This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json) Hash identifier: 1D5fhry9cH9icGqrBKuHS/9eX4mhMZQ/SzxC+ZZo3bA= Subject key identifier: C9:DC:EE:F0:83:8A:FF:39:BC:4D:7D:EF:B8:78:03:23:7D:CE:6D:34 Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Certificate serial: 019B46948CF6974E9A786869FF42DD1A6B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft Manifest number: 076B Signing time: Mon 22 Dec 2025 15:01:39 +0000 Manifest this update: Mon 22 Dec 2025 15:01:39 +0000 Manifest next update: Tue 23 Dec 2025 15:01:39 +0000 Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: Bx3KCt77t0AWN0CIJQtNDWAHP5MiOjwcfFfaZyq50yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:8c:f6:97:4e:9a:78:68:69:ff:42:dd:1a:6b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Validity Not Before: Dec 22 15:01:39 2025 GMT Not After : Dec 23 15:01:39 2025 GMT Subject: CN=c9dceef0838aff39bc4d7defb87803237dce6d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:e6:d2:46:0d:91:f5:f7:89:1e:0a:7e:92: 50:df:2c:be:87:92:d4:d6:72:e1:c5:80:0f:36:7b: b5:cc:1e:20:b1:b4:72:c0:57:79:84:47:b2:9f:1f: 1f:93:e2:39:a8:4b:f1:9a:ed:9a:03:83:ee:36:ca: ce:be:5a:63:69:34:71:c6:56:59:ae:c2:bc:19:51: fe:19:ff:bd:ea:b9:f2:7f:01:15:2c:61:59:6e:7e: dc:bf:99:b9:81:22:9a:dd:57:05:f9:56:c1:cd:31: eb:99:5c:4d:72:84:fe:ed:b4:f6:5c:af:7d:c2:35: 96:27:66:63:7f:de:8f:d1:82:0e:ca:91:d6:1a:09: ee:15:7a:eb:28:05:95:78:21:40:45:21:c2:76:ca: fe:61:9f:54:e2:9d:61:cb:a1:5d:dd:3a:c7:35:28: c7:2c:d5:45:90:3b:b0:46:ef:fc:2b:ca:08:57:38: 58:13:d4:f8:40:a8:4a:65:92:85:aa:d5:80:da:b7: e4:aa:d7:55:e3:52:41:9f:56:f6:05:4c:14:3f:40: 3b:00:f1:d9:c0:50:3f:eb:5f:6a:76:5f:01:1b:e0: a7:5b:35:f5:c6:0e:c6:13:8c:ea:6e:05:1d:f5:b0: 91:e6:eb:e1:85:d3:e8:0b:54:8a:41:19:5f:ee:2c: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:EE:F0:83:8A:FF:39:BC:4D:7D:EF:B8:78:03:23:7D:CE:6D:34 X509v3 Authority Key Identifier: keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:24:98:85:f1:51:26:0c:d9:1b:23:d2:f1:93:5f:92:27: 02:38:b0:69:ac:3a:79:9a:60:8b:4c:a6:44:51:c4:b3:ed:bf: bb:f4:fc:50:a3:09:4e:15:c5:af:85:04:92:29:92:a6:7a:58: 53:53:07:26:dc:f9:a1:0c:ee:71:18:93:2c:20:c8:d0:8f:97: 9d:93:66:20:81:00:d1:22:73:15:49:29:d5:57:7f:e0:ac:db: 08:ff:99:a9:31:49:e4:a5:25:80:d8:70:6c:57:24:5c:c8:cd: 00:a9:7b:a3:91:32:18:c7:b3:59:db:20:0b:90:f5:01:65:24: 02:e7:01:ca:a1:05:ba:35:25:0a:3d:c4:b9:98:d3:62:a6:48: 60:6f:bf:15:49:77:31:e2:b8:2e:94:63:f4:99:de:d3:34:46: 4a:29:04:ec:8e:06:ae:4a:e3:71:42:b4:10:62:f1:3e:95:6e: 02:8d:a2:fe:88:5b:a9:b7:a7:52:87:f4:12:2d:3c:7c:a1:cb: 31:76:05:08:32:cc:eb:0f:bc:8f:e8:8b:00:75:3f:5f:1f:86: f6:11:f9:9c:f3:ea:7c:17:9d:8c:03:c7:48:de:e8:f4:45:e9: 9a:2d:34:69:83:0c:81:fb:1d:6e:49:0d:9d:af:d0:ce:9a:24: 78:7c:bb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlIz2l06aeGhp/0LdGmtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4 NGE5ZTUwHhcNMjUxMjIyMTUwMTM5WhcNMjUxMjIzMTUwMTM5WjAzMTEwLwYDVQQD EyhjOWRjZWVmMDgzOGFmZjM5YmM0ZDdkZWZiODc4MDMyMzdkY2U2ZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifm0kYNkfX3iR4KfpJQ3yy+h5LU 1nLhxYAPNnu1zB4gsbRywFd5hEeynx8fk+I5qEvxmu2aA4PuNsrOvlpjaTRxxlZZ rsK8GVH+Gf+96rnyfwEVLGFZbn7cv5m5gSKa3VcF+VbBzTHrmVxNcoT+7bT2XK99 wjWWJ2Zjf96P0YIOypHWGgnuFXrrKAWVeCFARSHCdsr+YZ9U4p1hy6Fd3TrHNSjH LNVFkDuwRu/8K8oIVzhYE9T4QKhKZZKFqtWA2rfkqtdV41JBn1b2BUwUP0A7APHZ wFA/619qdl8BG+CnWzX1xg7GE4zqbgUd9bCR5uvhhdPoC1SKQRlf7iyupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnc7vCDiv85vE1977h4AyN9zm00MB8GA1UdIwQY MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXgkmIXx USYM2Rsj0vGTX5InAjiwaaw6eZpgi0ymRFHEs+2/u/T8UKMJThXFr4UEkimSpnpY U1MHJtz5oQzucRiTLCDI0I+XnZNmIIEA0SJzFUkp1Vd/4KzbCP+ZqTFJ5KUlgNhw bFckXMjNAKl7o5EyGMezWdsgC5D1AWUkAucByqEFujUlCj3EuZjTYqZIYG+/FUl3 MeK4LpRj9Jne0zRGSikE7I4GrkrjcUK0EGLxPpVuAo2i/ohbqbenUof0Ei08fKHL MXYFCDLM6w+8j+iLAHU/Xx+G9hH5nPPqfBedjAPHSN7o9EXpmi00aYMMgfsdbkkN na/QzpokeHy7Ig== -----END CERTIFICATE-----Generated at Mon Dec 22 20:50:16 2025 by rpki-client