This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json) Hash identifier: wAbCI73JpESamV+j+2CaY7FwThIMzKYbOBpO6r2rBKY= Subject key identifier: 28:05:3E:69:F4:89:84:C2:67:A2:18:48:10:F6:C3:7A:FC:72:51:37 Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Certificate serial: 019AF2ADCAAE53675ECDB1AFDF086CBE515C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft Manifest number: 12C2 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=) 2: DaHb-AgbaohKBsaZFPAVDGbt_RI.roa (hash: T2KsBuhVxG35+5zMSgS7xBXEVKNyKlB23AKVgPghBi4=) 3: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=) 4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: T1mpngA5wn7XmV2I1WqTL2GSsd8zqKZI3tU3y3NpmCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ca:ae:53:67:5e:cd:b1:af:df:08:6c:be:51:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=28053e69f48984c267a2184810f6c37afc725137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:87:0c:77:87:5b:66:7e:d2:bd:6d:5e:2a: 69:4d:01:2e:9c:49:9c:22:01:8f:44:2b:19:9d:2a: 91:03:cc:da:bf:8e:d6:41:09:80:53:15:a3:2d:9b: e7:1e:cf:07:3c:c7:29:06:14:da:f1:1b:09:92:70: af:ac:87:f0:7c:22:de:63:ae:c0:75:7f:ca:f2:75: 80:d6:d1:12:af:87:f3:06:a6:15:8f:21:00:ac:e6: 9c:fb:f8:91:ec:0e:c5:f9:2c:1e:c7:d3:24:d4:83: 2f:71:af:3a:5a:40:80:b5:9e:1f:ac:fb:b0:b9:e6: 05:e4:29:79:9f:73:cb:7d:4b:ae:6c:51:51:0d:06: e1:cf:5e:01:09:ae:71:5d:ef:dc:80:01:a3:c2:3c: f3:77:af:18:32:c3:f7:05:6e:dd:93:51:72:4b:07: 91:02:ca:30:f4:27:d5:7e:97:7a:dc:a9:9f:c4:f6: 56:dc:79:f8:d6:19:5d:5a:12:1a:9e:c9:a7:c3:b1: d6:e7:fe:05:ed:5e:10:ab:fb:23:38:6e:30:81:16: 89:6f:26:f9:93:7e:22:f9:f1:94:7a:32:9f:02:85: 32:fe:ff:dc:bf:88:03:d1:7c:ee:1b:0b:a9:2c:69: 8b:1e:50:7b:6e:21:df:b3:ef:a7:10:4b:51:f3:33: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:3E:69:F4:89:84:C2:67:A2:18:48:10:F6:C3:7A:FC:72:51:37 X509v3 Authority Key Identifier: keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:31:30:1c:85:07:2d:97:f3:a5:e0:e7:e5:e4:41:36:2c:77: 35:83:c7:a1:a1:0a:18:f3:13:82:5d:44:21:5e:dc:00:55:02: f0:a7:93:cd:a1:6c:43:a3:1a:d8:0f:d6:14:c6:03:83:46:5d: 31:91:15:9c:2f:af:13:04:f9:45:68:c0:64:62:35:5d:12:3c: dc:94:3a:47:8d:d9:a4:ef:7d:64:1b:be:40:34:dc:a4:bd:d5: a9:ed:04:d6:29:6f:2b:a4:3f:2e:32:70:0d:92:88:19:02:4b: 80:5a:de:3c:af:84:ab:bd:bf:24:1a:b4:c2:e3:d4:14:a5:4a: 27:a9:66:ba:ca:6c:0f:dd:60:6b:f5:28:fb:aa:9e:21:18:93: bf:58:c0:0f:e1:f2:e5:60:e7:ad:8d:9a:a8:a8:c8:7d:05:01: 12:86:26:cd:67:2a:d3:14:5a:7c:bf:0a:a3:43:c8:47:63:41: f9:f4:a3:2f:6d:b3:45:f1:79:27:32:fd:08:dc:b1:90:14:0c: 8e:cc:cd:c9:36:bc:fa:2f:23:5f:e5:85:f3:a2:83:85:3b:b9: 78:5a:f5:a0:d8:c5:3e:15:78:a3:98:02:0f:46:35:8b:18:4a: d0:f0:bd:fd:ed:11:a8:0f:6d:41:0a:62:3f:82:ab:6d:ba:d3: 8b:9e:70:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcquU2dezbGv3whsvlFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw OGI0NDIwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygyODA1M2U2OWY0ODk4NGMyNjdhMjE4NDgxMGY2YzM3YWZjNzI1MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF6HDHeHW2Z+0r1tXippTQEunEmc IgGPRCsZnSqRA8zav47WQQmAUxWjLZvnHs8HPMcpBhTa8RsJknCvrIfwfCLeY67A dX/K8nWA1tESr4fzBqYVjyEArOac+/iR7A7F+Swex9Mk1IMvca86WkCAtZ4frPuw ueYF5Cl5n3PLfUuubFFRDQbhz14BCa5xXe/cgAGjwjzzd68YMsP3BW7dk1FySweR Asow9CfVfpd63KmfxPZW3Hn41hldWhIansmnw7HW5/4F7V4Qq/sjOG4wgRaJbyb5 k34i+fGUejKfAoUy/v/cv4gD0XzuGwupLGmLHlB7biHfs++nEEtR8zMujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgFPmn0iYTCZ6IYSBD2w3r8clE3MB8GA1UdIwQY MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjEwHIUH LZfzpeDn5eRBNix3NYPHoaEKGPMTgl1EIV7cAFUC8KeTzaFsQ6Ma2A/WFMYDg0Zd MZEVnC+vEwT5RWjAZGI1XRI83JQ6R43ZpO99ZBu+QDTcpL3Vqe0E1ilvK6Q/LjJw DZKIGQJLgFrePK+Eq72/JBq0wuPUFKVKJ6lmuspsD91ga/Uo+6qeIRiTv1jAD+Hy 5WDnrY2aqKjIfQUBEoYmzWcq0xRafL8Ko0PIR2NB+fSjL22zRfF5JzL9CNyxkBQM jszNyTa8+i8jX+WF86KDhTu5eFr1oNjFPhV4o5gCD0Y1ixhK0PC9/e0RqA9tQQpi P4KrbbrTi55wEw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:30 2025 by rpki-client