This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: f0GiiHMxb7Ukkf0d3liAlipgu2x1456/6ZURw/+gNHw= Subject key identifier: D5:F0:66:B0:52:26:5B:A4:0B:15:C4:00:F2:C0:B7:CB:6F:99:22:5A Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019AF389A01EC017DE1D15F5A5BE8B213207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0EEA Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=) 2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=) 3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=) 4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: KSSHDHVSeQl0FA65LnUQONXxRH+CvxDm7c/bL+uxSiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a0:1e:c0:17:de:1d:15:f5:a5:be:8b:21:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=d5f066b052265ba40b15c400f2c0b7cb6f99225a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:f0:0f:56:9f:d2:6e:72:23:c8:fb:f4:63: 30:25:8e:33:0c:b6:c9:9f:27:45:e7:7a:3c:75:f6: 16:0f:83:e5:17:85:0e:55:5a:84:1d:15:2f:0d:c9: 5d:86:91:4a:35:7a:6a:25:59:c8:b5:28:45:90:67: 01:46:2d:d4:1d:28:1e:f9:43:4c:eb:fd:ed:dd:5e: 69:ca:f1:6c:46:c5:d6:09:d5:ca:b0:4e:17:e5:ef: 25:3b:7d:65:ec:ee:e5:ec:4d:55:5b:1a:a3:4c:dd: cb:07:11:45:fc:76:37:0e:72:df:32:1a:e5:ae:b6: 1f:39:4a:78:ff:e8:a3:bd:d7:85:1b:2b:2d:60:96: 4c:61:e4:57:f4:e2:63:94:07:d6:5e:d2:31:cc:9f: ad:5b:ab:f8:0b:9d:26:80:05:15:d3:fe:00:70:de: 3b:09:27:6a:10:4b:35:5b:fe:3e:8a:a5:d6:36:9f: 0b:aa:9a:59:5e:7b:99:71:cb:50:90:b5:09:f7:f0: 26:b8:0d:19:29:5a:c9:3e:a3:68:40:a5:af:5f:0d: b3:4f:87:e9:0e:db:2d:2a:c4:13:9d:bc:33:1a:27: 30:87:90:93:13:f8:de:08:c5:7f:a7:19:a0:30:1a: 5a:4a:9c:94:64:28:1b:e7:d3:33:83:3e:1b:8d:9d: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:66:B0:52:26:5B:A4:0B:15:C4:00:F2:C0:B7:CB:6F:99:22:5A X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:31:16:c0:8d:50:61:0d:1a:7d:35:c5:90:ff:51:ce:29:b2: fa:8d:e6:6f:98:fd:d3:89:fa:4f:97:ae:79:d3:5a:e8:fa:97: 99:a4:f3:ce:c8:2f:bb:09:cd:d0:8d:3a:9e:94:95:53:b1:ae: 3b:f7:0d:71:af:3a:8b:da:79:07:d5:46:9e:5d:0f:bb:02:49: 6d:8e:4a:e7:c7:e4:38:f1:c4:9b:e7:38:29:8b:a8:c6:28:4a: d3:17:de:ee:8f:cb:f5:77:2b:f3:e6:ec:02:f8:05:cf:9c:d3: a9:aa:73:71:f3:44:9e:43:9b:6b:e4:1f:b8:26:6a:e6:50:1b: 6f:8e:fb:1b:65:eb:7d:47:a1:5b:0e:61:15:de:fa:8f:26:a9: 34:2a:94:9f:8d:d0:b8:7b:86:1b:6f:10:52:81:44:fe:6e:77: 09:6d:ba:48:20:87:50:b4:ec:a1:b1:72:85:dd:76:dc:c6:3c: fc:43:1a:a9:e5:2b:68:fe:57:b3:88:fd:90:28:af:34:c2:a2: 79:b1:65:c1:23:56:e6:26:f7:88:e8:c5:55:3d:28:82:9d:6e: 79:99:91:be:fa:c4:23:91:2f:ba:71:b5:05:34:ed:53:db:65: 3e:6b:cf:f7:d7:47:fd:17:f4:3d:f5:a0:e8:51:f6:02:f6:7b: 8b:69:92:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaAewBfeHRX1pb6LITIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD EyhkNWYwNjZiMDUyMjY1YmE0MGIxNWM0MDBmMmMwYjdjYjZmOTkyMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+fwD1af0m5yI8j79GMwJY4zDLbJ nydF53o8dfYWD4PlF4UOVVqEHRUvDcldhpFKNXpqJVnItShFkGcBRi3UHSge+UNM 6/3t3V5pyvFsRsXWCdXKsE4X5e8lO31l7O7l7E1VWxqjTN3LBxFF/HY3DnLfMhrl rrYfOUp4/+ijvdeFGystYJZMYeRX9OJjlAfWXtIxzJ+tW6v4C50mgAUV0/4AcN47 CSdqEEs1W/4+iqXWNp8LqppZXnuZcctQkLUJ9/AmuA0ZKVrJPqNoQKWvXw2zT4fp DtstKsQTnbwzGicwh5CTE/jeCMV/pxmgMBpaSpyUZCgb59Mzgz4bjZ1rDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXwZrBSJlukCxXEAPLAt8tvmSJaMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjEWwI1Q YQ0afTXFkP9Rzimy+o3mb5j904n6T5euedNa6PqXmaTzzsgvuwnN0I06npSVU7Gu O/cNca86i9p5B9VGnl0PuwJJbY5K58fkOPHEm+c4KYuoxihK0xfe7o/L9Xcr8+bs AvgFz5zTqapzcfNEnkOba+QfuCZq5lAbb477G2XrfUehWw5hFd76jyapNCqUn43Q uHuGG28QUoFE/m53CW26SCCHULTsobFyhd123MY8/EMaqeUraP5Xs4j9kCivNMKi ebFlwSNW5ib3iOjFVT0ogp1ueZmRvvrEI5EvunG1BTTtU9tlPmvP99dH/Rf0PfWg 6FH2AvZ7i2mSeA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:11 2025 by rpki-client