This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json) Hash identifier: YeoWXjWIwALuIwtUjjSY3mPxBqeOiApK/ntVesSFLo8= Subject key identifier: 5A:F1:15:C9:97:4E:8D:01:33:B3:69:F5:69:43:5B:D0:7B:8F:D4:4D Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Certificate serial: 019AF208EE8560D6E6790F4437F108D55268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=) 2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: T3BaR/oJksY1sqKe8dvKpX1yS2x+GsM+ix94SAG3bYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ee:85:60:d6:e6:79:0f:44:37:f1:08:d5:52:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=5af115c9974e8d0133b369f569435bd07b8fd44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:47:14:dd:f6:b7:09:9e:66:7a:0c:72:ed:18: 69:a9:2d:83:79:a1:e3:9e:a9:eb:a8:f0:3a:1c:32: 91:5a:93:e3:2a:d9:e7:a6:4f:a0:e4:31:e5:dc:e2: 1b:c5:ee:ec:6d:f9:f3:62:40:8c:2e:07:5b:fc:f9: f0:18:1d:30:42:7c:c9:1f:62:25:f2:0b:89:c4:10: 09:13:e1:9d:12:37:bf:85:c4:e5:97:fe:5e:01:a4: 8b:95:41:02:14:26:6c:64:9c:46:2c:4f:34:b4:ae: 6d:6a:15:29:10:4c:0c:50:e1:95:dc:7f:ca:aa:a0: eb:6b:0b:84:d4:94:c1:be:a3:2a:d9:4a:21:6f:72: ce:70:7b:f2:67:18:c0:7b:35:48:93:e5:35:4e:41: 42:7f:60:ec:38:b4:ab:95:15:3a:ea:47:96:fa:00: 49:f5:db:84:cf:a0:e7:ed:c9:1c:c9:bc:bf:08:ed: 9e:20:c9:45:85:e5:57:a4:1f:4c:88:f6:ca:71:9d: 49:b7:c9:4b:c0:b8:38:68:36:d8:03:94:22:99:0f: 00:98:cb:d4:4a:36:03:2d:a2:20:de:a8:3d:2e:02: 92:68:2b:f8:2d:5a:bc:cb:ea:10:22:c2:f6:2c:e9: fa:6e:da:f9:1b:a2:50:43:41:ea:3d:97:48:a0:63: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:15:C9:97:4E:8D:01:33:B3:69:F5:69:43:5B:D0:7B:8F:D4:4D X509v3 Authority Key Identifier: keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a8:51:1d:2d:ea:10:cb:87:b2:bc:ca:39:31:89:dc:dd:63: ba:bf:4a:2c:fd:47:d5:b3:bc:3d:4e:79:ed:cf:f2:1d:3a:4f: 45:6b:f4:d6:91:44:31:07:93:9f:92:1a:d1:f4:55:25:bb:81: c3:da:11:2b:07:cd:de:e3:9e:00:93:c9:37:2a:0a:1c:5b:ce: 4c:c5:76:7e:5f:d1:25:d7:2f:7a:c6:ff:99:ab:9a:e8:85:07: 43:09:88:80:0a:c8:97:63:7d:57:8c:23:d3:4b:0e:41:2a:c2: 96:20:4e:f6:bb:9e:1e:59:49:3f:fe:68:7e:44:1f:8b:e7:c7: 01:63:97:e5:86:98:ee:79:fe:04:b1:5e:8b:db:56:e4:1b:7e: f1:58:76:f3:af:f8:d2:37:03:ae:01:84:91:cb:38:99:46:1f: 9e:9f:38:8e:97:33:52:7d:ce:dc:28:1f:86:c5:d1:92:eb:99: 02:75:35:24:86:2c:bc:19:00:df:7c:ff:24:b1:31:7b:dc:a7: c2:c8:28:43:5f:2d:64:ef:5d:53:20:bb:cb:ac:cd:2f:48:d5: ae:4f:c3:aa:43:b0:af:59:21:f1:42:65:7a:a0:59:df:71:93: 78:22:e4:b9:ea:11:8c:7f:98:d0:30:4c:0f:43:bf:62:12:82: 87:1c:98:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO6FYNbmeQ9EN/EI1VJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4 MDhmYjUwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg1YWYxMTVjOTk3NGU4ZDAxMzNiMzY5ZjU2OTQzNWJkMDdiOGZkNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EcU3fa3CZ5megxy7RhpqS2DeaHj nqnrqPA6HDKRWpPjKtnnpk+g5DHl3OIbxe7sbfnzYkCMLgdb/PnwGB0wQnzJH2Il 8guJxBAJE+GdEje/hcTll/5eAaSLlUECFCZsZJxGLE80tK5tahUpEEwMUOGV3H/K qqDrawuE1JTBvqMq2Uohb3LOcHvyZxjAezVIk+U1TkFCf2DsOLSrlRU66keW+gBJ 9duEz6Dn7ckcyby/CO2eIMlFheVXpB9MiPbKcZ1Jt8lLwLg4aDbYA5QimQ8AmMvU SjYDLaIg3qg9LgKSaCv4LVq8y+oQIsL2LOn6btr5G6JQQ0HqPZdIoGMBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrxFcmXTo0BM7Np9WlDW9B7j9RNMB8GA1UdIwQY MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKhRHS3q EMuHsrzKOTGJ3N1jur9KLP1H1bO8PU557c/yHTpPRWv01pFEMQeTn5Ia0fRVJbuB w9oRKwfN3uOeAJPJNyoKHFvOTMV2fl/RJdcvesb/maua6IUHQwmIgArIl2N9V4wj 00sOQSrCliBO9rueHllJP/5ofkQfi+fHAWOX5YaY7nn+BLFei9tW5Bt+8Vh286/4 0jcDrgGEkcs4mUYfnp84jpczUn3O3CgfhsXRkuuZAnU1JIYsvBkA33z/JLExe9yn wsgoQ18tZO9dUyC7y6zNL0jVrk/DqkOwr1kh8UJleqBZ33GTeCLkueoRjH+Y0DBM D0O/YhKChxyY5g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:44 2025 by rpki-client