This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json) Hash identifier: ZlGpjuVqOp183DUQxYzp0C6j0Gajx17P6Ksh4p/XvFk= Subject key identifier: D2:A9:39:6D:34:7D:D3:F6:74:8F:0A:C6:0C:E4:EA:A6:79:15:6D:CD Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95 Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95 Certificate serial: 019B19BC4887BDD9F4D796B4F3C9F7A82C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft Manifest number: 12B7 Signing time: Sat 13 Dec 2025 22:02:08 +0000 Manifest this update: Sat 13 Dec 2025 22:02:08 +0000 Manifest next update: Sun 14 Dec 2025 22:02:08 +0000 Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: IM2wZSXlhakWXZ9W4PRbKB4/w8KbL0mX6vXabP9oWzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:48:87:bd:d9:f4:d7:96:b4:f3:c9:f7:a8:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95 Validity Not Before: Dec 13 22:02:08 2025 GMT Not After : Dec 14 22:02:08 2025 GMT Subject: CN=d2a9396d347dd3f6748f0ac60ce4eaa679156dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:84:67:4c:6e:5d:7b:3d:63:a0:d5:b9:13: 8d:a5:ee:07:79:37:22:2f:bd:62:0a:f5:aa:b4:57: 7f:9c:6f:e9:ca:2e:6b:51:5c:37:2a:5e:24:74:bf: 35:04:fe:1b:a2:02:f2:60:61:dd:dc:6a:1e:34:cd: 3f:6e:07:3d:1e:c2:4a:c9:9c:ff:33:3b:fa:b6:87: f5:a2:86:20:ac:54:91:04:75:80:f7:e2:69:fd:8e: fd:d1:6a:47:91:9d:02:85:f0:2e:6e:52:77:4b:6a: 65:40:b3:70:50:1d:69:2f:78:03:05:7f:4f:3b:c2: 46:bc:8c:cf:c4:e9:14:4f:08:ef:ee:cb:f7:fe:2d: d8:70:e2:eb:19:0f:89:f4:98:3c:ed:2e:f0:dc:f9: 51:9a:c5:50:5a:24:0d:80:8b:75:85:24:3e:e6:b9: 1e:4f:b2:ef:c4:1b:b9:bf:4c:e1:0d:da:fd:30:1a: a3:54:6b:cc:8b:06:62:64:b9:2f:32:db:48:d1:50: 17:58:31:bf:ef:9e:05:22:60:35:1c:52:86:fb:52: c0:d1:17:b6:5d:70:66:02:69:c1:f3:d4:d9:94:0b: 7b:98:f9:96:9a:46:7e:14:23:f3:1c:dd:30:81:80: 03:3e:eb:b5:bc:28:f7:29:e5:c0:f9:90:87:f9:4c: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A9:39:6D:34:7D:D3:F6:74:8F:0A:C6:0C:E4:EA:A6:79:15:6D:CD X509v3 Authority Key Identifier: keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:dd:29:68:f1:12:04:a2:0d:0f:aa:b3:ea:69:af:fa:31:25: 98:73:a0:d7:28:3d:a2:d0:80:27:21:53:84:48:ba:a4:19:14: 30:78:f9:c3:44:20:45:d9:a9:e1:09:4c:b0:d6:ca:2c:2d:7b: e4:15:09:c0:40:a2:be:76:c4:2d:ca:ed:c3:ae:50:3e:67:1e: 1e:92:24:e8:20:fc:b5:d6:b6:ec:d5:2b:2d:92:dc:bb:c8:3d: f7:42:93:fe:02:d8:a9:95:1e:b8:ad:dd:96:b6:45:af:6c:a8: 94:1d:49:59:9e:f7:59:c8:bc:cf:d0:20:dc:4d:1f:09:18:1e: 1a:d0:ef:d2:16:a0:64:21:d8:bf:fb:78:ae:55:92:49:1a:40: a4:ad:a1:43:1d:0f:35:1e:aa:dc:3c:40:06:37:f3:96:25:3c: 9a:97:a1:9e:4e:b5:21:d9:c2:bc:75:63:c2:21:51:76:ee:29: 03:11:09:cd:cd:fe:5f:00:20:21:b9:46:d3:cb:35:6b:d7:e0: 78:fb:6d:e2:bc:03:41:15:c1:71:97:68:56:8d:e5:55:9e:74: ed:69:4a:d2:43:66:35:0c:2b:ab:81:f4:71:24:35:be:b1:f6: 3b:66:03:7d:d7:f2:b3:d8:fc:7d:ce:35:82:88:26:47:f7:70: 8e:13:07:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvEiHvdn015a088n3qCxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGNkNmUxZDVmY2MwNDViOWU2NTk5YzBjYWVhMTdkNDc2 ODVmOTUwHhcNMjUxMjEzMjIwMjA4WhcNMjUxMjE0MjIwMjA4WjAzMTEwLwYDVQQD EyhkMmE5Mzk2ZDM0N2RkM2Y2NzQ4ZjBhYzYwY2U0ZWFhNjc5MTU2ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudyEZ0xuXXs9Y6DVuRONpe4HeTci L71iCvWqtFd/nG/pyi5rUVw3Kl4kdL81BP4bogLyYGHd3GoeNM0/bgc9HsJKyZz/ Mzv6tof1ooYgrFSRBHWA9+Jp/Y790WpHkZ0ChfAublJ3S2plQLNwUB1pL3gDBX9P O8JGvIzPxOkUTwjv7sv3/i3YcOLrGQ+J9Jg87S7w3PlRmsVQWiQNgIt1hSQ+5rke T7LvxBu5v0zhDdr9MBqjVGvMiwZiZLkvMttI0VAXWDG/754FImA1HFKG+1LA0Re2 XXBmAmnB89TZlAt7mPmWmkZ+FCPzHN0wgYADPuu1vCj3KeXA+ZCH+UwNAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKpOW00fdP2dI8Kxgzk6qZ5FW3NMB8GA1UdIwQY MBaAFE+M1uHV/MBFueZZnAyuoX1HaF+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYt MmVjYTc2YmM3ZmNhLzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYtMmVjYTc2YmM3ZmNh LzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApN0paPES BKIND6qz6mmv+jElmHOg1yg9otCAJyFThEi6pBkUMHj5w0QgRdmp4QlMsNbKLC17 5BUJwECivnbELcrtw65QPmceHpIk6CD8tda27NUrLZLcu8g990KT/gLYqZUeuK3d lrZFr2yolB1JWZ73Wci8z9Ag3E0fCRgeGtDv0hagZCHYv/t4rlWSSRpApK2hQx0P NR6q3DxABjfzliU8mpehnk61IdnCvHVjwiFRdu4pAxEJzc3+XwAgIblG08s1a9fg ePtt4rwDQRXBcZdoVo3lVZ507WlK0kNmNQwrq4H0cSQ1vrH2O2YDfdfys9j8fc41 gogmR/dwjhMH+A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:13 2025 by rpki-client