This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json) Hash identifier: 8pv/UQFimbwS3aP4wvyCZB35cXUGFp57cKftuj6EIhc= Subject key identifier: 52:D8:21:1C:01:A5:FE:4F:4D:A9:7F:64:13:FD:00:78:86:2F:6A:EB Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Certificate serial: 019AF276D3AA6C70A8409962DDF1B11965F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=) 2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: qyQpP4W1lQXMKGOslHT5qfCKQtiAsAGfl76C8KGyFzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d3:aa:6c:70:a8:40:99:62:dd:f1:b1:19:65:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=52d8211c01a5fe4f4da97f6413fd0078862f6aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:de:5d:0e:fc:e4:e8:78:e2:1e:fd:71:5a: 14:8b:a7:55:79:7d:d8:f4:5e:28:5e:d0:ff:79:e8: e0:b8:34:78:ce:5a:92:d2:8c:03:cc:a9:6a:ec:7b: dd:ba:93:38:c5:e1:ca:21:9d:af:f2:67:d8:1b:2d: 17:57:96:29:4b:c4:b6:ba:ef:ce:4a:5d:6b:39:cf: cd:5d:0c:f4:a1:41:ea:5e:f1:ef:ba:84:42:4b:c1: 55:9b:f3:c0:a0:3f:9a:36:e7:a2:7b:b3:76:cf:e6: 8e:15:30:66:7c:21:ae:4a:13:ae:c4:4a:40:60:e5: c8:02:3e:40:fb:26:1d:f4:f0:e3:0e:0c:74:d5:70: 15:3d:71:8c:b3:17:73:d4:1c:a8:35:7d:1b:85:dc: 07:3d:07:cc:3e:8f:f2:e2:8f:3c:d4:44:a0:3c:d4: 5b:46:86:65:ac:99:07:d3:88:77:53:fd:53:cf:d7: 4f:af:6e:b9:65:b5:2b:4f:dd:b7:6d:65:fc:bd:85: 28:29:29:ef:ae:f3:ee:00:be:1a:c6:e2:1c:c2:c5: 1c:39:69:4b:c9:c0:bc:cd:ba:15:9f:78:10:2b:2c: b4:41:fb:dc:40:3d:e4:f1:3a:9d:b5:15:0c:af:7e: fa:2a:e5:5f:42:e8:ac:51:e8:8f:70:5c:43:1c:96: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:21:1C:01:A5:FE:4F:4D:A9:7F:64:13:FD:00:78:86:2F:6A:EB X509v3 Authority Key Identifier: keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:57:83:49:e2:e0:9c:a2:65:c6:ec:dd:b5:93:65:95:4a: 62:c0:2e:cb:25:85:c3:49:0d:4a:5d:25:87:c3:67:55:cb:0b: cb:93:a5:96:32:78:51:6d:49:48:d8:31:de:55:98:eb:a7:f4: f9:a1:f0:76:01:49:12:b5:b9:ea:f6:a3:2f:26:eb:60:11:72: 4b:64:b0:38:46:34:9f:34:6e:35:89:9f:7b:40:7f:ff:c7:fb: e3:11:8e:6f:e1:de:b1:09:05:5c:8c:d8:1e:63:dd:06:e3:fa: 97:8e:4f:fe:3a:b0:29:b2:ec:3d:b9:a3:18:e0:57:ba:08:fa: b2:ab:b7:18:4a:d3:9b:a4:ed:3f:d4:7e:e6:96:72:c8:eb:c6: b6:6f:ef:60:75:b0:25:ed:04:df:bb:bb:35:93:09:32:31:33: 58:8f:fc:a0:54:b4:4f:69:2c:fb:f8:aa:bd:fe:f5:7c:8b:1a: 11:f2:69:e8:fb:e0:2f:fc:4c:40:d5:ee:d8:86:a5:99:c1:30: 93:ff:d4:4c:c8:3f:9b:fb:da:ac:56:e5:c8:77:d9:2b:4f:76: a8:7b:11:f7:52:44:6c:b6:de:b8:5d:9a:d8:b8:85:c8:dd:e0: 63:8f:4f:84:63:ef:0e:ff:7b:6a:42:73:82:3c:ab:2d:07:7c: 76:99:87:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtOqbHCoQJli3fGxGWX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDIzYzhjNTE4ZmE0MjlmZmNhMjU5NzdiNmE4Zjg0M2Y4 ZjBjNGEwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD Eyg1MmQ4MjExYzAxYTVmZTRmNGRhOTdmNjQxM2ZkMDA3ODg2MmY2YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9XeXQ785Oh44h79cVoUi6dVeX3Y 9F4oXtD/eejguDR4zlqS0owDzKlq7HvdupM4xeHKIZ2v8mfYGy0XV5YpS8S2uu/O Sl1rOc/NXQz0oUHqXvHvuoRCS8FVm/PAoD+aNueie7N2z+aOFTBmfCGuShOuxEpA YOXIAj5A+yYd9PDjDgx01XAVPXGMsxdz1ByoNX0bhdwHPQfMPo/y4o881ESgPNRb RoZlrJkH04h3U/1Tz9dPr265ZbUrT923bWX8vYUoKSnvrvPuAL4axuIcwsUcOWlL ycC8zboVn3gQKyy0QfvcQD3k8TqdtRUMr376KuVfQuisUeiPcFxDHJbeXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLYIRwBpf5PTal/ZBP9AHiGL2rrMB8GA1UdIwQY MBaAFLQCPIxRj6Qp/8oll3tqj4Q/jwxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYt M2I3NDVkZDhlMjFlLzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYtM2I3NDVkZDhlMjFl LzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLJXg0ni 4JyiZcbs3bWTZZVKYsAuyyWFw0kNSl0lh8NnVcsLy5OlljJ4UW1JSNgx3lWY66f0 +aHwdgFJErW56vajLybrYBFyS2SwOEY0nzRuNYmfe0B//8f74xGOb+HesQkFXIzY HmPdBuP6l45P/jqwKbLsPbmjGOBXugj6squ3GErTm6TtP9R+5pZyyOvGtm/vYHWw Je0E37u7NZMJMjEzWI/8oFS0T2ks+/iqvf71fIsaEfJp6PvgL/xMQNXu2IalmcEw k//UTMg/m/varFblyHfZK092qHsR91JEbLbeuF2a2LiFyN3gY49PhGPvDv97akJz gjyrLQd8dpmH9A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:22 2025 by rpki-client