This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json) Hash identifier: /lyqd7yugH8MEXBXY/xO199M3j8tbdBnxxD3oVeTG8M= Subject key identifier: ED:4F:96:5E:5D:C2:1F:69:B7:A0:15:2B:C7:D6:25:07:58:9F:0B:79 Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Certificate serial: 019B0EC9565B6F06303C90C38BCDE84372D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft Manifest number: 0CC4 Signing time: Thu 11 Dec 2025 19:00:34 +0000 Manifest this update: Thu 11 Dec 2025 19:00:34 +0000 Manifest next update: Fri 12 Dec 2025 19:00:34 +0000 Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=) 2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=) 3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: 5sQpg7ptMQKbQ7y2WRdvw+gzjpNWc1UUYM5uuuYirMQ=) 4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:56:5b:6f:06:30:3c:90:c3:8b:cd:e8:43:72:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120 Validity Not Before: Dec 11 19:00:34 2025 GMT Not After : Dec 12 19:00:34 2025 GMT Subject: CN=ed4f965e5dc21f69b7a0152bc7d62507589f0b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:01:9a:0a:0a:c2:c9:53:67:04:49:5b:12: 7f:ea:64:de:6e:65:9e:c8:f9:14:5f:30:fc:ad:82: da:61:68:bb:eb:45:2f:7b:32:55:e5:4a:2e:7c:d8: 52:80:8e:c6:38:2d:bd:44:33:6f:df:5d:da:0b:54: 2a:84:d0:0b:57:57:30:26:ff:00:c7:62:5e:f5:95: 68:2f:cd:a2:f0:6b:03:22:1a:c5:86:f8:ff:55:86: b1:ab:a5:c9:ab:ab:7b:0f:cd:31:99:40:38:b4:59: b5:28:fb:e2:72:ec:0a:c3:33:d8:c0:c7:64:2d:9d: 47:15:59:11:be:5e:4c:18:d4:96:e7:7b:09:f2:ee: aa:3d:6d:8d:bd:94:f3:f7:af:b6:41:11:43:32:b1: 91:bb:13:fe:55:33:15:de:11:2f:c1:41:91:7b:00: e8:da:8b:59:cb:aa:d9:d2:aa:97:92:75:7c:07:07: 82:45:f4:31:b7:18:6e:7d:b9:01:0c:95:97:de:b1: bb:08:6f:b8:06:e4:36:13:35:a2:b9:dc:ad:cc:d3: b7:9e:0b:0d:6d:1b:a9:e7:59:f4:e3:05:70:cd:32: 2e:6d:5d:c5:1d:fb:96:4f:a3:bf:a0:2d:dc:01:77: 63:a2:a4:bd:76:6c:aa:d9:c7:3e:50:c7:0c:fe:09: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4F:96:5E:5D:C2:1F:69:B7:A0:15:2B:C7:D6:25:07:58:9F:0B:79 X509v3 Authority Key Identifier: keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:a0:5c:3f:1f:2b:25:bf:a1:35:7a:11:54:9d:84:d6:25: 06:68:99:ce:fc:75:f1:4e:3c:98:c3:32:68:0b:a3:ca:44:d7: ae:cb:90:ed:57:fa:ea:f7:e3:65:ae:5b:9c:6e:53:78:05:2a: 65:71:1a:72:96:1f:6e:61:95:ee:7d:94:34:02:f4:5c:07:30: 60:0f:60:23:17:ab:c5:f5:ae:f3:da:72:b3:96:f1:7a:d0:24: a1:64:35:99:03:e2:3f:5e:00:c2:fe:c5:3f:87:a0:3d:94:1f: 2d:cf:1e:c7:78:f8:ee:09:72:a6:78:59:59:d6:52:d5:ac:22: fe:0a:00:89:41:6b:e5:45:be:8c:11:d0:34:b2:e3:a1:e1:65: 00:a7:41:38:fb:b6:16:22:52:78:82:d3:4d:0f:61:bd:cd:13: 1b:21:47:60:29:0b:e0:e4:ca:8e:76:f2:28:b4:9b:a1:78:cf: fe:86:c1:c9:da:8c:20:e4:98:f6:47:64:be:67:de:6f:85:31: 83:11:15:8f:1a:4d:8c:dd:07:cc:e3:92:12:2a:db:1b:e9:43: 93:d6:6c:ba:00:99:5b:6e:6f:b6:8d:d4:20:b0:ef:fa:53:7f: f8:66:0a:c4:a5:89:f0:48:62:23:8b:30:52:65:fa:c5:a1:50: bd:48:3b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyVZbbwYwPJDDi83oQ3LRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy NjExMjAwHhcNMjUxMjExMTkwMDM0WhcNMjUxMjEyMTkwMDM0WjAzMTEwLwYDVQQD EyhlZDRmOTY1ZTVkYzIxZjY5YjdhMDE1MmJjN2Q2MjUwNzU4OWYwYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vEBmgoKwslTZwRJWxJ/6mTebmWe yPkUXzD8rYLaYWi760UvezJV5UoufNhSgI7GOC29RDNv313aC1QqhNALV1cwJv8A x2Je9ZVoL82i8GsDIhrFhvj/VYaxq6XJq6t7D80xmUA4tFm1KPvicuwKwzPYwMdk LZ1HFVkRvl5MGNSW53sJ8u6qPW2NvZTz96+2QRFDMrGRuxP+VTMV3hEvwUGRewDo 2otZy6rZ0qqXknV8BweCRfQxtxhufbkBDJWX3rG7CG+4BuQ2EzWiudytzNO3ngsN bRup51n04wVwzTIubV3FHfuWT6O/oC3cAXdjoqS9dmyq2cc+UMcM/gnKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1Pll5dwh9pt6AVK8fWJQdYnwt5MB8GA1UdIwQY MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6ugXD8f KyW/oTV6EVSdhNYlBmiZzvx18U48mMMyaAujykTXrsuQ7Vf66vfjZa5bnG5TeAUq ZXEacpYfbmGV7n2UNAL0XAcwYA9gIxerxfWu89pys5bxetAkoWQ1mQPiP14Awv7F P4egPZQfLc8ex3j47glypnhZWdZS1awi/goAiUFr5UW+jBHQNLLjoeFlAKdBOPu2 FiJSeILTTQ9hvc0TGyFHYCkL4OTKjnbyKLSboXjP/obBydqMIOSY9kdkvmfeb4Ux gxEVjxpNjN0HzOOSEirbG+lDk9ZsugCZW25vto3UILDv+lN/+GYKxKWJ8EhiI4sw UmX6xaFQvUg7nQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:04:29 2025 by rpki-client