This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json) Hash identifier: DINyQ6ayQ/UWL7NHF2cyMwv7r4YcLNSUCVilTmSOaFc= Subject key identifier: 25:CD:27:5F:CA:23:3B:15:A8:65:DC:CF:0D:D7:95:92:ED:C1:75:6E Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3 Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3 Certificate serial: 019AF50B7F40975AA44E8D10E291CF0D3150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft Manifest number: 0FFD Signing time: Sat 06 Dec 2025 19:02:42 +0000 Manifest this update: Sat 06 Dec 2025 19:02:42 +0000 Manifest next update: Sun 07 Dec 2025 19:02:42 +0000 Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: k6p/dkhCA5sIe+2SalAIfPgXamk6AFbIVoShpe/U1mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:7f:40:97:5a:a4:4e:8d:10:e2:91:cf:0d:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3 Validity Not Before: Dec 6 19:02:42 2025 GMT Not After : Dec 7 19:02:42 2025 GMT Subject: CN=25cd275fca233b15a865dccf0dd79592edc1756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:10:ec:75:5b:76:61:5a:65:d9:3d:2e:f2: e8:e4:2a:9d:02:6c:95:04:e3:5b:46:72:2b:6d:a9: 79:aa:29:f0:c9:03:40:66:0b:56:5e:05:43:81:05: b2:9c:c4:32:2b:1a:ea:3b:78:9f:2c:dd:71:06:9b: 0c:79:cf:98:f5:e1:d6:a8:bd:02:70:14:8e:51:4e: 52:d8:28:02:ac:0f:2e:d5:8c:72:31:27:f6:2e:cc: 18:60:57:78:32:c7:3c:81:01:0b:e3:a8:9b:c5:c6: 0c:d8:86:2e:63:08:dc:df:be:52:d8:5b:5d:a0:3f: b8:fa:0d:66:6f:52:dc:76:ff:00:06:c8:7b:2a:ab: 13:09:a1:44:50:13:ef:d1:8e:2c:af:ba:79:26:e4: 75:c8:41:4a:87:df:be:ad:19:f8:fc:55:7b:c2:5f: f7:cc:15:3b:ac:99:03:26:66:8f:a5:37:76:b5:d1: 87:2d:be:b7:5e:19:24:7d:23:31:a0:a1:94:6c:6c: 8f:e0:40:a8:0a:eb:71:c8:ad:a1:b0:9d:8d:54:c0: 5a:95:1e:1e:89:af:f9:29:70:24:cd:c9:ac:0b:4f: 76:c2:d7:cd:2d:6a:c9:82:41:02:b8:27:67:0f:7e: b7:5a:65:53:9e:8a:6e:3c:05:50:2a:02:fe:68:5f: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:27:5F:CA:23:3B:15:A8:65:DC:CF:0D:D7:95:92:ED:C1:75:6E X509v3 Authority Key Identifier: keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:0c:b8:90:48:b9:0f:f3:f0:8e:5f:aa:25:4e:9f:90:7c: 17:c1:62:fb:36:0d:04:85:22:9b:6b:e2:f9:31:c5:a4:bd:c9: bc:49:57:93:8d:1f:d7:c6:53:68:c3:66:31:fc:96:35:f0:bb: c1:d6:52:a7:0d:39:2b:5c:58:c5:e3:da:42:d9:60:66:2d:79: 16:f0:b2:bd:be:cd:24:f1:e6:e3:6f:a9:61:2d:a2:fe:42:af: 4a:dd:a3:9e:01:cd:b4:69:39:2a:5f:8e:4c:04:e7:92:f7:a7: 2b:76:07:29:f8:4a:af:98:78:bb:db:28:67:98:ca:fb:1d:d1: a2:43:3e:02:2d:20:94:0d:a3:59:a4:aa:f4:41:02:f0:ee:58: 34:94:81:7e:3b:e1:26:42:d8:1b:fd:55:46:f6:b6:3b:f8:9d: 18:f0:8d:ef:7f:77:53:1a:e0:43:60:03:1c:64:ed:19:01:3b: ac:38:51:07:80:5a:33:10:15:23:68:ea:3e:5a:14:36:68:dd: b5:ad:40:a7:07:e8:f3:cf:6c:04:b3:a4:1e:57:12:f3:83:b9: 3b:98:c1:79:db:73:1c:53:8b:e7:b3:5b:e4:cb:8d:a5:ce:7a: b2:6b:34:62:ad:d8:40:f8:7b:9e:f4:e8:a1:09:58:90:18:ab: 43:18:ff:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C39Al1qkTo0Q4pHPDTFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi ZjhjZTMwHhcNMjUxMjA2MTkwMjQyWhcNMjUxMjA3MTkwMjQyWjAzMTEwLwYDVQQD EygyNWNkMjc1ZmNhMjMzYjE1YTg2NWRjY2YwZGQ3OTU5MmVkYzE3NTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7IQ7HVbdmFaZdk9LvLo5CqdAmyV BONbRnIrbal5qinwyQNAZgtWXgVDgQWynMQyKxrqO3ifLN1xBpsMec+Y9eHWqL0C cBSOUU5S2CgCrA8u1YxyMSf2LswYYFd4Msc8gQEL46ibxcYM2IYuYwjc375S2Ftd oD+4+g1mb1Lcdv8ABsh7KqsTCaFEUBPv0Y4sr7p5JuR1yEFKh9++rRn4/FV7wl/3 zBU7rJkDJmaPpTd2tdGHLb63XhkkfSMxoKGUbGyP4ECoCutxyK2hsJ2NVMBalR4e ia/5KXAkzcmsC092wtfNLWrJgkECuCdnD363WmVTnopuPAVQKgL+aF9vswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXNJ1/KIzsVqGXczw3XlZLtwXVuMB8GA1UdIwQY MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5QMuJBI uQ/z8I5fqiVOn5B8F8Fi+zYNBIUim2vi+THFpL3JvElXk40f18ZTaMNmMfyWNfC7 wdZSpw05K1xYxePaQtlgZi15FvCyvb7NJPHm42+pYS2i/kKvSt2jngHNtGk5Kl+O TATnkvenK3YHKfhKr5h4u9soZ5jK+x3RokM+Ai0glA2jWaSq9EEC8O5YNJSBfjvh JkLYG/1VRva2O/idGPCN7393UxrgQ2ADHGTtGQE7rDhRB4BaMxAVI2jqPloUNmjd ta1Apwfo889sBLOkHlcS84O5O5jBedtzHFOL57Nb5MuNpc56sms0Yq3YQPh7nvTo oQlYkBirQxj/cw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:39 2025 by rpki-client