This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json) Hash identifier: DrQn/u5Qmsu15Ihrt/hhS7jh5x18unGXU53MgyV882w= Subject key identifier: B3:87:85:5F:F7:B4:AC:2A:52:F5:6B:32:95:3D:3C:30:A1:76:02:53 Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Certificate serial: 019AF5AF193C0A75909F64C9711209BD0E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft Manifest number: 1078 Signing time: Sat 06 Dec 2025 22:01:24 +0000 Manifest this update: Sat 06 Dec 2025 22:01:24 +0000 Manifest next update: Sun 07 Dec 2025 22:01:24 +0000 Files and hashes: 1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=) 2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: ZW8WB0Izw2oVox3luJIiFIRnM8xey2bL0HAk0fLiEyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:19:3c:0a:75:90:9f:64:c9:71:12:09:bd:0e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Validity Not Before: Dec 6 22:01:24 2025 GMT Not After : Dec 7 22:01:24 2025 GMT Subject: CN=b387855ff7b4ac2a52f56b32953d3c30a1760253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:78:24:4c:01:c9:8c:98:2e:60:29:c9:a7: 56:41:3a:00:b1:f9:38:f5:ad:17:57:e1:ba:a1:a4: 63:34:6e:4b:04:29:06:99:0a:ad:31:92:1b:be:87: 07:97:de:68:f8:0c:c6:72:bd:3a:ac:c4:29:ee:3a: 0d:9b:41:61:db:33:03:05:33:fe:e2:e3:78:ee:bc: dc:de:15:e1:a5:5c:d0:0d:81:21:7b:59:b4:59:2f: 44:b4:60:06:30:70:04:1c:78:77:36:62:01:00:16: ce:5d:9d:ba:cf:5e:72:cd:a5:45:8a:e6:01:3c:3f: 5e:0e:d0:01:09:18:4e:6c:40:d9:b1:fa:8e:ea:89: be:f5:e0:a0:2a:b3:79:6b:9b:0e:7d:15:af:e7:f3: 28:c5:08:0d:ac:18:58:5a:98:2f:4f:b4:6d:f8:b1: bc:98:14:8e:d9:b4:95:d7:fb:2a:17:99:3b:d1:62: f6:55:31:cc:37:d5:28:bf:22:be:ff:69:84:9a:cd: 15:3f:18:b1:bb:d8:0f:ed:e4:4f:98:3b:58:98:1a: f7:cd:0a:ba:bd:88:7d:2c:cd:15:f6:a1:cf:45:d9: e9:52:f5:75:03:01:19:cf:b5:0a:87:30:50:3a:ab: f0:3e:3c:29:df:84:92:8a:f7:a3:d5:bd:7f:0a:d6: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:85:5F:F7:B4:AC:2A:52:F5:6B:32:95:3D:3C:30:A1:76:02:53 X509v3 Authority Key Identifier: keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:be:18:8d:8a:39:00:5d:2e:d1:88:b0:2c:07:ac:74:aa: 47:e6:e7:d5:3f:51:bc:e6:5b:47:3e:82:9f:31:8c:1a:95:4a: 40:af:88:8e:22:d1:f3:3f:08:56:65:79:c9:0f:04:b8:d2:d1: c1:91:93:8c:bb:cf:55:6d:5a:ac:50:4f:d5:f9:b2:d3:85:aa: 1e:43:e1:81:e6:91:e2:53:e9:99:64:a1:61:88:a8:24:b9:75: 3f:1e:f3:db:a2:a9:1e:dc:9e:df:97:6d:95:2e:5d:28:1c:7f: 23:87:bd:9f:3a:fe:03:6b:04:a4:54:0c:0b:06:78:d7:b1:61: f1:5e:cc:0a:cd:27:1a:56:ec:d2:43:54:cd:50:65:68:fc:5b: 73:65:70:b1:13:77:fa:56:7f:fc:5d:c5:24:00:d8:c5:a0:01: 2e:77:b1:f6:95:51:7d:b3:58:b1:0d:ed:1b:eb:7d:25:3f:f1: a5:ac:b2:8c:31:c6:39:a8:72:a9:6a:5e:4b:8c:16:ef:e6:de: ce:8a:39:25:e6:d2:96:0f:8c:18:69:79:ea:73:ee:70:fe:0b: 8f:fa:ee:0f:40:dd:d9:98:3d:42:da:27:46:bf:c3:bf:6a:b5: e5:10:04:18:cf:7a:2e:e6:4c:c0:be:89:d0:7a:7a:55:43:65: 29:31:7c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rxk8CnWQn2TJcRIJvQ40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzQ1YmI4ZWYwMDg4Y2I1MTlhNDA5NWQ2NTE3MTllZjUx ZWUzNTQwHhcNMjUxMjA2MjIwMTI0WhcNMjUxMjA3MjIwMTI0WjAzMTEwLwYDVQQD EyhiMzg3ODU1ZmY3YjRhYzJhNTJmNTZiMzI5NTNkM2MzMGExNzYwMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsR4JEwByYyYLmApyadWQToAsfk4 9a0XV+G6oaRjNG5LBCkGmQqtMZIbvocHl95o+AzGcr06rMQp7joNm0Fh2zMDBTP+ 4uN47rzc3hXhpVzQDYEhe1m0WS9EtGAGMHAEHHh3NmIBABbOXZ26z15yzaVFiuYB PD9eDtABCRhObEDZsfqO6om+9eCgKrN5a5sOfRWv5/MoxQgNrBhYWpgvT7Rt+LG8 mBSO2bSV1/sqF5k70WL2VTHMN9UovyK+/2mEms0VPxixu9gP7eRPmDtYmBr3zQq6 vYh9LM0V9qHPRdnpUvV1AwEZz7UKhzBQOqvwPjwp34SSivej1b1/CtYbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOHhV/3tKwqUvVrMpU9PDChdgJTMB8GA1UdIwQY MBaAFLV0W7jvAIjLUZpAldZRcZ71HuNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQt ODdjMzM2OGNiM2ZhLzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQtODdjMzM2OGNiM2Zh LzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQy+GI2K OQBdLtGIsCwHrHSqR+bn1T9RvOZbRz6CnzGMGpVKQK+IjiLR8z8IVmV5yQ8EuNLR wZGTjLvPVW1arFBP1fmy04WqHkPhgeaR4lPpmWShYYioJLl1Px7z26KpHtye35dt lS5dKBx/I4e9nzr+A2sEpFQMCwZ417Fh8V7MCs0nGlbs0kNUzVBlaPxbc2VwsRN3 +lZ//F3FJADYxaABLnex9pVRfbNYsQ3tG+t9JT/xpayyjDHGOahyqWpeS4wW7+be zoo5JebSlg+MGGl56nPucP4Lj/ruD0Dd2Zg9QtonRr/Dv2q15RAEGM96LuZMwL6J 0Hp6VUNlKTF8EA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:08:26 2025 by rpki-client