This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json) Hash identifier: dN3lDjKLMSQhkUYvNriHyxZ/kf4n8axzLx1esLOmmF4= Subject key identifier: FA:6F:E1:CA:39:87:00:64:9A:C6:A8:53:99:EB:F7:D1:35:7D:54:6E Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58 Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658 Certificate serial: 019AF31C99C12B1252F7A9F6B69AAD850393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft Manifest number: 05F6 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=) 2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: Cl3T17S34jD43OB9cSvYzng1Hxnw7rjvC7VDFpmaL+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:99:c1:2b:12:52:f7:a9:f6:b6:9a:ad:85:03:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=fa6fe1ca398700649ac6a85399ebf7d1357d546e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:4b:45:9a:99:8c:14:8c:b7:13:8f:3b:90: e7:61:c5:d8:1f:b0:c1:cd:38:45:c4:e5:e6:ef:e6: b8:47:fd:34:67:3a:36:13:10:04:3c:41:90:f7:50: 17:55:05:60:85:54:d8:c1:6c:b2:ad:a3:e2:f8:da: 7a:ef:69:12:c8:f2:db:77:55:3a:55:c8:ae:27:1a: b8:9a:f5:89:4f:31:59:5b:b9:66:1a:c2:20:06:dd: 4e:4a:17:51:ca:f1:3a:1b:de:26:12:03:14:0f:ca: 73:8b:5f:62:f3:95:eb:44:d5:c3:ee:7a:59:c3:2e: 7a:f3:5a:3d:0b:4c:26:a0:c3:83:42:5e:69:99:82: c8:f9:11:04:44:c0:ad:9d:ec:7a:05:f0:5b:d5:15: 44:c1:10:18:9c:4a:b3:7b:44:85:ca:29:2b:f0:98: 5a:e3:e3:df:61:98:5f:aa:c7:0d:e8:fa:9d:2c:ed: d6:17:ad:22:27:04:fe:1a:66:d6:e9:23:c2:7f:10: d3:5e:de:1a:e3:76:ab:e5:74:3d:06:14:94:72:7f: 7f:2e:97:f4:23:a5:99:25:0d:45:39:ba:9f:38:c6: 8f:49:36:8d:9f:29:06:fe:71:44:a4:19:43:b1:4e: 67:5c:16:4a:b1:96:e0:60:99:76:5b:0d:b5:02:57: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6F:E1:CA:39:87:00:64:9A:C6:A8:53:99:EB:F7:D1:35:7D:54:6E X509v3 Authority Key Identifier: keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:aa:a6:76:c7:0c:68:1e:80:56:73:bd:aa:23:5e:c3:3f: 63:d1:b7:5d:c6:d8:a5:1a:0c:6e:64:83:fa:59:ca:fc:4a:7e: 31:04:3b:e2:c6:bb:e9:bf:b2:9d:f4:56:c4:b8:7f:72:2c:2a: 07:f7:c8:6c:df:47:ed:e0:97:2a:b3:41:e6:8c:4b:36:bb:72: 40:55:33:21:e6:6e:24:ab:cc:f5:85:34:4f:67:d0:60:8d:76: ca:d7:1f:95:8f:50:a1:bc:82:57:73:57:5a:9f:ce:8b:08:49: 95:10:aa:88:a9:63:da:78:24:2d:01:0b:93:08:3e:12:e1:d3: 82:41:fb:39:f9:97:10:62:91:d8:db:33:5f:97:4b:66:ae:3b: 8d:25:9c:0a:e1:dc:a2:b5:25:a5:0b:31:1e:ce:fa:96:07:e7: 38:4e:fd:ac:da:f7:95:fc:86:ff:ff:31:95:a8:85:e7:30:a1: d2:f9:c8:1c:26:41:69:8e:9c:24:b0:90:d9:9d:0a:c2:91:40: 9f:39:a9:ae:25:a5:88:ca:ef:b6:b8:3a:15:24:99:26:20:55: e0:dd:94:c2:40:cd:13:0a:ad:7d:a9:f8:ff:5a:fb:41:1c:80: fe:0c:e4:1d:06:4f:c8:c6:f6:5e:81:b7:78:7c:6f:32:09:8d: 60:ee:8e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJnBKxJS96n2tpqthQOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWJjOTdiOTgyNzZlYjNiYWJkOWU3YWE2N2UyNzA1YWUx MWU2NTgwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EyhmYTZmZTFjYTM5ODcwMDY0OWFjNmE4NTM5OWViZjdkMTM1N2Q1NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFVLRZqZjBSMtxOPO5DnYcXYH7DB zThFxOXm7+a4R/00Zzo2ExAEPEGQ91AXVQVghVTYwWyyraPi+Np672kSyPLbd1U6 VciuJxq4mvWJTzFZW7lmGsIgBt1OShdRyvE6G94mEgMUD8pzi19i85XrRNXD7npZ wy5681o9C0wmoMODQl5pmYLI+REERMCtnex6BfBb1RVEwRAYnEqze0SFyikr8Jha 4+PfYZhfqscN6PqdLO3WF60iJwT+GmbW6SPCfxDTXt4a43ar5XQ9BhSUcn9/Lpf0 I6WZJQ1FObqfOMaPSTaNnykG/nFEpBlDsU5nXBZKsZbgYJl2Ww21AledNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpv4co5hwBkmsaoU5nr99E1fVRuMB8GA1UdIwQY MBaAFLYbyXuYJ26zur2eeqZ+JwWuEeZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYt OTgzZDRkYTEzNDQ3LzEvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYtOTgzZDRkYTEzNDQ3 LzEvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcqqpnbH DGgegFZzvaojXsM/Y9G3XcbYpRoMbmSD+lnK/Ep+MQQ74sa76b+ynfRWxLh/ciwq B/fIbN9H7eCXKrNB5oxLNrtyQFUzIeZuJKvM9YU0T2fQYI12ytcflY9QobyCV3NX Wp/OiwhJlRCqiKlj2ngkLQELkwg+EuHTgkH7OfmXEGKR2NszX5dLZq47jSWcCuHc orUlpQsxHs76lgfnOE79rNr3lfyG//8xlaiF5zCh0vnIHCZBaY6cJLCQ2Z0KwpFA nzmpriWliMrvtrg6FSSZJiBV4N2UwkDNEwqtfan4/1r7QRyA/gzkHQZPyMb2XoG3 eHxvMgmNYO6OGw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:54 2025 by rpki-client