This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json) Hash identifier: 110GB+LfdNGW31vVJCskfj9kSxw5/rxNQHJVUu8fmO0= Subject key identifier: B1:28:90:07:BB:33:56:22:89:2B:59:4D:7F:D4:43:A1:96:FD:69:1D Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7 Certificate serial: 019AF31B26B06F2DB733E3E3CE6A94C8BABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft Manifest number: 07FD Signing time: Sat 06 Dec 2025 10:00:34 +0000 Manifest this update: Sat 06 Dec 2025 10:00:34 +0000 Manifest next update: Sun 07 Dec 2025 10:00:34 +0000 Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=) 2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: CqH8yRiXJk3Wafc7DH0fnI8/Tu9eSiS9pYHcUJM2poc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:26:b0:6f:2d:b7:33:e3:e3:ce:6a:94:c8:ba:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7 Validity Not Before: Dec 6 10:00:34 2025 GMT Not After : Dec 7 10:00:34 2025 GMT Subject: CN=b1289007bb335622892b594d7fd443a196fd691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:3f:7d:27:0a:40:04:f3:6c:d0:46:2d:c5: 0b:f6:c8:4a:c3:84:f9:c2:62:44:45:c0:e8:02:08: 70:e7:9c:72:b6:71:e5:33:38:cc:cd:2a:9e:6f:7b: 21:6c:c0:87:46:7f:c4:9b:8d:32:32:69:30:00:49: 17:12:04:ec:fa:9d:de:d0:61:d1:4d:49:93:8b:99: 92:57:84:bb:ba:bd:42:3c:2c:39:35:58:99:75:53: b4:9f:25:bb:b1:66:0b:79:d7:87:e6:9f:b9:33:c7: c8:96:96:7d:50:7f:d8:f4:b6:ef:74:9f:38:49:1c: 00:da:0e:2f:d0:96:7d:60:2d:7e:c6:fd:d1:16:6d: 57:db:47:09:cb:f9:1b:ab:0e:40:b9:1e:22:ef:4d: 21:b5:8d:d7:51:a9:d7:da:16:2c:29:c0:64:f6:51: fa:7d:09:b3:51:b0:1b:ff:1c:92:92:59:06:99:d8: 25:d0:ef:9f:3e:4c:b3:2a:78:ad:a0:cb:a8:11:9b: 7a:60:26:23:08:fb:b8:1a:a3:4f:62:7f:3e:b5:ad: ff:ed:30:65:fb:33:0b:13:2b:7e:8e:1e:05:fc:83: a0:a5:16:70:66:ef:c9:f9:6f:c2:bc:db:6a:b6:c8: f8:04:ec:93:80:01:1b:dd:b2:d1:80:59:df:7d:37: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:90:07:BB:33:56:22:89:2B:59:4D:7F:D4:43:A1:96:FD:69:1D X509v3 Authority Key Identifier: keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:61:ec:fe:4b:55:8c:1f:c3:80:d9:2e:bf:76:6f:3f:60:20: 98:ad:83:d7:51:83:b8:98:34:c7:09:bb:d2:cc:ce:18:a7:0d: 7f:83:64:1f:2a:dd:d0:37:2c:10:ea:a6:94:6d:11:20:2f:b3: 41:e0:19:b0:26:ea:aa:ce:9b:07:bb:a5:87:5f:80:53:c6:e0: 47:2a:59:b0:a4:d2:6a:38:82:09:b7:29:56:1e:36:98:40:9e: e4:e1:35:79:30:b0:92:3e:f7:8f:73:47:fc:89:6b:68:57:c8: 4d:78:7e:c7:82:67:15:ec:e9:93:af:87:3e:30:b8:60:8c:21: f0:b9:1a:78:6f:5b:e0:53:9f:7c:3c:76:7c:4f:9f:ae:11:9e: 64:5b:6c:c1:5e:f3:e0:a4:b2:41:32:19:5c:06:29:fc:bb:a6: 6a:f5:e6:b4:70:9e:f4:c8:29:1d:06:ed:e3:63:c4:03:45:f0: 86:16:e1:a3:e5:77:d4:b7:3b:7e:f9:b8:c3:f7:0b:e8:3d:de: 32:d0:5f:a8:0b:a3:dc:01:f9:4f:2f:9c:35:a0:dc:9d:0d:b9: df:ac:ae:60:d1:6a:06:b8:9c:7b:92:5a:b4:d0:19:1c:33:d4: 42:2f:d2:35:80:45:07:bc:42:de:4c:c4:77:73:71:c6:71:01: ed:1f:58:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyawby23M+PjzmqUyLq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OGIyNDFmN2NhYzdkMWU1MjFlMjgzMTQ3ZWM2MTc2M2M0 MjJhYTcwHhcNMjUxMjA2MTAwMDM0WhcNMjUxMjA3MTAwMDM0WjAzMTEwLwYDVQQD EyhiMTI4OTAwN2JiMzM1NjIyODkyYjU5NGQ3ZmQ0NDNhMTk2ZmQ2OTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+s/fScKQATzbNBGLcUL9shKw4T5 wmJERcDoAghw55xytnHlMzjMzSqeb3shbMCHRn/Em40yMmkwAEkXEgTs+p3e0GHR TUmTi5mSV4S7ur1CPCw5NViZdVO0nyW7sWYLedeH5p+5M8fIlpZ9UH/Y9LbvdJ84 SRwA2g4v0JZ9YC1+xv3RFm1X20cJy/kbqw5AuR4i700htY3XUanX2hYsKcBk9lH6 fQmzUbAb/xySklkGmdgl0O+fPkyzKnitoMuoEZt6YCYjCPu4GqNPYn8+ta3/7TBl +zMLEyt+jh4F/IOgpRZwZu/J+W/CvNtqtsj4BOyTgAEb3bLRgFnffTcOHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEokAe7M1YiiStZTX/UQ6GW/WkdMB8GA1UdIwQY MBaAFLeLJB98rH0eUh4oMUfsYXY8QiqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTIt YzBkOTczY2EyNWQ4LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTItYzBkOTczY2EyNWQ4 LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmHs/ktV jB/DgNkuv3ZvP2AgmK2D11GDuJg0xwm70szOGKcNf4NkHyrd0DcsEOqmlG0RIC+z QeAZsCbqqs6bB7ulh1+AU8bgRypZsKTSajiCCbcpVh42mECe5OE1eTCwkj73j3NH /IlraFfITXh+x4JnFezpk6+HPjC4YIwh8LkaeG9b4FOffDx2fE+frhGeZFtswV7z 4KSyQTIZXAYp/LumavXmtHCe9MgpHQbt42PEA0Xwhhbho+V31Lc7fvm4w/cL6D3e MtBfqAuj3AH5Ty+cNaDcnQ2536yuYNFqBrice5JatNAZHDPUQi/SNYBFB7xC3kzE d3NxxnEB7R9YxA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:17 2025 by rpki-client