This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json) Hash identifier: kziwYLNxhbZTIimBTZ2of48gTxMhVnBi+ZTDQJXdYb4= Subject key identifier: A0:09:D0:BD:C5:87:3A:73:CF:7A:05:1A:BF:D4:55:E2:0B:1F:3F:4F Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Certificate serial: 019AF20944431F52A891EAD3EACD92B18D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft Manifest number: 0287 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=) 2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=) 3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 3i2c/j7u5856LNlql1EO3fTaapGgNiYsEJi/yA6MrcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:44:43:1f:52:a8:91:ea:d3:ea:cd:92:b1:8d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=a009d0bdc5873a73cf7a051abfd455e20b1f3f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:ff:c6:e8:a5:da:b9:15:3a:54:27:0a:d9: 9c:94:21:14:43:78:b2:6d:92:d5:e0:e9:8b:b3:88: 5a:9e:cc:04:86:80:e8:48:45:9a:38:9f:3c:e8:cc: 38:c8:53:f7:de:52:b7:a1:40:a3:93:fb:75:84:e9: e8:d5:88:81:c0:24:eb:8f:80:70:99:f9:5d:00:e1: 8d:78:40:6d:2f:55:c0:21:77:0a:2f:da:6f:08:ac: 3b:c9:e1:75:9e:58:21:1d:98:33:d2:6f:85:f5:e8: a9:3d:fd:78:3a:b9:5d:02:0c:bf:de:e9:3f:49:57: c9:ea:a2:bb:90:51:a6:7b:75:9e:f6:77:5e:0b:b0: f1:4b:0b:26:bf:16:3c:cf:4a:01:29:3b:ff:bb:6c: 3d:1d:72:08:7a:fe:d9:03:b0:98:25:9b:49:2e:9d: 7c:c8:2e:07:78:36:ed:b9:84:9a:1c:57:eb:1e:ac: 04:cf:58:f4:fd:f3:5d:52:3c:4e:72:92:2d:22:0d: 38:0f:a4:5c:3f:37:ff:e2:96:10:99:71:a4:33:37: 17:a7:11:31:6d:67:a7:8f:c0:0c:f1:d1:44:67:97: dc:3c:fb:40:c8:73:30:05:00:3e:9a:38:40:4e:0c: bd:a5:44:12:0f:80:81:77:e2:3c:6e:74:45:0b:27: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:D0:BD:C5:87:3A:73:CF:7A:05:1A:BF:D4:55:E2:0B:1F:3F:4F X509v3 Authority Key Identifier: keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8d:12:1e:2c:bb:9e:d5:1c:2e:bf:74:77:f3:e4:1b:97:3f: 3e:ae:7c:29:b5:11:b2:88:89:77:91:38:d2:73:5a:ac:99:fe: b6:13:f3:73:9e:ca:8b:64:56:c9:88:25:cd:60:5a:f6:a6:6d: 66:e7:ce:65:58:3b:92:aa:92:1c:46:17:dc:3d:b1:a5:7e:a9: f2:87:11:bc:ae:ee:44:17:de:70:ab:10:45:35:3d:63:c4:55: 10:8f:d9:c2:d7:63:28:70:5a:b0:7e:18:02:41:fe:0e:e3:dd: 8c:4e:73:26:5e:e4:31:89:9c:3e:37:83:ed:a0:90:3b:0f:a9: a2:04:0c:0d:df:b1:d9:45:52:67:9d:bb:4d:e6:12:7c:89:f6: 3e:f8:29:e7:82:c0:a6:56:30:89:f2:8e:5a:1a:d7:b6:5d:4b: ca:09:be:d5:f9:33:bf:a2:55:d8:f8:0e:48:71:df:1f:6c:b2: 8c:30:fe:2b:53:ea:e9:1c:da:26:80:21:64:1b:04:55:aa:c5: 0a:fb:8e:2d:a4:90:0d:b1:48:a7:5b:ab:72:03:60:11:e8:29: 15:eb:47:a1:76:99:4f:d8:a2:14:bf:a6:53:52:7a:6d:fc:f1: 99:c8:16:26:4f:e1:d2:f4:df:0f:ab:b3:0d:bd:36:4c:35:68: e2:f9:ff:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCURDH1KokerT6s2SsY1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy MTFjMGYwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhhMDA5ZDBiZGM1ODczYTczY2Y3YTA1MWFiZmQ0NTVlMjBiMWYzZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYH/xuil2rkVOlQnCtmclCEUQ3iy bZLV4OmLs4hanswEhoDoSEWaOJ886Mw4yFP33lK3oUCjk/t1hOno1YiBwCTrj4Bw mfldAOGNeEBtL1XAIXcKL9pvCKw7yeF1nlghHZgz0m+F9eipPf14OrldAgy/3uk/ SVfJ6qK7kFGme3We9ndeC7DxSwsmvxY8z0oBKTv/u2w9HXIIev7ZA7CYJZtJLp18 yC4HeDbtuYSaHFfrHqwEz1j0/fNdUjxOcpItIg04D6RcPzf/4pYQmXGkMzcXpxEx bWenj8AM8dFEZ5fcPPtAyHMwBQA+mjhATgy9pUQSD4CBd+I8bnRFCyexNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAJ0L3Fhzpzz3oFGr/UVeILHz9PMB8GA1UdIwQY MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0 LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY0SHiy7 ntUcLr90d/PkG5c/Pq58KbURsoiJd5E40nNarJn+thPzc57Ki2RWyYglzWBa9qZt ZufOZVg7kqqSHEYX3D2xpX6p8ocRvK7uRBfecKsQRTU9Y8RVEI/ZwtdjKHBasH4Y AkH+DuPdjE5zJl7kMYmcPjeD7aCQOw+pogQMDd+x2UVSZ527TeYSfIn2Pvgp54LA plYwifKOWhrXtl1Lygm+1fkzv6JV2PgOSHHfH2yyjDD+K1Pq6RzaJoAhZBsEVarF CvuOLaSQDbFIp1urcgNgEegpFetHoXaZT9iiFL+mU1J6bfzxmcgWJk/h0vTfD6uz Db02TDVo4vn/HA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:18 2025 by rpki-client