This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: mifDdP8V8g0e0617QrUu6LLOoiwateFtRnTLlBkukO0= Subject key identifier: B0:22:60:E3:B6:58:66:4F:2F:D9:41:E7:81:EE:56:68:AB:A3:FA:37 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019AF2766C5B24F71908D36E07D04A0582F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F79 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 3: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 4: 9ybQ34e8dEmBjQ6HOBBKZDyyZdQ.roa (hash: cdlCSuNwjoKBSHjatuM6HP4m/AWkOkUbKPwUi14aP4g=) 5: GYn3-F2uO_h2EHGbW3621tL76oU.roa (hash: /RXXjZL0Nfv6I7oI+hupErcQ8bgbLDwmluOriUWccuY=) 6: HnAH4hdPwphL9pnrJM2oi5WzFjM.roa (hash: SKK/yufvQ72Law3tDBhQYqMJ7CuB7oHAbYb1kLK3rog=) 7: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 8: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 5PGHtTg/8/Etw1R5Oo4xerp+p3YwYNJ4NJeoDC2zSCY=) 9: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 10: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 11: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6c:5b:24:f7:19:08:d3:6e:07:d0:4a:05:82:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=b02260e3b658664f2fd941e781ee5668aba3fa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:e9:85:7a:48:0c:bb:94:e7:b4:ce:72:b3: 7c:57:b6:52:c9:c2:5f:7d:33:83:d6:77:c9:de:e4: f3:0b:92:11:ad:d4:ed:59:b9:38:aa:da:f7:5c:42: 46:87:4d:55:ae:62:6b:bb:14:fd:f5:8c:13:d6:ea: ce:e8:40:6b:70:37:25:43:a5:6c:f9:c5:83:82:b8: 61:6f:fd:9f:a1:86:57:4d:70:ca:e5:b7:2a:b4:d2: ce:05:70:d7:9b:c0:0e:92:e2:0c:a6:1b:16:7d:ae: 54:51:e8:0e:ac:48:eb:14:0b:eb:c8:27:46:48:5c: b3:a9:e0:84:82:ad:72:47:3a:94:25:b9:01:18:f9: 09:59:79:67:1b:4b:8c:76:3e:77:77:a9:d9:f1:a5: 0e:b3:5c:4c:3e:09:4a:46:b9:c3:ed:28:4a:12:05: 2d:39:e2:5f:d4:64:0e:2e:41:0b:06:3b:76:ef:e5: f1:5f:90:9b:5e:d6:e9:a0:9e:c3:3b:1c:d0:1e:c9: 27:2d:b2:61:2b:9c:db:4c:a7:93:b6:71:71:2e:f1: 80:a3:af:87:a7:5b:f5:20:6e:2c:ee:0b:cf:93:ae: 3a:9e:af:df:2c:ed:bf:13:6e:8e:1e:96:87:24:1d: fb:b0:16:d4:a8:17:8e:d3:84:d8:5d:ff:1d:37:c3: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:60:E3:B6:58:66:4F:2F:D9:41:E7:81:EE:56:68:AB:A3:FA:37 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:6f:0c:02:fe:cf:ef:f0:28:21:74:28:14:52:96:9f:0b: cd:d4:74:8f:b5:2e:22:ca:00:59:43:b9:c5:ba:ea:49:19:17: 96:33:bb:5d:40:f9:a3:79:c5:fc:95:51:6a:1c:8a:6f:65:66: 48:27:95:ea:fd:1c:ef:c6:51:17:91:dd:0f:82:91:3c:50:e0: ec:4e:98:ba:03:cf:1c:69:c7:2e:0e:fb:a5:d9:d6:fb:52:de: ca:a3:7a:4e:c1:03:1d:77:ec:7b:81:e4:a4:6c:62:7d:dd:fd: 84:0f:95:3a:80:24:3f:40:e9:3f:16:24:fd:74:6b:db:9f:31: 4c:79:a6:85:9f:8f:67:c5:15:be:ca:46:25:78:ea:fe:9f:34: d3:8d:2a:de:b2:ea:39:2e:fe:bb:93:1f:a9:e5:81:ca:c6:d3: d9:6c:75:44:1a:26:ac:36:1f:cb:1e:fc:ec:ed:85:9d:d4:a5: 0e:77:00:0d:a7:b4:ae:b9:c8:c1:94:a4:c3:55:83:90:71:f5: 4d:5c:10:44:d8:80:54:76:de:80:17:f8:98:e6:be:78:80:4d: ed:ea:89:51:f9:29:e6:be:c6:79:f1:9b:14:4e:38:4f:be:7a: ba:8d:7f:6f:bb:6f:e1:67:4d:e7:5a:4d:0b:c4:3b:c5:f1:8a: ed:be:6c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmxbJPcZCNNuB9BKBYLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhiMDIyNjBlM2I2NTg2NjRmMmZkOTQxZTc4MWVlNTY2OGFiYTNmYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05vphXpIDLuU57TOcrN8V7ZSycJf fTOD1nfJ3uTzC5IRrdTtWbk4qtr3XEJGh01VrmJruxT99YwT1urO6EBrcDclQ6Vs +cWDgrhhb/2foYZXTXDK5bcqtNLOBXDXm8AOkuIMphsWfa5UUegOrEjrFAvryCdG SFyzqeCEgq1yRzqUJbkBGPkJWXlnG0uMdj53d6nZ8aUOs1xMPglKRrnD7ShKEgUt OeJf1GQOLkELBjt27+XxX5CbXtbpoJ7DOxzQHsknLbJhK5zbTKeTtnFxLvGAo6+H p1v1IG4s7gvPk646nq/fLO2/E26OHpaHJB37sBbUqBeO04TYXf8dN8OjWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAiYOO2WGZPL9lB54HuVmiro/o3MB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHJvDAL+ z+/wKCF0KBRSlp8LzdR0j7UuIsoAWUO5xbrqSRkXljO7XUD5o3nF/JVRahyKb2Vm SCeV6v0c78ZRF5HdD4KRPFDg7E6YugPPHGnHLg77pdnW+1LeyqN6TsEDHXfse4Hk pGxifd39hA+VOoAkP0DpPxYk/XRr258xTHmmhZ+PZ8UVvspGJXjq/p80040q3rLq OS7+u5MfqeWBysbT2Wx1RBomrDYfyx787O2FndSlDncADae0rrnIwZSkw1WDkHH1 TVwQRNiAVHbegBf4mOa+eIBN7eqJUfkp5r7GefGbFE44T756uo1/b7tv4WdN51pN C8Q7xfGK7b5suw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:08 2025 by rpki-client