This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json) Hash identifier: 1uO74KTaGjy7FpX3VWNMYUCgQpff1MXrwFSXa8h2FGk= Subject key identifier: 15:E0:34:E4:32:34:D1:EA:B6:B3:8A:7B:E8:78:0B:13:61:A9:F3:0C Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Certificate serial: 019B115D5250FA0E45B1A5ED2857AF089A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 07:01:27 +0000 Manifest this update: Fri 12 Dec 2025 07:01:27 +0000 Manifest next update: Sat 13 Dec 2025 07:01:27 +0000 Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: u+id3KryLJ/zW7jdkbJwLwRzVV7dwbRillVuSfZIbOA=) 2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:52:50:fa:0e:45:b1:a5:ed:28:57:af:08:9a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Validity Not Before: Dec 12 07:01:27 2025 GMT Not After : Dec 13 07:01:27 2025 GMT Subject: CN=15e034e43234d1eab6b38a7be8780b1361a9f30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:b4:f5:da:63:32:0b:5c:57:cd:0c:20:8e: 5b:8e:ea:7d:62:f2:c3:17:b0:77:80:b0:60:7d:69: 5d:ca:21:24:50:00:08:e8:63:93:97:67:09:a6:f2: d1:3d:c0:10:35:05:53:f6:69:11:8d:47:9e:d5:9d: 8e:09:8b:af:dd:4e:54:80:1e:2d:49:63:ff:f3:d0: 67:9f:a5:e3:e2:93:21:c5:78:8d:fd:2a:98:54:29: 62:75:9d:8a:ab:74:3c:2c:4b:9f:99:16:1f:1a:32: 62:5b:6a:c4:12:09:71:55:0a:92:d4:5d:68:02:68: c5:76:d1:f4:10:08:f1:68:eb:a1:50:98:62:74:69: e2:8d:d2:90:9b:4a:18:c3:58:8a:5a:60:3c:1d:59: 4e:8d:a5:2f:33:85:17:93:23:08:81:e7:bc:e1:40: 27:71:ed:36:87:ae:c2:b5:17:24:73:9b:21:93:15: a3:f6:18:f4:f5:7f:4d:cb:c4:85:e8:e7:c3:64:ea: 29:fc:83:38:fd:9a:68:d5:bc:95:9f:02:0f:8a:0c: 76:1a:9c:dd:8d:a3:92:15:e7:a4:21:68:7c:d0:35: aa:69:2f:ca:59:40:9e:eb:9e:7d:4f:f0:da:fd:f4: 6d:69:f0:4d:c9:5d:95:df:5b:a4:5f:7e:3e:b0:6c: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:34:E4:32:34:D1:EA:B6:B3:8A:7B:E8:78:0B:13:61:A9:F3:0C X509v3 Authority Key Identifier: keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:56:be:4a:7d:df:10:dd:c2:7a:26:50:77:64:3e:a4:24: 4d:50:ab:b5:0d:5e:01:11:d9:ac:0f:1c:31:ad:23:ce:67:c4: 33:aa:0b:02:58:a3:ef:0d:61:70:65:b0:8b:2c:ea:77:65:c0: f9:21:df:4b:ca:26:6e:31:30:67:63:49:27:3c:f6:c1:ff:ec: b3:ff:76:bf:84:c3:da:a9:da:90:f6:0a:e9:45:84:4b:2a:21: 14:e1:cd:af:f0:e8:ec:55:bb:cf:3a:cf:e6:22:86:d3:00:f3: 0c:c3:34:44:50:04:27:6a:4c:71:74:31:a8:c1:6c:65:c5:b5: ba:ba:19:42:88:e0:06:25:70:3c:eb:06:f7:7c:48:3b:d1:da: aa:92:17:38:e8:86:ae:48:1c:8d:a7:8e:6e:0e:50:c9:65:d5: 6d:0b:4d:ac:19:da:62:4d:7b:a8:9a:68:d8:3d:29:1a:a7:6a: 69:23:3d:66:1a:05:9f:4a:cc:37:e8:72:56:2a:32:1f:71:54: ee:e7:31:3c:06:2b:5b:2a:42:fd:47:b3:2c:d6:26:29:0f:d5: 96:49:cd:b9:33:32:5c:91:24:83:48:01:df:2e:e1:90:24:99: 59:ed:28:cf:96:77:02:78:1a:01:82:ec:bc:fd:c2:81:40:77: a4:33:65:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXVJQ+g5FsaXtKFevCJqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh YzIwYTgwHhcNMjUxMjEyMDcwMTI3WhcNMjUxMjEzMDcwMTI3WjAzMTEwLwYDVQQD EygxNWUwMzRlNDMyMzRkMWVhYjZiMzhhN2JlODc4MGIxMzYxYTlmMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0G09dpjMgtcV80MII5bjup9YvLD F7B3gLBgfWldyiEkUAAI6GOTl2cJpvLRPcAQNQVT9mkRjUee1Z2OCYuv3U5UgB4t SWP/89Bnn6Xj4pMhxXiN/SqYVClidZ2Kq3Q8LEufmRYfGjJiW2rEEglxVQqS1F1o AmjFdtH0EAjxaOuhUJhidGnijdKQm0oYw1iKWmA8HVlOjaUvM4UXkyMIgee84UAn ce02h67CtRckc5shkxWj9hj09X9Ny8SF6OfDZOop/IM4/Zpo1byVnwIPigx2Gpzd jaOSFeekIWh80DWqaS/KWUCe6559T/Da/fRtafBNyV2V31ukX34+sGzVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXgNOQyNNHqtrOKe+h4CxNhqfMMMB8GA1UdIwQY MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2 LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjdWvkp9 3xDdwnomUHdkPqQkTVCrtQ1eARHZrA8cMa0jzmfEM6oLAlij7w1hcGWwiyzqd2XA +SHfS8ombjEwZ2NJJzz2wf/ss/92v4TD2qnakPYK6UWESyohFOHNr/Do7FW7zzrP 5iKG0wDzDMM0RFAEJ2pMcXQxqMFsZcW1uroZQojgBiVwPOsG93xIO9HaqpIXOOiG rkgcjaeObg5QyWXVbQtNrBnaYk17qJpo2D0pGqdqaSM9ZhoFn0rMN+hyVioyH3FU 7ucxPAYrWypC/UezLNYmKQ/VlknNuTMyXJEkg0gB3y7hkCSZWe0oz5Z3AngaAYLs vP3CgUB3pDNl/A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:56:38 2025 by rpki-client