This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json) Hash identifier: ni8xFU5J2gFwcMdGdYWXnGYaKudSjeoEFRn3p9PjPxw= Subject key identifier: AC:A7:36:EC:F1:97:2E:A8:7C:B2:DD:D7:F6:67:6D:73:FE:21:16:81 Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Certificate serial: 019AF3F7CAD81CB5CA441A7B56B9AAD9253D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 14:01:33 +0000 Manifest this update: Sat 06 Dec 2025 14:01:33 +0000 Manifest next update: Sun 07 Dec 2025 14:01:33 +0000 Files and hashes: 1: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (hash: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=) 2: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: EuM9UickRYfOve2HZkV5VjtYHdFSUl3sx58VCI1rivg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ca:d8:1c:b5:ca:44:1a:7b:56:b9:aa:d9:25:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Validity Not Before: Dec 6 14:01:33 2025 GMT Not After : Dec 7 14:01:33 2025 GMT Subject: CN=aca736ecf1972ea87cb2ddd7f6676d73fe211681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:b2:99:b1:c4:df:7a:ab:22:57:88:bb:7f: 1c:0f:fc:b7:87:f5:7e:dd:41:fd:93:0a:fe:4d:dc: ef:22:7e:56:c2:17:73:3e:66:8e:5e:4e:86:3e:bb: 59:1d:2b:e8:08:76:58:2f:26:ac:87:5e:b5:8a:6d: 65:da:61:87:f2:47:98:32:03:1a:ca:f1:28:f0:39: 04:44:08:e6:63:0d:d8:b9:15:3d:26:3d:4f:89:c7: bf:b1:e6:86:5b:70:b6:5d:76:78:09:81:ae:b8:ea: cb:0e:89:7a:ef:b5:e3:dc:14:90:b7:dd:4e:3a:bb: 69:f9:09:4c:c0:9a:df:99:76:c3:2d:61:73:c5:04: 2c:2f:4b:9d:40:1d:cb:27:ef:59:5c:17:e6:f7:74: 7a:79:32:33:dc:a2:9f:97:0e:08:d4:a1:06:ed:eb: 9e:be:18:35:4a:62:18:67:07:00:8d:f4:6e:ce:25: 7a:cd:a5:2e:ee:1b:e3:59:ea:18:62:5e:94:c0:bc: 84:54:ae:0d:64:83:45:a8:8b:5d:ab:7c:3e:58:4b: 21:fb:82:08:2a:da:92:36:c9:55:b4:65:f1:37:4a: 60:d1:6f:60:6e:ed:5f:5b:64:f6:45:fd:07:04:b7: 4d:de:cd:42:66:06:3c:e7:3d:2f:c0:ff:c7:25:c0: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:36:EC:F1:97:2E:A8:7C:B2:DD:D7:F6:67:6D:73:FE:21:16:81 X509v3 Authority Key Identifier: keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d1:f7:f7:5c:7f:5b:0a:90:bd:fe:81:24:21:5d:ae:cc:2a: 01:af:88:05:b0:23:e9:c8:ab:37:6b:ce:6b:9b:38:fb:a6:00: b6:51:21:20:34:ae:57:32:5b:a7:08:6d:14:2d:c3:f3:9d:1a: 4c:c9:71:6d:59:d4:65:3b:72:c6:54:8d:71:08:df:b8:a0:f6: b7:e7:bb:cc:a5:38:6c:07:69:f7:53:b4:69:22:0d:5a:72:c5: 11:7e:00:ee:ec:2d:6b:cd:12:12:0d:75:d6:25:16:7b:9d:df: 1e:25:a4:96:89:8b:bc:b5:29:42:9c:1b:0b:60:75:6a:cd:36: 90:14:6f:ac:1c:1e:51:da:11:80:8c:2a:f0:34:a6:33:38:a3: 89:11:b0:8b:f1:4b:5d:99:1b:3f:86:b5:f5:6a:53:3a:2c:d0: 70:73:dc:b4:bf:a8:75:65:e4:14:e5:f6:fa:11:44:cb:57:02: 96:50:98:66:6f:2e:5b:80:24:22:dc:ea:a0:8e:1f:2c:f5:bf: 8f:48:8d:d8:5c:08:18:d0:58:5d:26:d8:37:f3:0f:34:c6:70: 9f:02:74:f7:c7:e5:f8:cd:e8:71:9a:8a:94:78:cb:ec:15:b2: a2:41:a3:2b:d7:f0:98:f4:3e:35:d0:5a:30:26:b9:93:2c:07: 8a:13:ea:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98rYHLXKRBp7Vrmq2SU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw MTVmNjUwHhcNMjUxMjA2MTQwMTMzWhcNMjUxMjA3MTQwMTMzWjAzMTEwLwYDVQQD EyhhY2E3MzZlY2YxOTcyZWE4N2NiMmRkZDdmNjY3NmQ3M2ZlMjExNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArreymbHE33qrIleIu38cD/y3h/V+ 3UH9kwr+TdzvIn5WwhdzPmaOXk6GPrtZHSvoCHZYLyash161im1l2mGH8keYMgMa yvEo8DkERAjmYw3YuRU9Jj1Pice/seaGW3C2XXZ4CYGuuOrLDol677Xj3BSQt91O Ortp+QlMwJrfmXbDLWFzxQQsL0udQB3LJ+9ZXBfm93R6eTIz3KKflw4I1KEG7eue vhg1SmIYZwcAjfRuziV6zaUu7hvjWeoYYl6UwLyEVK4NZINFqItdq3w+WEsh+4II KtqSNslVtGXxN0pg0W9gbu1fW2T2Rf0HBLdN3s1CZgY85z0vwP/HJcAvNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKynNuzxly6ofLLd1/ZnbXP+IRaBMB8GA1UdIwQY MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt MDlhMmM5Y2E3MTU1LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1 LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNH391x/ WwqQvf6BJCFdrswqAa+IBbAj6cirN2vOa5s4+6YAtlEhIDSuVzJbpwhtFC3D850a TMlxbVnUZTtyxlSNcQjfuKD2t+e7zKU4bAdp91O0aSINWnLFEX4A7uwta80SEg11 1iUWe53fHiWklomLvLUpQpwbC2B1as02kBRvrBweUdoRgIwq8DSmMzijiRGwi/FL XZkbP4a19WpTOizQcHPctL+odWXkFOX2+hFEy1cCllCYZm8uW4AkItzqoI4fLPW/ j0iN2FwIGNBYXSbYN/MPNMZwnwJ098fl+M3ocZqKlHjL7BWyokGjK9fwmPQ+NdBa MCa5kywHihPqjw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:40 2025 by rpki-client