This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json) Hash identifier: 9/0fz3k3+Nl1YPcwR0mNDEwTD86WkYNO+IDyyccJ5CU= Subject key identifier: 00:C0:E4:BB:5A:B8:69:D5:5E:2A:B2:E3:40:60:BC:10:5B:89:70:88 Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Certificate serial: 019B0D807376E99BB80C65A39D82F22D2DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft Manifest number: 1099 Signing time: Thu 11 Dec 2025 13:01:20 +0000 Manifest this update: Thu 11 Dec 2025 13:01:20 +0000 Manifest next update: Fri 12 Dec 2025 13:01:20 +0000 Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=) 2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: Bo1ZpAZfGTO5/KXSeBNrGCSKlRVUccFML6f1KiPY5bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:73:76:e9:9b:b8:0c:65:a3:9d:82:f2:2d:2d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Validity Not Before: Dec 11 13:01:20 2025 GMT Not After : Dec 12 13:01:20 2025 GMT Subject: CN=00c0e4bb5ab869d55e2ab2e34060bc105b897088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:d2:54:51:30:93:1b:1a:22:80:a4:64:5b: 63:ff:77:fb:8b:49:de:b8:ce:e6:3d:32:a7:1a:2a: 24:da:41:ff:d5:4a:8b:dd:ee:22:46:4b:d7:47:58: e4:94:2e:41:e4:0a:39:32:30:27:a8:ac:32:fc:f4: c5:e4:bf:be:d9:dd:eb:ef:b3:55:7c:76:e2:64:06: be:31:1f:c1:d1:45:84:9d:3f:6c:85:6c:9d:c0:83: 3e:73:96:8d:1e:eb:a2:a9:98:df:7e:29:9a:cb:43: b3:43:48:dc:22:5e:d4:0b:f2:eb:32:7a:a7:13:97: f0:e5:de:c9:c1:3a:7f:31:2e:d1:5e:72:26:dd:a9: be:a8:a2:b5:f1:1a:87:8c:f6:75:8b:d3:c3:58:0e: 00:da:5e:81:52:6c:2b:20:87:ba:e9:94:10:7a:d7: 55:7b:80:b9:b3:7e:d0:6b:7a:f2:21:50:24:40:8f: be:79:0a:0e:0f:77:56:9a:b6:75:4f:00:02:d2:cd: 08:69:51:24:74:d8:f2:01:99:73:f3:b3:06:e2:29: 4d:08:54:16:48:15:90:5f:38:7e:2e:24:d2:83:23: ea:7b:f7:7b:ea:cd:85:db:e5:98:32:24:0b:d5:18: c0:4f:d6:aa:41:d6:82:b6:e8:08:85:6f:31:3b:15: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:E4:BB:5A:B8:69:D5:5E:2A:B2:E3:40:60:BC:10:5B:89:70:88 X509v3 Authority Key Identifier: keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:03:a3:29:ed:23:bd:bc:1e:70:f3:ed:c2:74:46:a0:f9:59: 97:2a:43:62:04:a0:07:f4:55:71:58:cd:e0:e5:cd:35:0e:ab: 25:d7:56:16:a6:3b:c6:94:ca:f0:3a:1d:7d:57:35:b3:ca:ea: a6:f7:c5:17:f9:08:f0:ec:67:4f:2d:c6:d9:56:91:df:0f:84: 52:da:25:f3:41:69:b5:6c:08:c5:57:cb:be:88:b6:be:fa:df: c3:b5:e4:18:4e:e6:32:5d:b3:90:45:85:42:e8:6b:e4:cd:70: 5f:78:3d:c0:06:aa:72:f4:60:24:a8:b7:ae:5d:15:fd:a8:67: b6:7d:a7:cb:a9:67:dc:e4:c5:08:4f:82:1c:cc:d2:d8:a6:66: ef:37:03:5b:d3:33:d5:43:3e:b4:10:4b:71:e4:3f:b8:7e:e3: 5f:1a:c2:06:1e:f9:ff:c1:e3:af:ac:07:97:02:81:b5:66:f7: e5:27:81:53:ab:0b:f8:8c:72:0c:ae:67:13:4e:77:5d:20:97: ac:25:07:0a:31:6a:dd:0b:c4:46:35:a3:d3:31:c8:56:e1:e2: 99:dd:27:b0:48:28:ea:48:a6:f5:5e:75:99:6e:06:98:fd:e5: 56:bc:33:0e:66:4d:40:69:bc:00:6c:f9:df:b2:7f:f4:75:3b: 87:27:77:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgHN26Zu4DGWjnYLyLS3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0 ZjRkYzAwHhcNMjUxMjExMTMwMTIwWhcNMjUxMjEyMTMwMTIwWjAzMTEwLwYDVQQD EygwMGMwZTRiYjVhYjg2OWQ1NWUyYWIyZTM0MDYwYmMxMDViODk3MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TSVFEwkxsaIoCkZFtj/3f7i0ne uM7mPTKnGiok2kH/1UqL3e4iRkvXR1jklC5B5Ao5MjAnqKwy/PTF5L++2d3r77NV fHbiZAa+MR/B0UWEnT9shWydwIM+c5aNHuuiqZjffimay0OzQ0jcIl7UC/LrMnqn E5fw5d7JwTp/MS7RXnIm3am+qKK18RqHjPZ1i9PDWA4A2l6BUmwrIIe66ZQQetdV e4C5s37Qa3ryIVAkQI++eQoOD3dWmrZ1TwAC0s0IaVEkdNjyAZlz87MG4ilNCFQW SBWQXzh+LiTSgyPqe/d76s2F2+WYMiQL1RjAT9aqQdaCtugIhW8xOxUTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADA5LtauGnVXiqy40BgvBBbiXCIMB8GA1UdIwQY MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAOjKe0j vbwecPPtwnRGoPlZlypDYgSgB/RVcVjN4OXNNQ6rJddWFqY7xpTK8DodfVc1s8rq pvfFF/kI8OxnTy3G2VaR3w+EUtol80FptWwIxVfLvoi2vvrfw7XkGE7mMl2zkEWF Quhr5M1wX3g9wAaqcvRgJKi3rl0V/ahntn2ny6ln3OTFCE+CHMzS2KZm7zcDW9Mz 1UM+tBBLceQ/uH7jXxrCBh75/8Hjr6wHlwKBtWb35SeBU6sL+IxyDK5nE053XSCX rCUHCjFq3QvERjWj0zHIVuHimd0nsEgo6kim9V51mW4GmP3lVrwzDmZNQGm8AGz5 37J/9HU7hyd3bA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:58 2025 by rpki-client