This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json) Hash identifier: ivKD9E+UAzPF5QFAyFajIKjqJ9x9nGyycvrjaNWCNzs= Subject key identifier: 31:83:DB:34:52:40:BC:C9:40:63:8A:76:F0:AF:B3:46:14:62:28:A7 Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c Certificate serial: 019B3C46F7AE8E97E60F6682F55FDD7D7263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft Manifest number: 0503 Signing time: Sat 20 Dec 2025 15:00:42 +0000 Manifest this update: Sat 20 Dec 2025 15:00:42 +0000 Manifest next update: Sun 21 Dec 2025 15:00:42 +0000 Files and hashes: 1: e24B7HUjem2EcUgVIiWCP9iwbs8.roa (hash: NqLDz/MGE43z7asDnz2IcWTOaDhJNwXlKh8N6TqUooc=) 2: j4i_lEr0ea0rf8oMcqwCbevGHbI.roa (hash: m0Ro3O0JJKs4a9J3JyICkVruy1q5dBuVu7UD/uXkWv8=) 3: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: 4c7lXli+DQ1yaXxYft5w1Lv4k09lElIimvReeHlXibc=) 4: xw6VI0SfTqgX1Ykal0pt0rqVfPs.roa (hash: +mo5fxF621tUv4Tlvitq33EyXbo2V/p/J1JdJ2mFmTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f7:ae:8e:97:e6:0f:66:82:f5:5f:dd:7d:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c Validity Not Before: Dec 20 15:00:42 2025 GMT Not After : Dec 21 15:00:42 2025 GMT Subject: CN=3183db345240bcc940638a76f0afb346146228a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:14:e7:34:49:75:eb:14:39:55:20:4f:3a: f8:b4:73:e3:29:30:45:f5:a3:3e:bc:02:14:46:2b: cb:c1:24:89:5e:1a:9e:6e:48:4d:8f:2c:6d:0e:29: 20:81:29:86:35:8a:ee:3b:62:68:33:2d:5d:e5:ed: c2:9e:ea:25:84:e6:9f:0d:71:e9:b3:3f:c2:54:6d: a8:07:0c:68:9f:07:7b:84:a4:76:7b:bf:d6:17:c0: 8a:3b:bd:45:37:91:41:ed:83:17:e0:2f:5f:2d:ea: c4:5c:2f:4c:2d:1e:b6:54:1d:a3:d7:d4:f8:3c:ed: 26:a6:b8:70:e0:ba:53:77:e5:b9:b5:38:e2:43:aa: e9:02:15:50:d5:2b:b4:e3:ed:7f:5a:57:62:32:32: 3f:e4:03:a6:5b:a7:8d:b7:62:b3:26:fc:3e:a5:b0: 53:9c:ac:a5:e7:cf:27:43:63:b7:cb:7a:f6:00:01: ae:ff:5f:f7:e9:dd:d5:26:60:f5:10:98:a2:2c:7c: fc:72:f8:d0:fb:dd:67:21:00:e4:fa:bb:cd:b4:c5: 65:97:6c:7a:00:f6:df:58:7f:fd:75:64:83:5d:67: ac:92:77:42:bd:6f:f6:b9:f3:f7:01:56:5e:70:c7: 59:dc:06:cb:00:f6:0c:b8:98:fd:ac:85:e9:56:9b: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:DB:34:52:40:BC:C9:40:63:8A:76:F0:AF:B3:46:14:62:28:A7 X509v3 Authority Key Identifier: keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:c4:9a:e5:f3:cc:58:5a:32:35:46:d1:64:09:9a:05:36: 0a:14:3e:f1:af:a3:e5:4f:23:62:79:0e:d6:aa:d3:b6:f7:ba: ce:72:6e:69:0f:b2:16:9e:06:64:e7:b8:7b:d7:07:83:a9:40: 7d:80:16:34:04:47:95:cd:8f:b3:9e:43:e3:b1:c4:c3:80:50: 2e:d7:53:de:e0:28:1c:7f:2e:14:9e:f3:fa:a4:d6:40:7d:72: 55:43:a5:32:62:d7:be:dc:d2:ae:69:67:96:c0:8c:49:93:7e: 59:be:65:7a:ad:e3:65:d1:99:13:e4:49:2e:8f:e1:7e:68:f8: da:93:c0:27:07:ff:25:79:73:6c:b2:9c:f9:df:ad:09:b4:91: 33:aa:f3:56:fd:47:08:88:cf:a3:a1:22:9c:94:86:e6:ad:a8: 52:dd:45:6b:df:9c:b1:75:fc:d4:09:fb:6a:ba:91:08:d6:1b: 6a:ab:3c:99:79:63:90:ef:04:c3:d8:3b:b2:89:e5:c3:29:19: 71:bb:b7:53:fb:b9:d2:0c:89:fe:2e:66:25:c8:ee:ef:0d:48: f9:80:01:69:ad:46:3c:21:3b:ff:bf:12:f9:4f:f1:da:25:98: 58:1a:69:fe:5a:08:98:8b:af:b5:71:9a:fd:cc:4f:75:af:d1: 21:26:83:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RveujpfmD2aC9V/dfXJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3 ZjAxOGMwHhcNMjUxMjIwMTUwMDQyWhcNMjUxMjIxMTUwMDQyWjAzMTEwLwYDVQQD EygzMTgzZGIzNDUyNDBiY2M5NDA2MzhhNzZmMGFmYjM0NjE0NjIyOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmcU5zRJdesUOVUgTzr4tHPjKTBF 9aM+vAIURivLwSSJXhqebkhNjyxtDikggSmGNYruO2JoMy1d5e3CnuolhOafDXHp sz/CVG2oBwxonwd7hKR2e7/WF8CKO71FN5FB7YMX4C9fLerEXC9MLR62VB2j19T4 PO0mprhw4LpTd+W5tTjiQ6rpAhVQ1Su04+1/WldiMjI/5AOmW6eNt2KzJvw+pbBT nKyl588nQ2O3y3r2AAGu/1/36d3VJmD1EJiiLHz8cvjQ+91nIQDk+rvNtMVll2x6 APbfWH/9dWSDXWeskndCvW/2ufP3AVZecMdZ3AbLAPYMuJj9rIXpVpvk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGD2zRSQLzJQGOKdvCvs0YUYiinMB8GA1UdIwQY MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt YWY2MGZkNWYwNmIxLzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbzEmuXz zFhaMjVG0WQJmgU2ChQ+8a+j5U8jYnkO1qrTtve6znJuaQ+yFp4GZOe4e9cHg6lA fYAWNARHlc2Ps55D47HEw4BQLtdT3uAoHH8uFJ7z+qTWQH1yVUOlMmLXvtzSrmln lsCMSZN+Wb5leq3jZdGZE+RJLo/hfmj42pPAJwf/JXlzbLKc+d+tCbSRM6rzVv1H CIjPo6EinJSG5q2oUt1Fa9+csXX81An7arqRCNYbaqs8mXljkO8Ew9g7sonlwykZ cbu3U/u50gyJ/i5mJcju7w1I+YABaa1GPCE7/78S+U/x2iWYWBpp/loImIuvtXGa /cxPda/RISaD9g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:14:02 2025 by rpki-client