This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: mee0GiSYKZVOUk9iX6gwyA8cx8NyQFF7MYUsjg0GLVc= Subject key identifier: F5:98:80:0B:C4:9C:A2:1C:0C:3C:F7:A0:2E:C9:68:91:10:5C:0D:D8 Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019AF464C060CD651C9FDE285F214806A7D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 07C6 Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: ZlHl6b6QHifrrXfDrVRP6oHgI4lEoz/9otd2VhManjI=) 2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c0:60:cd:65:1c:9f:de:28:5f:21:48:06:a7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=f598800bc49ca21c0c3cf7a02ec96891105c0dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:80:2f:73:ce:1c:08:6a:26:8f:d9:a3:21:f5: b7:08:e3:f6:2a:c4:45:5d:88:7b:4a:a4:ae:29:4a: 4e:2e:fb:10:9a:f1:2c:a9:75:8f:2a:0e:ed:3a:91: aa:51:b2:6f:97:3d:d2:45:40:0b:2b:f9:09:5d:3d: 0c:43:31:b8:9f:8a:6b:38:e2:c2:f9:b7:a6:e1:7d: 41:c9:26:10:bb:83:3e:a0:88:48:a5:5d:8e:4d:cb: 91:28:cb:85:2a:b6:44:ce:e8:5f:90:07:f2:29:ed: 90:04:1a:9e:23:f4:37:c7:1d:ad:87:5d:5d:3b:ab: 23:16:69:09:d9:16:0b:9e:85:33:fe:90:1b:20:37: 18:46:d0:ad:fb:c0:b9:35:13:cc:57:f0:22:f6:2f: 62:8a:86:36:4d:65:bb:95:7a:b0:f4:d0:29:d9:6a: fe:db:9e:42:75:ae:ec:2f:18:0d:a9:6b:4a:c6:6f: f5:e0:04:a8:fa:8a:28:30:db:7b:19:6f:7f:68:1d: d9:5a:87:b3:76:11:8a:0e:63:19:9d:64:a7:dc:4c: 6f:b3:e2:8a:42:ab:45:7a:66:3a:45:3c:92:61:78: be:35:ec:ba:fd:00:e3:a3:96:2e:1b:b1:31:a5:01: 60:5e:e2:dd:6c:de:06:92:e8:bb:6a:56:b3:7a:d1: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:80:0B:C4:9C:A2:1C:0C:3C:F7:A0:2E:C9:68:91:10:5C:0D:D8 X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:b0:ad:75:9b:b8:31:34:1c:29:bf:2d:1d:1a:97:b0:45: db:05:c5:b6:19:88:32:65:72:da:59:f9:28:9d:49:21:3b:1b: 61:ef:2e:56:0a:98:90:30:f1:9e:20:c1:7c:d0:ef:6b:a4:3d: f1:fa:9d:1e:37:a9:1d:a9:9f:fd:d1:bd:7f:a6:ff:b3:2e:5f: 14:d7:76:66:be:3d:f4:d1:b6:0f:64:a7:a5:d1:b7:41:b7:45: 1b:63:c3:10:29:ab:67:51:8a:1d:a4:c3:f9:b6:97:02:b3:0d: 5f:8e:ce:bd:35:09:b2:cf:0c:f7:93:e1:ff:ee:95:ac:3b:0c: 2c:ad:7b:de:5b:2f:95:b6:8c:5d:68:bf:b2:9f:c6:60:fa:a0: c2:42:93:87:3b:4d:80:51:80:34:6d:31:0e:e4:c5:6d:09:2a: 20:60:23:cc:8e:a9:23:ba:0d:e9:57:3c:21:c6:be:cf:36:25: a8:5b:54:1b:4b:c4:11:48:50:63:68:ec:af:a1:0e:0d:8d:f9: 6b:31:f8:8b:1c:67:cb:82:4c:08:5c:d1:75:45:03:a7:98:56: 40:7e:11:d3:66:76:9d:a2:c4:e4:f9:e5:0e:96:27:36:76:94: 30:ad:89:11:63:da:0c:f1:2e:96:0c:cd:ab:09:a9:aa:af:73: b5:86:a7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMBgzWUcn94oXyFIBqfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EyhmNTk4ODAwYmM0OWNhMjFjMGMzY2Y3YTAyZWM5Njg5MTEwNWMwZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYAvc84cCGomj9mjIfW3COP2KsRF XYh7SqSuKUpOLvsQmvEsqXWPKg7tOpGqUbJvlz3SRUALK/kJXT0MQzG4n4prOOLC +bem4X1BySYQu4M+oIhIpV2OTcuRKMuFKrZEzuhfkAfyKe2QBBqeI/Q3xx2th11d O6sjFmkJ2RYLnoUz/pAbIDcYRtCt+8C5NRPMV/Ai9i9iioY2TWW7lXqw9NAp2Wr+ 255Cda7sLxgNqWtKxm/14ASo+oooMNt7GW9/aB3ZWoezdhGKDmMZnWSn3Exvs+KK QqtFemY6RTySYXi+Ney6/QDjo5YuG7ExpQFgXuLdbN4Gkui7alazetFXLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWYgAvEnKIcDDz3oC7JaJEQXA3YMB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1KwrXWb uDE0HCm/LR0al7BF2wXFthmIMmVy2ln5KJ1JITsbYe8uVgqYkDDxniDBfNDva6Q9 8fqdHjepHamf/dG9f6b/sy5fFNd2Zr499NG2D2SnpdG3QbdFG2PDECmrZ1GKHaTD +baXArMNX47OvTUJss8M95Ph/+6VrDsMLK173lsvlbaMXWi/sp/GYPqgwkKThztN gFGANG0xDuTFbQkqIGAjzI6pI7oN6Vc8Ica+zzYlqFtUG0vEEUhQY2jsr6EODY35 azH4ixxny4JMCFzRdUUDp5hWQH4R02Z2naLE5PnlDpYnNnaUMK2JEWPaDPEulgzN qwmpqq9ztYaneA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:00 2025 by rpki-client