This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json) Hash identifier: 7gVQxRdJV2rb9dw2pjmQqmnZSImqgw3NeZCy93gSifk= Subject key identifier: E2:3F:F3:02:23:3E:83:DC:4C:20:E7:99:5F:39:03:A0:32:06:C8:15 Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c Certificate serial: 019AF12ED2562687071C01738E4B385CDAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (hash: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=) 2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: l1PWrsUrN7zoken7V11QdcFbHVPshGkvColcO+AGP7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d2:56:26:87:07:1c:01:73:8e:4b:38:5c:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=e23ff302233e83dc4c20e7995f3903a03206c815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:10:58:ce:a0:f7:1f:b9:3f:2f:30:19:d4: 0c:d3:e6:2c:f5:f6:ba:dd:a4:ba:fa:8e:5c:e8:d5: ac:fb:af:fd:40:15:19:e9:43:2b:3f:67:47:eb:dc: 9e:0d:24:63:e0:99:47:27:b9:75:15:c4:a6:c7:23: 79:6d:1b:52:a1:1f:c1:80:c6:5b:14:b5:8f:07:95: 91:c0:ca:8b:7c:d0:f0:6f:96:4a:6e:8e:5b:e1:3d: ec:09:ab:94:dc:52:79:8d:1a:a9:1b:03:2e:19:2c: e3:28:e4:1c:2d:6d:17:5f:40:18:b2:bd:a2:b0:cd: 5d:1a:6c:2f:de:fe:42:a3:8f:58:ce:d9:c2:92:6b: f2:fa:96:45:df:b8:94:ad:01:9a:4a:20:62:a4:c7: 65:5d:46:d8:e7:2c:e0:8a:0c:82:cb:ef:3e:1a:03: 79:12:32:c0:15:2b:33:86:17:31:a9:15:52:c1:04: 9c:a8:d0:9c:43:48:a7:a5:ab:66:7a:d4:8a:fd:25: b8:fd:48:c8:94:49:df:c4:16:34:9e:69:4b:1c:ac: 82:a4:a0:13:87:8b:48:64:51:14:35:66:75:f5:d7: 60:9f:08:81:7f:3b:d1:5e:1c:17:62:91:6b:2d:56: 05:d4:a7:ef:fe:74:65:02:f5:3a:53:42:17:86:cd: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3F:F3:02:23:3E:83:DC:4C:20:E7:99:5F:39:03:A0:32:06:C8:15 X509v3 Authority Key Identifier: keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:90:a5:97:e6:12:44:16:b6:29:dd:5c:d9:bc:bc:46:f0:00: 1f:e7:d8:ca:ed:f9:23:05:bc:8c:08:a4:27:3e:52:7a:08:5d: 95:dc:83:7a:b8:88:39:af:2c:74:d5:9a:22:be:3f:57:48:13: 73:7f:4b:77:18:7e:e4:ac:e7:1d:13:c4:14:41:f9:88:8f:75: 5e:ee:7a:d3:bf:f1:44:fc:71:bf:0e:00:8d:7e:e3:30:7e:c1: 63:11:64:e9:63:fd:35:5d:27:5b:16:41:1a:4b:35:0b:e5:9b: f4:0d:f4:ec:f8:07:9a:c7:89:6d:b6:f2:44:a6:b6:b3:66:0f: 4c:d5:73:7c:d1:99:8b:d6:1f:b3:97:62:88:9d:89:a4:89:95: 2d:20:2a:5c:0c:66:75:77:47:34:0a:b6:fc:2d:52:84:07:27: 1a:06:8a:26:9f:1d:b1:2f:90:2c:41:e8:98:c0:3f:9b:f2:70: 4c:84:2b:8f:9d:74:10:e0:c6:ec:82:58:9e:10:94:cf:e4:17: 59:f1:fa:54:97:33:59:ca:31:c6:be:c1:be:61:47:c8:4a:bb: 7d:be:04:a8:e8:48:c9:d4:a5:52:c8:4b:67:c0:26:51:00:29: 9c:16:0c:63:b1:c5:16:be:2d:fa:ea:d1:49:80:22:5d:a6:56: 05:71:49:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtJWJocHHAFzjks4XNrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm Njg4NGMwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD EyhlMjNmZjMwMjIzM2U4M2RjNGMyMGU3OTk1ZjM5MDNhMDMyMDZjODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFwQWM6g9x+5Py8wGdQM0+Ys9fa6 3aS6+o5c6NWs+6/9QBUZ6UMrP2dH69yeDSRj4JlHJ7l1FcSmxyN5bRtSoR/BgMZb FLWPB5WRwMqLfNDwb5ZKbo5b4T3sCauU3FJ5jRqpGwMuGSzjKOQcLW0XX0AYsr2i sM1dGmwv3v5Co49YztnCkmvy+pZF37iUrQGaSiBipMdlXUbY5yzgigyCy+8+GgN5 EjLAFSszhhcxqRVSwQScqNCcQ0inpatmetSK/SW4/UjIlEnfxBY0nmlLHKyCpKAT h4tIZFEUNWZ19ddgnwiBfzvRXhwXYpFrLVYF1Kfv/nRlAvU6U0IXhs0E4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI/8wIjPoPcTCDnmV85A6AyBsgVMB8GA1UdIwQY MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt MDQ2NGU5NDVmMWNjLzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZCll+YS RBa2Kd1c2by8RvAAH+fYyu35IwW8jAikJz5SeghdldyDeriIOa8sdNWaIr4/V0gT c39Ldxh+5KznHRPEFEH5iI91Xu5607/xRPxxvw4AjX7jMH7BYxFk6WP9NV0nWxZB Gks1C+Wb9A307PgHmseJbbbyRKa2s2YPTNVzfNGZi9Yfs5diiJ2JpImVLSAqXAxm dXdHNAq2/C1ShAcnGgaKJp8dsS+QLEHomMA/m/JwTIQrj510EODG7IJYnhCUz+QX WfH6VJczWcoxxr7BvmFHyEq7fb4EqOhIydSlUshLZ8AmUQApnBYMY7HFFr4t+urR SYAiXaZWBXFJvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:16 2025 by rpki-client