This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json) Hash identifier: SmsjnQb6XoV2W/R8Abwd7ZyYLq8e8X6HQhfH8FCIIVQ= Subject key identifier: 1A:88:B4:05:C4:3F:86:38:94:39:9F:BE:FF:AC:0A:78:D4:0A:25:6A Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25 Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025 Certificate serial: 019AF2097EF60AA42D8865BDB7EA1EFBA548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 4PFxlTOs-98tpvMHS5yXn75NOOM.roa (hash: NikMUSzzpLJM1+OSBrAyuxchZ1m24pIf1f/fleT58OE=) 2: Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa (hash: DKK2FLL+hiqeGN3n2BFldkSB9QGntlwHo6IOei4/Bt0=) 3: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: AwJ+8iZ32o2Q7shY5SPEBosX5K1AIRvm2C8HzKa+aVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:f6:0a:a4:2d:88:65:bd:b7:ea:1e:fb:a5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=1a88b405c43f863894399fbeffac0a78d40a256a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:90:05:1b:12:bb:81:a2:7f:c6:0e:a3:ea: 42:b5:d4:28:b0:d7:d3:5f:67:bd:15:71:9a:ed:36: 36:df:9f:73:e3:30:d2:8d:9b:58:5b:f9:cc:b1:dc: 99:8b:fb:46:c8:f6:cf:55:c0:16:7b:4e:18:c9:f3: f6:f2:5b:4f:8f:54:36:51:4c:48:66:37:d5:86:24: d4:73:40:d1:97:0c:37:44:47:cf:58:af:f6:c5:52: 7c:04:9f:c0:98:7f:dd:d7:83:7d:e2:6d:74:6d:97: 9e:9e:78:57:c2:10:67:b4:33:1a:cf:9b:c0:ba:bd: 76:6b:36:e1:6f:03:1d:32:d5:e1:6f:7e:87:d9:b3: b5:83:62:7f:c0:ba:fe:91:66:77:1d:e7:d5:c3:c9: 61:bc:a2:f2:45:57:a2:66:39:7b:62:b9:1c:d3:cb: 6b:37:c9:d4:57:6e:97:1e:61:3a:24:3b:ce:79:ca: dd:e2:d5:08:3f:d3:5c:23:ee:f0:21:c8:21:d3:60: 44:76:28:d9:90:9c:8e:10:e4:14:95:10:83:a1:e6: 7d:8b:8c:75:68:72:3a:19:a7:7c:d0:47:85:e7:91: 4b:13:9f:5e:48:83:05:dc:0e:f4:2d:9e:88:f6:53: e1:b5:7d:ce:5b:09:50:4e:71:62:bd:61:75:b8:1f: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:88:B4:05:C4:3F:86:38:94:39:9F:BE:FF:AC:0A:78:D4:0A:25:6A X509v3 Authority Key Identifier: keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f6:7d:b9:7f:b6:71:21:e9:dc:ce:55:09:cf:d6:ad:27:51: 3f:b0:6b:c3:00:6d:9d:2b:61:ed:df:c5:88:2e:9c:45:e5:db: 20:ec:a5:38:47:05:86:66:70:4a:21:40:95:21:63:f5:ac:f3: fd:29:1a:e1:7e:92:b6:92:56:da:55:a7:e5:d5:0a:aa:c4:b4: dc:50:0c:5e:e1:01:73:49:1f:32:f7:c5:84:58:70:66:42:ad: 71:15:25:ad:6e:90:99:5f:1b:74:50:9a:e4:0e:20:76:e0:6b: 51:f4:62:1d:31:52:77:d4:00:4f:47:e0:f0:6c:c7:81:07:03: f4:d0:86:32:a5:18:bb:1a:68:82:95:1a:16:26:3d:27:46:cd: ed:14:fe:bc:d4:25:3f:9a:77:05:92:3a:88:3c:76:2e:e2:eb: a4:42:ec:fe:a0:e0:ca:42:36:65:12:bc:cc:87:c6:1b:2e:de: 36:09:e7:49:c4:0d:43:85:66:52:50:c4:f3:b8:4a:33:8d:41: 3d:57:6a:e5:6a:3e:99:d1:54:1b:86:ba:81:49:73:76:2e:d4: 23:58:1d:43:32:e0:7c:5e:f5:e0:e9:ff:67:87:4f:16:38:b2: bc:26:0b:1d:a6:36:76:3c:d6:3d:7f:30:1a:91:6d:1e:0c:4b: ec:fa:ad:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX72CqQtiGW9t+oe+6VIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTNhODZmZDMwODFiODAzZWRjMTBkMjNiYmVkYTkxZDc5 MzIwMjUwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygxYTg4YjQwNWM0M2Y4NjM4OTQzOTlmYmVmZmFjMGE3OGQ0MGEyNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UGQBRsSu4Gif8YOo+pCtdQosNfT X2e9FXGa7TY2359z4zDSjZtYW/nMsdyZi/tGyPbPVcAWe04YyfP28ltPj1Q2UUxI ZjfVhiTUc0DRlww3REfPWK/2xVJ8BJ/AmH/d14N94m10bZeennhXwhBntDMaz5vA ur12azbhbwMdMtXhb36H2bO1g2J/wLr+kWZ3HefVw8lhvKLyRVeiZjl7Yrkc08tr N8nUV26XHmE6JDvOecrd4tUIP9NcI+7wIcgh02BEdijZkJyOEOQUlRCDoeZ9i4x1 aHI6Gad80EeF55FLE59eSIMF3A70LZ6I9lPhtX3OWwlQTnFivWF1uB8CXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqItAXEP4Y4lDmfvv+sCnjUCiVqMB8GA1UdIwQY MBaAFLRTqG/TCBuAPtwQ0ju+2pHXkyAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMjVhZjktZjNmNS00OWU0LWJhMTAt ZjVlYTAxMmI4NGZjLzEvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yMjVhZjktZjNmNS00OWU0LWJhMTAtZjVlYTAxMmI4NGZj LzEvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/Z9uX+2 cSHp3M5VCc/WrSdRP7BrwwBtnSth7d/FiC6cReXbIOylOEcFhmZwSiFAlSFj9azz /Ska4X6StpJW2lWn5dUKqsS03FAMXuEBc0kfMvfFhFhwZkKtcRUlrW6QmV8bdFCa 5A4gduBrUfRiHTFSd9QAT0fg8GzHgQcD9NCGMqUYuxpogpUaFiY9J0bN7RT+vNQl P5p3BZI6iDx2LuLrpELs/qDgykI2ZRK8zIfGGy7eNgnnScQNQ4VmUlDE87hKM41B PVdq5Wo+mdFUG4a6gUlzdi7UI1gdQzLgfF714On/Z4dPFjiyvCYLHaY2djzWPX8w GpFtHgxL7Pqtfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:08 2025 by rpki-client