This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: EIKtTsr3iD7OkGbiOd7vYQAcGkMfvrPmXtO2Lf6j8pE= Subject key identifier: 6E:BA:22:03:52:2A:75:2C:89:E9:52:A1:7E:19:16:8A:34:3D:AD:2E Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019B6768B0DD3E50D513954275D32623669D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0F26 Signing time: Mon 29 Dec 2025 00:01:12 +0000 Manifest this update: Mon 29 Dec 2025 00:01:12 +0000 Manifest next update: Tue 30 Dec 2025 00:01:12 +0000 Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=) 2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=) 3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=) 4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: kloS8PuIKGz3xqQpGjA6lQf4JsUbyMy6R2b7IoLOVHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:b0:dd:3e:50:d5:13:95:42:75:d3:26:23:66:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Dec 29 00:01:12 2025 GMT Not After : Dec 30 00:01:12 2025 GMT Subject: CN=6eba2203522a752c89e952a17e19168a343dad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:80:72:d0:43:f8:3d:3c:c4:10:9d:af:a7:2f: b6:f2:10:ba:dd:e6:75:be:9a:65:b4:68:05:61:09: 93:92:c7:fa:ce:e5:74:aa:8c:42:f9:ee:16:75:6d: c7:41:19:a1:a0:86:48:70:9a:f7:b8:e3:34:26:8e: 5f:13:5f:ce:45:9f:da:b0:80:c3:fe:a0:94:3d:ac: 79:ca:ba:4b:e4:18:9f:70:25:ca:18:a2:93:d7:7f: c4:e5:ca:b3:56:4d:7c:af:74:b7:43:81:84:aa:0e: f2:a3:d8:ed:fb:eb:4a:44:2e:45:51:ab:ab:f0:8f: 3b:7a:86:59:37:ee:72:04:43:a9:4d:84:bf:3b:70: e9:f9:4a:db:5f:13:83:f0:88:e2:dc:2c:23:5c:5a: 57:c9:ff:71:ad:17:3b:95:8e:a1:00:19:73:2b:a2: de:cc:48:2b:74:c2:a0:fd:29:78:c8:88:c9:b5:63: df:64:c1:c2:0b:81:83:08:06:91:81:bb:34:72:c9: 95:f7:56:3c:a5:81:bf:0c:8a:93:b3:31:69:da:f6: 16:5d:9c:68:26:26:a8:ca:ec:f4:da:76:17:ca:14: 48:dc:c2:75:a3:70:a9:db:f3:58:ce:07:a6:67:4e: 37:6d:3d:a2:f0:8e:6f:9a:f4:a9:78:52:e7:b6:62: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BA:22:03:52:2A:75:2C:89:E9:52:A1:7E:19:16:8A:34:3D:AD:2E X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:87:3e:5e:78:fc:38:8d:8f:e3:cb:a1:9a:e6:0f:5d:9a:e2: 21:7f:0a:9f:83:ee:b4:14:ee:02:c9:37:7a:08:29:aa:d2:f1: 36:f6:5b:39:c4:82:ac:21:e4:c5:66:90:5a:58:2f:c5:c8:29: fc:bc:51:b3:50:36:af:f2:35:78:c9:f8:dd:fc:af:51:0f:cf: d0:39:47:cd:2b:92:0e:44:61:81:e4:a9:b8:84:0e:a5:e0:da: 56:e9:cd:0b:d1:95:a2:01:aa:90:ea:b9:ec:6a:96:d1:bc:11: 79:be:29:02:ed:41:b7:4c:b3:e3:ad:44:c4:34:49:ce:aa:ed: ce:82:0d:d1:de:9e:86:f9:09:87:72:c6:14:07:84:99:37:94: 4c:1d:48:7f:13:21:79:c3:27:7e:c3:e9:92:a0:d9:d1:56:a1: 15:70:78:3c:46:88:45:6c:ec:a0:98:5b:7d:96:44:56:a2:a2: 64:b7:fc:3b:8a:c8:73:20:ed:7e:0c:6c:27:ca:60:6f:82:7d: 03:17:3b:81:35:54:54:95:4f:91:eb:82:f4:2a:4f:8d:4c:a4: 65:7e:ad:4c:ad:dc:1a:6f:03:00:e5:19:a5:fc:1a:1e:36:58: 47:a2:69:b7:8e:a2:e7:ec:d9:db:47:fa:71:ac:0a:fd:57:3f: 33:3a:9b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaLDdPlDVE5VCddMmI2adMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjUxMjI5MDAwMTEyWhcNMjUxMjMwMDAwMTEyWjAzMTEwLwYDVQQD Eyg2ZWJhMjIwMzUyMmE3NTJjODllOTUyYTE3ZTE5MTY4YTM0M2RhZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoBy0EP4PTzEEJ2vpy+28hC63eZ1 vppltGgFYQmTksf6zuV0qoxC+e4WdW3HQRmhoIZIcJr3uOM0Jo5fE1/ORZ/asIDD /qCUPax5yrpL5BifcCXKGKKT13/E5cqzVk18r3S3Q4GEqg7yo9jt++tKRC5FUaur 8I87eoZZN+5yBEOpTYS/O3Dp+UrbXxOD8Iji3CwjXFpXyf9xrRc7lY6hABlzK6Le zEgrdMKg/Sl4yIjJtWPfZMHCC4GDCAaRgbs0csmV91Y8pYG/DIqTszFp2vYWXZxo Jiaoyuz02nYXyhRI3MJ1o3Cp2/NYzgemZ043bT2i8I5vmvSpeFLntmJIKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG66IgNSKnUsielSoX4ZFoo0Pa0uMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4c+Xnj8 OI2P48uhmuYPXZriIX8Kn4PutBTuAsk3eggpqtLxNvZbOcSCrCHkxWaQWlgvxcgp /LxRs1A2r/I1eMn43fyvUQ/P0DlHzSuSDkRhgeSpuIQOpeDaVunNC9GVogGqkOq5 7GqW0bwReb4pAu1Bt0yz461ExDRJzqrtzoIN0d6ehvkJh3LGFAeEmTeUTB1IfxMh ecMnfsPpkqDZ0VahFXB4PEaIRWzsoJhbfZZEVqKiZLf8O4rIcyDtfgxsJ8pgb4J9 Axc7gTVUVJVPkeuC9CpPjUykZX6tTK3cGm8DAOUZpfwaHjZYR6Jpt46i5+zZ20f6 cawK/Vc/Mzqb1w== -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:40 2025 by rpki-client