This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json) Hash identifier: VxZUlpgdsrGmD4Uvtmuceqobw6R9CwmDIIFj5sHDQHA= Subject key identifier: A6:7B:56:51:66:61:32:62:90:B1:B0:D7:A0:85:2B:62:B1:93:83:AE Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35 Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35 Certificate serial: 019AF12D3CF24C402F9EC848A99C7649F683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft Manifest number: 162C Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=) 2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: JgUNxReu3j9w+SVYvCFy4ItV+f6XHwX7OPvPbwaLCFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3c:f2:4c:40:2f:9e:c8:48:a9:9c:76:49:f6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=a67b56516661326290b1b0d7a0852b62b19383ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:df:34:8d:89:b6:ef:c4:cc:14:29:96:3b: 62:a5:17:60:47:8a:17:c2:7a:be:37:f1:2b:f0:50: 8f:85:7f:46:50:9f:09:c2:ea:83:36:45:d8:13:aa: 3c:cb:1a:6d:2f:ef:4d:4f:b7:a4:48:f1:44:39:c7: c7:7f:6c:81:df:25:ed:9d:e1:3f:3c:49:68:56:32: 44:2d:b9:fd:b0:16:44:10:65:f4:3c:0d:23:e7:92: 48:ef:98:43:d6:dc:e0:bf:01:57:72:d9:ab:27:06: 15:e6:c4:4d:6d:b3:30:3a:04:0e:8b:5b:47:b5:c9: be:9b:3c:e1:2d:0a:95:54:35:67:de:26:a5:10:6a: b7:d2:dc:ff:cf:00:15:43:e0:45:c3:b9:58:26:e6: bf:11:87:8b:02:d1:45:69:1b:72:fb:86:7c:fe:3f: e2:74:f4:c9:a3:c1:df:62:46:e2:50:4b:34:db:5a: 2f:4c:33:90:a5:1b:41:d5:bd:63:e7:1c:a7:59:96: 35:89:bd:5f:13:0d:7c:c9:95:d9:73:56:cf:69:05: 74:4b:97:3f:34:41:29:21:e8:50:d9:13:04:e5:c7: 9a:12:48:35:3e:67:a2:9d:b4:8c:34:09:e2:ad:bb: fc:85:e5:12:74:02:d5:fc:cc:5e:06:cc:3f:50:7e: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:56:51:66:61:32:62:90:B1:B0:D7:A0:85:2B:62:B1:93:83:AE X509v3 Authority Key Identifier: keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2a:af:ab:26:f7:88:01:08:48:e5:ff:7d:e3:d1:08:81:cc: 10:b9:72:98:4e:8d:55:06:5f:00:47:54:81:e9:a2:4d:20:3d: e9:f4:80:fb:9a:ef:79:52:c4:09:2e:5c:d6:7f:09:d3:5c:a6: 35:e7:ec:41:62:a6:a5:05:88:90:fb:e7:70:eb:10:88:1a:06: 04:07:84:76:7d:02:8e:eb:f2:71:29:a2:b1:01:fd:73:03:9e: 2c:c8:e9:35:8b:7f:5b:b1:b4:1c:53:9d:90:d4:32:af:43:6a: 2a:c9:7c:4b:f0:0e:22:ef:1a:f7:b3:79:37:ed:60:69:25:d8: d0:67:b7:0e:b8:59:3d:2f:32:f0:ce:a6:b7:f9:9a:d7:aa:0b: a2:1b:11:f9:39:10:fa:85:0c:de:52:36:5c:9f:e2:c8:7a:8b: 33:cd:71:ab:5f:9f:9f:59:5f:7b:79:0c:f5:4c:03:0a:b2:55: 8a:8a:77:07:6e:74:0d:5e:df:e1:5b:5c:75:eb:77:69:79:e9: cf:2e:c3:9f:19:18:b9:3b:b3:9a:65:f0:fe:5f:62:a4:1b:bf: 7b:cf:d2:a9:24:66:2c:49:09:d7:1d:f5:f7:f3:30:92:a0:0c: 85:ae:50:f1:54:22:b3:63:98:b8:35:0c:a5:15:d7:50:33:24: 1d:72:bb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTzyTEAvnshIqZx2SfaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OWJlNmVlNTQ5ZjMzNWM3Mjg0OTdhNzlmMTQ0MTAzNGU4 NTJjMzUwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EyhhNjdiNTY1MTY2NjEzMjYyOTBiMWIwZDdhMDg1MmI2MmIxOTM4M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vffNI2Jtu/EzBQpljtipRdgR4oX wnq+N/Er8FCPhX9GUJ8JwuqDNkXYE6o8yxptL+9NT7ekSPFEOcfHf2yB3yXtneE/ PEloVjJELbn9sBZEEGX0PA0j55JI75hD1tzgvwFXctmrJwYV5sRNbbMwOgQOi1tH tcm+mzzhLQqVVDVn3ialEGq30tz/zwAVQ+BFw7lYJua/EYeLAtFFaRty+4Z8/j/i dPTJo8HfYkbiUEs021ovTDOQpRtB1b1j5xynWZY1ib1fEw18yZXZc1bPaQV0S5c/ NEEpIehQ2RME5ceaEkg1PmeinbSMNAnirbv8heUSdALV/MxeBsw/UH6TZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ7VlFmYTJikLGw16CFK2Kxk4OuMB8GA1UdIwQY MBaAFLWb5u5UnzNccoSXp58UQQNOhSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTct ZjNjODg3MjgxZWJhLzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTctZjNjODg3MjgxZWJh LzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyqvqyb3 iAEISOX/fePRCIHMELlymE6NVQZfAEdUgemiTSA96fSA+5rveVLECS5c1n8J01ym NefsQWKmpQWIkPvncOsQiBoGBAeEdn0CjuvycSmisQH9cwOeLMjpNYt/W7G0HFOd kNQyr0NqKsl8S/AOIu8a97N5N+1gaSXY0Ge3DrhZPS8y8M6mt/ma16oLohsR+TkQ +oUM3lI2XJ/iyHqLM81xq1+fn1lfe3kM9UwDCrJViop3B250DV7f4Vtcdet3aXnp zy7DnxkYuTuzmmXw/l9ipBu/e8/SqSRmLEkJ1x319/MwkqAMha5Q8VQis2OYuDUM pRXXUDMkHXK7rA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:42 2025 by rpki-client