This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json) Hash identifier: tLVM5eSd8qCEs14KSOqB6IP+hTPdx1xYOiY9tY1pki0= Subject key identifier: 76:36:0C:B0:87:88:6B:2B:CA:A5:AC:53:B3:20:BC:E7:1F:13:27:BF Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Certificate serial: 019AF2ADD3355CB0E5D35325256C2CF71DBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=) 2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: 86IxtKPGz63QdicVso5ZC/fcB6F0U5PKk4zeTM+XEko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d3:35:5c:b0:e5:d3:53:25:25:6c:2c:f7:1d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=76360cb087886b2bcaa5ac53b320bce71f1327bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:07:29:63:6e:3d:ca:7e:9e:de:36:62:09: 0e:5b:39:0e:72:c9:49:16:a6:5c:5f:b7:2d:d0:6a: 35:6f:62:aa:68:5d:11:cf:b0:ca:b8:ad:79:d8:5d: 2e:9d:3c:ab:49:25:a6:10:da:8e:29:99:7a:2c:9c: 77:fc:49:e4:31:da:7e:9a:9f:61:53:dd:8e:ce:c1: 3c:d6:e7:6b:3c:7e:99:f9:e4:dc:d5:42:1c:a5:47: 6b:aa:66:2b:40:5b:69:6a:ba:d3:c2:b1:2e:72:e1: 7c:08:b7:70:d6:3c:27:18:26:e0:87:e2:42:9d:7d: b4:b4:e7:10:ec:f5:e3:e8:01:f2:8e:6e:d0:6a:aa: 9a:a6:53:04:02:74:cb:aa:40:b8:58:66:02:66:9f: a2:df:3c:d8:84:bd:3c:14:46:59:0b:89:3a:fe:39: a3:30:bf:cc:96:88:8e:71:e4:02:1f:f8:46:b8:df: 7b:88:99:38:c8:26:7f:d2:68:8c:d7:fb:52:9d:41: c5:1f:14:b7:21:34:7c:8d:18:87:96:7d:6c:1f:06: 98:b1:0c:ca:2f:e9:4c:36:b9:78:35:c4:88:f4:cc: 22:a4:20:c8:34:c2:34:61:30:ed:be:cb:35:c9:94: 77:f7:e4:49:27:f4:4f:e6:f3:21:a0:9a:92:15:f2: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:0C:B0:87:88:6B:2B:CA:A5:AC:53:B3:20:BC:E7:1F:13:27:BF X509v3 Authority Key Identifier: keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5b:81:53:71:78:fc:14:bb:9e:c4:5d:4b:c1:e0:f4:17:49: 33:a1:af:a3:03:1f:27:0c:ed:27:0e:43:f3:39:06:d4:f1:60: 6c:0a:d3:c0:18:c9:66:60:63:84:ac:82:7d:61:4d:3e:a9:1d: df:f3:46:86:e9:a3:3c:f4:42:d9:30:7f:69:7a:36:02:84:9f: 98:e2:01:16:b7:a7:92:55:0e:88:52:f0:d3:3b:71:8e:9f:39: 48:ff:d9:df:cc:ca:c6:80:55:ef:96:96:ac:54:ea:cb:36:37: ce:e7:32:5a:05:67:74:1f:73:d1:4a:3f:ab:0a:49:81:04:30: 02:1a:f3:95:9b:ab:e1:7a:97:6a:72:f1:1f:19:60:73:65:9d: 09:b4:70:71:19:cf:a5:88:c3:28:41:ba:c5:f4:1a:02:03:bb: 22:fd:89:42:70:2c:cc:89:89:4f:42:c9:bd:cd:d5:44:a9:7b: 63:b9:df:5d:36:21:a3:d8:c8:b9:77:51:01:2a:d5:c0:e7:58: b6:79:16:00:2c:44:68:0e:6a:1a:cd:42:50:35:c8:64:2f:6c: 2f:c6:79:e4:cb:39:28:b4:58:fd:33:ac:32:61:b3:41:86:ee: 13:2d:12:62:4e:37:8e:72:bf:53:3b:37:7b:17:07:ad:7e:09: 35:25:1b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdM1XLDl01MlJWws9x28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1 YjU3NGIwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD Eyg3NjM2MGNiMDg3ODg2YjJiY2FhNWFjNTNiMzIwYmNlNzFmMTMyN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C0HKWNuPcp+nt42YgkOWzkOcslJ FqZcX7ct0Go1b2KqaF0Rz7DKuK152F0unTyrSSWmENqOKZl6LJx3/EnkMdp+mp9h U92OzsE81udrPH6Z+eTc1UIcpUdrqmYrQFtparrTwrEucuF8CLdw1jwnGCbgh+JC nX20tOcQ7PXj6AHyjm7QaqqaplMEAnTLqkC4WGYCZp+i3zzYhL08FEZZC4k6/jmj ML/MloiOceQCH/hGuN97iJk4yCZ/0miM1/tSnUHFHxS3ITR8jRiHln1sHwaYsQzK L+lMNrl4NcSI9MwipCDINMI0YTDtvss1yZR39+RJJ/RP5vMhoJqSFfI2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY2DLCHiGsryqWsU7MgvOcfEye/MB8GA1UdIwQY MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt MDU5OWYwYjJiMDlhLzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1uBU3F4 /BS7nsRdS8Hg9BdJM6GvowMfJwztJw5D8zkG1PFgbArTwBjJZmBjhKyCfWFNPqkd 3/NGhumjPPRC2TB/aXo2AoSfmOIBFrenklUOiFLw0ztxjp85SP/Z38zKxoBV75aW rFTqyzY3zucyWgVndB9z0Uo/qwpJgQQwAhrzlZur4XqXanLxHxlgc2WdCbRwcRnP pYjDKEG6xfQaAgO7Iv2JQnAszImJT0LJvc3VRKl7Y7nfXTYho9jIuXdRASrVwOdY tnkWACxEaA5qGs1CUDXIZC9sL8Z55Ms5KLRY/TOsMmGzQYbuEy0SYk43jnK/Uzs3 excHrX4JNSUb6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:17 2025 by rpki-client