NqJ5 MP4XWihnw0xJdY2dZby2yResiwAMlALdfPw+Al7wl6kqs04zCZULOlv7XZqoEIV4 e8qbSGIJleXi9B8QOTSjgcUh6hB9Jjn1OI0KPdk9Bmx2HPtPFsKQ4FEzXZL2jhxz tff+Y8FziKvoTBuut6T3OYXrHmTfjn5X7t5pQnj26FWyRDCo2dKk3D7FfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqRJ8SOEM6U/LkScEN+Lso9nu+gMB8GA1UdIwQY MBaAFE9NxdTAdv2EJjq3Lm8Xtf9Ky4RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAzRjFNQjJfWVFtT3JjdWJ4ZTFfMHJMaEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yNTc1ZmUtYTUyNi00MTk1LTk3NDUt ZmE5NmJkZDJmZmEzLzEvVDAzRjFNQjJfWVFtT3JjdWJ4ZTFfMHJMaEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yNTc1ZmUtYTUyNi00MTk1LTk3NDUtZmE5NmJkZDJmZmEz LzEvVDAzRjFNQjJfWVFtT3JjdWJ4ZTFfMHJMaEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcwVOTtb KODHAZDKHwzfVbPRzknIqVI7g+QcYpe+b62yCp4NnVcFpZ35+Pi9aqVUAZ/pQdMt ssvrvAVYA0+R5YKyFXf8GPgwNvTPk8fRlqkUQIFTT8w/cxX+hQT+IqCN/ltI2dmP C3/sHSRBWo+PVVpPuq6/OH8I4tpLAqGHc0xsi34Js29EfRUikGCElOkrsXAPnSMP Nsm3wvT5ett3U735UcV9i4Z7VBvIWPLONwgyP0kaIxwdZCv7824BYjIvWWFLq+8Q lyXkfCmi608e6NyafVLjdMnSu7Q9uLVDF/rEmNael0PZRTayaDYGL5L7/ky9Y8Iq JccOO4ibOCjAhA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:22 2025 by rpki-client