This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json) Hash identifier: MW9VeID+TNHFhzo0HUZTTCZ0iUJv3syX4UZjh0/S7bc= Subject key identifier: 92:2B:8A:93:99:76:F3:5A:5B:D3:A0:A7:DF:B1:F0:20:3E:3E:2C:06 Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95 Certificate serial: 019AF23FC6113E5B21FAD7C7471B37D6673E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=) 2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: tfZPIUpW10vYVTllR90CkOyMnKrN2iKcvUW3Rr+veuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c6:11:3e:5b:21:fa:d7:c7:47:1b:37:d6:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=922b8a939976f35a5bd3a0a7dfb1f0203e3e2c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:83:57:64:58:a3:19:8f:67:c6:b2:ae:6b: 18:bc:79:e7:03:34:a5:47:b3:17:29:c6:91:1a:d8: 23:2a:82:02:8c:d2:82:dd:a8:e5:67:c5:f7:c3:34: b2:bf:d3:fe:92:83:a7:8c:b9:db:db:cb:65:1f:dd: 07:40:c7:58:08:7a:43:26:fb:1c:d4:4a:b9:5a:ee: 80:a5:bc:76:01:23:89:8b:f4:f4:5f:41:0d:f4:a5: 39:ea:13:65:05:2f:61:08:24:e8:10:46:f4:ac:91: e2:37:34:55:81:dc:f6:2c:d6:8f:cb:2f:56:fe:bd: fc:e1:77:d3:c4:f8:eb:cc:07:38:23:25:42:30:70: b1:56:81:d1:63:7e:5e:ef:52:97:0e:83:25:18:1f: 71:84:11:ac:c5:89:f1:58:a2:89:79:54:93:23:b4: d0:78:fb:4c:75:68:af:9e:6a:40:cb:bf:23:9a:ff: 3a:39:2b:aa:5d:7a:34:6f:46:be:c0:7b:ba:a3:bf: b3:fd:ce:80:45:96:cb:0f:aa:39:e1:47:85:ad:54: 23:44:6b:67:61:67:b4:6d:6c:0c:00:21:ed:73:87: 41:34:62:ab:91:ef:e4:ce:41:87:a9:6d:00:75:b5: 42:3b:b6:e6:70:15:55:7b:ea:78:27:f2:2e:32:21: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:8A:93:99:76:F3:5A:5B:D3:A0:A7:DF:B1:F0:20:3E:3E:2C:06 X509v3 Authority Key Identifier: keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8b:f8:c5:47:f7:57:9d:2b:d4:8a:17:c9:83:44:33:10:9a: 9c:a5:98:0e:d2:ce:2a:e3:05:6f:9e:a3:37:7c:33:28:ef:13: 38:a8:e0:0f:6f:66:09:05:ab:10:9b:e8:a7:59:ab:8f:81:53: 3d:07:cb:47:e6:cd:c8:a3:d4:b2:97:59:e4:ad:bc:ec:cf:8a: d4:92:00:c5:47:9c:35:f0:82:3f:4d:a7:67:a8:f1:b5:14:2a: 74:96:6e:1d:22:0b:17:78:0e:9e:d8:38:02:cc:34:54:cd:f3: ac:81:d2:c7:69:e8:44:0e:37:39:cb:ea:40:3d:03:a1:78:89: c4:f2:4b:c6:48:be:15:07:ee:48:f3:68:58:dc:41:bf:20:5c: 60:ce:66:96:db:95:3a:48:5f:29:28:d1:0b:21:46:f4:b0:24: a2:1b:2b:84:41:a5:01:2c:65:a3:0f:09:f6:71:dc:91:a9:fc: 74:99:fc:4a:dc:4d:f1:1e:e6:1e:1d:00:fe:3c:8e:e0:df:37: 6a:b7:7d:d4:ca:3d:61:4b:ea:6b:1d:de:97:ba:2e:62:b7:c3: 76:66:30:2e:65:5b:de:5f:a9:e2:59:39:f0:9a:08:49:f3:d6: 9b:68:50:f3:49:b1:a5:34:88:81:6e:c2:42:7b:4c:ed:0a:47: be:2d:41:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8YRPlsh+tfHRxs31mc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2IwYTQ1ZjA2MGUxMGVjY2YxMjZiNmY2Njc1ODliODAz MjhjOTUwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg5MjJiOGE5Mzk5NzZmMzVhNWJkM2EwYTdkZmIxZjAyMDNlM2UyYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZyDV2RYoxmPZ8ayrmsYvHnnAzSl R7MXKcaRGtgjKoICjNKC3ajlZ8X3wzSyv9P+koOnjLnb28tlH90HQMdYCHpDJvsc 1Eq5Wu6Apbx2ASOJi/T0X0EN9KU56hNlBS9hCCToEEb0rJHiNzRVgdz2LNaPyy9W /r384XfTxPjrzAc4IyVCMHCxVoHRY35e71KXDoMlGB9xhBGsxYnxWKKJeVSTI7TQ ePtMdWivnmpAy78jmv86OSuqXXo0b0a+wHu6o7+z/c6ARZbLD6o54UeFrVQjRGtn YWe0bWwMACHtc4dBNGKrke/kzkGHqW0AdbVCO7bmcBVVe+p4J/IuMiEBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIripOZdvNaW9Ogp9+x8CA+PiwGMB8GA1UdIwQY MBaAFLU7CkXwYOEOzPEmtvZnWJuAMoyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEt ODE4Mzc1MTgxM2Q5LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEtODE4Mzc1MTgxM2Q5 LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYv4xUf3 V50r1IoXyYNEMxCanKWYDtLOKuMFb56jN3wzKO8TOKjgD29mCQWrEJvop1mrj4FT PQfLR+bNyKPUspdZ5K287M+K1JIAxUecNfCCP02nZ6jxtRQqdJZuHSILF3gOntg4 Asw0VM3zrIHSx2noRA43OcvqQD0DoXiJxPJLxki+FQfuSPNoWNxBvyBcYM5mltuV OkhfKSjRCyFG9LAkohsrhEGlASxlow8J9nHckan8dJn8StxN8R7mHh0A/jyO4N83 ard91Mo9YUvqax3el7ouYrfDdmYwLmVb3l+p4lk58JoISfPWm2hQ80mxpTSIgW7C QntM7QpHvi1BnA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:18 2025 by rpki-client