This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json) Hash identifier: EXS8LRHcIqw2vi0kSsZd/xsvwIpNXDF0vWuPj6qnfjo= Subject key identifier: 4C:C9:EA:B0:1F:E1:46:51:92:3E:D9:B8:4C:8C:6D:16:92:25:6C:A6 Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729 Certificate serial: 019B5ABF2721418B304FB2B2333BC2958A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 13:00:35 +0000 Manifest this update: Fri 26 Dec 2025 13:00:35 +0000 Manifest next update: Sat 27 Dec 2025 13:00:35 +0000 Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=) 2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: l+Tu1QOVlOuq3vnOWgmCEEMGYsmbrXXB3R4OqMc8T5U=) 3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:27:21:41:8b:30:4f:b2:b2:33:3b:c2:95:8a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729 Validity Not Before: Dec 26 13:00:35 2025 GMT Not After : Dec 27 13:00:35 2025 GMT Subject: CN=4cc9eab01fe14651923ed9b84c8c6d1692256ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:66:82:56:68:60:f8:99:91:80:a5:c9:b3: b5:b0:0d:d1:b0:3c:3c:08:75:8d:93:d1:d8:09:0c: d0:81:e8:4f:19:0b:63:97:c5:7e:95:97:80:25:c6: 06:26:1e:fd:94:28:aa:2d:35:e8:45:5a:e5:8d:0c: 21:09:50:4a:29:e6:cc:15:1d:b8:45:04:65:28:d5: 77:f3:fc:38:18:d2:15:6f:1f:15:1b:cf:7c:a5:01: 1a:43:09:b2:7e:be:d6:55:d8:d0:32:e2:93:3f:34: bd:b1:bf:c7:48:26:f0:34:4c:d5:a7:b7:16:8a:ea: 6a:ca:66:11:38:88:07:9a:1d:44:c2:0a:66:55:08: 12:fc:4b:3c:ea:b6:8e:03:71:9c:96:87:f5:09:50: a6:5c:b3:df:06:e7:2b:e0:de:55:ec:ab:b8:79:0b: 6a:52:56:cc:6b:87:45:8f:ee:68:9e:ad:34:54:1a: b5:2b:db:96:5c:ae:ae:78:29:5f:98:db:e6:ff:06: eb:4c:9f:74:ae:d3:11:a2:f7:c8:f5:fe:39:07:5f: 10:64:df:d2:5c:b2:1e:3d:d0:0d:ee:58:56:8f:a2: 32:2a:ea:ad:6f:80:ec:22:01:e7:24:d6:85:1a:db: d0:6c:70:27:22:c4:2f:7c:ef:c6:c9:81:f5:7c:13: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:EA:B0:1F:E1:46:51:92:3E:D9:B8:4C:8C:6D:16:92:25:6C:A6 X509v3 Authority Key Identifier: keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:ee:6a:8d:8a:90:69:ec:c5:75:74:36:56:71:06:8e:6b: e7:05:3c:2f:88:43:c2:8b:c6:b5:ba:30:38:32:e9:a3:c7:ed: e3:99:d2:0c:df:d1:d2:2c:f3:e6:cc:62:76:6a:8d:63:f0:76: 55:5c:ae:0c:8b:c1:3c:87:87:5f:f7:79:a6:63:8f:10:7c:c9: 85:d2:64:f0:75:c1:3f:c7:a6:19:22:34:d3:ee:a5:7c:13:23: 36:5e:83:2b:e7:78:29:4b:77:23:a6:2b:53:b1:ae:df:29:55: c3:58:d3:8b:62:dc:6f:8e:c8:bf:a5:77:31:06:7a:79:60:b9: 3f:bd:b1:6f:11:4d:2a:7f:39:54:78:54:e4:ef:27:60:59:07: c7:2d:8c:d0:b6:9d:ac:2e:01:38:68:57:d9:63:22:5b:a9:4c: d4:91:26:fe:52:2f:74:57:3f:82:64:0e:f2:8a:f6:d4:84:46: c9:7e:74:74:57:4c:57:dd:eb:85:bb:42:64:53:44:2f:a5:dc: 41:3c:c5:7b:92:0c:15:88:fc:9c:f0:d9:5e:10:3a:23:77:7e: 19:20:23:11:33:ac:ee:c5:b8:80:d4:69:55:fc:00:77:02:83: f6:07:9e:7a:03:fd:b2:4a:82:e5:af:a8:19:86:aa:95:01:96: e3:ee:12:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavychQYswT7KyMzvClYphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY2NDZjOTNjMjk3NDc4OWVjZWY3YjQ0NDY1NmVlNjQx NjE3MjkwHhcNMjUxMjI2MTMwMDM1WhcNMjUxMjI3MTMwMDM1WjAzMTEwLwYDVQQD Eyg0Y2M5ZWFiMDFmZTE0NjUxOTIzZWQ5Yjg0YzhjNmQxNjkyMjU2Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKpmglZoYPiZkYClybO1sA3RsDw8 CHWNk9HYCQzQgehPGQtjl8V+lZeAJcYGJh79lCiqLTXoRVrljQwhCVBKKebMFR24 RQRlKNV38/w4GNIVbx8VG898pQEaQwmyfr7WVdjQMuKTPzS9sb/HSCbwNEzVp7cW iupqymYROIgHmh1EwgpmVQgS/Es86raOA3Gclof1CVCmXLPfBucr4N5V7Ku4eQtq UlbMa4dFj+5onq00VBq1K9uWXK6ueClfmNvm/wbrTJ90rtMRovfI9f45B18QZN/S XLIePdAN7lhWj6IyKuqtb4DsIgHnJNaFGtvQbHAnIsQvfO/GyYH1fBP/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzJ6rAf4UZRkj7ZuEyMbRaSJWymMB8GA1UdIwQY MBaAFE/WZGyTwpdHiezve0RGVu5kFhcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEt NzZhNTM4NWM1MTVhLzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEtNzZhNTM4NWM1MTVh LzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxPuao2K kGnsxXV0NlZxBo5r5wU8L4hDwovGtbowODLpo8ft45nSDN/R0izz5sxidmqNY/B2 VVyuDIvBPIeHX/d5pmOPEHzJhdJk8HXBP8emGSI00+6lfBMjNl6DK+d4KUt3I6Yr U7Gu3ylVw1jTi2Lcb47Iv6V3MQZ6eWC5P72xbxFNKn85VHhU5O8nYFkHxy2M0Lad rC4BOGhX2WMiW6lM1JEm/lIvdFc/gmQO8or21IRGyX50dFdMV93rhbtCZFNEL6Xc QTzFe5IMFYj8nPDZXhA6I3d+GSAjETOs7sW4gNRpVfwAdwKD9geeegP9skqC5a+o GYaqlQGW4+4SZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:43 2025 by rpki-client