This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json) Hash identifier: No/E4urE4UUYYl3ys3ZeA6+p9yZdyAjuo1dlXIkj3ls= Subject key identifier: 8E:88:E8:75:89:AF:03:BD:74:BB:CB:9E:2C:3E:38:85:46:46:FD:7E Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Certificate serial: 019AF3C00014642D205861816EE668074A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft Manifest number: 036A Signing time: Sat 06 Dec 2025 13:00:37 +0000 Manifest this update: Sat 06 Dec 2025 13:00:37 +0000 Manifest next update: Sun 07 Dec 2025 13:00:37 +0000 Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: wOhDil95hUndGCLIWkhvXof30rbM/+bdEeNCPOgwbR8=) 2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:00:14:64:2d:20:58:61:81:6e:e6:68:07:4a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Validity Not Before: Dec 6 13:00:37 2025 GMT Not After : Dec 7 13:00:37 2025 GMT Subject: CN=8e88e87589af03bd74bbcb9e2c3e38854646fd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:26:2a:29:7c:81:2a:7f:28:a0:14:29:82: 11:35:e6:74:ae:6e:3a:0b:47:96:e8:49:21:ab:74: a1:a4:69:c7:73:37:d0:33:06:be:2b:8f:a7:5a:30: 28:5a:5e:81:27:fb:ce:5a:55:ea:28:5d:4d:65:a8: 82:a1:14:72:8c:c0:eb:2e:bb:b0:e8:6c:e0:27:6b: 48:a4:a1:47:58:ef:81:0f:69:9d:e7:42:20:fc:3a: 3f:83:56:ad:ac:ed:aa:dc:6e:f0:7d:5b:5f:ec:00: 1f:af:25:d6:4d:0b:7a:2c:58:1b:12:59:bb:b9:1a: eb:7f:cf:ff:4d:a8:c4:eb:e5:78:71:09:6a:a4:62: 1b:7a:54:8f:74:66:10:bf:ff:b7:4d:5b:73:cf:27: 10:13:29:fe:e9:bb:ae:b3:43:51:66:72:36:fc:75: 84:ba:be:12:ec:a7:aa:6e:54:4a:4b:a6:e9:f9:f2: 5d:a7:ba:3f:5a:28:f3:db:a1:33:45:ae:58:67:60: 1e:1f:fc:89:9a:74:0e:20:9a:09:18:f2:a0:0d:7f: e4:4c:0f:61:de:d9:40:a7:c6:fb:80:67:b7:bc:64: 2c:aa:a0:e2:01:ff:15:4f:71:eb:b9:e1:fa:6e:b0: 68:21:d9:55:bb:9c:4d:9d:76:34:5d:6a:cd:8f:bc: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:88:E8:75:89:AF:03:BD:74:BB:CB:9E:2C:3E:38:85:46:46:FD:7E X509v3 Authority Key Identifier: keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:48:a6:da:10:33:e5:37:19:b8:58:da:06:d8:4e:04:5c:5e: e6:70:f7:7d:55:e9:7f:95:4f:5d:0d:5e:68:64:35:58:25:84: 56:8a:e9:41:de:3a:09:4e:38:4b:3d:03:42:05:c2:7e:29:dd: 15:8a:6f:7d:8f:2e:3c:1d:26:b4:8f:09:b5:3f:1e:3a:6a:53: d5:c2:d9:db:0c:bc:a9:a7:13:1d:02:99:f0:65:1e:65:5f:57: bf:f8:fd:c6:71:d6:08:76:3f:9d:69:ae:3c:e8:34:b8:ec:44: 90:fe:c2:da:f4:da:7f:6a:ab:92:c0:6d:52:4a:69:55:9d:d3: db:3d:2f:5c:8d:24:fc:10:96:9e:ba:8e:cc:b9:92:52:23:3c: 6b:01:72:3d:a8:2b:ce:40:b8:d1:b5:61:39:48:78:28:3a:a7: 46:94:81:70:aa:fc:4e:e0:fc:22:58:f7:14:9d:be:2b:a6:1c: 47:34:df:43:cf:35:f5:99:36:8b:e3:6f:28:d6:bb:d3:96:41: ad:86:a6:7c:9f:3d:83:e6:41:f2:31:1b:60:34:8c:db:ca:4f: a3:7b:16:71:d5:0b:8b:cd:aa:90:da:82:da:fd:f0:59:1d:c1: 8a:27:45:47:4c:ad:9b:2b:02:29:eb:4d:6c:7c:6f:84:59:f2: 95:be:d1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAAUZC0gWGGBbuZoB0oxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3 MDVmNTgwHhcNMjUxMjA2MTMwMDM3WhcNMjUxMjA3MTMwMDM3WjAzMTEwLwYDVQQD Eyg4ZTg4ZTg3NTg5YWYwM2JkNzRiYmNiOWUyYzNlMzg4NTQ2NDZmZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0YmKil8gSp/KKAUKYIRNeZ0rm46 C0eW6Ekhq3ShpGnHczfQMwa+K4+nWjAoWl6BJ/vOWlXqKF1NZaiCoRRyjMDrLruw 6GzgJ2tIpKFHWO+BD2md50Ig/Do/g1atrO2q3G7wfVtf7AAfryXWTQt6LFgbElm7 uRrrf8//TajE6+V4cQlqpGIbelSPdGYQv/+3TVtzzycQEyn+6buus0NRZnI2/HWE ur4S7KeqblRKS6bp+fJdp7o/Wijz26EzRa5YZ2AeH/yJmnQOIJoJGPKgDX/kTA9h 3tlAp8b7gGe3vGQsqqDiAf8VT3HrueH6brBoIdlVu5xNnXY0XWrNj7zaOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6I6HWJrwO9dLvLniw+OIVGRv1+MB8GA1UdIwQY MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEim2hAz 5TcZuFjaBthOBFxe5nD3fVXpf5VPXQ1eaGQ1WCWEVorpQd46CU44Sz0DQgXCfind FYpvfY8uPB0mtI8JtT8eOmpT1cLZ2wy8qacTHQKZ8GUeZV9Xv/j9xnHWCHY/nWmu POg0uOxEkP7C2vTaf2qrksBtUkppVZ3T2z0vXI0k/BCWnrqOzLmSUiM8awFyPagr zkC40bVhOUh4KDqnRpSBcKr8TuD8Ilj3FJ2+K6YcRzTfQ8819Zk2i+NvKNa705ZB rYamfJ89g+ZB8jEbYDSM28pPo3sWcdULi82qkNqC2v3wWR3BiidFR0ytmysCKetN bHxvhFnylb7Rrw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:43 2025 by rpki-client