This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json) Hash identifier: Vj8Z7dHyHYfGqOm8LuIaNE3K7NdA0bpsL4APcdNBygg= Subject key identifier: 13:FD:1A:72:90:C1:97:AD:83:B1:E4:6B:52:F6:23:33:C4:91:2E:62 Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145 Certificate serial: 019B35D72B096148C0765A5833376F9F50A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft Manifest number: 06F1 Signing time: Fri 19 Dec 2025 09:00:52 +0000 Manifest this update: Fri 19 Dec 2025 09:00:52 +0000 Manifest next update: Sat 20 Dec 2025 09:00:52 +0000 Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: XRZSpWthLZepIVgszO4B4m2G1m/+xyyYnOVb6cu78xc=) 2: xBIT4PfyqTeMr9EZAxQSDFw_tsM.roa (hash: +1108t61ZAdcCTRierOezlIx1u0lJ4yi+OpdSaQwRQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:2b:09:61:48:c0:76:5a:58:33:37:6f:9f:50:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145 Validity Not Before: Dec 19 09:00:52 2025 GMT Not After : Dec 20 09:00:52 2025 GMT Subject: CN=13fd1a7290c197ad83b1e46b52f62333c4912e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:84:fc:40:a8:e0:8b:96:2d:cc:3b:7b:e3: 6a:a5:9d:33:97:a4:75:d1:fa:b1:bb:6f:99:89:bf: d4:ad:94:f3:60:00:b8:c7:64:57:f1:0b:f9:58:2e: 31:55:c1:b6:f1:bb:77:51:08:0f:14:4a:07:10:3b: e5:d7:54:10:79:0f:c3:7b:49:c4:c6:cd:39:98:05: 8b:f4:8e:52:44:f9:84:35:35:c0:6b:57:0d:69:7d: 47:42:d5:39:16:0e:80:5a:20:c1:b1:23:e4:82:f4: e7:1d:cb:d4:3d:8f:8d:a1:a4:40:96:8b:b7:2f:23: bd:e9:b4:76:1a:60:15:29:6d:97:c6:09:50:af:d0: 2c:58:14:bf:b4:12:cc:e8:12:a9:dd:41:6d:11:a0: 88:31:2d:f2:ad:86:f2:78:8f:69:78:f7:26:bb:28: d1:0b:21:9e:2c:99:42:1a:e6:62:66:65:d7:0a:32: 6a:a0:fe:a7:f4:eb:c7:46:ff:42:32:d9:23:cd:bf: b8:85:89:ca:a6:30:0c:46:97:01:d6:c1:e6:d8:37: 55:92:55:99:07:71:23:0e:c6:3c:23:93:1b:44:dd: cb:70:96:dc:bd:08:3d:7d:8f:05:4b:2c:25:8d:bf: 7d:aa:a1:7f:f9:11:67:d2:0a:40:ec:85:b2:59:be: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:1A:72:90:C1:97:AD:83:B1:E4:6B:52:F6:23:33:C4:91:2E:62 X509v3 Authority Key Identifier: keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ea:3e:1b:be:10:fb:1e:86:ed:4c:d1:8c:13:90:2a:73:e8: a9:52:86:12:d6:ac:79:bc:c8:f7:b5:a2:f0:45:c7:7b:a4:57: fa:be:e2:c2:3c:96:02:11:f9:72:98:8b:62:26:0b:a1:60:59: 34:c0:5d:82:6d:ca:b9:6d:f5:dc:d5:07:33:64:4e:a9:b8:fa: 65:1c:fa:a1:7a:0e:01:b3:e6:17:6c:f1:cb:e3:f1:5e:36:ad: 2a:2a:8c:38:30:fb:14:b6:f3:c5:3c:8c:d7:ce:c4:28:cd:7e: 84:cf:4c:2b:41:05:5a:13:4c:75:4a:a1:89:72:20:40:a8:cf: 8d:2e:1e:59:a3:8a:83:7f:91:fc:87:1b:59:44:8e:ce:dc:5c: c7:0b:c9:ad:0f:81:4b:26:b5:65:f1:1c:8e:b6:1e:2d:a9:65: e3:5a:b9:30:b5:bf:15:c1:2b:67:99:1e:66:e6:8d:88:7a:6d: 67:3f:3c:b1:9a:9c:7e:75:ae:76:ac:6a:83:28:ac:c0:36:0b: 07:b6:d5:23:1b:d7:b9:25:94:01:2b:76:d1:5a:65:03:ec:f5: 93:da:0a:12:62:e4:c9:3d:0d:b1:d8:d3:5a:fc:e8:e5:df:e1: 1e:49:93:89:9b:91:97:cf:23:eb:94:e8:f2:5f:f9:59:40:aa: 89:30:c3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11ysJYUjAdlpYMzdvn1CiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy NjcxNDUwHhcNMjUxMjE5MDkwMDUyWhcNMjUxMjIwMDkwMDUyWjAzMTEwLwYDVQQD EygxM2ZkMWE3MjkwYzE5N2FkODNiMWU0NmI1MmY2MjMzM2M0OTEyZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4uE/ECo4IuWLcw7e+NqpZ0zl6R1 0fqxu2+Zib/UrZTzYAC4x2RX8Qv5WC4xVcG28bt3UQgPFEoHEDvl11QQeQ/De0nE xs05mAWL9I5SRPmENTXAa1cNaX1HQtU5Fg6AWiDBsSPkgvTnHcvUPY+NoaRAlou3 LyO96bR2GmAVKW2XxglQr9AsWBS/tBLM6BKp3UFtEaCIMS3yrYbyeI9pePcmuyjR CyGeLJlCGuZiZmXXCjJqoP6n9OvHRv9CMtkjzb+4hYnKpjAMRpcB1sHm2DdVklWZ B3EjDsY8I5MbRN3LcJbcvQg9fY8FSywljb99qqF/+RFn0gpA7IWyWb7lPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP9GnKQwZetg7Hka1L2IzPEkS5iMB8GA1UdIwQY MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt OGVjMWJmOWZkYTJiLzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+o+G74Q +x6G7UzRjBOQKnPoqVKGEtasebzI97Wi8EXHe6RX+r7iwjyWAhH5cpiLYiYLoWBZ NMBdgm3KuW313NUHM2ROqbj6ZRz6oXoOAbPmF2zxy+PxXjatKiqMODD7FLbzxTyM 187EKM1+hM9MK0EFWhNMdUqhiXIgQKjPjS4eWaOKg3+R/IcbWUSOztxcxwvJrQ+B Sya1ZfEcjrYeLall41q5MLW/FcErZ5keZuaNiHptZz88sZqcfnWudqxqgyiswDYL B7bVIxvXuSWUASt20VplA+z1k9oKEmLkyT0NsdjTWvzo5d/hHkmTiZuRl88j65To 8l/5WUCqiTDDNA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:55:17 2025 by rpki-client