This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json) Hash identifier: t7Xo43ZQZm9v/fZKS8mWeyWP8MV9gatZCbAjtO5TOJY= Subject key identifier: 5C:76:22:F1:C2:19:13:8A:8E:EB:20:9B:89:A1:62:37:33:1F:47:73 Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Certificate serial: 019AF19B81A53534079930F83D966ED56194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft Manifest number: 1577 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=) 2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: WAHVhjBNNgSbGGOzlRYjQZpgyzH/+jyzm9La7ZhGpgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:81:a5:35:34:07:99:30:f8:3d:96:6e:d5:61:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=5c7622f1c219138a8eeb209b89a16237331f4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:e3:35:41:15:cb:65:e6:1b:48:0d:47:6a: c9:86:94:54:bb:ba:4f:57:a0:9c:1f:b9:e8:c4:09: 28:8f:9b:14:30:14:97:e3:3e:da:0c:82:03:e1:ea: 1e:57:d0:93:26:ab:4f:9d:a9:74:82:d0:7a:a0:8b: 69:ea:2f:1b:b2:37:ca:ed:a8:98:88:ea:66:3f:a4: db:dc:11:e8:e7:27:ec:01:19:b5:f8:58:5b:4b:43: 98:3b:b7:4b:51:e9:89:e1:be:2e:ec:aa:89:5c:90: d9:e1:f0:d5:b0:9f:18:14:43:57:ac:34:54:8c:d7: e2:5a:1c:02:c5:41:53:66:6a:a1:a8:b9:da:c7:1a: 35:9a:76:7a:4a:5f:1d:1f:90:31:70:81:2b:ab:65: 5c:2f:e5:d7:97:90:91:51:1c:79:5f:72:86:84:10: fc:5b:a9:7b:d9:53:37:a8:8e:04:1b:45:03:d8:75: 23:a5:f4:e5:1c:88:16:ee:e6:8e:a8:1f:6f:82:c7: c0:67:b0:6a:1d:23:33:cd:eb:3f:04:3f:f0:65:72: 46:aa:13:4b:82:bb:be:65:28:ba:2f:be:d3:bd:2c: 32:87:24:fc:a8:89:d5:c0:7d:9e:c7:bc:15:0f:4a: 98:87:15:e5:b8:f3:ff:2b:c4:c9:e2:66:5b:da:94: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:76:22:F1:C2:19:13:8A:8E:EB:20:9B:89:A1:62:37:33:1F:47:73 X509v3 Authority Key Identifier: keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:62:9c:0e:7e:42:9c:0c:7a:fa:7b:44:92:38:91:42:ea:24: 7a:e5:85:3a:3b:96:ce:a5:dd:d2:64:a9:9d:bc:3d:db:78:ea: ab:16:8f:d9:b7:33:95:96:6d:3f:6a:2e:bd:a8:20:44:73:7f: 75:7c:c9:14:d1:e2:4f:bf:ca:aa:0c:a6:55:d1:4d:72:5a:96: cf:e6:63:f3:65:46:b9:e8:32:04:df:d1:37:cc:47:01:5e:c5: 9c:6c:5b:dd:c9:9e:26:a3:d5:0a:ae:09:91:28:14:fb:a5:c3: 98:55:37:1d:4c:86:81:53:1c:dd:a6:15:a6:13:c4:11:dd:81: bf:19:13:dc:89:44:f4:59:8d:bb:38:91:03:b6:2c:a0:34:06: 8c:6d:57:36:1c:f0:b7:52:09:37:44:d0:17:06:ea:cb:92:d0: 58:44:80:10:7b:09:fd:f2:de:c8:1a:b3:0f:30:86:cf:a3:9f: 56:47:02:b3:e5:c6:80:bf:d0:c7:a1:9a:dc:9c:80:d2:b4:89: 21:79:3c:cb:0d:2c:0b:ac:37:10:33:90:e9:9f:f8:cd:bc:c9: 46:8e:53:14:f0:7d:75:fd:2e:50:d1:f2:7c:4f:9a:16:34:73: a4:14:0e:18:1b:f8:07:1e:8e:91:0a:5c:8b:2e:73:32:21:4f: b2:31:12:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4GlNTQHmTD4PZZu1WGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk MDNmN2MwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD Eyg1Yzc2MjJmMWMyMTkxMzhhOGVlYjIwOWI4OWExNjIzNzMzMWY0NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OvjNUEVy2XmG0gNR2rJhpRUu7pP V6CcH7noxAkoj5sUMBSX4z7aDIID4eoeV9CTJqtPnal0gtB6oItp6i8bsjfK7aiY iOpmP6Tb3BHo5yfsARm1+FhbS0OYO7dLUemJ4b4u7KqJXJDZ4fDVsJ8YFENXrDRU jNfiWhwCxUFTZmqhqLnaxxo1mnZ6Sl8dH5AxcIErq2VcL+XXl5CRURx5X3KGhBD8 W6l72VM3qI4EG0UD2HUjpfTlHIgW7uaOqB9vgsfAZ7BqHSMzzes/BD/wZXJGqhNL gru+ZSi6L77TvSwyhyT8qInVwH2ex7wVD0qYhxXluPP/K8TJ4mZb2pTEnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx2IvHCGROKjusgm4mhYjczH0dzMB8GA1UdIwQY MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt ODRiNzI1MTU4MzQ3LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3 LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWKcDn5C nAx6+ntEkjiRQuokeuWFOjuWzqXd0mSpnbw923jqqxaP2bczlZZtP2ouvaggRHN/ dXzJFNHiT7/KqgymVdFNclqWz+Zj82VGuegyBN/RN8xHAV7FnGxb3cmeJqPVCq4J kSgU+6XDmFU3HUyGgVMc3aYVphPEEd2BvxkT3IlE9FmNuziRA7YsoDQGjG1XNhzw t1IJN0TQFwbqy5LQWESAEHsJ/fLeyBqzDzCGz6OfVkcCs+XGgL/Qx6Ga3JyA0rSJ IXk8yw0sC6w3EDOQ6Z/4zbzJRo5TFPB9df0uUNHyfE+aFjRzpBQOGBv4Bx6OkQpc iy5zMiFPsjESgw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:44 2025 by rpki-client