This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json) Hash identifier: d35RO5e9GwueVMtBN6vntfxxTd7+NzgZQGFjbfG/M/o= Subject key identifier: F5:AF:3C:38:C2:FB:A5:3F:13:A7:99:A5:8E:54:13:A6:13:BC:3E:E7 Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Certificate serial: 019B397D328620C57B883DACF0C3BED3EC26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft Manifest number: 06E5 Signing time: Sat 20 Dec 2025 02:01:04 +0000 Manifest this update: Sat 20 Dec 2025 02:01:04 +0000 Manifest next update: Sun 21 Dec 2025 02:01:04 +0000 Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: vLIlsQuLxtnOQE7FkdoMV/1GCr1HDSDbw4MgCq7fSNo=) 2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:32:86:20:c5:7b:88:3d:ac:f0:c3:be:d3:ec:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Validity Not Before: Dec 20 02:01:04 2025 GMT Not After : Dec 21 02:01:04 2025 GMT Subject: CN=f5af3c38c2fba53f13a799a58e5413a613bc3ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:bb:8a:67:27:c5:99:44:30:bd:bb:69:63: 76:13:fa:7a:78:80:33:bc:75:61:4b:88:9c:7a:4f: 8e:3f:88:00:6d:50:17:e4:d4:ec:de:f1:6b:ba:5b: 75:15:a0:a8:20:6b:82:7c:13:33:0a:65:50:4e:07: 93:df:f6:97:e9:e9:69:7e:01:c1:49:75:29:9e:1b: 63:14:2a:f4:45:28:6f:7e:99:9b:78:58:e4:65:f0: 46:48:b2:1f:5a:9d:a8:7a:09:35:ae:53:3a:7b:d4: 7f:1e:2f:45:6f:f8:9f:cd:b1:d8:cd:37:94:c4:6d: 6e:b7:ed:d5:b2:5e:2f:18:ba:26:8c:b0:4b:63:4d: be:39:01:62:af:bc:99:89:a4:4b:ce:a8:56:77:a3: 65:64:bb:e9:a8:34:6c:a6:0e:51:87:9a:36:d6:b3: 65:4c:b2:9d:4a:c2:35:3d:ed:63:d0:6c:1d:be:2d: 79:c0:b4:3c:1e:23:11:ed:a9:c5:ce:b0:22:1c:1a: 4b:76:d0:c6:d5:36:be:3a:39:78:1d:c1:d3:e4:9a: e9:26:9e:4b:0d:ab:d2:a0:a7:71:83:0c:9a:40:66: 3f:f4:fd:60:36:65:8e:16:64:ae:10:ee:69:09:b7: 47:fe:ca:69:26:0f:48:45:47:1d:55:b0:b3:9f:d1: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AF:3C:38:C2:FB:A5:3F:13:A7:99:A5:8E:54:13:A6:13:BC:3E:E7 X509v3 Authority Key Identifier: keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:93:9a:4d:38:00:17:1a:cb:aa:34:6b:f2:04:a2:15:24:95: 57:a7:3d:91:2a:8f:d1:ce:e2:0d:f6:f6:aa:de:cc:28:d1:39: 9e:34:30:ca:89:3d:98:3d:0b:b0:54:8d:d2:56:85:48:ae:50: ef:fe:a1:69:9a:b4:cf:9a:69:c1:f9:5e:4d:06:9e:e5:4d:88: 84:12:10:35:48:0e:04:2f:36:13:89:bc:92:8b:e4:0f:a4:09: e0:70:c2:3a:49:62:95:d8:a3:ba:f5:6b:17:4c:f8:28:05:bf: 82:e9:70:9c:31:05:3d:02:c7:cb:0a:44:6e:06:0b:89:37:1b: 6f:4f:f1:9e:a0:ce:6a:95:35:3a:63:84:4f:fb:92:ab:35:55: 15:87:0f:68:9a:71:7f:2b:c9:10:c2:db:e3:9c:06:b4:d9:d8: a8:4b:81:1c:93:ea:eb:d9:7b:d1:87:7f:85:d7:06:af:9b:a5: ac:ff:72:e7:5d:99:01:b7:2f:36:ed:fe:92:e7:fe:3c:ec:be: 76:3c:9e:d8:bf:b3:0c:fa:61:be:44:3c:6e:c0:36:ff:bf:60: d5:68:86:17:3c:61:2b:40:a4:d3:e3:85:40:8c:fd:de:9d:68: 41:0b:ed:9a:a7:23:c6:47:e2:a6:1a:73:98:d7:27:16:d1:88: 36:8a:60:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTKGIMV7iD2s8MO+0+wmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4 Y2ViY2EwHhcNMjUxMjIwMDIwMTA0WhcNMjUxMjIxMDIwMTA0WjAzMTEwLwYDVQQD EyhmNWFmM2MzOGMyZmJhNTNmMTNhNzk5YTU4ZTU0MTNhNjEzYmMzZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuee7imcnxZlEML27aWN2E/p6eIAz vHVhS4icek+OP4gAbVAX5NTs3vFrult1FaCoIGuCfBMzCmVQTgeT3/aX6elpfgHB SXUpnhtjFCr0RShvfpmbeFjkZfBGSLIfWp2oegk1rlM6e9R/Hi9Fb/ifzbHYzTeU xG1ut+3Vsl4vGLomjLBLY02+OQFir7yZiaRLzqhWd6NlZLvpqDRspg5Rh5o21rNl TLKdSsI1Pe1j0Gwdvi15wLQ8HiMR7anFzrAiHBpLdtDG1Ta+Ojl4HcHT5JrpJp5L DavSoKdxgwyaQGY/9P1gNmWOFmSuEO5pCbdH/sppJg9IRUcdVbCzn9GHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWvPDjC+6U/E6eZpY5UE6YTvD7nMB8GA1UdIwQY MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZOaTTgA FxrLqjRr8gSiFSSVV6c9kSqP0c7iDfb2qt7MKNE5njQwyok9mD0LsFSN0laFSK5Q 7/6haZq0z5ppwfleTQae5U2IhBIQNUgOBC82E4m8kovkD6QJ4HDCOklildijuvVr F0z4KAW/gulwnDEFPQLHywpEbgYLiTcbb0/xnqDOapU1OmOET/uSqzVVFYcPaJpx fyvJEMLb45wGtNnYqEuBHJPq69l70Yd/hdcGr5ulrP9y512ZAbcvNu3+kuf+POy+ djye2L+zDPphvkQ8bsA2/79g1WiGFzxhK0Ck0+OFQIz93p1oQQvtmqcjxkfiphpz mNcnFtGINopggw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:46 2025 by rpki-client