This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json) Hash identifier: c/+tiZEa+UBNyzXRtl7mit1Pj8m0wEh5AVdacyRr+8k= Subject key identifier: D1:05:52:0D:57:81:60:E0:E2:37:DA:B3:CF:F8:0B:11:B2:8F:6B:EF Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Certificate serial: 019B6EB44D4E512CC528BA8FAEB085A461BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft Manifest number: 0D67 Signing time: Tue 30 Dec 2025 10:01:08 +0000 Manifest this update: Tue 30 Dec 2025 10:01:08 +0000 Manifest next update: Wed 31 Dec 2025 10:01:08 +0000 Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=) 2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: S+yufPhSQhuZBnZNhPET4HpyIGRf1R2xnY828wzV9lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:4d:4e:51:2c:c5:28:ba:8f:ae:b0:85:a4:61:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Validity Not Before: Dec 30 10:01:08 2025 GMT Not After : Dec 31 10:01:08 2025 GMT Subject: CN=d105520d578160e0e237dab3cff80b11b28f6bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:44:30:08:18:23:c6:14:ee:91:4f:87:27: 38:be:ec:c3:d6:03:4a:91:f8:9e:91:9f:57:c7:45: 83:5d:3b:1c:c5:5e:da:81:df:7b:c1:25:b2:b8:9d: 21:4e:16:d7:1c:e0:94:b3:01:e6:2a:38:ab:5a:85: e5:b7:6a:92:c7:13:63:13:d2:91:4b:b4:73:94:de: 50:92:97:07:ac:13:dd:6d:0f:45:74:7a:21:fc:14: 1e:87:b4:07:b0:6a:16:4a:82:d8:69:cb:0d:d6:ec: 01:d9:19:e7:a3:24:c9:cc:4b:ce:fa:ef:c6:93:aa: b2:e0:38:53:0f:67:3e:ee:ab:59:23:5c:1f:f8:cd: 14:80:81:94:87:93:77:f0:e9:50:ac:ac:ab:07:6e: a4:82:e4:a1:25:b4:e9:31:d1:13:ae:ce:c1:33:74: 77:28:fa:f8:14:06:b4:71:eb:ab:9c:c2:ae:d0:7c: d7:ba:fc:47:7d:01:a2:aa:07:13:74:fc:1e:01:73: b3:9f:7f:9b:48:b8:bb:cf:02:f9:d0:65:e3:67:a7: ce:ff:00:ec:fc:d6:ad:e5:b2:26:c0:67:bb:fe:63: e0:82:ec:db:e4:13:4c:ca:42:33:0d:af:68:a6:65: 21:d9:b2:c5:e5:3a:56:5c:3c:e5:a0:ef:7b:3b:2e: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:05:52:0D:57:81:60:E0:E2:37:DA:B3:CF:F8:0B:11:B2:8F:6B:EF X509v3 Authority Key Identifier: keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:eb:29:b4:91:3b:db:55:63:35:ef:34:4e:aa:09:e0:54:27: 8e:28:b3:0b:33:1c:fe:3d:cc:b2:b0:4b:98:9e:cd:9e:33:32: fd:c3:5a:a2:56:c2:c5:79:81:ee:d8:19:d7:1a:44:94:7f:32: 74:9d:67:12:6e:d3:03:6f:3e:0e:f1:45:0b:0b:39:39:9f:5f: 3a:2a:dd:a8:fe:90:3d:c2:87:ca:88:ea:51:a7:a7:10:55:28: c0:cd:8d:e8:5a:04:0c:ab:c3:d0:34:90:0f:50:0e:e9:ab:50: 96:8f:0e:ff:fd:99:af:ba:a6:be:ed:f0:c5:4a:73:9f:ad:0a: 31:a6:33:19:c9:c5:8a:b2:33:e7:31:a2:58:d5:a4:8e:31:7e: 11:88:d9:8a:30:a4:0b:33:55:ee:60:03:5f:df:5b:42:64:48: 12:76:81:a1:5d:3c:29:26:6e:76:55:6c:02:78:97:86:db:5b: d1:a9:4f:d6:47:12:8a:39:38:2a:b0:e3:e1:04:90:a2:4e:83: 0a:9a:5c:6a:52:3f:e7:5c:46:7c:31:6b:06:54:a6:39:aa:b5: d2:38:ba:ed:c2:10:58:27:0f:a9:6e:b5:f1:6c:2c:d0:e1:1e: 99:a1:fd:8c:95:13:ee:f4:c3:c8:f6:61:1d:82:82:b1:fc:d8: d3:58:84:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutE1OUSzFKLqPrrCFpGG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3 MDM5OGMwHhcNMjUxMjMwMTAwMTA4WhcNMjUxMjMxMTAwMTA4WjAzMTEwLwYDVQQD EyhkMTA1NTIwZDU3ODE2MGUwZTIzN2RhYjNjZmY4MGIxMWIyOGY2YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0JEMAgYI8YU7pFPhyc4vuzD1gNK kfiekZ9Xx0WDXTscxV7agd97wSWyuJ0hThbXHOCUswHmKjirWoXlt2qSxxNjE9KR S7RzlN5QkpcHrBPdbQ9FdHoh/BQeh7QHsGoWSoLYacsN1uwB2RnnoyTJzEvO+u/G k6qy4DhTD2c+7qtZI1wf+M0UgIGUh5N38OlQrKyrB26kguShJbTpMdETrs7BM3R3 KPr4FAa0ceurnMKu0HzXuvxHfQGiqgcTdPweAXOzn3+bSLi7zwL50GXjZ6fO/wDs /Nat5bImwGe7/mPgguzb5BNMykIzDa9opmUh2bLF5TpWXDzloO97Oy4yOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEFUg1XgWDg4jfas8/4CxGyj2vvMB8GA1UdIwQY MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4 LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZesptJE7 21VjNe80TqoJ4FQnjiizCzMc/j3MsrBLmJ7NnjMy/cNaolbCxXmB7tgZ1xpElH8y dJ1nEm7TA28+DvFFCws5OZ9fOirdqP6QPcKHyojqUaenEFUowM2N6FoEDKvD0DSQ D1AO6atQlo8O//2Zr7qmvu3wxUpzn60KMaYzGcnFirIz5zGiWNWkjjF+EYjZijCk CzNV7mADX99bQmRIEnaBoV08KSZudlVsAniXhttb0alP1kcSijk4KrDj4QSQok6D CppcalI/51xGfDFrBlSmOaq10ji67cIQWCcPqW618Wws0OEemaH9jJUT7vTDyPZh HYKCsfzY01iEQA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:46 2025 by rpki-client