This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json) Hash identifier: RlgXJqwiolomXymCmneACiuf/Auv9xwQiNwMJfYtX38= Subject key identifier: B9:E8:2D:64:76:C7:C0:4C:6F:B5:1D:BE:B3:A7:16:FE:3E:55:BA:1F Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019B1871F4F07B2A5C30CBF3A337AE793B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft Manifest number: 0C12 Signing time: Sat 13 Dec 2025 16:01:19 +0000 Manifest this update: Sat 13 Dec 2025 16:01:19 +0000 Manifest next update: Sun 14 Dec 2025 16:01:19 +0000 Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=) 2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: iN/5CpLH0IxBxep6t9dCcKWMS5yB0zGu0lkiGrTejE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:f4:f0:7b:2a:5c:30:cb:f3:a3:37:ae:79:3b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Dec 13 16:01:19 2025 GMT Not After : Dec 14 16:01:19 2025 GMT Subject: CN=b9e82d6476c7c04c6fb51dbeb3a716fe3e55ba1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:31:0f:17:d3:9b:f1:a1:6e:69:bb:b9:07: cf:40:9e:65:3b:5c:31:80:d2:d4:ef:53:3a:64:d6: 42:60:71:53:b3:21:b8:fa:69:fe:73:56:39:88:06: e7:d8:61:95:88:f2:40:ce:16:9e:84:a6:65:30:bc: bc:c5:6b:00:8f:d0:a9:64:2f:82:64:29:38:12:1b: 3c:6c:0c:14:fa:99:65:c6:a3:66:e7:f9:84:33:df: 6a:29:a5:63:3d:b6:66:c6:71:9c:6a:43:43:cd:4c: c8:83:52:d1:ad:e7:27:b4:11:4e:47:09:91:58:e8: fa:71:72:5c:e3:cd:19:40:25:19:ff:f3:54:04:b2: 89:c3:d2:76:db:e6:e2:a1:09:37:08:6b:0c:f9:50: 31:46:36:4e:4c:55:9b:e9:15:6b:33:9b:5b:6d:46: fe:cd:2c:41:51:42:1f:c4:8b:b2:9c:08:19:6d:95: 00:06:2c:82:a6:3d:79:b2:b9:b7:c6:dc:26:5b:8d: f9:1e:50:25:b8:fb:91:76:e8:da:6e:35:16:40:b0: a2:d2:32:be:dc:58:87:76:73:18:3c:c4:2f:dc:7c: 11:ec:6e:1a:a1:8d:4e:62:4d:c0:6d:54:a5:87:8a: 77:c0:28:da:e2:84:99:2c:ab:0e:f0:a9:5e:1a:70: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:2D:64:76:C7:C0:4C:6F:B5:1D:BE:B3:A7:16:FE:3E:55:BA:1F X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d0:39:2a:2e:63:1b:da:d6:2a:b0:8c:29:02:a0:8d:51:70: 68:1b:fe:2d:8d:e2:90:74:50:d0:05:87:35:58:41:6e:f6:f9: 1f:93:1a:fb:58:df:39:f4:07:39:c9:db:7d:a8:b4:54:c6:89: 0c:1f:90:6c:a9:98:aa:20:f4:62:e8:40:35:a8:2b:ad:76:53: fd:88:8a:e9:bf:d1:b8:9c:3c:5b:ea:96:8b:af:f8:c5:28:ce: 3d:00:4c:38:15:6a:e9:58:5d:2d:c8:17:0d:3e:b7:56:c6:10: 15:29:1c:7d:bc:89:db:38:68:c2:09:5b:69:47:15:58:48:e2: 84:c8:45:b3:17:92:40:58:26:e6:3a:d9:d5:f8:64:17:0e:33: b4:1f:9d:1e:11:19:3d:3e:65:f1:d1:bb:b5:60:95:d1:33:98: 24:44:82:c4:61:ce:6a:8f:29:eb:62:00:0e:1f:7b:76:3f:07: da:11:e8:7b:e2:d0:f8:a3:89:b6:01:b6:65:2a:37:63:74:a6: b6:ba:da:49:0e:57:8d:46:50:8a:7e:58:22:b1:cf:99:a5:94: 18:65:a3:56:cc:a1:b1:76:ec:d7:f4:d6:ff:01:b9:9d:95:57: 6a:9c:89:12:1c:e4:ea:e2:ea:d7:b6:3e:94:55:dc:44:4f:02: bd:b0:3b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcfTweypcMMvzozeueTtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjUxMjEzMTYwMTE5WhcNMjUxMjE0MTYwMTE5WjAzMTEwLwYDVQQD EyhiOWU4MmQ2NDc2YzdjMDRjNmZiNTFkYmViM2E3MTZmZTNlNTViYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdExDxfTm/Ghbmm7uQfPQJ5lO1wx gNLU71M6ZNZCYHFTsyG4+mn+c1Y5iAbn2GGViPJAzhaehKZlMLy8xWsAj9CpZC+C ZCk4Ehs8bAwU+pllxqNm5/mEM99qKaVjPbZmxnGcakNDzUzIg1LRrecntBFORwmR WOj6cXJc480ZQCUZ//NUBLKJw9J22+bioQk3CGsM+VAxRjZOTFWb6RVrM5tbbUb+ zSxBUUIfxIuynAgZbZUABiyCpj15srm3xtwmW435HlAluPuRdujabjUWQLCi0jK+ 3FiHdnMYPMQv3HwR7G4aoY1OYk3AbVSlh4p3wCja4oSZLKsO8KleGnDgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnoLWR2x8BMb7UdvrOnFv4+VbofMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtA5Ki5j G9rWKrCMKQKgjVFwaBv+LY3ikHRQ0AWHNVhBbvb5H5Ma+1jfOfQHOcnbfai0VMaJ DB+QbKmYqiD0YuhANagrrXZT/YiK6b/RuJw8W+qWi6/4xSjOPQBMOBVq6VhdLcgX DT63VsYQFSkcfbyJ2zhowglbaUcVWEjihMhFsxeSQFgm5jrZ1fhkFw4ztB+dHhEZ PT5l8dG7tWCV0TOYJESCxGHOao8p62IADh97dj8H2hHoe+LQ+KOJtgG2ZSo3Y3Sm trraSQ5XjUZQin5YIrHPmaWUGGWjVsyhsXbs1/TW/wG5nZVXapyJEhzk6uLq17Y+ lFXcRE8CvbA7gQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:02 2025 by rpki-client