This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json) Hash identifier: RGzR3jQHya4FVqehF+rl/maaUXhF7A5LXmt7lxbYjiQ= Subject key identifier: BA:05:35:A5:60:61:B4:9E:D9:DC:41:CC:FF:C9:8D:80:E8:99:1E:BB Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Certificate serial: 019B481558682235CEA228EAE5B5BF848122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft Manifest number: 0D53 Signing time: Mon 22 Dec 2025 22:01:56 +0000 Manifest this update: Mon 22 Dec 2025 22:01:56 +0000 Manifest next update: Tue 23 Dec 2025 22:01:56 +0000 Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=) 2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 3/bYZD9RCf5Y4IFDDZdyeS7f6c93QewpdHpXuelkVJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:58:68:22:35:ce:a2:28:ea:e5:b5:bf:84:81:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Validity Not Before: Dec 22 22:01:56 2025 GMT Not After : Dec 23 22:01:56 2025 GMT Subject: CN=ba0535a56061b49ed9dc41ccffc98d80e8991ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:57:69:2b:36:88:54:e7:0c:7e:4f:e2:d4: c9:67:7a:d9:a5:9b:4b:85:de:76:e2:a8:31:42:03: 8e:42:f8:10:cb:bc:53:15:89:36:4b:f3:8a:03:05: 3d:12:b2:52:3f:52:40:42:8c:87:55:13:cb:67:bb: 81:d7:fc:17:6b:8f:43:17:02:50:cb:04:0b:72:41: d2:aa:bd:2a:d2:33:4e:57:f9:30:67:db:e4:be:0f: bd:dd:ec:8f:94:06:a5:e6:47:ea:80:82:c6:c7:ec: 92:ec:18:72:ca:87:87:67:62:26:7c:ce:58:57:f9: 97:6d:28:35:77:13:3f:b6:07:44:87:ec:63:5c:7b: 2c:4b:69:ae:2f:6d:8b:1e:34:d0:36:ba:29:91:85: f7:2a:6a:92:b5:e0:74:60:0d:e8:8d:17:12:56:42: c3:da:c3:3f:df:82:80:51:25:2f:64:ec:91:6f:d3: 4f:e7:44:10:c3:a8:38:a3:0d:9f:48:80:d1:f5:b7: 2d:55:9d:10:1c:f0:59:83:73:f4:e1:0d:98:73:21: 33:98:40:9d:89:7b:a7:a7:94:47:5c:60:26:eb:aa: 2e:24:04:11:14:e0:24:ab:59:f1:46:ba:73:db:a4: 4a:85:0d:71:5a:a6:73:ff:85:32:c8:a6:a5:fb:bf: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:35:A5:60:61:B4:9E:D9:DC:41:CC:FF:C9:8D:80:E8:99:1E:BB X509v3 Authority Key Identifier: keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:6b:2c:d5:87:90:4b:48:50:9f:99:96:e1:79:02:05:ec: f6:f5:2a:ee:7d:0e:d2:33:70:27:89:de:7d:32:4a:a4:2f:4f: 96:f5:4b:61:31:26:d0:8b:85:1f:75:18:0b:c5:95:81:ea:b5: 1a:b9:30:ca:f3:65:ae:6f:f2:21:05:1f:66:d0:37:76:ba:0d: 3b:4c:d8:5a:68:a7:71:8f:85:6a:a1:27:76:16:19:11:36:55: 42:1a:cf:55:01:5e:40:e4:f3:9a:d3:01:48:14:5f:97:e0:77: 8c:e6:84:c9:c8:52:af:6f:b4:a9:dc:46:37:d1:71:05:2e:56: ad:dc:03:bc:5c:ca:02:f8:d2:58:a1:a3:e2:02:86:75:d9:5b: d9:cd:5a:32:2d:9b:d9:72:e0:6b:3a:5f:a1:37:9e:af:88:8b: 2c:84:b8:ee:fb:f5:40:17:b3:a0:80:6c:83:d9:a0:a9:b1:44: 29:0f:3a:59:f3:98:86:00:79:5f:7d:10:3e:43:8f:6f:8f:dd: ba:d9:97:2e:1a:52:4e:e6:9f:fc:32:20:d8:34:aa:a3:d7:8c: c6:a9:4f:93:3e:07:80:0f:f8:15:5c:b2:3b:86:cf:db:b3:91: f3:98:b3:77:a8:a2:8e:a8:d5:d7:56:83:dc:03:c1:41:e5:df: fe:5d:d6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFVhoIjXOoijq5bW/hIEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3 MDM5OGMwHhcNMjUxMjIyMjIwMTU2WhcNMjUxMjIzMjIwMTU2WjAzMTEwLwYDVQQD EyhiYTA1MzVhNTYwNjFiNDllZDlkYzQxY2NmZmM5OGQ4MGU4OTkxZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHVXaSs2iFTnDH5P4tTJZ3rZpZtL hd524qgxQgOOQvgQy7xTFYk2S/OKAwU9ErJSP1JAQoyHVRPLZ7uB1/wXa49DFwJQ ywQLckHSqr0q0jNOV/kwZ9vkvg+93eyPlAal5kfqgILGx+yS7BhyyoeHZ2ImfM5Y V/mXbSg1dxM/tgdEh+xjXHssS2muL22LHjTQNropkYX3KmqSteB0YA3ojRcSVkLD 2sM/34KAUSUvZOyRb9NP50QQw6g4ow2fSIDR9bctVZ0QHPBZg3P04Q2YcyEzmECd iXunp5RHXGAm66ouJAQRFOAkq1nxRrpz26RKhQ1xWqZz/4UyyKal+79nbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoFNaVgYbSe2dxBzP/JjYDomR67MB8GA1UdIwQY MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4 LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnFrLNWH kEtIUJ+ZluF5AgXs9vUq7n0O0jNwJ4nefTJKpC9PlvVLYTEm0IuFH3UYC8WVgeq1 GrkwyvNlrm/yIQUfZtA3droNO0zYWmincY+FaqEndhYZETZVQhrPVQFeQOTzmtMB SBRfl+B3jOaEychSr2+0qdxGN9FxBS5WrdwDvFzKAvjSWKGj4gKGddlb2c1aMi2b 2XLgazpfoTeer4iLLIS47vv1QBezoIBsg9mgqbFEKQ86WfOYhgB5X30QPkOPb4/d utmXLhpSTuaf/DIg2DSqo9eMxqlPkz4HgA/4FVyyO4bP27OR85izd6iijqjV11aD 3APBQeXf/l3W4w== -----END CERTIFICATE-----Generated at Tue Dec 23 05:35:21 2025 by rpki-client