This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json) Hash identifier: MyCkraQD4jldzoz0fYpaKXv9NYCbsXmc9emjcHGBJSU= Subject key identifier: 14:00:E0:4F:D2:5D:AF:9D:B2:2A:E8:C1:3F:B8:7F:6B:81:CF:4F:EF Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019AF208E3EFDCF41AEAD8FA8C15B429DE5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft Manifest number: 10C3 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: RVbzzBG5muJC-aBoMdoJbzSr7H8.roa (hash: o1cjUAzQ2XsMXZ4DvKF1uyqTeyhp2W7U45+BcFLlyM0=) 2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: RAUc1KQ7C4pgjHuDeoPG7pkRmT4eVyOL/cc0cFibAvI=) 3: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:ef:dc:f4:1a:ea:d8:fa:8c:15:b4:29:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=1400e04fd25daf9db22ae8c13fb87f6b81cf4fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:14:54:3c:65:fd:22:39:e2:74:4c:22:d0: f4:62:8c:90:d6:76:fb:92:a6:2a:2a:d9:5c:da:e1: 32:a1:fa:89:b5:ab:35:85:f2:24:36:8d:d2:b0:ae: 10:b8:b6:44:c5:88:5f:1f:9e:22:58:07:37:8d:42: 72:c0:dd:02:2e:f7:7a:bd:9a:3b:c9:fc:85:bf:5d: 56:7e:36:84:a5:9a:1e:d9:de:2c:00:1f:42:89:49: 46:0b:06:f3:f7:9b:38:b4:63:97:60:c8:84:1d:30: 55:7d:db:c3:71:29:30:5b:5c:8c:86:07:9c:89:fb: 9d:91:ad:dd:54:d1:06:68:24:01:c3:94:0a:f9:58: b6:16:e1:63:cb:7a:83:37:42:a5:15:9b:e5:02:53: 0b:2e:6c:0e:4d:8d:c5:cf:5f:54:fa:cd:37:20:3a: ab:33:9f:3c:e2:00:00:eb:6c:a3:51:45:f2:35:51: 92:2b:82:01:59:c4:1d:99:28:93:b0:bb:22:ce:47: 47:8f:eb:9c:d6:9c:2d:d5:d4:db:70:4b:a5:12:76: c1:19:e5:bd:7b:07:32:08:e7:01:71:a0:ea:be:32: 37:0c:b7:0c:82:83:96:60:43:51:c0:3d:6e:5b:b0: b1:19:b3:05:6e:58:4d:5d:6f:46:5c:55:c0:73:4f: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:E0:4F:D2:5D:AF:9D:B2:2A:E8:C1:3F:B8:7F:6B:81:CF:4F:EF X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:92:bb:99:88:b4:d3:c9:55:37:f4:dc:32:59:ad:77:96:05: 0f:21:e3:a1:27:73:f8:6e:eb:f1:51:72:67:76:e6:e7:16:bd: 4d:46:75:67:8c:95:11:c8:ca:5b:fd:73:ec:bd:f7:cf:0a:82: 36:1d:e2:32:05:53:65:b8:13:28:13:1f:23:07:68:57:c2:91: 70:1a:27:5f:f9:a1:92:2f:2c:a8:19:0e:6f:3c:d8:81:27:ea: 05:2f:81:62:0d:1f:4e:22:7f:f0:0b:be:8f:f1:96:df:4e:c8: d4:38:73:b9:21:57:6e:14:96:31:fa:23:88:57:fb:8e:ea:40: 67:09:5e:1e:8b:67:c5:f6:f7:75:73:16:7f:fe:8d:37:97:47: 03:f6:66:aa:95:67:45:84:96:4d:c0:fb:8c:9a:2a:47:a8:57: ff:77:2b:32:6c:ee:70:00:43:e3:86:c1:c6:82:3a:42:e5:fc: 3e:55:db:51:b9:32:43:ec:4d:e0:a7:29:bf:8d:c6:bd:1d:e2: 15:ef:8a:d3:fc:c6:97:58:ab:ce:5c:23:5a:bb:67:70:89:1b: 15:14:da:7e:be:eb:cd:8b:02:29:08:c8:8d:98:ae:17:1c:1c: 2e:1d:78:f3:1d:50:87:3d:a0:a2:1c:40:ac:ec:d4:2a:37:31: 07:62:50:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOPv3PQa6tj6jBW0Kd5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EygxNDAwZTA0ZmQyNWRhZjlkYjIyYWU4YzEzZmI4N2Y2YjgxY2Y0ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusAUVDxl/SI54nRMItD0YoyQ1nb7 kqYqKtlc2uEyofqJtas1hfIkNo3SsK4QuLZExYhfH54iWAc3jUJywN0CLvd6vZo7 yfyFv11WfjaEpZoe2d4sAB9CiUlGCwbz95s4tGOXYMiEHTBVfdvDcSkwW1yMhgec ifudka3dVNEGaCQBw5QK+Vi2FuFjy3qDN0KlFZvlAlMLLmwOTY3Fz19U+s03IDqr M5884gAA62yjUUXyNVGSK4IBWcQdmSiTsLsizkdHj+uc1pwt1dTbcEulEnbBGeW9 ewcyCOcBcaDqvjI3DLcMgoOWYENRwD1uW7CxGbMFblhNXW9GXFXAc0+5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQA4E/SXa+dsirowT+4f2uBz0/vMB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpK7mYi0 08lVN/TcMlmtd5YFDyHjoSdz+G7r8VFyZ3bm5xa9TUZ1Z4yVEcjKW/1z7L33zwqC Nh3iMgVTZbgTKBMfIwdoV8KRcBonX/mhki8sqBkObzzYgSfqBS+BYg0fTiJ/8Au+ j/GW307I1DhzuSFXbhSWMfojiFf7jupAZwleHotnxfb3dXMWf/6NN5dHA/ZmqpVn RYSWTcD7jJoqR6hX/3crMmzucABD44bBxoI6QuX8PlXbUbkyQ+xN4Kcpv43GvR3i Fe+K0/zGl1irzlwjWrtncIkbFRTafr7rzYsCKQjIjZiuFxwcLh148x1Qhz2gohxA rOzUKjcxB2JQKA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:34 2025 by rpki-client