This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: y8mcEy+HHAlePjVddtRDV4XrHwo6X6pdjq5+abxNYD0= Subject key identifier: 23:CF:6B:BF:9E:D0:C1:30:71:BA:1C:AE:22:9F:29:47:97:54:D8:4E Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019B5418DF8B5A2B835EAA9C109A8F29E599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0F1C Signing time: Thu 25 Dec 2025 06:01:14 +0000 Manifest this update: Thu 25 Dec 2025 06:01:14 +0000 Manifest next update: Fri 26 Dec 2025 06:01:14 +0000 Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=) 2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=) 3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=) 4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: OhDQh46w734zGlxm3bXWjw7BC4LVGgCgAPAbJqschEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:df:8b:5a:2b:83:5e:aa:9c:10:9a:8f:29:e5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Dec 25 06:01:14 2025 GMT Not After : Dec 26 06:01:14 2025 GMT Subject: CN=23cf6bbf9ed0c13071ba1cae229f29479754d84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:10:6e:a5:24:19:ac:c8:12:07:2c:a8:31: f3:0b:41:99:2f:4f:99:e5:aa:e9:b1:29:59:b2:62: d6:d3:db:da:ba:10:ca:6d:a4:bd:4c:4c:a3:e1:ba: e9:63:de:30:df:eb:f0:0e:88:e1:9a:ae:4e:92:d1: e5:f4:42:63:ce:db:f7:04:93:ec:ba:57:1b:ed:85: 0f:c6:ed:b3:d6:0d:f7:39:9d:c8:71:c3:72:d4:8b: 66:e2:09:0d:1e:27:ee:38:dc:f9:6a:9c:0f:e4:66: e7:f7:ac:e4:cb:aa:5f:36:17:27:88:c1:50:47:40: 34:2f:57:fa:ca:7b:07:9c:ed:c6:40:81:25:47:fe: 4f:c2:69:f3:7b:4f:e6:77:eb:11:80:4f:92:7a:b2: 9f:d0:e1:6c:80:4f:13:15:15:6a:c7:3d:8d:42:3c: 15:9c:3a:80:ea:cd:6c:55:57:46:6c:9a:ad:4a:f9: 2b:73:5e:26:9b:9a:09:d1:4a:61:e4:16:62:95:02: e7:73:9d:5b:6d:40:2e:81:89:de:21:77:63:30:d6: 80:68:67:12:18:f1:e0:b2:7c:1d:80:ac:f0:06:76: 8a:1a:73:1e:0d:0a:3b:4e:d2:d6:8b:82:e0:9d:42: b6:4d:ff:bc:67:41:33:1b:ef:08:b9:a6:6a:30:7c: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:6B:BF:9E:D0:C1:30:71:BA:1C:AE:22:9F:29:47:97:54:D8:4E X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a7:27:6d:0c:45:de:55:59:24:33:d2:90:d5:82:83:32:28: 66:c9:f0:7b:3e:c0:fd:6d:a9:57:7a:cc:15:c6:f8:2b:07:dd: 71:64:2a:02:6f:90:35:fb:8a:e8:d5:05:b5:65:35:bc:d4:41: 7c:cd:ff:8f:1e:87:3e:dd:ca:14:90:9b:07:c0:ef:0f:2c:e3: a0:65:7c:ee:f8:b4:d8:8e:2a:5f:86:2d:e6:c3:2c:c4:6a:0d: 25:cd:a3:25:88:e1:6c:7e:58:c6:44:1b:10:8d:43:4d:f5:3a: c5:b3:fd:a5:de:33:93:48:02:7e:a6:d4:96:62:7a:ef:a9:14: cd:39:e2:10:6f:42:12:df:65:23:db:3e:50:66:b9:e3:ca:5a: 15:47:91:7b:8e:34:b3:d5:96:ce:3a:30:7c:c5:9e:55:82:8c: 22:2e:66:48:f5:dd:41:c0:f9:67:cd:55:d4:2d:c3:6d:23:84: a1:62:50:d7:d3:57:58:b2:a4:d8:59:e7:e7:73:f4:98:ed:df: 7f:d5:21:3f:80:5f:04:de:28:a4:ca:f4:a6:11:3d:ca:92:5d: e4:06:b4:12:d4:1f:15:a7:63:f2:49:e3:eb:39:fd:a2:f0:ed: b3:7b:8c:71:0b:f4:d2:dd:2b:32:ed:75:a7:db:ad:07:2b:a3: e3:17:1d:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGN+LWiuDXqqcEJqPKeWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjUxMjI1MDYwMTE0WhcNMjUxMjI2MDYwMTE0WjAzMTEwLwYDVQQD EygyM2NmNmJiZjllZDBjMTMwNzFiYTFjYWUyMjlmMjk0Nzk3NTRkODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWsQbqUkGazIEgcsqDHzC0GZL0+Z 5arpsSlZsmLW09vauhDKbaS9TEyj4brpY94w3+vwDojhmq5OktHl9EJjztv3BJPs ulcb7YUPxu2z1g33OZ3IccNy1Itm4gkNHifuONz5apwP5Gbn96zky6pfNhcniMFQ R0A0L1f6ynsHnO3GQIElR/5Pwmnze0/md+sRgE+SerKf0OFsgE8TFRVqxz2NQjwV nDqA6s1sVVdGbJqtSvkrc14mm5oJ0Uph5BZilQLnc51bbUAugYneIXdjMNaAaGcS GPHgsnwdgKzwBnaKGnMeDQo7TtLWi4LgnUK2Tf+8Z0EzG+8IuaZqMHynHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPPa7+e0MEwcbocriKfKUeXVNhOMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApacnbQxF 3lVZJDPSkNWCgzIoZsnwez7A/W2pV3rMFcb4KwfdcWQqAm+QNfuK6NUFtWU1vNRB fM3/jx6HPt3KFJCbB8DvDyzjoGV87vi02I4qX4Yt5sMsxGoNJc2jJYjhbH5YxkQb EI1DTfU6xbP9pd4zk0gCfqbUlmJ676kUzTniEG9CEt9lI9s+UGa548paFUeRe440 s9WWzjowfMWeVYKMIi5mSPXdQcD5Z81V1C3DbSOEoWJQ19NXWLKk2Fnn53P0mO3f f9UhP4BfBN4opMr0phE9ypJd5Aa0EtQfFadj8knj6zn9ovDts3uMcQv00t0rMu11 p9utByuj4xcdfw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:33 2025 by rpki-client