This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft File: T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json) Hash identifier: PDZjlPc0HX+GCIFrWOGu/d6dlwKWYTYF2rD5JjKslYM= Subject key identifier: 85:97:64:02:FD:F9:DB:98:0A:73:A5:15:29:81:61:C0:8D:83:0F:F0 Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55 Certificate issuer: /CN=4f412cd26994faf609bdad4e35d576c2cae46555 Certificate serial: 019B2EF918BA7B6780CED732BDA531772F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 01:00:35 +0000 Manifest this update: Thu 18 Dec 2025 01:00:35 +0000 Manifest next update: Fri 19 Dec 2025 01:00:35 +0000 Files and hashes: 1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: NQ1kUVZ8ZaUi7kqObPDr26ojXLXFJo5WMOoPbDypqn4=) 2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:18:ba:7b:67:80:ce:d7:32:bd:a5:31:77:2f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555 Validity Not Before: Dec 18 01:00:35 2025 GMT Not After : Dec 19 01:00:35 2025 GMT Subject: CN=85976402fdf9db980a73a515298161c08d830ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:08:89:19:89:f0:26:ab:ac:2c:aa:61:fd: 80:a0:23:b1:71:32:1b:ff:18:b4:d5:41:ca:1b:19: 26:bb:d6:ef:2d:6b:3c:a5:4c:09:de:4f:65:e6:3c: 5c:a6:d7:14:f2:7e:62:c0:08:86:d3:6c:0b:b0:55: 54:f8:7a:38:64:19:ea:59:d3:2c:ee:14:86:53:0d: ff:94:e0:52:8d:19:70:a8:76:8b:5e:9e:0b:44:e0: 74:00:9d:3b:c5:f7:30:00:98:c5:a1:ef:55:49:58: 18:25:f6:17:ac:b0:d3:12:cd:15:f0:8c:19:75:ef: 1d:fb:13:ec:cb:3e:73:2e:87:c2:80:77:22:7b:d2: a1:c2:6a:01:1e:ec:a0:73:69:c5:38:42:6a:b2:5f: af:28:3c:48:79:8d:42:9e:0f:1a:dc:05:91:a6:de: 9d:4d:39:e0:f6:f4:4a:9d:28:37:35:b0:50:41:83: 9e:eb:ce:55:aa:03:42:eb:92:60:58:3d:46:a3:23: a0:4c:71:c1:38:db:fd:e8:b3:aa:20:5d:46:94:9c: aa:ad:0e:86:7c:fc:2a:d0:ed:df:f4:ec:ce:97:d6: b2:ac:7d:01:bb:0c:f4:06:07:b7:3e:f8:1e:1a:b9: 93:b8:6d:62:e3:b7:58:f7:a8:e9:29:a7:fb:bb:4b: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:64:02:FD:F9:DB:98:0A:73:A5:15:29:81:61:C0:8D:83:0F:F0 X509v3 Authority Key Identifier: keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:91:b5:5e:ca:b8:dd:55:00:87:eb:15:22:ba:1f:c0:6b: 88:dd:43:26:c8:49:da:60:fe:16:68:22:d9:2a:5c:64:27:f7: 88:18:15:eb:65:12:36:c0:4c:08:bf:bf:a2:37:75:1f:2d:06: 41:08:71:31:74:8a:34:d6:3a:3c:20:5a:d3:40:e4:c6:56:01: 2e:64:ad:c9:bd:ed:a5:f8:26:05:a1:f1:e4:bd:1e:e5:d8:bd: 94:75:20:9f:4d:38:b1:c0:6a:82:a8:3d:8d:20:88:45:c4:10: c0:19:67:70:86:45:dc:8b:0a:5e:39:cf:51:c6:1e:b2:70:89: 48:00:c9:5f:4f:b7:6b:2f:a8:63:e0:73:5d:e5:e2:43:3f:f9: 9b:d0:50:66:38:fd:b3:10:ce:fd:9c:65:6f:8e:88:69:e6:4c: 9c:60:f6:2f:fe:ef:aa:d5:82:34:96:39:a5:c6:c8:6b:a0:02: 14:70:ec:72:11:3f:c4:8f:40:07:29:eb:ab:94:d1:4b:79:fe: b4:85:e8:7b:36:ff:fe:fd:99:db:bd:40:1d:95:c8:3a:24:8a: 5a:e8:38:76:eb:92:75:9b:55:08:5e:c2:52:ab:ef:c3:6f:49: a6:14:8f:d7:3c:6c:d5:3d:20:a2:ac:55:4b:62:50:4a:88:d3: 4b:7e:f1:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Ri6e2eAztcyvaUxdy8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDEyY2QyNjk5NGZhZjYwOWJkYWQ0ZTM1ZDU3NmMyY2Fl NDY1NTUwHhcNMjUxMjE4MDEwMDM1WhcNMjUxMjE5MDEwMDM1WjAzMTEwLwYDVQQD Eyg4NTk3NjQwMmZkZjlkYjk4MGE3M2E1MTUyOTgxNjFjMDhkODMwZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+4IiRmJ8CarrCyqYf2AoCOxcTIb /xi01UHKGxkmu9bvLWs8pUwJ3k9l5jxcptcU8n5iwAiG02wLsFVU+Ho4ZBnqWdMs 7hSGUw3/lOBSjRlwqHaLXp4LROB0AJ07xfcwAJjFoe9VSVgYJfYXrLDTEs0V8IwZ de8d+xPsyz5zLofCgHcie9KhwmoBHuygc2nFOEJqsl+vKDxIeY1Cng8a3AWRpt6d TTng9vRKnSg3NbBQQYOe685VqgNC65JgWD1GoyOgTHHBONv96LOqIF1GlJyqrQ6G fPwq0O3f9OzOl9ayrH0Buwz0Bge3PvgeGrmTuG1i47dY96jpKaf7u0v/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWXZAL9+duYCnOlFSmBYcCNgw/wMB8GA1UdIwQY MBaAFE9BLNJplPr2Cb2tTjXVdsLK5GVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBFczBtbVUtdllKdmExT05kVjJ3c3JrWlZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80NTkxYTktNTZjNi00MGRlLWExMjQt NDVmNjFmODcxNDI3LzEvVDBFczBtbVUtdllKdmExT05kVjJ3c3JrWlZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80NTkxYTktNTZjNi00MGRlLWExMjQtNDVmNjFmODcxNDI3 LzEvVDBFczBtbVUtdllKdmExT05kVjJ3c3JrWlZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeiRtV7K uN1VAIfrFSK6H8BriN1DJshJ2mD+Fmgi2SpcZCf3iBgV62USNsBMCL+/ojd1Hy0G QQhxMXSKNNY6PCBa00DkxlYBLmStyb3tpfgmBaHx5L0e5di9lHUgn004scBqgqg9 jSCIRcQQwBlncIZF3IsKXjnPUcYesnCJSADJX0+3ay+oY+BzXeXiQz/5m9BQZjj9 sxDO/Zxlb46IaeZMnGD2L/7vqtWCNJY5pcbIa6ACFHDschE/xI9ABynrq5TRS3n+ tIXoezb//v2Z271AHZXIOiSKWug4duuSdZtVCF7CUqvvw29JphSP1zxs1T0goqxV S2JQSojTS37xeA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:18 2025 by rpki-client