This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json) Hash identifier: NJD4/+gI/wAjP/bTZTeqxiW32LGnErGwJlwlHdSxv8k= Subject key identifier: 6D:EE:A9:44:58:BB:FF:57:AB:55:4C:9C:23:67:D6:6A:B4:65:6F:C0 Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Certificate serial: 019AF05131A71EB79B358827F253FF4E387C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 21:00:44 +0000 Manifest this update: Fri 05 Dec 2025 21:00:44 +0000 Manifest next update: Sat 06 Dec 2025 21:00:44 +0000 Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=) 2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: NAeD4XyI3xulA66kxj0YOS2iVbd6hP5efElmO5QPvVg=) 3: tlghKI1hug3w1Vn3mY8-TRwHvyM.roa (hash: 6SDpu3HmXsvFN7j0J4OgAxM8GrLPzifIsTaLSJMzqa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:31:a7:1e:b7:9b:35:88:27:f2:53:ff:4e:38:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Validity Not Before: Dec 5 21:00:44 2025 GMT Not After : Dec 6 21:00:44 2025 GMT Subject: CN=6deea94458bbff57ab554c9c2367d66ab4656fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:9a:0a:bc:85:33:ec:b0:8d:7c:b6:e9:f0: dd:cc:da:4b:ff:5d:71:19:00:ac:a1:18:2b:0a:5b: d4:87:1d:a7:6b:8d:d1:d4:13:de:6e:f8:ea:b7:20: 2e:85:22:ac:62:0e:26:33:cd:7f:19:f0:6c:df:1d: 5e:9f:71:38:e3:33:57:04:fd:01:69:d6:1e:1d:f9: 36:98:f9:60:d9:2a:aa:01:37:d8:9b:0e:6d:23:b1: 1d:19:ea:d7:89:cb:2e:6d:96:37:c5:ac:d2:7b:64: b2:1f:91:38:bd:55:11:f9:a5:03:98:30:a9:f4:53: 66:96:c1:ce:16:90:f7:5a:47:b8:e2:80:7a:2e:93: 0f:ca:1b:31:e6:73:6d:0b:97:13:c7:c2:d5:03:e4: f7:47:d8:82:86:02:b7:73:91:80:8f:cf:30:90:bb: 86:0d:a6:5a:a0:d0:8d:43:f1:5b:e0:1f:68:fc:f8: b6:bc:ed:ea:b5:3d:d4:21:a1:f7:8d:1d:bd:b1:f2: 0e:49:cc:9f:ca:45:8d:e1:e3:8f:ab:f6:86:02:a4: 5d:a1:df:41:9f:2e:16:65:24:73:c7:08:e4:bc:ed: bb:51:05:15:e5:d1:9c:7a:ab:73:88:82:4c:7a:64: 58:01:0e:97:1e:b3:92:e4:77:89:7c:b0:2c:22:23: b5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EE:A9:44:58:BB:FF:57:AB:55:4C:9C:23:67:D6:6A:B4:65:6F:C0 X509v3 Authority Key Identifier: keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:41:f6:84:f3:01:1f:6b:dc:29:6a:3d:17:1b:01:70:65:16: 6f:63:7a:ce:f6:ed:b4:4b:22:5b:58:bb:b0:68:06:2a:86:f9: 12:71:7d:e2:46:cd:20:b8:ca:1a:6a:cc:a8:a7:83:34:52:f8: b5:bf:8a:e4:88:f5:e3:32:ad:a6:1a:8d:b1:d6:8c:13:48:47: 70:28:ce:cc:d0:57:4d:73:a8:e9:53:3d:08:da:99:06:20:6d: fb:2f:06:76:86:f2:3e:aa:f5:78:e9:dd:a6:5c:b1:7c:a8:d7: 00:c5:bf:c2:d0:d8:b9:35:b9:29:6c:f7:50:8a:ed:4f:9a:28: 60:ad:6f:1d:5d:fc:d5:9d:8a:ad:ae:c8:46:c4:a2:f3:65:2c: f0:42:d6:4b:63:3f:ee:3d:27:4e:46:6a:5b:96:75:14:fa:1f: 46:9a:e9:35:91:90:c5:b4:e5:a4:92:6d:ad:22:f4:06:69:41: af:e9:a9:5f:55:4d:21:03:82:aa:d4:1a:25:f5:ee:4e:98:cf: 37:dc:7d:a1:ef:b9:f5:70:8c:87:4f:89:98:dc:c0:a5:07:75: 94:22:01:15:12:3c:52:50:df:ac:ff:8d:88:dc:65:ad:5c:3b: 32:e1:3f:ce:b2:3c:0a:42:ca:6c:92:3f:51:fe:3e:65:10:de: 9c:30:ef:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUTGnHrebNYgn8lP/Tjh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5 NjVkOWYwHhcNMjUxMjA1MjEwMDQ0WhcNMjUxMjA2MjEwMDQ0WjAzMTEwLwYDVQQD Eyg2ZGVlYTk0NDU4YmJmZjU3YWI1NTRjOWMyMzY3ZDY2YWI0NjU2ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHSaCryFM+ywjXy26fDdzNpL/11x GQCsoRgrClvUhx2na43R1BPebvjqtyAuhSKsYg4mM81/GfBs3x1en3E44zNXBP0B adYeHfk2mPlg2SqqATfYmw5tI7EdGerXicsubZY3xazSe2SyH5E4vVUR+aUDmDCp 9FNmlsHOFpD3Wke44oB6LpMPyhsx5nNtC5cTx8LVA+T3R9iChgK3c5GAj88wkLuG DaZaoNCNQ/Fb4B9o/Pi2vO3qtT3UIaH3jR29sfIOScyfykWN4eOPq/aGAqRdod9B ny4WZSRzxwjkvO27UQUV5dGceqtziIJMemRYAQ6XHrOS5HeJfLAsIiO1kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3uqURYu/9Xq1VMnCNn1mq0ZW/AMB8GA1UdIwQY MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUH2hPMB H2vcKWo9FxsBcGUWb2N6zvbttEsiW1i7sGgGKob5EnF94kbNILjKGmrMqKeDNFL4 tb+K5Ij14zKtphqNsdaME0hHcCjOzNBXTXOo6VM9CNqZBiBt+y8GdobyPqr1eOnd plyxfKjXAMW/wtDYuTW5KWz3UIrtT5ooYK1vHV381Z2Kra7IRsSi82Us8ELWS2M/ 7j0nTkZqW5Z1FPofRprpNZGQxbTlpJJtrSL0BmlBr+mpX1VNIQOCqtQaJfXuTpjP N9x9oe+59XCMh0+JmNzApQd1lCIBFRI8UlDfrP+NiNxlrVw7MuE/zrI8CkLKbJI/ Uf4+ZRDenDDv4A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:57 2025 by rpki-client