This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json) Hash identifier: QJg4GrxDBsQDONHf/NBfPA9R4lH6i8xw77FiHc+gB2Y= Subject key identifier: 7D:6C:25:E8:8D:51:34:B5:81:C8:47:F4:D3:CF:4A:73:16:78:7F:89 Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Certificate serial: 019AF0BF95B06C29DF10C9E4288EDB13A172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft Manifest number: 06 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=) 2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: 6qCLUMAIV/j820tJIOwtz5+OI+GtThkJzQ5gIce4I3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:95:b0:6c:29:df:10:c9:e4:28:8e:db:13:a1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=7d6c25e88d5134b581c847f4d3cf4a7316787f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:fd:07:de:46:7b:a8:e6:40:89:3f:76:51: 73:18:a7:95:29:3a:35:20:7d:43:6c:c8:7f:9f:89: 59:52:28:c5:cd:4b:c1:d6:76:88:d7:20:bf:96:90: 0a:02:90:fe:07:bf:ca:de:99:32:18:ee:13:76:83: 98:bb:50:7d:af:ba:60:a3:8e:b1:25:ad:d1:11:44: a4:aa:c9:1e:e7:ee:99:1a:23:ad:3a:25:e5:d8:54: 24:2c:b7:8a:10:27:22:57:f6:df:5e:8a:01:86:b2: 15:16:25:ca:04:24:ab:22:2c:14:66:1f:87:5a:9f: 33:c8:bd:50:cb:bf:8a:c8:df:da:f1:17:5e:6f:3e: e2:ae:1a:62:71:9a:2c:5c:92:8d:95:e1:fb:69:89: 33:fb:e3:29:11:8f:ab:70:92:95:ac:de:69:a6:3a: 44:6f:54:5a:bf:40:98:e9:7a:a1:d7:00:e0:e1:f6: 6e:7e:6d:a2:b9:05:88:f8:cd:fa:64:01:6b:ce:19: e5:51:e3:29:e3:97:b8:69:a3:c6:6b:21:cf:73:09: c9:f2:ae:9f:4f:69:86:1d:42:53:2e:f3:aa:3d:4d: 0f:ce:fc:9f:fb:fc:a0:bf:d6:02:58:2a:c3:37:cf: a9:38:db:32:4a:41:b8:d8:61:d7:a2:05:dc:b4:09: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:25:E8:8D:51:34:B5:81:C8:47:F4:D3:CF:4A:73:16:78:7F:89 X509v3 Authority Key Identifier: keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:61:65:c6:b4:ac:c2:ed:72:23:93:fb:bc:22:06:e2:06:b0: 67:35:b8:ee:6d:00:9e:b5:20:52:cc:14:ba:57:af:af:9d:2c: 7a:de:8a:7e:fd:04:25:f2:cc:fe:7f:c4:d4:91:1e:f6:2a:74: 54:c9:51:9d:42:73:85:ed:75:a9:bc:f9:6f:8e:74:2e:2a:b8: d1:5f:21:11:40:28:0e:92:a2:2f:fd:bd:06:46:2b:13:de:1a: 8c:d5:e0:82:ca:3f:8c:72:43:3d:4e:d6:2d:3b:2f:06:cb:18: b6:bd:91:f3:da:43:58:4d:a0:b6:78:96:1d:55:c2:b6:c6:e1: 48:ed:ff:b9:8b:14:2f:f3:1e:67:d3:01:12:6c:6c:ed:8e:32: 20:19:91:1b:fe:ff:17:f2:c9:22:5f:da:ac:35:16:27:6a:e1: 38:15:7e:f5:b2:03:eb:c2:9c:ae:8f:66:11:2c:4d:94:45:ff: e4:84:5f:de:98:c3:f7:4a:24:4e:3a:96:3d:61:64:14:17:87: 1c:64:7d:9d:c4:a5:ca:a9:06:5b:66:05:b1:b0:41:e5:27:0c: 1d:8d:ee:d5:93:88:9f:5d:5c:26:ff:a7:de:1b:21:53:7c:a6: 7a:d7:3e:3d:25:57:5d:2d:c2:5d:e4:09:88:bf:e1:21:40:27: 79:0e:d5:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5WwbCnfEMnkKI7bE6FyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzAwZGQ2YjEzOGQ2YWRiOGY3Yzg0MzhkZDBiMmQ4NTgz ZGM1NjYwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD Eyg3ZDZjMjVlODhkNTEzNGI1ODFjODQ3ZjRkM2NmNGE3MzE2Nzg3Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIL9B95Ge6jmQIk/dlFzGKeVKTo1 IH1DbMh/n4lZUijFzUvB1naI1yC/lpAKApD+B7/K3pkyGO4TdoOYu1B9r7pgo46x Ja3REUSkqske5+6ZGiOtOiXl2FQkLLeKECciV/bfXooBhrIVFiXKBCSrIiwUZh+H Wp8zyL1Qy7+KyN/a8Rdebz7irhpicZosXJKNleH7aYkz++MpEY+rcJKVrN5ppjpE b1Rav0CY6Xqh1wDg4fZufm2iuQWI+M36ZAFrzhnlUeMp45e4aaPGayHPcwnJ8q6f T2mGHUJTLvOqPU0Pzvyf+/ygv9YCWCrDN8+pONsySkG42GHXogXctAmJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1sJeiNUTS1gchH9NPPSnMWeH+JMB8GA1UdIwQY MBaAFLbADdaxONatuPfIQ43QsthYPcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUt NTY0ZDE4YzY4NjJiLzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUtNTY0ZDE4YzY4NjJi LzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1WFlxrSs wu1yI5P7vCIG4gawZzW47m0AnrUgUswUulevr50set6Kfv0EJfLM/n/E1JEe9ip0 VMlRnUJzhe11qbz5b450Liq40V8hEUAoDpKiL/29BkYrE94ajNXggso/jHJDPU7W LTsvBssYtr2R89pDWE2gtniWHVXCtsbhSO3/uYsUL/MeZ9MBEmxs7Y4yIBmRG/7/ F/LJIl/arDUWJ2rhOBV+9bID68Kcro9mESxNlEX/5IRf3pjD90okTjqWPWFkFBeH HGR9ncSlyqkGW2YFsbBB5ScMHY3u1ZOIn11cJv+n3hshU3ymetc+PSVXXS3CXeQJ iL/hIUAneQ7Vkw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:53 2025 by rpki-client