This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json) Hash identifier: JrM8trXg0zdUgJ0ZG5n6PDr5S0loQGYq6fyXuB3Oixc= Subject key identifier: C3:C3:84:EB:CA:93:1F:5D:25:8E:0A:FD:E5:1D:DF:E0:B1:4C:E6:6B Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75 Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75 Certificate serial: 019AF38946507780E98922366D2318164164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft Manifest number: 0AEA Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (hash: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=) 2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: WqaFn7CoXqWD3Ega6bZPji1hwxJyYkxsjk52G/vg+qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:46:50:77:80:e9:89:22:36:6d:23:18:16:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=c3c384ebca931f5d258e0afde51ddfe0b14ce66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:1a:e7:45:49:4e:e7:b4:6d:75:6b:82:8e: 55:d8:b5:1a:ef:bf:12:eb:d9:aa:ac:5d:0e:93:7f: 49:3e:72:03:ff:08:29:63:b0:b4:2b:4b:bb:fa:0d: 14:3e:a5:66:e2:ba:63:e4:c6:b5:51:6c:ff:2c:2d: 4c:60:6b:27:04:67:2a:40:8a:5f:c6:52:40:e1:00: 48:1b:9d:fd:86:86:e1:8d:ea:41:e9:69:2b:1b:7e: af:fe:27:45:69:1b:9c:0c:ed:26:ac:59:f7:ef:b3: f0:b2:69:e5:5f:2a:d4:e7:4b:82:57:0e:ee:6a:72: 2c:5a:37:dd:64:0a:13:ce:f3:41:7a:d6:f7:3d:52: 91:2f:56:62:83:72:67:ba:e8:54:28:ce:8e:46:ee: 93:e1:c0:b9:76:38:c3:d2:91:f2:0c:ba:24:9e:01: 09:8b:44:e8:c7:b2:b5:98:48:7f:ad:72:90:21:c7: c1:4d:40:83:ca:88:60:34:2b:56:b1:ba:5f:7c:ae: 3f:f3:b4:31:c1:f2:fb:b4:e9:e4:d6:bd:37:89:52: 20:c3:59:30:d0:35:6c:83:71:53:1b:7e:4c:e3:b4: 09:0f:0f:a3:ea:33:52:a0:e3:54:8d:5f:e8:0d:66: 6b:b7:03:53:08:b8:f6:79:3e:99:57:20:4d:bc:3d: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C3:84:EB:CA:93:1F:5D:25:8E:0A:FD:E5:1D:DF:E0:B1:4C:E6:6B X509v3 Authority Key Identifier: keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8e:4f:83:ac:ae:db:6a:46:9f:89:4b:87:68:cd:8b:9f:c8: 17:23:ea:74:04:ca:63:7b:f0:a2:72:50:a6:a3:9e:f5:22:ad: 01:7c:67:cf:66:2c:66:0e:17:5b:97:89:97:ea:fc:8e:cc:54: b3:e2:37:18:bb:0f:0b:14:f4:47:48:c7:d4:df:07:23:58:73: 41:0f:9f:c3:54:1b:e8:d8:7c:d2:24:45:82:7a:cd:a1:17:d1: 6e:bf:28:1a:28:a4:d2:a1:57:84:10:43:14:15:96:58:3a:aa: 96:97:9a:0f:8e:5b:33:40:f3:46:97:bc:53:cc:0f:fd:ee:b1: 72:0b:b9:40:d6:82:e5:98:66:43:2f:c8:a3:5e:d1:5b:07:61: 38:43:5c:f1:1d:c4:63:3f:ad:73:62:c4:a8:90:0a:ce:00:dd: 42:22:19:f7:c7:36:23:37:cf:06:8e:c3:32:b2:e2:bf:7e:43: ed:0e:c9:73:e6:d8:00:e5:7a:0f:1d:1d:6c:99:a0:e9:63:f9: a3:05:e6:54:09:b6:f8:09:55:be:c7:e0:3f:97:30:3a:1c:89: ca:e7:86:62:eb:2e:07:95:e3:4f:65:38:4f:6f:1a:b0:50:7c: 76:9a:f5:8b:d6:f2:46:f8:69:91:5b:b6:5a:0b:f3:1c:81:31: e2:18:64:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUZQd4DpiSI2bSMYFkFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY0ZDEwOGFjMTg0YmQxYjUzMmZmODhmYzY2NDRhZGUx NmRhNzUwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhjM2MzODRlYmNhOTMxZjVkMjU4ZTBhZmRlNTFkZGZlMGIxNGNlNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkMa50VJTue0bXVrgo5V2LUa778S 69mqrF0Ok39JPnID/wgpY7C0K0u7+g0UPqVm4rpj5Ma1UWz/LC1MYGsnBGcqQIpf xlJA4QBIG539hobhjepB6WkrG36v/idFaRucDO0mrFn377PwsmnlXyrU50uCVw7u anIsWjfdZAoTzvNBetb3PVKRL1Zig3JnuuhUKM6ORu6T4cC5djjD0pHyDLokngEJ i0Tox7K1mEh/rXKQIcfBTUCDyohgNCtWsbpffK4/87QxwfL7tOnk1r03iVIgw1kw 0DVsg3FTG35M47QJDw+j6jNSoONUjV/oDWZrtwNTCLj2eT6ZVyBNvD3WowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPDhOvKkx9dJY4K/eUd3+CxTOZrMB8GA1UdIwQY MBaAFE0vTRCKwYS9G1Mv+I/GZEreFtp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81OWJjMGMtMTRmNC00YmM0LTgwZTQt YjYzMDg1M2U5NDkzLzEvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81OWJjMGMtMTRmNC00YmM0LTgwZTQtYjYzMDg1M2U5NDkz LzEvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY5Pg6yu 22pGn4lLh2jNi5/IFyPqdATKY3vwonJQpqOe9SKtAXxnz2YsZg4XW5eJl+r8jsxU s+I3GLsPCxT0R0jH1N8HI1hzQQ+fw1Qb6Nh80iRFgnrNoRfRbr8oGiik0qFXhBBD FBWWWDqqlpeaD45bM0DzRpe8U8wP/e6xcgu5QNaC5ZhmQy/Io17RWwdhOENc8R3E Yz+tc2LEqJAKzgDdQiIZ98c2IzfPBo7DMrLiv35D7Q7Jc+bYAOV6Dx0dbJmg6WP5 owXmVAm2+AlVvsfgP5cwOhyJyueGYusuB5XjT2U4T28asFB8dpr1i9byRvhpkVu2 WgvzHIEx4hhksw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:29 2025 by rpki-client