This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json) Hash identifier: 6TC2xevVJfw3t4jd7vhIK1YLQ6vUVoehuN0oEgiZnKo= Subject key identifier: 68:3C:A1:7D:E5:5B:E7:E9:38:59:0A:42:6D:12:01:E8:B8:3B:FA:E5 Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Certificate serial: 019AF38926A1196FA102B5767CA98D365DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft Manifest number: 095C Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=) 2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=) 3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=) 4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 2otUJBbeskmwlM8ZUqExvfZVTkRPoOaCcCv2Hy9OsAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:26:a1:19:6f:a1:02:b5:76:7c:a9:8d:36:5d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=683ca17de55be7e938590a426d1201e8b83bfae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:4a:9c:7c:82:48:8f:e1:2a:6d:6c:7f:3e: 5d:13:d6:be:df:15:00:e9:ff:8f:ee:f2:c2:f8:a6: d8:03:1d:d8:8e:0b:55:be:9d:a7:1c:57:53:5a:b5: fd:9f:01:ff:26:ad:9b:15:d6:83:e3:75:ea:50:fe: c6:fb:50:30:73:ad:0c:3b:6e:be:ed:e3:7c:9e:6b: 07:c8:04:d6:25:33:ed:be:25:bb:19:6a:eb:d0:21: c9:d0:31:96:f0:ec:77:23:1c:6e:ab:f6:09:7a:49: 0f:92:81:e6:80:28:74:e2:84:26:7c:f5:d2:2a:35: a8:29:eb:76:57:5b:5d:e2:22:33:ae:41:9f:54:aa: df:49:85:3d:9b:43:78:82:67:85:18:a8:e8:a1:83: a9:0c:f4:4e:b5:b7:46:ae:26:c2:c6:be:6b:ea:b8: 68:ed:32:a1:13:d1:3c:e6:15:6c:93:5e:4f:1f:bb: 6b:81:9b:9b:78:dd:d6:6b:3b:15:06:d3:84:6d:7e: cc:f1:4a:fd:f8:4d:48:10:04:15:31:17:21:ac:af: 5b:4b:45:5d:ac:c3:67:3d:68:bc:2c:61:c0:98:5a: b5:6f:6b:07:c9:e0:56:c1:57:b6:43:83:3b:75:53: 5a:98:20:64:04:4a:d2:d1:c4:c7:47:21:63:b6:42: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:A1:7D:E5:5B:E7:E9:38:59:0A:42:6D:12:01:E8:B8:3B:FA:E5 X509v3 Authority Key Identifier: keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:24:f7:ac:bf:61:f9:79:a3:7e:42:b7:0c:6a:c7:e9:b0:c4: 0c:52:8f:1e:e2:4d:99:46:f7:f8:79:cd:a7:e9:e0:0b:f2:30: 40:01:b8:6b:5b:0f:ff:79:61:a8:4a:26:6e:bf:29:42:bf:5c: c3:ff:fb:8a:6e:4c:c0:7d:2e:75:99:75:e2:07:27:0a:bd:f3: 8d:92:80:ff:04:b8:17:f1:6d:c5:ba:c3:43:76:b8:bc:21:cc: 97:35:c8:ae:a6:b3:0c:98:5b:57:b5:2a:99:08:b9:ae:7a:27: 95:e7:00:05:77:d8:89:96:5b:a9:d8:c7:9f:bd:ce:bc:98:ef: 28:68:ef:ae:fb:c3:b2:45:2d:28:10:89:73:3c:e0:77:09:02: 4b:3d:ee:00:b2:7e:d1:37:d0:0b:d9:40:a8:4c:fd:96:f2:28: bd:10:c7:a5:33:01:38:e4:d1:c4:23:ba:9c:e1:b9:4a:71:c7: 9f:4b:7b:6c:90:28:45:69:1e:96:b5:94:71:4d:c7:42:a4:ed: d0:05:86:5f:8d:b5:19:17:ca:5b:5c:f6:61:fe:9d:71:83:67: de:0f:fb:70:a5:15:86:97:05:10:f0:84:59:20:8e:a0:d5:a6: 7a:fd:22:e5:19:71:b4:7e:ea:5f:f0:89:79:3f:41:4a:71:1c: ec:b4:9c:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSahGW+hArV2fKmNNl29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3 NGYwZmQwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD Eyg2ODNjYTE3ZGU1NWJlN2U5Mzg1OTBhNDI2ZDEyMDFlOGI4M2JmYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDFKnHyCSI/hKm1sfz5dE9a+3xUA 6f+P7vLC+KbYAx3YjgtVvp2nHFdTWrX9nwH/Jq2bFdaD43XqUP7G+1Awc60MO26+ 7eN8nmsHyATWJTPtviW7GWrr0CHJ0DGW8Ox3Ixxuq/YJekkPkoHmgCh04oQmfPXS KjWoKet2V1td4iIzrkGfVKrfSYU9m0N4gmeFGKjooYOpDPROtbdGribCxr5r6rho 7TKhE9E85hVsk15PH7trgZubeN3WazsVBtOEbX7M8Ur9+E1IEAQVMRchrK9bS0Vd rMNnPWi8LGHAmFq1b2sHyeBWwVe2Q4M7dVNamCBkBErS0cTHRyFjtkKEEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg8oX3lW+fpOFkKQm0SAei4O/rlMB8GA1UdIwQY MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt Nzc3OTRmYmZkMmU0LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0 LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCT3rL9h +XmjfkK3DGrH6bDEDFKPHuJNmUb3+HnNp+ngC/IwQAG4a1sP/3lhqEombr8pQr9c w//7im5MwH0udZl14gcnCr3zjZKA/wS4F/FtxbrDQ3a4vCHMlzXIrqazDJhbV7Uq mQi5rnonlecABXfYiZZbqdjHn73OvJjvKGjvrvvDskUtKBCJczzgdwkCSz3uALJ+ 0TfQC9lAqEz9lvIovRDHpTMBOOTRxCO6nOG5SnHHn0t7bJAoRWkelrWUcU3HQqTt 0AWGX421GRfKW1z2Yf6dcYNn3g/7cKUVhpcFEPCEWSCOoNWmev0i5RlxtH7qX/CJ eT9BSnEc7LScww== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:41 2025 by rpki-client