This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json) Hash identifier: 0KFmv4CFhjDy9YCa7YQfH2BF+ej4yqZc/aplpS3ds5U= Subject key identifier: 15:4C:38:B2:E3:13:0C:72:D3:B4:57:01:F9:38:0D:05:55:BE:02:17 Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Certificate serial: 019AF12E019B96E3302595FCBE4B8322CA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft Manifest number: 0301 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=) 2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: gHpFvL3L1CnaTTqRL8w2FA0CvUrjPu6F7e6T/BMljxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:01:9b:96:e3:30:25:95:fc:be:4b:83:22:ca:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=154c38b2e3130c72d3b45701f9380d0555be0217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:a3:a5:c4:86:43:82:00:a8:b8:a2:82:65: 69:21:ce:a7:76:fd:1f:cd:3c:92:54:eb:7c:45:ea: f0:a9:fc:90:df:94:3a:40:cf:f8:77:d0:50:f8:7b: dd:03:b2:2e:d5:80:2a:22:e2:e4:d9:0f:c8:29:cf: 51:ef:7e:82:53:4f:ee:d6:a7:24:f6:88:51:92:7f: 7c:16:d4:0d:0a:94:bc:3a:94:f9:fe:4a:30:c6:5b: 2e:dc:82:84:be:15:ec:8d:b5:95:5f:b7:9b:aa:db: 44:ca:0b:92:57:13:12:d8:9a:a2:58:4a:ee:82:43: c8:16:7f:f6:eb:d8:4a:f0:38:f8:07:78:09:cc:25: ce:f6:58:8b:c9:18:4e:bf:e7:f1:1b:d9:e4:eb:ad: 54:a4:db:d5:f7:08:7c:45:e9:ec:89:61:0a:b0:33: 84:1d:ed:35:6c:01:34:4c:14:9e:0f:1f:61:e9:16: 3b:f7:29:00:a1:50:f9:9c:48:30:f1:d6:1b:e9:5a: ea:5a:fd:61:5e:d0:b4:b0:0e:48:d7:c0:67:11:16: eb:b6:fb:17:2a:aa:76:d8:b7:b5:4f:24:38:e2:0c: 2f:6d:23:88:9c:26:21:76:df:99:f2:4a:d9:49:65: 22:34:ca:49:70:42:6f:58:fe:69:96:cc:d2:9b:e5: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4C:38:B2:E3:13:0C:72:D3:B4:57:01:F9:38:0D:05:55:BE:02:17 X509v3 Authority Key Identifier: keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e0:38:8f:2b:01:eb:13:bc:2b:f6:0a:11:cf:a7:e3:bb:3e: 94:97:37:4b:57:df:66:84:34:94:9a:58:58:98:a8:9f:39:12: db:9d:7a:29:ec:6b:63:de:46:50:52:28:f0:ed:8d:cb:64:59: bf:23:86:a2:a4:3f:a1:e7:4f:58:15:a8:c9:27:50:28:f7:54: bb:96:df:69:c4:cb:8c:31:99:f8:46:c4:8a:46:d3:20:d1:a5: 8a:17:19:eb:75:ca:a7:ea:1b:f7:f9:c0:8f:2d:7c:3e:3b:22: c4:fd:c5:34:a7:99:4d:b9:4e:6e:c8:26:2c:12:e1:75:10:cc: 06:4b:f1:66:2e:a1:cc:1a:8d:6b:d2:53:00:7d:43:34:08:3d: 65:58:8c:78:fb:a9:0c:9a:4b:b2:35:66:1b:48:75:80:78:31: 4e:3b:f7:e9:b4:66:73:e3:1b:19:99:ba:55:c6:83:91:e9:e7: 76:67:d2:aa:e1:fc:9a:53:8f:ab:57:72:18:4f:34:3e:82:c2: 29:22:5f:c5:a3:44:39:d6:09:1a:90:43:b7:68:af:84:15:bf: 41:34:f3:99:03:d2:4e:37:a1:51:07:6d:50:8a:aa:c3:8e:57: 62:8a:ae:4e:73:0b:9c:8f:94:a5:10:a3:6d:e2:03:f2:61:5b: 2f:02:22:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgGbluMwJZX8vkuDIsprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDQ5YjA4ZWE2YTI2N2RmNzM2NmE2ODk1YzdjOTI0YzJm MTkyNmQwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EygxNTRjMzhiMmUzMTMwYzcyZDNiNDU3MDFmOTM4MGQwNTU1YmUwMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsOjpcSGQ4IAqLiigmVpIc6ndv0f zTySVOt8RerwqfyQ35Q6QM/4d9BQ+HvdA7Iu1YAqIuLk2Q/IKc9R736CU0/u1qck 9ohRkn98FtQNCpS8OpT5/kowxlsu3IKEvhXsjbWVX7ebqttEyguSVxMS2JqiWEru gkPIFn/269hK8Dj4B3gJzCXO9liLyRhOv+fxG9nk661UpNvV9wh8RensiWEKsDOE He01bAE0TBSeDx9h6RY79ykAoVD5nEgw8dYb6VrqWv1hXtC0sA5I18BnERbrtvsX Kqp22Le1TyQ44gwvbSOInCYhdt+Z8krZSWUiNMpJcEJvWP5plszSm+WN2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVMOLLjEwxy07RXAfk4DQVVvgIXMB8GA1UdIwQY MBaAFLVEmwjqaiZ99zZqaJXHySTC8ZJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAt MzcwYjg2ODhmZWFmLzEvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAtMzcwYjg2ODhmZWFm LzEvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOA4jysB 6xO8K/YKEc+n47s+lJc3S1ffZoQ0lJpYWJionzkS2516KexrY95GUFIo8O2Ny2RZ vyOGoqQ/oedPWBWoySdQKPdUu5bfacTLjDGZ+EbEikbTINGlihcZ63XKp+ob9/nA jy18PjsixP3FNKeZTblObsgmLBLhdRDMBkvxZi6hzBqNa9JTAH1DNAg9ZViMePup DJpLsjVmG0h1gHgxTjv36bRmc+MbGZm6VcaDkenndmfSquH8mlOPq1dyGE80PoLC KSJfxaNEOdYJGpBDt2ivhBW/QTTzmQPSTjehUQdtUIqqw45XYoquTnMLnI+UpRCj beID8mFbLwIiEA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:32 2025 by rpki-client