This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json) Hash identifier: 5Y4oVHbju6CBPTuaVsMv246B+PZ9gFpeHyO2HuA07X4= Subject key identifier: 11:E9:E0:E7:D9:74:DB:58:2D:2E:99:E3:99:69:EF:87:66:A1:D5:37 Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb Certificate serial: 019AF276F75540CFF4E0550B22E430CD3713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft Manifest number: 0BB0 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=) 2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: RTd/P9DwEyMwmGURkZ5+05NeKpoDCsQepQ0/H+4xiMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f7:55:40:cf:f4:e0:55:0b:22:e4:30:cd:37:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=11e9e0e7d974db582d2e99e39969ef8766a1d537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:6f:48:86:66:b0:98:8e:ee:9d:9d:c4:69: 4a:23:39:b6:81:cb:b8:ae:f3:fc:d7:35:17:ee:94: 55:0d:9a:7b:64:96:30:64:c4:64:37:57:9a:40:eb: f4:25:c7:6e:b3:cb:7f:a6:c6:10:4f:fb:ad:57:ab: 54:c3:87:08:9f:4a:17:82:52:7a:d6:4b:35:ba:82: 6d:12:54:74:c5:77:43:ef:ee:e7:db:0a:21:0d:a6: 92:c6:0b:fe:08:ee:11:30:65:d2:2d:cb:75:bd:40: e3:21:ef:4b:ac:17:9a:f0:2c:2f:94:a5:11:30:69: 2b:d0:6a:96:6e:92:7d:bf:7d:46:61:a4:32:42:20: 0d:5e:9f:ab:8f:b0:01:5e:3c:14:1b:a8:13:60:99: 7f:6d:d3:33:5b:41:97:4b:58:1c:a1:b1:cd:c8:e2: 1f:f0:f2:cc:db:f8:63:55:85:94:ee:a0:10:18:80: b5:49:3f:7e:99:4b:9b:e2:9b:6a:97:23:ca:4b:29: fe:b6:b2:d4:3d:26:c0:31:0e:5b:86:01:3e:5c:90: c7:8d:f2:cb:40:c2:6f:43:35:40:71:3d:c2:6d:b7: 95:5b:44:0f:d4:1c:66:a0:97:57:2c:18:50:39:01: 8b:1f:86:08:49:94:d8:86:f6:29:02:e5:2f:28:d3: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E9:E0:E7:D9:74:DB:58:2D:2E:99:E3:99:69:EF:87:66:A1:D5:37 X509v3 Authority Key Identifier: keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:47:8e:f3:4b:74:56:20:1a:24:f4:51:44:d2:2b:4f:76:b1: a7:43:1c:c0:36:05:0d:f8:90:6a:65:d4:68:7d:d1:8a:27:0c: 23:62:36:2c:d9:10:3d:52:95:be:0b:21:d1:e6:c0:32:37:6a: f8:81:4c:06:92:fc:e5:5d:d8:0a:bb:a9:b4:37:c0:d4:a0:ad: 8f:ec:1b:4b:0b:43:71:d6:6d:7c:16:2f:93:a3:18:37:7f:d5: c0:91:b7:e5:9c:bf:15:7d:2a:98:98:72:af:ea:90:21:d6:b4: 26:30:a2:26:2f:87:87:79:f2:20:ef:0e:7f:f3:da:55:09:39: 6f:ea:95:fe:86:aa:9e:3d:58:66:16:6e:22:d2:2f:33:93:b2: 44:6c:61:ca:80:4c:bf:bc:97:cc:d7:65:0b:c9:14:31:13:79: d0:7e:06:80:1c:36:8f:28:8c:20:38:90:6c:c6:59:ef:5a:40: 02:7f:fd:70:1b:d8:59:29:2a:f3:2b:8f:c8:a8:d0:75:61:66: 63:d8:b5:50:a5:a7:85:fe:d0:99:a6:66:e9:ce:21:18:6e:ee: 50:41:6b:8d:a9:46:4e:1f:61:66:c8:dc:f5:8f:6f:fd:c1:7a: e7:9d:8e:da:cf:70:d3:27:59:49:1a:64:58:bf:f8:41:68:3a: 84:3c:19:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvdVQM/04FULIuQwzTcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTI0NTRjMTY2OTY0ODZjZjA3MWVkMThlNzk3NmUzNDA0 OTA5ZmIwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EygxMWU5ZTBlN2Q5NzRkYjU4MmQyZTk5ZTM5OTY5ZWY4NzY2YTFkNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5NvSIZmsJiO7p2dxGlKIzm2gcu4 rvP81zUX7pRVDZp7ZJYwZMRkN1eaQOv0Jcdus8t/psYQT/utV6tUw4cIn0oXglJ6 1ks1uoJtElR0xXdD7+7n2wohDaaSxgv+CO4RMGXSLct1vUDjIe9LrBea8CwvlKUR MGkr0GqWbpJ9v31GYaQyQiANXp+rj7ABXjwUG6gTYJl/bdMzW0GXS1gcobHNyOIf 8PLM2/hjVYWU7qAQGIC1ST9+mUub4ptqlyPKSyn+trLUPSbAMQ5bhgE+XJDHjfLL QMJvQzVAcT3CbbeVW0QP1BxmoJdXLBhQOQGLH4YISZTYhvYpAuUvKNPx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHp4OfZdNtYLS6Z45lp74dmodU3MB8GA1UdIwQY MBaAFLaSRUwWaWSGzwce0Y55duNASQn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYt NGE2ZjcxN2M3NTY0LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYtNGE2ZjcxN2M3NTY0 LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUeO80t0 ViAaJPRRRNIrT3axp0McwDYFDfiQamXUaH3RiicMI2I2LNkQPVKVvgsh0ebAMjdq +IFMBpL85V3YCruptDfA1KCtj+wbSwtDcdZtfBYvk6MYN3/VwJG35Zy/FX0qmJhy r+qQIda0JjCiJi+Hh3nyIO8Of/PaVQk5b+qV/oaqnj1YZhZuItIvM5OyRGxhyoBM v7yXzNdlC8kUMRN50H4GgBw2jyiMIDiQbMZZ71pAAn/9cBvYWSkq8yuPyKjQdWFm Y9i1UKWnhf7QmaZm6c4hGG7uUEFrjalGTh9hZsjc9Y9v/cF6552O2s9w0ydZSRpk WL/4QWg6hDwZ1g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:24 2025 by rpki-client