This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json) Hash identifier: DfYN6guo89fx7G19TnAE/i+4M1T84u4mHj2GgAxKDoI= Subject key identifier: 0A:D3:6A:C5:F9:D7:85:50:0F:1D:8E:55:EF:EA:0F:4D:AA:8C:9B:0E Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Certificate serial: 019B5AF65402DFE3B0F3658AAC34C6B628D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft Manifest number: 02E9 Signing time: Fri 26 Dec 2025 14:00:51 +0000 Manifest this update: Fri 26 Dec 2025 14:00:51 +0000 Manifest next update: Sat 27 Dec 2025 14:00:51 +0000 Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: yVBib1ykVPWaW9T+s1PxKKS8q4q9RQZzFlgaEfHLZgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:54:02:df:e3:b0:f3:65:8a:ac:34:c6:b6:28:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b Validity Not Before: Dec 26 14:00:51 2025 GMT Not After : Dec 27 14:00:51 2025 GMT Subject: CN=0ad36ac5f9d785500f1d8e55efea0f4daa8c9b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:85:4b:de:3e:5b:8a:eb:53:78:69:be:1f: ae:67:f7:83:4e:2b:f3:2e:31:76:21:01:2b:1f:31: 8d:70:1c:e2:96:5b:af:8d:bc:62:94:ba:65:58:5c: a9:be:30:ab:05:3e:4a:8d:db:2b:65:ba:94:9d:79: ee:e1:bb:09:89:af:55:c9:41:90:f4:da:12:f7:32: 7a:06:29:cc:4d:3b:43:f7:23:c6:ad:b9:69:32:21: a6:b1:7c:12:84:6c:28:0d:bd:dc:25:23:29:97:cb: 36:1c:51:c9:87:ba:79:67:a0:bd:ff:af:74:fb:aa: 4e:0e:85:30:51:23:6a:d2:2f:6b:d0:9f:5e:dd:ef: e6:6c:2e:ed:d2:52:a7:75:73:7a:6f:4a:75:2b:ba: 94:b0:48:80:b8:57:e4:17:14:67:02:bc:0c:0e:77: 59:e9:6f:e7:aa:17:70:fc:ff:ff:78:e7:27:76:a9: 4c:f2:5e:96:39:ee:e3:a4:aa:8f:ec:cd:3b:3b:d4: 23:94:10:70:53:0f:6e:bb:9b:12:a3:4e:95:fa:f1: ed:1e:df:40:d9:f5:03:ec:16:68:75:5f:47:ec:49: a4:e2:a4:55:f6:15:fa:54:e8:06:42:ef:e9:3a:7d: c8:f0:c6:52:3d:f5:02:c5:ef:cb:fb:06:20:74:9a: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:6A:C5:F9:D7:85:50:0F:1D:8E:55:EF:EA:0F:4D:AA:8C:9B:0E X509v3 Authority Key Identifier: keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6a:a3:3d:64:ac:0d:c4:18:03:f9:b8:df:a3:f8:51:f5:a2: 4f:67:9c:81:55:31:f6:b1:51:18:fe:5e:76:43:de:3d:7f:2c: 97:d9:ca:06:64:4d:d4:c0:5c:99:c4:9a:db:c2:71:ea:1f:e5: 7b:0f:3c:92:35:75:4b:80:86:c9:0c:de:92:6a:ec:e3:b8:1c: b6:6f:d5:ba:f9:20:08:5d:88:57:cc:78:c6:49:a4:ee:ec:bc: a2:46:24:d8:45:96:cd:60:b0:e5:5c:eb:66:d8:91:d5:23:9f: 8b:81:6b:0a:fb:d2:ce:01:31:4f:de:ef:79:6f:98:7f:23:ba: 01:3f:8e:5f:b9:f1:d5:4a:e2:be:dd:0e:26:ce:b6:6d:ff:78: d5:0a:05:52:ee:63:c0:d3:40:81:25:af:a6:57:fe:b3:17:15: e1:36:7e:eb:15:f5:ac:e3:0f:d3:02:27:2b:39:c6:31:8b:dc: df:79:d7:e1:1d:29:f3:5a:49:9a:7f:73:be:b7:a1:ff:10:f5: 43:b5:07:aa:94:47:5d:07:67:16:74:f8:3e:2b:1a:fb:21:e0: d1:d1:6b:bf:4d:fd:cc:32:64:0c:cc:60:4b:83:19:ea:06:e5: ce:02:51:23:79:44:37:b3:4a:2c:04:bc:e5:b6:5e:a8:e6:95: 67:3f:9c:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9lQC3+Ow82WKrDTGtijXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz M2M5N2IwHhcNMjUxMjI2MTQwMDUxWhcNMjUxMjI3MTQwMDUxWjAzMTEwLwYDVQQD EygwYWQzNmFjNWY5ZDc4NTUwMGYxZDhlNTVlZmVhMGY0ZGFhOGM5YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NmFS94+W4rrU3hpvh+uZ/eDTivz LjF2IQErHzGNcBzilluvjbxilLplWFypvjCrBT5KjdsrZbqUnXnu4bsJia9VyUGQ 9NoS9zJ6BinMTTtD9yPGrblpMiGmsXwShGwoDb3cJSMpl8s2HFHJh7p5Z6C9/690 +6pODoUwUSNq0i9r0J9e3e/mbC7t0lKndXN6b0p1K7qUsEiAuFfkFxRnArwMDndZ 6W/nqhdw/P//eOcndqlM8l6WOe7jpKqP7M07O9QjlBBwUw9uu5sSo06V+vHtHt9A 2fUD7BZodV9H7Emk4qRV9hX6VOgGQu/pOn3I8MZSPfUCxe/L+wYgdJpdSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArTasX514VQDx2OVe/qD02qjJsOMB8GA1UdIwQY MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGqjPWSs DcQYA/m436P4UfWiT2ecgVUx9rFRGP5edkPePX8sl9nKBmRN1MBcmcSa28Jx6h/l ew88kjV1S4CGyQzekmrs47gctm/VuvkgCF2IV8x4xkmk7uy8okYk2EWWzWCw5Vzr ZtiR1SOfi4FrCvvSzgExT97veW+YfyO6AT+OX7nx1Urivt0OJs62bf941QoFUu5j wNNAgSWvplf+sxcV4TZ+6xX1rOMP0wInKznGMYvc33nX4R0p81pJmn9zvreh/xD1 Q7UHqpRHXQdnFnT4Pisa+yHg0dFrv039zDJkDMxgS4MZ6gblzgJRI3lEN7NKLAS8 5bZeqOaVZz+cAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:03 2025 by rpki-client