This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json) Hash identifier: ZaOpYLo4Ma58P7KVVwlD7RLw1a0UR1XC26Jr33p57LE= Subject key identifier: EC:78:63:5F:04:83:73:AD:94:37:24:C7:5D:5F:61:75:66:47:CF:2E Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Certificate serial: 019AF9545EE9878432FC94ED9F5F46DDF1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft Manifest number: 02D8 Signing time: Sun 07 Dec 2025 15:00:47 +0000 Manifest this update: Sun 07 Dec 2025 15:00:47 +0000 Manifest next update: Mon 08 Dec 2025 15:00:47 +0000 Files and hashes: 1: 52rM1TLXeNL9F-vxMnLogxZvGbg.roa (hash: t74CQPsg3SU8+YzT6bR/4fFoJ3HTMThAu9/OMJSg+7c=) 2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: YLIrweXZ/9DdMKesWyiI/+F2g2EheM4vrzTJWxyXqXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:5e:e9:87:84:32:fc:94:ed:9f:5f:46:dd:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Validity Not Before: Dec 7 15:00:47 2025 GMT Not After : Dec 8 15:00:47 2025 GMT Subject: CN=ec78635f048373ad943724c75d5f61756647cf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fb:cc:d8:5f:0e:74:5e:d8:a8:45:23:e6:d9: 0b:56:79:b1:23:24:78:33:b7:94:b4:60:95:92:e8: e5:76:37:b7:11:0a:d2:32:d0:d4:08:8d:50:cb:d2: 93:bb:06:39:66:f7:54:0a:f7:ac:2b:62:84:3b:ab: 3f:6b:58:c3:39:78:99:85:57:30:f6:dd:ad:0b:2e: bb:03:9f:4a:75:9b:98:44:74:e2:d5:ec:dd:d0:da: a7:07:70:8a:8d:08:08:ce:92:20:68:ff:93:eb:76: 39:09:f1:fd:ac:1b:6d:e3:8f:d7:3f:e9:9d:96:fe: 64:02:77:86:8a:29:fb:95:94:22:e1:bc:a3:a3:bc: ca:92:f8:23:41:1c:44:e5:e3:b1:ff:5a:93:70:a2: 24:7f:78:f1:41:16:ff:b7:52:44:30:bc:34:d1:13: 1c:08:b4:02:ca:91:92:e3:36:cd:4a:79:4b:8a:24: 08:2b:46:90:5c:4b:4f:f0:a9:44:df:82:73:ff:be: 15:d6:80:5f:74:c1:23:48:9e:6d:28:ad:7f:49:2f: 1e:20:7d:6f:c8:8e:3a:b5:9b:14:94:37:c9:f9:1c: e2:4f:ba:15:90:61:52:28:c0:b8:67:c2:77:5f:2f: 84:f4:57:a9:5f:b6:e5:26:77:4a:62:07:48:74:ab: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:63:5F:04:83:73:AD:94:37:24:C7:5D:5F:61:75:66:47:CF:2E X509v3 Authority Key Identifier: keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:97:96:64:c2:dc:d4:f0:c4:79:09:9e:63:dc:9f:25:cb: e1:b4:ee:fd:80:f6:56:4a:55:62:b1:1d:85:fd:18:d2:a4:fa: 7a:43:a0:18:d8:d2:21:af:17:54:a1:37:16:7f:cb:bf:f9:44: 96:0a:97:44:96:62:83:f7:38:9a:be:20:e3:48:cb:e2:75:dd: 39:c1:74:46:a9:1a:ae:f3:99:5a:0f:8b:ff:cd:12:86:dc:ad: 90:a5:b6:fc:71:60:08:71:1c:9b:f3:ec:8b:94:47:c7:6a:be: 38:2e:78:bc:a6:9f:c6:ba:3f:c3:8e:27:dd:71:b2:43:66:e0: 91:31:4b:6f:91:11:97:21:89:fd:64:bd:56:a3:04:8f:c8:fc: 1b:b4:be:6f:00:a3:ff:34:ca:02:1a:20:be:66:2b:36:96:52: ab:b8:e3:6e:19:79:51:da:f6:bb:f0:6f:68:fd:d9:cd:93:05: 3b:fb:89:15:2b:28:16:14:1f:7f:e6:9e:28:50:53:55:96:4b: 51:97:fc:bf:7e:bd:12:67:00:ba:ba:4a:fb:b4:14:45:e0:83: 03:2e:dc:26:a5:90:d5:0d:26:cc:7f:7e:3a:2b:b3:2e:a9:b6: 90:db:ee:17:72:60:93:fe:6d:b4:60:20:0b:3a:97:ad:0d:ef: 91:15:20:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VF7ph4Qy/JTtn19G3fGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk NjY5NzMwHhcNMjUxMjA3MTUwMDQ3WhcNMjUxMjA4MTUwMDQ3WjAzMTEwLwYDVQQD EyhlYzc4NjM1ZjA0ODM3M2FkOTQzNzI0Yzc1ZDVmNjE3NTY2NDdjZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vvM2F8OdF7YqEUj5tkLVnmxIyR4 M7eUtGCVkujldje3EQrSMtDUCI1Qy9KTuwY5ZvdUCvesK2KEO6s/a1jDOXiZhVcw 9t2tCy67A59KdZuYRHTi1ezd0NqnB3CKjQgIzpIgaP+T63Y5CfH9rBtt44/XP+md lv5kAneGiin7lZQi4byjo7zKkvgjQRxE5eOx/1qTcKIkf3jxQRb/t1JEMLw00RMc CLQCypGS4zbNSnlLiiQIK0aQXEtP8KlE34Jz/74V1oBfdMEjSJ5tKK1/SS8eIH1v yI46tZsUlDfJ+RziT7oVkGFSKMC4Z8J3Xy+E9FepX7blJndKYgdIdKvU+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx4Y18Eg3OtlDckx11fYXVmR88uMB8GA1UdIwQY MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt OGE1NDVjYjM1YTlhLzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvuXlmTC 3NTwxHkJnmPcnyXL4bTu/YD2VkpVYrEdhf0Y0qT6ekOgGNjSIa8XVKE3Fn/Lv/lE lgqXRJZig/c4mr4g40jL4nXdOcF0RqkarvOZWg+L/80ShtytkKW2/HFgCHEcm/Ps i5RHx2q+OC54vKafxro/w44n3XGyQ2bgkTFLb5ERlyGJ/WS9VqMEj8j8G7S+bwCj /zTKAhogvmYrNpZSq7jjbhl5Udr2u/BvaP3ZzZMFO/uJFSsoFhQff+aeKFBTVZZL UZf8v369EmcAurpK+7QUReCDAy7cJqWQ1Q0mzH9+OiuzLqm2kNvuF3Jgk/5ttGAg CzqXrQ3vkRUg7g== -----END CERTIFICATE-----Generated at Sun Dec 7 23:13:21 2025 by rpki-client