This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json) Hash identifier: 9db3q0ukoCmhuRQCGzXpAAwPPPB8TVLVSsq7h2qE6uM= Subject key identifier: B6:D9:54:B2:80:50:6E:C0:15:04:FE:E3:F1:05:2B:02:21:B1:60:45 Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019AF878693AA3233DB6297837A326EBBD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft Manifest number: 0B Signing time: Sun 07 Dec 2025 11:00:31 +0000 Manifest this update: Sun 07 Dec 2025 11:00:31 +0000 Manifest next update: Mon 08 Dec 2025 11:00:31 +0000 Files and hashes: 1: 84INDcZjTBlWx7iXLOUNmppVBRE.asa (hash: uOzVHo8Ev2RYxavQU1/DtqqtcYQmVGn8KRMz2l/ludA=) 2: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: 1/vP7WYuWrkcNzNRGbdPedK8KpJhyz5dDmnHsBbhEX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:69:3a:a3:23:3d:b6:29:78:37:a3:26:eb:bd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Dec 7 11:00:31 2025 GMT Not After : Dec 8 11:00:31 2025 GMT Subject: CN=b6d954b280506ec01504fee3f1052b0221b16045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:06:24:d4:b7:02:4b:9f:ac:f1:ac:a8:1e: 1d:75:91:29:97:68:1e:db:c2:60:18:99:dc:41:89: c7:8d:e0:24:d0:b0:0a:ad:0c:35:19:63:16:1c:4e: 94:14:42:15:f4:90:1a:21:04:36:1d:a1:4e:82:49: 98:46:f4:c9:92:61:56:b0:5d:ca:8b:0e:f9:e6:27: 5d:4e:d5:85:a6:95:84:b3:0b:ed:de:0a:f9:ad:36: 18:55:38:be:2d:5e:62:a8:fc:79:bf:34:c2:7d:57: 6e:29:a5:20:cd:41:ee:d8:7b:44:27:17:ae:96:c7: 24:45:51:89:e7:66:b1:20:16:38:db:ee:12:88:3f: de:e0:07:b2:b5:3b:84:5b:2d:87:10:c0:3a:fe:0e: b0:09:c9:ef:37:79:a9:33:3f:73:cb:4a:b8:82:ba: 51:6c:16:1b:ee:d5:ad:e3:80:93:16:97:63:30:64: 0c:20:4b:71:49:3d:cb:ba:8c:10:16:15:41:c5:a8: 56:a3:ba:1b:11:3f:4a:8e:dd:18:05:d2:54:81:8a: 85:ef:e0:56:0f:c4:9a:2e:75:d5:6e:5d:20:aa:30: d7:e2:c1:3b:05:9b:c5:8a:c8:5f:29:cd:0d:f8:28: c4:86:40:7b:0f:2b:f9:d6:ec:0f:3c:ab:96:32:0a: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:54:B2:80:50:6E:C0:15:04:FE:E3:F1:05:2B:02:21:B1:60:45 X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:69:ce:af:97:f9:6a:93:4c:9a:96:60:e6:4d:e7:7e:d3: 55:14:b6:ef:83:f9:cd:c9:96:a1:66:ed:47:8f:d1:27:e5:f2: af:1e:ed:23:7d:56:93:e5:05:dc:11:fe:9a:37:7c:91:a3:53: 80:13:61:2a:da:7b:04:74:41:de:8a:94:dd:86:26:6c:4c:14: 4d:e2:98:86:f4:c2:ad:61:c0:e3:aa:07:27:1a:99:df:68:fc: 66:e9:cd:3a:25:a6:ba:80:96:03:50:f8:f1:96:04:40:0f:af: e2:4c:12:b7:85:ac:30:10:0d:8f:3e:99:82:19:12:d2:68:9d: 60:f3:b9:99:44:2b:d0:0e:91:53:50:e2:21:73:10:01:08:1b: 06:66:6d:7c:c6:bb:8d:92:2d:c5:07:4f:b4:a4:ff:e8:07:f6: d8:59:e7:cc:c9:d9:ce:7f:5c:f7:12:4c:29:5f:5f:7e:50:0f: e3:b5:34:f7:f7:61:89:91:75:cf:e4:98:32:2a:4a:1d:a9:44: 33:bc:9a:f1:7f:87:d1:ec:5c:e5:21:62:f1:c5:c9:27:93:47: 58:cd:3d:1f:3c:d8:14:19:6d:73:54:b2:cb:91:25:cc:fc:a8: 4d:e7:e7:9a:31:cc:39:2d:61:d4:37:6a:52:d1:bf:ac:7f:c9: 15:ad:ee:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eGk6oyM9til4N6Mm671JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjUxMjA3MTEwMDMxWhcNMjUxMjA4MTEwMDMxWjAzMTEwLwYDVQQD EyhiNmQ5NTRiMjgwNTA2ZWMwMTUwNGZlZTNmMTA1MmIwMjIxYjE2MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomQGJNS3AkufrPGsqB4ddZEpl2ge 28JgGJncQYnHjeAk0LAKrQw1GWMWHE6UFEIV9JAaIQQ2HaFOgkmYRvTJkmFWsF3K iw755iddTtWFppWEswvt3gr5rTYYVTi+LV5iqPx5vzTCfVduKaUgzUHu2HtEJxeu lsckRVGJ52axIBY42+4SiD/e4AeytTuEWy2HEMA6/g6wCcnvN3mpMz9zy0q4grpR bBYb7tWt44CTFpdjMGQMIEtxST3LuowQFhVBxahWo7obET9Kjt0YBdJUgYqF7+BW D8SaLnXVbl0gqjDX4sE7BZvFishfKc0N+CjEhkB7Dyv51uwPPKuWMgoajwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbZVLKAUG7AFQT+4/EFKwIhsWBFMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDVpzq+X +WqTTJqWYOZN537TVRS274P5zcmWoWbtR4/RJ+Xyrx7tI31Wk+UF3BH+mjd8kaNT gBNhKtp7BHRB3oqU3YYmbEwUTeKYhvTCrWHA46oHJxqZ32j8ZunNOiWmuoCWA1D4 8ZYEQA+v4kwSt4WsMBANjz6ZghkS0midYPO5mUQr0A6RU1DiIXMQAQgbBmZtfMa7 jZItxQdPtKT/6Af22FnnzMnZzn9c9xJMKV9fflAP47U09/dhiZF1z+SYMipKHalE M7ya8X+H0exc5SFi8cXJJ5NHWM09HzzYFBltc1Syy5ElzPyoTefnmjHMOS1h1Ddq UtG/rH/JFa3uvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 17:15:43 2025 by rpki-client