This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json) Hash identifier: rds2dJDJwCMZK64HIveAggvXYcw3SV8Gq142Uxlsrvc= Subject key identifier: C4:BC:70:12:9D:48:CD:3A:4C:84:CD:54:6C:CF:25:28:48:31:CD:C0 Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Certificate serial: 019AF540CF205E3CEF1F56990CD22AD12A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft Manifest number: 0F1C Signing time: Sat 06 Dec 2025 20:00:56 +0000 Manifest this update: Sat 06 Dec 2025 20:00:56 +0000 Manifest next update: Sun 07 Dec 2025 20:00:56 +0000 Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=) 2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=) 3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: WlY4Ti53AHmK5/Ia500BKRaYqkqfJIMrulXzDO4+VOM=) 4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:cf:20:5e:3c:ef:1f:56:99:0c:d2:2a:d1:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Validity Not Before: Dec 6 20:00:56 2025 GMT Not After : Dec 7 20:00:56 2025 GMT Subject: CN=c4bc70129d48cd3a4c84cd546ccf25284831cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:1e:e0:42:5e:1c:10:e0:df:75:34:93:a0: 5b:a4:f5:72:f9:7a:be:72:df:5b:ee:9c:36:53:c4: 6c:da:ef:b0:a5:eb:5b:30:54:d7:ab:50:a6:a5:40: 0f:d3:40:9b:08:3e:23:52:8b:67:76:8c:ea:ae:5f: 44:5d:7c:f5:48:a2:df:5f:04:9d:bf:55:40:76:c7: 34:eb:6d:bc:e0:8d:de:2c:84:28:bf:c4:5f:f1:76: 3b:68:8d:7f:07:38:d9:ce:62:e1:7e:77:8e:12:35: ce:e6:61:d8:b3:dc:97:fe:19:89:e0:43:fc:e9:fd: c1:66:1f:68:72:f1:78:2b:de:1e:6d:9f:30:03:25: f7:8e:5f:b6:9f:f7:c9:e9:e8:ef:01:04:1d:a9:72: 79:94:db:76:c5:78:6c:de:ed:e1:d4:64:63:ca:3c: d4:44:1a:56:eb:1d:1f:5d:fd:0d:cf:b8:80:1d:d4: 2b:55:c0:4c:00:e3:91:a8:9f:9b:a8:71:de:31:f2: b7:6f:c7:d1:29:26:37:4f:ca:25:14:6d:c9:c9:c4: 81:1c:45:15:c5:d9:6d:88:6f:eb:4a:65:eb:4a:01: bd:4a:dd:d9:dd:a7:64:52:31:44:5b:58:1f:a5:dd: da:d8:97:b0:70:37:2f:2f:f7:d7:b5:97:ba:bd:ba: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BC:70:12:9D:48:CD:3A:4C:84:CD:54:6C:CF:25:28:48:31:CD:C0 X509v3 Authority Key Identifier: keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ae:b0:3b:52:16:91:93:85:d7:83:99:42:4a:f3:6d:95:84: b5:7d:e6:92:9a:ff:a0:5c:33:b8:48:72:a9:ee:ea:79:22:95: 0b:22:4f:3d:5f:4c:ec:be:d1:c8:d4:78:ec:15:71:44:44:96: 4b:52:0d:e3:b7:96:75:65:7c:4d:5e:71:69:8e:39:5e:fb:03: d9:45:bc:2b:24:6b:f7:39:98:e5:65:df:f6:9d:8c:ed:08:6e: 44:b9:a2:50:fb:10:3e:89:ec:d1:9e:98:5c:d3:c8:82:d0:e3: 86:b0:89:93:94:ea:2a:fa:19:96:5f:d0:48:21:e8:8d:b9:03: a7:8e:65:6c:2b:7d:e7:d3:2a:68:dd:42:02:ec:61:3b:09:ee: 0c:c4:9f:b6:61:d8:4b:33:62:21:fb:e7:1b:ef:34:96:0f:1e: 55:cc:65:f6:2d:a4:6b:b2:17:02:70:28:cb:0e:92:8a:42:83: 8e:99:d9:d4:eb:f3:38:14:32:2b:91:1b:fd:5e:ed:62:8b:72: 79:94:a9:b7:38:4a:9a:5a:22:7f:ee:69:eb:d5:df:b8:bd:1f: 6a:72:f8:87:c0:97:7f:71:05:a8:a7:90:57:e7:b6:96:ce:58: d3:b5:34:35:e0:8d:3e:54:e2:d5:0f:89:be:f4:fd:bc:90:77: 62:d0:99:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QM8gXjzvH1aZDNIq0SqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl ZWVlYTAwHhcNMjUxMjA2MjAwMDU2WhcNMjUxMjA3MjAwMDU2WjAzMTEwLwYDVQQD EyhjNGJjNzAxMjlkNDhjZDNhNGM4NGNkNTQ2Y2NmMjUyODQ4MzFjZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMEe4EJeHBDg33U0k6BbpPVy+Xq+ ct9b7pw2U8Rs2u+wpetbMFTXq1CmpUAP00CbCD4jUotndozqrl9EXXz1SKLfXwSd v1VAdsc062284I3eLIQov8Rf8XY7aI1/BzjZzmLhfneOEjXO5mHYs9yX/hmJ4EP8 6f3BZh9ocvF4K94ebZ8wAyX3jl+2n/fJ6ejvAQQdqXJ5lNt2xXhs3u3h1GRjyjzU RBpW6x0fXf0Nz7iAHdQrVcBMAOORqJ+bqHHeMfK3b8fRKSY3T8olFG3JycSBHEUV xdltiG/rSmXrSgG9St3Z3adkUjFEW1gfpd3a2JewcDcvL/fXtZe6vboT3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS8cBKdSM06TITNVGzPJShIMc3AMB8GA1UdIwQY MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5 LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO66wO1IW kZOF14OZQkrzbZWEtX3mkpr/oFwzuEhyqe7qeSKVCyJPPV9M7L7RyNR47BVxRESW S1IN47eWdWV8TV5xaY45XvsD2UW8KyRr9zmY5WXf9p2M7QhuRLmiUPsQPons0Z6Y XNPIgtDjhrCJk5TqKvoZll/QSCHojbkDp45lbCt959MqaN1CAuxhOwnuDMSftmHY SzNiIfvnG+80lg8eVcxl9i2ka7IXAnAoyw6SikKDjpnZ1OvzOBQyK5Eb/V7tYoty eZSptzhKmloif+5p69XfuL0fanL4h8CXf3EFqKeQV+e2ls5Y07U0NeCNPlTi1Q+J vvT9vJB3YtCZxA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:10 2025 by rpki-client