This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json) Hash identifier: OKhqUFhA1rZruLoaoxDyL/upjUdsHQdOIDWvTuk84xc= Subject key identifier: BE:0E:35:29:26:6D:FE:5C:69:E8:73:24:F8:E5:CE:A7:E6:33:2E:FA Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0 Certificate serial: 019B661EC9D16511DD46A09FB5DAEB38DCBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft Manifest number: 094F Signing time: Sun 28 Dec 2025 18:00:52 +0000 Manifest this update: Sun 28 Dec 2025 18:00:52 +0000 Manifest next update: Mon 29 Dec 2025 18:00:52 +0000 Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: 7OpAaQBJR8VuXz49FWd/5gJKhD7OXwu4hr2i/EwUL6I=) 2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:c9:d1:65:11:dd:46:a0:9f:b5:da:eb:38:dc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0 Validity Not Before: Dec 28 18:00:52 2025 GMT Not After : Dec 29 18:00:52 2025 GMT Subject: CN=be0e3529266dfe5c69e87324f8e5cea7e6332efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:e7:71:49:58:35:5c:01:dc:2f:6f:0f:e1: c7:45:27:fc:f7:f7:92:48:08:c5:59:89:e4:55:81: c2:3c:1a:95:77:0c:fb:f9:b7:0f:6b:39:58:03:3e: 80:30:54:c5:cd:37:3b:da:bc:4d:2f:19:36:9a:3a: df:44:52:40:00:12:b0:25:8e:bc:32:63:9e:38:d1: 20:c9:94:bb:78:71:f1:2c:d6:b0:4e:a5:bf:08:9b: 54:bf:06:30:02:59:a6:75:59:33:45:34:99:92:9b: 87:10:ca:48:1e:28:98:e0:45:33:0c:8e:be:66:5f: 37:93:fa:2e:91:c3:64:7e:24:72:e8:38:97:0f:2f: e9:5a:78:a4:4b:94:29:be:d8:57:50:90:97:05:78: 9e:67:88:1f:f7:d3:74:ce:b0:0f:5a:fd:04:d4:27: 5c:43:8d:71:e6:17:f7:be:5a:f1:ec:ef:1a:60:d1: 82:15:5a:7b:d2:d6:a0:f2:0b:9f:57:a6:de:12:d1: ed:b1:57:a0:5f:1c:49:2e:ed:aa:80:f3:bf:99:c9: 40:b0:02:a0:88:f2:b8:da:53:94:aa:53:6e:85:96: ca:7e:61:ed:85:3f:d2:e6:63:b1:ce:ae:9e:0b:55: b3:21:87:f5:a8:20:c3:92:b5:55:eb:83:69:a0:d3: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:35:29:26:6D:FE:5C:69:E8:73:24:F8:E5:CE:A7:E6:33:2E:FA X509v3 Authority Key Identifier: keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:61:8d:77:1b:3f:38:8c:b5:8b:51:53:23:df:db:02:f0:a0: 5b:c8:22:3a:26:50:dd:2b:b0:dd:7f:c1:47:18:4c:e3:43:fe: 5e:6c:20:f0:df:a1:40:91:1a:28:66:de:1c:90:f5:da:03:02: af:14:bc:ed:ec:2f:28:f3:52:4d:f6:37:fc:51:17:1b:a8:a5: a0:e8:01:8b:14:05:2a:50:6c:81:af:f8:7a:be:5e:f1:5f:73: 4c:75:8d:f2:68:dc:d7:b1:db:d6:8d:a9:ae:9e:da:88:4e:13: 79:1f:87:de:76:36:d2:68:ff:c0:cf:93:3a:e2:12:d5:52:c2: c1:c5:00:d8:5c:56:9f:95:c7:25:b9:9b:33:17:29:45:f3:08: a8:80:47:cf:da:9c:0f:cd:0c:62:13:92:28:dd:84:d5:fb:b6: 64:bc:6f:c4:e0:4c:04:75:b2:10:29:21:e7:58:9e:74:b1:80: 8f:8d:6e:67:5a:8a:73:f9:eb:6e:01:44:e7:dd:f0:02:d0:c5: ee:d2:4d:f1:1e:90:d5:6a:63:b7:fb:86:5e:68:38:34:0c:bd: 9b:ba:85:50:13:7a:1e:f8:bc:2b:d9:35:ac:88:f6:66:9c:24: f5:85:df:b4:f9:d0:7a:9d:0f:d0:50:26:ee:d4:ed:08:81:05: ba:43:35:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHsnRZRHdRqCftdrrONy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz MzZkZDAwHhcNMjUxMjI4MTgwMDUyWhcNMjUxMjI5MTgwMDUyWjAzMTEwLwYDVQQD EyhiZTBlMzUyOTI2NmRmZTVjNjllODczMjRmOGU1Y2VhN2U2MzMyZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTbncUlYNVwB3C9vD+HHRSf89/eS SAjFWYnkVYHCPBqVdwz7+bcPazlYAz6AMFTFzTc72rxNLxk2mjrfRFJAABKwJY68 MmOeONEgyZS7eHHxLNawTqW/CJtUvwYwAlmmdVkzRTSZkpuHEMpIHiiY4EUzDI6+ Zl83k/oukcNkfiRy6DiXDy/pWnikS5QpvthXUJCXBXieZ4gf99N0zrAPWv0E1Cdc Q41x5hf3vlrx7O8aYNGCFVp70tag8gufV6beEtHtsVegXxxJLu2qgPO/mclAsAKg iPK42lOUqlNuhZbKfmHthT/S5mOxzq6eC1WzIYf1qCDDkrVV64NpoNMlawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4ONSkmbf5caehzJPjlzqfmMy76MB8GA1UdIwQY MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmGNdxs/ OIy1i1FTI9/bAvCgW8giOiZQ3Suw3X/BRxhM40P+Xmwg8N+hQJEaKGbeHJD12gMC rxS87ewvKPNSTfY3/FEXG6iloOgBixQFKlBsga/4er5e8V9zTHWN8mjc17Hb1o2p rp7aiE4TeR+H3nY20mj/wM+TOuIS1VLCwcUA2FxWn5XHJbmbMxcpRfMIqIBHz9qc D80MYhOSKN2E1fu2ZLxvxOBMBHWyECkh51iedLGAj41uZ1qKc/nrbgFE593wAtDF 7tJN8R6Q1Wpjt/uGXmg4NAy9m7qFUBN6Hvi8K9k1rIj2Zpwk9YXftPnQep0P0FAm 7tTtCIEFukM1Gg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:43 2025 by rpki-client