This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json) Hash identifier: 6U+OQa61AqqZXLWNRe3IkCXO9Y71kYrba6IuQf0yemM= Subject key identifier: 92:37:45:90:A6:E8:52:95:68:A2:6A:B5:AC:05:02:75:86:E9:B9:27 Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Certificate serial: 019AF2091ED7F9194B400C382F4D16A335C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft Manifest number: 11B4 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=) 2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: 76RQdPkyi8qAse2HTCR4/6JjZCF1xXpht8GLaA82WPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1e:d7:f9:19:4b:40:0c:38:2f:4d:16:a3:35:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=92374590a6e8529568a26ab5ac05027586e9b927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:91:9d:3f:7b:d0:a0:84:85:5a:9a:48:24: 91:62:89:b2:c0:c1:9d:c8:35:40:7e:4d:84:99:34: cd:6d:37:58:b2:b8:f9:a3:e8:85:3c:be:b5:e5:2d: 1e:d0:6d:a1:e9:0e:89:fd:1a:15:14:7d:e1:80:4b: 90:0a:55:86:c3:be:0c:0a:e2:63:dc:26:0b:01:be: b6:72:03:a9:38:c6:2e:97:ab:d0:5f:5a:ce:a9:56: ad:e1:1b:16:d4:b5:93:31:96:23:0c:2a:14:6d:00: 2d:8c:02:6f:d7:10:bf:c2:c7:28:87:00:7a:7c:35: e6:d2:d9:7d:17:c5:ff:05:46:6b:ca:fd:8f:8b:71: d8:91:ca:d2:c2:0d:1e:b6:93:36:d1:91:7c:f9:1f: b4:da:79:20:6c:d3:76:82:35:b5:20:df:bf:5e:48: 83:1b:41:f5:d8:47:22:33:5d:4f:73:21:52:22:57: b3:55:74:c2:a1:bd:44:89:05:e3:31:ef:7d:ab:8c: 4b:be:52:9a:1f:d5:9f:c2:e9:e3:70:5e:a9:ad:3a: 7e:f1:04:01:7b:e8:d3:1c:a4:7f:52:a7:4c:53:85: 99:ba:54:6a:25:7f:a0:67:b0:4b:43:12:16:8c:38: 2e:90:cc:d4:1f:f1:18:1a:62:35:75:18:68:d9:f6: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:37:45:90:A6:E8:52:95:68:A2:6A:B5:AC:05:02:75:86:E9:B9:27 X509v3 Authority Key Identifier: keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fb:3c:53:ff:38:4b:a5:f8:39:83:6c:72:0e:08:ec:88:d7: d7:ed:83:84:d3:cf:d3:36:70:11:65:9b:28:fb:b0:45:81:60: 7b:43:38:bb:c8:8e:67:91:c3:39:32:56:b2:03:f0:f2:22:b9: 49:11:a9:fd:31:95:d2:89:a9:b8:e5:96:5e:89:65:c5:b2:69: 97:7b:4a:c9:7e:ac:f2:d4:2f:5c:67:20:7f:35:e6:93:c3:55: 3b:79:66:6a:5d:fa:38:64:4d:71:6b:9a:ce:47:e2:56:9a:5c: b8:17:81:85:f1:70:72:1b:01:b6:c9:e5:a5:bd:fb:58:ec:75: 4c:40:58:c8:f3:14:79:8f:7d:dc:42:fe:f1:02:d3:53:5c:dd: cc:45:52:78:0e:00:e8:52:75:7b:02:de:7b:0f:1b:29:4c:8a: b3:88:4d:0d:a8:97:f4:3e:db:78:39:5d:67:8b:40:02:73:81: a4:7e:d2:4d:88:f0:b1:71:32:e0:8d:af:dd:c0:9a:99:32:e7: a9:a1:5d:fc:9b:a1:5b:b8:e1:6f:58:ff:d4:6e:25:6b:8c:d0: a5:0c:18:1c:69:45:35:2c:65:78:7a:da:ab:cf:15:f2:f8:e9: 2d:be:aa:a2:39:03:1f:b2:19:65:9c:3c:0d:a6:a3:c9:dc:09: ff:dc:cb:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR7X+RlLQAw4L00WozXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0 NWNiZDkwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD Eyg5MjM3NDU5MGE2ZTg1Mjk1NjhhMjZhYjVhYzA1MDI3NTg2ZTliOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPqRnT970KCEhVqaSCSRYomywMGd yDVAfk2EmTTNbTdYsrj5o+iFPL615S0e0G2h6Q6J/RoVFH3hgEuQClWGw74MCuJj 3CYLAb62cgOpOMYul6vQX1rOqVat4RsW1LWTMZYjDCoUbQAtjAJv1xC/wscohwB6 fDXm0tl9F8X/BUZryv2Pi3HYkcrSwg0etpM20ZF8+R+02nkgbNN2gjW1IN+/XkiD G0H12EciM11PcyFSIlezVXTCob1EiQXjMe99q4xLvlKaH9WfwunjcF6prTp+8QQB e+jTHKR/UqdMU4WZulRqJX+gZ7BLQxIWjDgukMzUH/EYGmI1dRho2fa/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI3RZCm6FKVaKJqtawFAnWG6bknMB8GA1UdIwQY MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt ZTcyNjM3NDMzMGNlLzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfs8U/84 S6X4OYNscg4I7IjX1+2DhNPP0zZwEWWbKPuwRYFge0M4u8iOZ5HDOTJWsgPw8iK5 SRGp/TGV0ompuOWWXollxbJpl3tKyX6s8tQvXGcgfzXmk8NVO3lmal36OGRNcWua zkfiVppcuBeBhfFwchsBtsnlpb37WOx1TEBYyPMUeY993EL+8QLTU1zdzEVSeA4A 6FJ1ewLeew8bKUyKs4hNDaiX9D7beDldZ4tAAnOBpH7STYjwsXEy4I2v3cCamTLn qaFd/JuhW7jhb1j/1G4la4zQpQwYHGlFNSxleHraq88V8vjpLb6qojkDH7IZZZw8 DaajydwJ/9zL5g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:16 2025 by rpki-client