This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json) Hash identifier: b85AUEs4B59KBmjT2WTtX4ac92dxB4oTNspSAR4D90E= Subject key identifier: 92:5C:15:9D:11:26:E0:13:14:25:EF:B6:AB:93:ED:BE:95:55:95:67 Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a Certificate serial: 019AF209585B5E6D3019E7E2533D169F6B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft Manifest number: 0422 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=) 2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: iZLVa68rDOo/I4xxQq/SF6OfcF4jxpwui+VywGGEWdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:5b:5e:6d:30:19:e7:e2:53:3d:16:9f:6b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=925c159d1126e0131425efb6ab93edbe95559567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:be:a1:3e:11:10:c1:02:be:df:01:20:8f:05: 9b:fc:0b:5a:f4:cb:35:6f:4c:d4:89:ea:bf:0f:5f: b1:5b:36:f8:50:45:e7:4a:06:48:c6:43:99:b2:7b: 9b:b1:32:c2:7a:0e:1c:07:d1:4f:53:00:fb:37:d8: f2:49:39:a2:3b:76:a8:d6:ab:88:87:fa:d5:8f:90: c7:d7:95:ef:7b:2a:96:f3:9d:68:de:40:73:04:c4: 22:f9:ec:9f:42:e9:70:9a:d7:1b:73:9a:c9:f4:65: b2:49:08:e1:b6:1e:a9:a0:a8:fc:cc:14:dc:17:7e: 1a:d8:99:ea:b6:bd:65:aa:aa:1b:65:5b:b5:a3:68: 01:39:2b:49:fe:42:d3:06:c5:ec:a6:b1:11:8f:8c: f2:48:74:1e:c3:8f:aa:9a:98:b5:8a:72:94:36:bd: da:18:35:70:31:08:ef:60:fd:bd:c8:fa:c7:bf:bf: e0:fb:a2:3d:3e:ea:d7:98:03:47:81:6e:34:bb:cc: 37:e2:0f:83:81:ee:26:15:16:39:ff:c1:35:07:a8: 81:5f:1b:c7:33:9e:f1:d6:c3:4b:b0:42:e2:6c:9c: 61:e0:4a:24:d1:49:56:e1:d1:a7:c0:47:eb:68:d5: b7:a3:61:02:86:92:ca:92:b6:ec:59:34:29:88:39: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:15:9D:11:26:E0:13:14:25:EF:B6:AB:93:ED:BE:95:55:95:67 X509v3 Authority Key Identifier: keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:b8:f7:c1:09:54:8c:54:a0:22:77:af:73:e5:8f:1a:8b: 65:12:da:34:92:a1:a2:de:c8:aa:11:d2:ba:e4:ec:61:c3:a7: d2:a6:f2:df:d2:0e:79:3b:d8:79:23:c5:f0:c6:1e:21:65:e0: 66:28:f9:a6:c4:67:b8:b8:c3:fb:61:8b:07:b3:14:63:ea:09: aa:9e:48:cc:62:22:b2:c6:34:98:cb:0b:05:c0:f2:04:91:e7: cc:dd:2e:51:95:ae:c1:3c:bb:5f:8b:6a:1b:1a:b5:67:9c:14: d5:e4:2d:37:ae:d9:14:1f:47:10:40:47:de:db:79:ad:80:46: 5c:47:9b:2f:ba:45:88:e3:3d:86:a0:dd:e0:e9:e5:95:7a:e0: 2c:dc:55:87:20:8d:bd:a6:a6:ed:3f:8a:93:81:70:0a:b0:3a: 69:4a:f6:f9:b4:eb:44:b6:d8:65:3a:6f:ee:6d:4c:2e:d4:7e: e1:bc:5f:85:0b:81:ad:2b:ec:8f:53:7f:12:21:06:da:b9:c5: 70:80:44:59:27:58:9f:7f:b7:24:c3:94:d1:44:39:9b:8a:4f: 3d:46:6b:85:d0:a7:55:08:55:0b:24:15:b0:b2:f5:07:fb:c6: 34:51:d4:4e:b3:dd:6d:7e:9f:35:90:ea:e3:55:01:2b:41:73: 3b:06:3f:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVhbXm0wGefiUz0Wn2tUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGJkOGVjNGUzMDFjOWU3YjBhNDNiZWYwZjNkZGQzYTQ1 MzE1NWEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD Eyg5MjVjMTU5ZDExMjZlMDEzMTQyNWVmYjZhYjkzZWRiZTk1NTU5NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b6hPhEQwQK+3wEgjwWb/Ata9Ms1 b0zUieq/D1+xWzb4UEXnSgZIxkOZsnubsTLCeg4cB9FPUwD7N9jySTmiO3ao1quI h/rVj5DH15XveyqW851o3kBzBMQi+eyfQulwmtcbc5rJ9GWySQjhth6poKj8zBTc F34a2Jnqtr1lqqobZVu1o2gBOStJ/kLTBsXsprERj4zySHQew4+qmpi1inKUNr3a GDVwMQjvYP29yPrHv7/g+6I9PurXmANHgW40u8w34g+Dge4mFRY5/8E1B6iBXxvH M57x1sNLsELibJxh4Eok0UlW4dGnwEfraNW3o2EChpLKkrbsWTQpiDk4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJcFZ0RJuATFCXvtquT7b6VVZVnMB8GA1UdIwQY MBaAFLSL2OxOMByeewpDvvDz3dOkUxVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMt Y2RjODFkYjc3NTMxLzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMtY2RjODFkYjc3NTMx LzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNy498EJ VIxUoCJ3r3PljxqLZRLaNJKhot7IqhHSuuTsYcOn0qby39IOeTvYeSPF8MYeIWXg Zij5psRnuLjD+2GLB7MUY+oJqp5IzGIissY0mMsLBcDyBJHnzN0uUZWuwTy7X4tq Gxq1Z5wU1eQtN67ZFB9HEEBH3tt5rYBGXEebL7pFiOM9hqDd4OnllXrgLNxVhyCN vaam7T+Kk4FwCrA6aUr2+bTrRLbYZTpv7m1MLtR+4bxfhQuBrSvsj1N/EiEG2rnF cIBEWSdYn3+3JMOU0UQ5m4pPPUZrhdCnVQhVCyQVsLL1B/vGNFHUTrPdbX6fNZDq 41UBK0FzOwY/6w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:29 2025 by rpki-client