This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json) Hash identifier: tcQXq3Nf7kWjQNS0OdpviiqRPY4g4SMBWZ0pENopK94= Subject key identifier: D2:52:CA:AD:19:58:C9:7F:46:83:37:46:6E:82:B3:3E:05:62:41:31 Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Certificate serial: 019B360E4466023EF946EDD8BA3BEDD35A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 10:01:03 +0000 Manifest this update: Fri 19 Dec 2025 10:01:03 +0000 Manifest next update: Sat 20 Dec 2025 10:01:03 +0000 Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: WcMcNP+i5Bne7uS7Giop0tFKK+3YO+2VMhIacidRtVk=) 2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:44:66:02:3e:f9:46:ed:d8:ba:3b:ed:d3:5a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Validity Not Before: Dec 19 10:01:03 2025 GMT Not After : Dec 20 10:01:03 2025 GMT Subject: CN=d252caad1958c97f468337466e82b33e05624131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:d0:60:3b:8b:74:e7:d1:fb:eb:81:40:10: af:10:f7:f7:f5:bc:72:ab:65:22:d2:3a:6d:a0:55: 18:c9:2a:a3:49:dd:f7:2a:71:99:2f:0d:c5:4a:35: 24:52:ad:af:9c:19:ed:78:33:9b:99:34:6b:8d:dd: 1f:17:ba:f6:84:b5:67:a5:cb:60:3b:94:81:3a:b4: a8:2f:b7:49:a5:71:32:86:0a:dc:0f:53:f1:11:10: 1a:ce:5f:1e:3b:49:f1:36:62:79:96:ed:a9:dd:87: 8a:73:2e:3e:d2:68:0d:5e:a7:e3:dd:d3:64:dc:0e: f5:25:26:e3:e3:e7:eb:72:2d:27:f3:d7:10:5a:73: df:52:d5:0b:4c:77:aa:d5:d1:aa:47:b3:59:3b:da: 04:79:14:95:eb:ab:2a:2d:fe:57:6f:d4:08:ad:62: 84:ec:09:89:23:0c:6a:0f:89:b9:8f:01:b1:48:d8: ee:95:ad:c5:dc:87:c7:0f:93:f0:af:4a:58:f6:9c: c8:3c:d1:1a:d2:da:d2:a6:6b:12:35:d8:3b:ae:4c: 16:4e:bf:a9:17:80:d9:fa:ab:3b:8f:ca:82:6b:33: ae:19:32:09:ce:ad:32:cd:09:70:7f:40:fe:f3:cb: 71:02:27:e3:68:f8:fd:b0:0f:b4:5b:1c:a6:48:23: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:52:CA:AD:19:58:C9:7F:46:83:37:46:6E:82:B3:3E:05:62:41:31 X509v3 Authority Key Identifier: keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:e4:94:0c:81:69:04:b4:c1:09:33:e1:15:4b:92:c5:81: b8:46:e0:9f:5c:4d:14:02:fd:31:db:94:49:9c:01:86:e6:08: d9:70:5b:de:42:43:f8:7a:93:bf:9d:c5:7e:60:40:8c:b5:bc: 45:2e:19:0b:11:0c:4a:03:c1:90:8c:49:44:fc:58:4d:d7:98: 64:e5:1d:d7:cc:54:85:12:d3:99:69:a9:89:e8:87:92:4e:1a: d4:c1:77:55:62:01:1b:6e:6f:56:73:a3:16:e1:81:c3:9b:ae: fa:32:28:72:bc:8a:c4:36:7d:38:9b:73:25:68:76:53:8b:fa: a9:2d:45:80:d7:06:1a:f5:cd:7a:d0:c5:c1:83:e7:7d:21:2c: c3:e6:5a:dc:f7:70:ca:87:a0:ae:c2:1e:57:02:d3:45:6a:b0: da:f7:ca:68:f3:27:15:64:a4:c8:18:90:40:70:64:03:3d:1d: 20:dd:74:b2:d6:5e:6a:13:f8:1e:40:a8:9e:15:40:71:8c:6c: 04:2b:3b:7c:13:8c:13:fb:fc:82:1c:66:31:39:ef:91:36:53: 5c:11:47:e9:dc:7b:36:fa:cd:39:3c:40:94:fd:38:9b:59:5e: 27:ab:64:b9:71:ba:cc:63:87:64:77:ca:93:cf:49:fb:70:5f: 9a:54:b0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DkRmAj75Ru3Yujvt01obMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh NjE5ODcwHhcNMjUxMjE5MTAwMTAzWhcNMjUxMjIwMTAwMTAzWjAzMTEwLwYDVQQD EyhkMjUyY2FhZDE5NThjOTdmNDY4MzM3NDY2ZTgyYjMzZTA1NjI0MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbQYDuLdOfR++uBQBCvEPf39bxy q2Ui0jptoFUYySqjSd33KnGZLw3FSjUkUq2vnBnteDObmTRrjd0fF7r2hLVnpctg O5SBOrSoL7dJpXEyhgrcD1PxERAazl8eO0nxNmJ5lu2p3YeKcy4+0mgNXqfj3dNk 3A71JSbj4+frci0n89cQWnPfUtULTHeq1dGqR7NZO9oEeRSV66sqLf5Xb9QIrWKE 7AmJIwxqD4m5jwGxSNjula3F3IfHD5Pwr0pY9pzIPNEa0trSpmsSNdg7rkwWTr+p F4DZ+qs7j8qCazOuGTIJzq0yzQlwf0D+88txAifjaPj9sA+0WxymSCMH2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJSyq0ZWMl/RoM3Rm6Csz4FYkExMB8GA1UdIwQY MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzHklAyB aQS0wQkz4RVLksWBuEbgn1xNFAL9MduUSZwBhuYI2XBb3kJD+HqTv53FfmBAjLW8 RS4ZCxEMSgPBkIxJRPxYTdeYZOUd18xUhRLTmWmpieiHkk4a1MF3VWIBG25vVnOj FuGBw5uu+jIocryKxDZ9OJtzJWh2U4v6qS1FgNcGGvXNetDFwYPnfSEsw+Za3Pdw yoegrsIeVwLTRWqw2vfKaPMnFWSkyBiQQHBkAz0dIN10stZeahP4HkConhVAcYxs BCs7fBOME/v8ghxmMTnvkTZTXBFH6dx7NvrNOTxAlP04m1leJ6tkuXG6zGOHZHfK k89J+3BfmlSwfA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:09:49 2025 by rpki-client