This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json) Hash identifier: bIsoVJaq9cwM6SO5ClLuDmKhDA0glzRnJXob8ibOPg4= Subject key identifier: 89:BD:64:BE:20:A5:08:D4:C4:67:3C:EA:41:A4:2D:45:2E:89:4E:F7 Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4 Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4 Certificate serial: 019AF27705844130229A8BEA30F908A56D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft Manifest number: 0DDF Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=) 2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: aHFnrN3ZIPwOH07jk1Oyb3lXC/rIjsmqLryl/Yae0X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:05:84:41:30:22:9a:8b:ea:30:f9:08:a5:6d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=89bd64be20a508d4c4673cea41a42d452e894ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:29:00:bd:da:c1:6c:8d:e0:72:10:ae:ec:67: 4d:0e:94:b6:55:0f:b4:ff:08:cd:fb:fe:3c:b1:6f: 0d:aa:2f:2a:a5:a8:57:bb:9c:96:22:37:52:bc:0f: f2:48:a6:c5:46:a6:64:32:52:8f:9a:e5:a0:9f:98: 5b:22:88:4d:23:e4:64:e7:fb:46:db:80:68:03:56: cb:b8:31:7c:c6:17:01:ed:a6:f6:7c:db:e8:f3:9a: cd:e8:60:94:9c:9a:4f:fb:f6:bc:06:df:69:32:b5: 4f:58:7d:45:25:1f:5d:e4:01:14:51:4b:0f:f6:1a: 9d:c0:12:3e:70:f7:56:3a:e4:5b:2f:d8:99:0d:17: 07:c1:5e:86:85:28:35:2c:dd:4e:5b:9f:28:85:89: 66:12:c4:22:ab:91:97:cc:3f:46:b5:e1:2a:b3:7a: d7:c3:52:8c:4b:0b:6c:d6:9b:cd:65:0f:20:27:61: aa:c5:b3:95:2a:f8:47:82:73:19:2c:92:4b:fa:62: c3:04:e7:1b:a1:66:99:41:d0:58:81:c9:c5:98:c3: 4e:18:53:97:a2:f7:aa:c2:24:72:b6:d1:3c:cd:1c: 29:3e:50:4f:63:91:2b:35:93:5f:2a:46:62:5a:ce: 9b:fa:35:c0:69:f9:2e:13:39:b6:fa:07:35:da:d8: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:64:BE:20:A5:08:D4:C4:67:3C:EA:41:A4:2D:45:2E:89:4E:F7 X509v3 Authority Key Identifier: keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:3e:45:f2:5b:85:c1:d0:da:72:21:46:4e:1f:38:a2:99:9c: 1c:47:ce:95:91:e0:09:2d:32:3d:a1:1e:55:9e:01:f1:49:e5: c2:92:51:4e:f4:bb:23:4d:70:79:e1:ab:d2:65:fc:00:01:19: 94:39:c8:39:b8:da:76:06:af:d2:47:01:b1:82:42:fa:66:80: 64:07:8f:ce:2c:a5:72:df:bb:8f:22:fb:0b:d3:6d:80:10:f6: 4d:d5:78:f7:b5:c8:a7:69:5a:80:31:b3:15:cc:fc:65:90:e8: 96:9a:60:98:11:8f:ce:12:22:a7:2f:4b:40:cb:5e:bb:20:ae: 04:bd:80:c7:7c:4d:f9:65:41:c0:8f:8f:eb:7e:f9:9b:00:9d: fa:01:70:0d:33:58:77:22:22:1b:89:f4:7c:c5:b3:5e:e8:a8: f3:ba:f9:61:98:d8:db:fb:6c:b4:aa:7b:9f:ab:12:7a:bf:e1: 92:b2:90:15:cc:d3:5f:35:e4:b5:95:a5:cc:1a:e5:39:01:8f: ac:77:e1:97:76:71:6c:bd:dc:8f:ac:9d:b3:3c:41:78:43:4c: f9:e9:0d:6c:22:91:78:cf:0a:73:3f:12:03:76:f0:ac:fd:3f: 3c:28:92:f8:83:7f:21:f5:fa:e1:c0:3d:57:33:22:3d:a6:f9: 61:73:e4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwWEQTAimovqMPkIpW1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGM5NTg2N2MzMDg0YzRjMTZhMmZlYmI0NjY1MTA5MGYz MjQ3ZTQwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD Eyg4OWJkNjRiZTIwYTUwOGQ0YzQ2NzNjZWE0MWE0MmQ0NTJlODk0ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ykAvdrBbI3gchCu7GdNDpS2VQ+0 /wjN+/48sW8Nqi8qpahXu5yWIjdSvA/ySKbFRqZkMlKPmuWgn5hbIohNI+Rk5/tG 24BoA1bLuDF8xhcB7ab2fNvo85rN6GCUnJpP+/a8Bt9pMrVPWH1FJR9d5AEUUUsP 9hqdwBI+cPdWOuRbL9iZDRcHwV6GhSg1LN1OW58ohYlmEsQiq5GXzD9GteEqs3rX w1KMSwts1pvNZQ8gJ2GqxbOVKvhHgnMZLJJL+mLDBOcboWaZQdBYgcnFmMNOGFOX oveqwiRyttE8zRwpPlBPY5ErNZNfKkZiWs6b+jXAafkuEzm2+gc12tgFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm9ZL4gpQjUxGc86kGkLUUuiU73MB8GA1UdIwQY MBaAFLQMlYZ8MITEwWov67RmUQkPMkfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zMTgyY2UtOWQyZi00YjIyLWFiY2Qt YWNkOWEyZWNhMzNmLzEvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zMTgyY2UtOWQyZi00YjIyLWFiY2QtYWNkOWEyZWNhMzNm LzEvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArT5F8luF wdDaciFGTh84opmcHEfOlZHgCS0yPaEeVZ4B8UnlwpJRTvS7I01weeGr0mX8AAEZ lDnIObjadgav0kcBsYJC+maAZAePziylct+7jyL7C9NtgBD2TdV497XIp2lagDGz Fcz8ZZDolppgmBGPzhIipy9LQMteuyCuBL2Ax3xN+WVBwI+P6375mwCd+gFwDTNY dyIiG4n0fMWzXuio87r5YZjY2/tstKp7n6sSer/hkrKQFczTXzXktZWlzBrlOQGP rHfhl3ZxbL3cj6ydszxBeENM+ekNbCKReM8Kcz8SA3bwrP0/PCiS+IN/IfX64cA9 VzMiPab5YXPkuw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:34 2025 by rpki-client