This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json) Hash identifier: 8AtNWqwJ9Pzjummyvh13ZA78+TBmidT55OpqnOLwuHg= Subject key identifier: 8D:40:F3:DF:15:4E:31:04:45:5A:85:C1:BA:A9:37:A4:44:AB:A5:2D Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292 Certificate serial: 019AF4A95691BD887D260B0C5EC71C42DF2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft Manifest number: 0586 Signing time: Sat 06 Dec 2025 17:15:29 +0000 Manifest this update: Sat 06 Dec 2025 17:15:29 +0000 Manifest next update: Sun 07 Dec 2025 17:15:29 +0000 Files and hashes: 1: 1-HTDTTyHqsL8qWvl7tdyMvlROZo.roa (hash: rDjH3KjSESto7R5VRIkalhKhlHHWAhNK5nCorKVRQGY=) 2: RXQQhNgKVihPcMVhthLhTg3n-Us.roa (hash: kG2eozK8NJSfX7hFrfDKG75LYSNAeBB7F12dBSasppU=) 3: UVLB6EC_S4cdufZlLeGb47V1ReM.roa (hash: +1SPWwuKyVjoCsUjj6tw92B1zG4mEC7h1VegEv3YxLE=) 4: YJ0iR_b-Nen1aOiqKaw4vZmo_5c.roa (hash: KZCgbqiRi9f7dw5nk4nyuo7z+mZsmVTjQi5EVZjEuks=) 5: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: grFnst4g46Nmqz32a40cuTnAuzVIynudXW0LopP5W0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:a9:56:91:bd:88:7d:26:0b:0c:5e:c7:1c:42:df:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292 Validity Not Before: Dec 6 17:15:29 2025 GMT Not After : Dec 7 17:15:29 2025 GMT Subject: CN=8d40f3df154e3104455a85c1baa937a444aba52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:f8:06:ab:7e:21:7c:23:18:85:ff:a8:79: 1f:22:31:b2:d4:b3:66:93:09:fa:c7:62:9d:e7:00: 86:1c:33:ec:d7:c8:aa:ce:4c:cb:83:60:50:b1:69: 14:73:8b:f1:47:a9:b4:58:10:60:d0:8f:e5:83:1e: 81:5f:26:17:7d:35:10:fa:e1:50:3b:6e:22:83:0a: 9c:ef:89:bf:e8:5f:e5:77:ef:81:d5:f3:fe:1a:8f: 8d:48:f6:14:f5:3b:65:76:b1:41:09:e4:ad:ac:97: d2:48:55:cc:e5:70:2d:48:7e:7e:34:2c:31:8c:cd: 75:62:1a:bd:e7:f8:a1:64:98:2b:0d:4f:e1:6c:31: 07:2f:3f:18:1d:f7:e5:74:52:c6:d4:45:76:94:c4: fc:ad:bd:59:4a:27:78:4f:f6:64:ff:80:0e:9d:9c: c6:aa:1e:61:2c:d5:bc:77:0e:5b:8e:3e:22:ec:0c: 75:eb:6b:a9:58:10:78:8d:38:70:5f:69:e4:1f:77: 1a:ae:54:c6:e2:03:13:b1:38:09:89:b0:68:02:ed: 23:60:16:0e:ad:4a:bb:83:04:39:f0:bd:53:1b:61: b1:94:e9:05:5f:36:21:39:82:8c:1b:a5:e3:87:98: ab:9e:0e:c2:a8:cf:fa:85:ce:a7:ea:20:63:a0:32: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:40:F3:DF:15:4E:31:04:45:5A:85:C1:BA:A9:37:A4:44:AB:A5:2D X509v3 Authority Key Identifier: keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:65:c1:02:83:f9:0a:f3:3e:18:19:ba:39:5e:8d:78:5a:2a: 6c:1c:c4:3f:f9:2c:67:62:a3:38:f1:1a:3c:6e:d6:c8:e7:14: 89:3f:9a:e3:45:3f:46:1a:77:37:b4:68:1f:ab:fe:ee:14:f5: d1:fe:61:42:05:5b:4b:58:21:4a:d6:8d:6b:86:88:51:1c:b2: 99:90:23:06:71:56:8e:c0:bd:56:a5:1a:4c:37:41:c0:43:7b: 6d:d0:46:ee:c9:ec:88:c0:00:91:8f:eb:56:2d:c8:ce:1a:16: c5:60:89:63:ed:00:61:1c:f0:e5:c7:48:38:97:90:c0:ed:9e: 5a:07:73:4a:6c:31:40:59:39:62:a2:e6:82:6a:38:2e:84:e4: 1b:b9:1c:09:c0:b6:7b:6e:ab:79:d6:0e:2c:4e:5e:ab:29:6e: 38:f4:5b:db:11:cd:c8:4f:1f:d4:70:cf:ae:5d:35:e5:b5:f5: 42:ec:8c:ec:04:a8:e4:22:fb:72:d5:37:22:c2:be:b5:f3:dd: 15:98:cd:ad:a7:e2:2c:85:b4:68:96:d1:11:9e:c8:57:2f:d0: 46:e6:96:d3:28:5a:f4:19:10:fc:8e:89:63:3c:73:5f:2e:1a: 0b:a2:c9:f8:5f:d1:6e:63:22:1d:83:d2:e4:57:58:11:bd:0b: 7f:2c:db:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0qVaRvYh9JgsMXsccQt8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2 YzUyOTIwHhcNMjUxMjA2MTcxNTI5WhcNMjUxMjA3MTcxNTI5WjAzMTEwLwYDVQQD Eyg4ZDQwZjNkZjE1NGUzMTA0NDU1YTg1YzFiYWE5MzdhNDQ0YWJhNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4/4Bqt+IXwjGIX/qHkfIjGy1LNm kwn6x2Kd5wCGHDPs18iqzkzLg2BQsWkUc4vxR6m0WBBg0I/lgx6BXyYXfTUQ+uFQ O24igwqc74m/6F/ld++B1fP+Go+NSPYU9TtldrFBCeStrJfSSFXM5XAtSH5+NCwx jM11Yhq95/ihZJgrDU/hbDEHLz8YHffldFLG1EV2lMT8rb1ZSid4T/Zk/4AOnZzG qh5hLNW8dw5bjj4i7Ax162upWBB4jThwX2nkH3carlTG4gMTsTgJibBoAu0jYBYO rUq7gwQ58L1TG2GxlOkFXzYhOYKMG6Xjh5irng7CqM/6hc6n6iBjoDK89wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1A898VTjEERVqFwbqpN6REq6UtMB8GA1UdIwQY MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt NTcxYjZjNjEyYmVjLzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmXBAoP5 CvM+GBm6OV6NeFoqbBzEP/ksZ2KjOPEaPG7WyOcUiT+a40U/Rhp3N7RoH6v+7hT1 0f5hQgVbS1ghStaNa4aIURyymZAjBnFWjsC9VqUaTDdBwEN7bdBG7snsiMAAkY/r Vi3IzhoWxWCJY+0AYRzw5cdIOJeQwO2eWgdzSmwxQFk5YqLmgmo4LoTkG7kcCcC2 e26redYOLE5eqyluOPRb2xHNyE8f1HDPrl015bX1QuyM7ASo5CL7ctU3IsK+tfPd FZjNrafiLIW0aJbREZ7IVy/QRuaW0yha9BkQ/I6JYzxzXy4aC6LJ+F/RbmMiHYPS 5FdYEb0Lfyzb1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:26 2025 by rpki-client