This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json) Hash identifier: 9lZFWuMTtv8YuU6VKU6jsbyQk0MeOgyYtpbFh8fURDM= Subject key identifier: C6:4B:6D:47:8B:48:FD:06:E9:83:B4:8D:AF:8D:1B:E8:BD:91:5E:1C Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Certificate serial: 019B0E263B7A59303EFA9F912CEB11CCBED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 16:02:25 +0000 Manifest this update: Thu 11 Dec 2025 16:02:25 +0000 Manifest next update: Fri 12 Dec 2025 16:02:25 +0000 Files and hashes: 1: 1-fujvOT9Nzk33dcGy888-8__GUg.roa (hash: XDy4HY+2OicQCXekMw1WRq7N4kP6fY3CuIb4XAYAHKw=) 2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: G1e1V87rzgLXZzWmpxm4i0BSkMxlEA/NgeLC1MGgBi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:3b:7a:59:30:3e:fa:9f:91:2c:eb:11:cc:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Validity Not Before: Dec 11 16:02:25 2025 GMT Not After : Dec 12 16:02:25 2025 GMT Subject: CN=c64b6d478b48fd06e983b48daf8d1be8bd915e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:3a:4e:69:de:df:11:5a:f5:ee:f0:40:24: bd:67:2e:c8:cf:ac:f5:c8:aa:e1:a1:33:60:f7:6c: b2:a3:ba:07:43:d8:09:8f:c2:33:bd:46:84:42:7a: 84:4a:65:ea:d9:ec:27:cc:03:cc:6d:8b:dd:a2:2e: 16:07:7e:47:ac:37:1a:38:c4:af:b6:e7:29:90:94: 0b:eb:b0:b6:e8:d4:bd:ae:df:d0:75:59:f9:f3:10: af:72:66:d6:fc:6c:3d:77:a6:43:d2:08:e5:11:6f: d4:21:ae:2d:51:fb:c9:74:a7:cd:75:ec:a7:1f:20: 22:41:5b:e9:06:f5:37:f8:21:79:2a:43:4f:b8:65: 5b:be:59:f0:64:f6:56:32:fe:7e:3f:42:05:22:a3: 08:7d:49:81:98:73:52:f5:c1:66:54:da:a0:7d:27: 49:3d:f2:cc:00:7d:55:22:ea:0e:16:15:52:bf:b9: a2:fe:60:3c:f5:65:5e:01:42:4c:c6:8a:8e:29:79: 85:25:72:a6:fc:7c:15:4f:cc:fa:3e:6e:88:dc:db: 30:d1:96:c2:08:b4:68:b8:15:65:3f:eb:50:c9:2e: 0e:06:24:fa:9a:fb:4d:e5:f9:9a:c2:b8:67:e2:e3: 8c:a9:95:77:4a:3e:16:40:24:83:16:c9:a8:0b:cc: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:6D:47:8B:48:FD:06:E9:83:B4:8D:AF:8D:1B:E8:BD:91:5E:1C X509v3 Authority Key Identifier: keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:85:74:85:4d:6e:ef:df:d9:80:29:be:3d:b6:a0:b8:a7:ed: 53:e4:39:c4:76:d4:f0:14:1b:52:2a:fc:00:c3:5d:c2:e2:ef: 49:e0:7a:1e:a0:ca:de:a5:b5:9f:25:5e:9f:fe:df:0f:e8:d7: 5d:e3:6e:2c:9b:b1:d8:7d:ae:7b:be:7b:09:21:2f:56:60:28: f4:ec:dd:2b:84:4d:0e:6b:3e:5f:25:2f:d3:b0:4d:c0:1c:b8: 00:a1:30:ce:fc:50:c2:44:cf:be:f2:cf:f8:34:37:b5:1d:f7: b9:21:63:5f:07:c4:51:3f:90:17:5c:ae:35:7f:37:99:1c:f6: 08:6a:fe:a1:1c:aa:77:d4:d3:5d:d4:b1:9f:50:d9:69:fd:47: 15:02:65:e4:3d:d2:c4:a3:d8:be:81:19:63:a6:79:f9:8d:b7: a6:7c:4a:35:0d:25:f2:96:da:61:0b:4b:30:22:43:a0:70:e0: 49:0b:67:d2:c3:eb:13:37:19:1a:53:5a:bb:fc:69:96:9c:9a: ee:44:24:ba:8f:ee:33:6f:d7:d0:12:b4:a7:f4:ea:08:1c:71: 3a:0c:dd:12:c3:98:16:38:87:ce:a2:0a:13:0d:1f:64:80:97: 8e:d3:26:69:44:48:cd:c3:f7:fc:b9:36:9d:5a:17:35:0b:71: dd:86:6f:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJjt6WTA++p+RLOsRzL7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk YTI5ZmUwHhcNMjUxMjExMTYwMjI1WhcNMjUxMjEyMTYwMjI1WjAzMTEwLwYDVQQD EyhjNjRiNmQ0NzhiNDhmZDA2ZTk4M2I0OGRhZjhkMWJlOGJkOTE1ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEM6Tmne3xFa9e7wQCS9Zy7Iz6z1 yKrhoTNg92yyo7oHQ9gJj8IzvUaEQnqESmXq2ewnzAPMbYvdoi4WB35HrDcaOMSv tucpkJQL67C26NS9rt/QdVn58xCvcmbW/Gw9d6ZD0gjlEW/UIa4tUfvJdKfNdeyn HyAiQVvpBvU3+CF5KkNPuGVbvlnwZPZWMv5+P0IFIqMIfUmBmHNS9cFmVNqgfSdJ PfLMAH1VIuoOFhVSv7mi/mA89WVeAUJMxoqOKXmFJXKm/HwVT8z6Pm6I3Nsw0ZbC CLRouBVlP+tQyS4OBiT6mvtN5fmawrhn4uOMqZV3Sj4WQCSDFsmoC8wbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZLbUeLSP0G6YO0ja+NG+i9kV4cMB8GA1UdIwQY MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt NmVhOTRhOTYxZDRjLzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTItNmVhOTRhOTYxZDRj LzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoV0hU1u 79/ZgCm+PbaguKftU+Q5xHbU8BQbUir8AMNdwuLvSeB6HqDK3qW1nyVen/7fD+jX XeNuLJux2H2ue757CSEvVmAo9OzdK4RNDms+XyUv07BNwBy4AKEwzvxQwkTPvvLP +DQ3tR33uSFjXwfEUT+QF1yuNX83mRz2CGr+oRyqd9TTXdSxn1DZaf1HFQJl5D3S xKPYvoEZY6Z5+Y23pnxKNQ0l8pbaYQtLMCJDoHDgSQtn0sPrEzcZGlNau/xplpya 7kQkuo/uM2/X0BK0p/TqCBxxOgzdEsOYFjiHzqIKEw0fZICXjtMmaURIzcP3/Lk2 nVoXNQtx3YZvDw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:19:52 2025 by rpki-client