This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json) Hash identifier: rV/t3bKDm52gmEJFF8AGZLYOVTzn34/yJTfcDf21CiY= Subject key identifier: 1F:E8:8D:37:2C:4C:6D:F3:47:6B:ED:65:AE:DC:59:15:84:F1:2F:FF Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Certificate serial: 019AF12E57D2140A7E1E71DF5EA9F5E47F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft Manifest number: 1615 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=) 2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=) 3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=) 4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=) 5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: GX+5O+ndOjHCObxKypq19go2oCmernC367pts0j3UTs=) 6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:57:d2:14:0a:7e:1e:71:df:5e:a9:f5:e4:7f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=1fe88d372c4c6df3476bed65aedc591584f12fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:6e:97:36:0b:fd:79:cf:79:8d:2b:a1:42: 1d:2d:87:de:71:0d:64:17:fe:a8:37:bd:ac:f3:d6: d4:ec:09:aa:a4:0f:59:42:96:e5:1b:a0:78:2b:58: 32:6a:db:ed:eb:16:d3:d2:1e:0a:51:e4:52:13:c3: 50:48:29:93:e2:6c:ee:51:68:3f:01:50:60:e6:42: 6f:03:01:cf:da:86:87:9c:c1:df:94:07:e8:4f:51: 65:6c:f0:e6:7b:36:24:53:2b:19:04:ec:91:22:53: c7:f6:30:d8:ac:8c:7b:9e:ca:77:df:d1:d9:ba:6f: fe:ff:06:0e:92:71:53:d6:d2:ef:97:0c:47:61:e4: 58:b0:0a:e6:42:8a:d7:86:e7:1a:77:90:bb:5c:e9: ab:47:39:bc:46:ea:72:de:bc:3b:91:1b:c7:67:c8: 9d:b8:5d:a4:d1:b8:1e:dc:9e:55:52:3f:72:71:15: 84:39:f8:79:5e:e2:43:9d:fd:99:d1:73:b8:72:9d: e8:e0:19:cf:f9:7f:25:bf:6e:05:74:65:ca:2f:d4: e8:8d:e6:e5:6f:74:a3:ed:5c:bc:b7:89:06:92:a7: 6e:19:d6:f3:ec:ca:a7:67:a7:01:7c:75:48:11:df: 95:68:fb:71:bf:ff:59:b4:a4:7c:7f:e0:d2:c7:fa: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:8D:37:2C:4C:6D:F3:47:6B:ED:65:AE:DC:59:15:84:F1:2F:FF X509v3 Authority Key Identifier: keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fb:5e:ed:3a:30:a1:bf:3a:fe:01:93:31:84:fe:b2:73:0f: 3a:ba:b9:bc:67:0c:93:ff:75:9c:cb:00:d1:aa:9c:34:a3:3d: b4:19:8d:85:e3:c9:52:96:8c:4b:4a:19:1a:b3:ea:57:5f:c7: 6a:8f:1f:48:35:97:ca:ea:3a:94:f5:a8:83:b4:c1:81:fd:e3: aa:56:92:d2:0a:6c:db:72:f6:1c:f1:10:d7:47:ad:60:6c:1e: 02:9d:5a:42:26:14:2d:06:8f:5d:b9:51:0f:91:28:92:ae:43: 2a:d2:7c:33:2b:5d:04:6b:81:f2:f6:34:6a:43:10:33:9d:6e: 0b:d6:12:86:4b:df:1d:37:86:c2:65:88:9f:de:c0:f3:a7:8c: d3:25:75:25:31:d6:f1:4d:99:4a:53:0a:88:ac:bd:6e:5a:80: 85:08:5f:b3:00:e9:cd:fe:48:9b:07:15:d2:bb:ae:10:70:bf: 45:36:7d:87:ee:6e:6d:21:7d:f9:36:49:e7:f2:c8:e2:88:b4: 29:f9:ee:99:d3:64:df:30:73:47:a6:09:47:11:cd:70:0c:c3: c9:71:14:6c:6b:46:f9:55:3e:ad:8c:7c:d2:38:11:50:65:98: fc:16:9c:13:ee:d3:dc:4d:a6:c0:c4:fc:2e:a4:cf:65:6f:d8: 19:41:20:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlfSFAp+HnHfXqn15H9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh MGUwYTkwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD EygxZmU4OGQzNzJjNGM2ZGYzNDc2YmVkNjVhZWRjNTkxNTg0ZjEyZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCBulzYL/XnPeY0roUIdLYfecQ1k F/6oN72s89bU7AmqpA9ZQpblG6B4K1gyatvt6xbT0h4KUeRSE8NQSCmT4mzuUWg/ AVBg5kJvAwHP2oaHnMHflAfoT1FlbPDmezYkUysZBOyRIlPH9jDYrIx7nsp339HZ um/+/wYOknFT1tLvlwxHYeRYsArmQorXhucad5C7XOmrRzm8Rupy3rw7kRvHZ8id uF2k0bge3J5VUj9ycRWEOfh5XuJDnf2Z0XO4cp3o4BnP+X8lv24FdGXKL9Tojebl b3Sj7Vy8t4kGkqduGdbz7MqnZ6cBfHVIEd+VaPtxv/9ZtKR8f+DSx/ptUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/ojTcsTG3zR2vtZa7cWRWE8S//MB8GA1UdIwQY MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPte7Tow ob86/gGTMYT+snMPOrq5vGcMk/91nMsA0aqcNKM9tBmNhePJUpaMS0oZGrPqV1/H ao8fSDWXyuo6lPWog7TBgf3jqlaS0gps23L2HPEQ10etYGweAp1aQiYULQaPXblR D5Eokq5DKtJ8MytdBGuB8vY0akMQM51uC9YShkvfHTeGwmWIn97A86eM0yV1JTHW 8U2ZSlMKiKy9blqAhQhfswDpzf5ImwcV0ruuEHC/RTZ9h+5ubSF9+TZJ5/LI4oi0 KfnumdNk3zBzR6YJRxHNcAzDyXEUbGtG+VU+rYx80jgRUGWY/BacE+7T3E2mwMT8 LqTPZW/YGUEgPg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:53 2025 by rpki-client