This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json) Hash identifier: okNvfTJfKlej+fQJIFsMkml3XLoJDggaX8E+CbWppjw= Subject key identifier: 4A:71:F8:44:54:9B:4B:C8:0D:1F:25:A6:BC:94:F1:95:B6:B9:0A:68 Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34 Certificate issuer: /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34 Certificate serial: 019AF2098DCFE5292E808685A6898355EDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: kKMC8jThQpDwK6v7GaumYPI4bHE.roa (hash: jzEV+uNk9P/+bwhKx1o1i5qEZ9QBMjGpsu47uocCOtY=) 2: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: TcOz1BQ+OQfJwkLUbGBCi2ZB3iggePI8Y/TnE2MAwNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8d:cf:e5:29:2e:80:86:85:a6:89:83:55:ed:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=4a71f844549b4bc80d1f25a6bc94f195b6b90a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:b8:aa:e2:b1:16:5d:f9:30:0d:03:9f:a0: 35:a2:2d:32:37:b9:c0:3d:fa:b2:ed:eb:23:94:9f: 9c:36:f7:47:c4:1c:d2:96:cf:78:76:fa:02:5f:c2: 84:94:9a:6d:56:dc:74:cf:dc:b6:ec:81:f5:ab:6d: d7:2b:c9:05:92:c0:ae:72:02:e3:45:42:07:92:e9: 1b:61:0e:c1:30:68:ce:0e:ed:8f:13:f5:1d:f6:14: 5f:22:89:63:36:67:7a:39:37:c4:6e:ca:94:77:b1: 38:4d:0c:6f:72:7d:aa:d3:47:29:05:1e:a4:3c:5d: f1:00:95:1a:ac:57:3e:ca:c1:a6:d2:05:aa:1b:7e: 91:fb:8e:e0:6d:bf:da:44:28:06:b0:24:ca:04:62: 68:6f:03:37:1a:9e:f1:cb:eb:b9:fc:a1:38:4c:16: d0:de:6c:23:4d:00:69:ee:c9:68:44:5a:9f:d5:86: 48:94:eb:2d:51:00:00:ca:ac:04:f3:b6:72:41:f2: 13:a0:70:04:2b:43:1d:c2:39:b2:71:ae:4a:12:9d: 5d:bf:33:68:77:0b:5e:2a:0f:f0:11:46:70:dd:5c: fd:0f:8c:c4:a7:3a:30:35:4a:51:34:5a:40:12:b5: 2d:7e:d7:93:12:aa:57:99:bb:aa:44:0f:f4:63:69: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:F8:44:54:9B:4B:C8:0D:1F:25:A6:BC:94:F1:95:B6:B9:0A:68 X509v3 Authority Key Identifier: keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:59:3d:ec:4d:ce:97:87:a6:20:ad:01:22:15:77:22:1c:65: 84:8a:04:9b:d4:9e:00:43:98:36:51:f2:ce:4e:6e:bb:ad:33: e9:af:23:09:db:80:43:23:9b:40:de:b8:42:af:53:00:d6:8f: 4e:f1:5f:12:3e:4c:d4:b1:e1:ed:75:36:6b:9e:df:f9:a7:f7: e1:44:e3:66:a9:7c:ae:7e:f2:c1:48:1e:87:18:e7:1e:68:a2: 76:c8:68:25:89:77:33:50:42:93:c3:11:53:a8:63:3f:7b:38: c2:bf:a7:dd:f7:f7:22:3f:58:73:5b:14:b0:76:f7:29:7b:d9: 32:64:99:d1:39:ff:ef:07:7f:30:53:36:93:63:cf:ee:7e:f5: 71:88:90:e5:4f:cb:38:80:43:f4:cc:fa:3a:58:75:7f:e4:5d: 0b:5c:4c:8a:d4:2e:07:9b:94:b8:6b:10:a3:0b:b3:28:79:62: 73:bb:9b:aa:51:37:35:b1:4f:5f:45:ef:13:dc:ab:03:8d:da: 29:8b:f6:7f:10:35:6d:ab:97:c6:d8:3f:6c:3e:cc:c4:a1:81: d5:a2:9b:ea:79:5b:60:a4:5e:d3:35:fa:f7:fc:45:db:0c:fb: b4:39:19:0e:10:70:56:82:50:5f:0c:c0:4f:37:b3:f2:0a:16: 11:8c:22:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY3P5SkugIaFpomDVe3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzJhMzFkNjBlZDI1NjExOTk3ZTdiN2RlNGE5YjZmMjYw NmVkMzQwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg0YTcxZjg0NDU0OWI0YmM4MGQxZjI1YTZiYzk0ZjE5NWI2YjkwYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4m4quKxFl35MA0Dn6A1oi0yN7nA Pfqy7esjlJ+cNvdHxBzSls94dvoCX8KElJptVtx0z9y27IH1q23XK8kFksCucgLj RUIHkukbYQ7BMGjODu2PE/Ud9hRfIoljNmd6OTfEbsqUd7E4TQxvcn2q00cpBR6k PF3xAJUarFc+ysGm0gWqG36R+47gbb/aRCgGsCTKBGJobwM3Gp7xy+u5/KE4TBbQ 3mwjTQBp7sloRFqf1YZIlOstUQAAyqwE87ZyQfIToHAEK0Mdwjmyca5KEp1dvzNo dwteKg/wEUZw3Vz9D4zEpzowNUpRNFpAErUtfteTEqpXmbuqRA/0Y2kjgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpx+ERUm0vIDR8lpryU8ZW2uQpoMB8GA1UdIwQY MBaAFLbCox1g7SVhGZfnt95Km28mBu00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQt NmNkZjBkZTUyNzQ2LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQtNmNkZjBkZTUyNzQ2 LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVk97E3O l4emIK0BIhV3IhxlhIoEm9SeAEOYNlHyzk5uu60z6a8jCduAQyObQN64Qq9TANaP TvFfEj5M1LHh7XU2a57f+af34UTjZql8rn7ywUgehxjnHmiidshoJYl3M1BCk8MR U6hjP3s4wr+n3ff3Ij9Yc1sUsHb3KXvZMmSZ0Tn/7wd/MFM2k2PP7n71cYiQ5U/L OIBD9Mz6Olh1f+RdC1xMitQuB5uUuGsQowuzKHlic7ubqlE3NbFPX0XvE9yrA43a KYv2fxA1bauXxtg/bD7MxKGB1aKb6nlbYKRe0zX69/xF2wz7tDkZDhBwVoJQXwzA Tzez8goWEYwiYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:14 2025 by rpki-client