This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft File: TU0qfS8eqI_7WgMlnLP06o0vVfs.mft (raw, json) Hash identifier: /TNf56M2xKg4Ij6fizDSRIeW16wM7hu3El0pZOVxuhA= Subject key identifier: F4:F0:6C:D2:FE:E0:49:7E:BD:50:B7:BF:3B:CE:17:43:56:17:E1:04 Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Certificate serial: 019AF209B37A120CD02C89FEB9CA2A7019D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft Manifest number: 0C Signing time: Sat 06 Dec 2025 05:01:53 +0000 Manifest this update: Sat 06 Dec 2025 05:01:53 +0000 Manifest next update: Sun 07 Dec 2025 05:01:53 +0000 Files and hashes: 1: 5m1b01hL5BcjzP8FrpknmUKlQbs.roa (hash: T3XZKupiy6iYEpA63mlPw7Ubl9igvLOEfmR+hPcujQk=) 2: TU0qfS8eqI_7WgMlnLP06o0vVfs.crl (hash: xDuxLM1gtpcDyM+cHSxIyuuvRkGkNLAYlYnXjMkqLcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b3:7a:12:0c:d0:2c:89:fe:b9:ca:2a:70:19:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Validity Not Before: Dec 6 05:01:53 2025 GMT Not After : Dec 7 05:01:53 2025 GMT Subject: CN=f4f06cd2fee0497ebd50b7bf3bce17435617e104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:d8:d4:ef:08:43:ae:b1:06:14:65:bf:17: d6:e6:34:c7:53:d7:5c:29:73:99:98:8e:f2:76:bb: 5e:f7:6e:dd:07:fa:de:75:44:ce:c1:cc:63:4b:9b: 61:80:ea:4f:5f:44:18:b1:1f:77:cd:5b:0c:ca:92: ee:b9:40:17:fc:0a:ee:76:d6:46:c2:93:41:60:bf: f3:09:6d:f4:57:db:b1:f0:0a:fe:52:28:af:26:56: ce:67:e3:e7:cc:31:92:ab:70:7f:09:13:4e:bb:0c: 51:a5:b9:3e:4b:53:47:3a:2b:8b:aa:25:d4:13:c9: e1:5d:44:87:69:3a:5e:52:30:df:4f:70:94:b3:98: 43:56:2b:68:a5:34:2a:db:7f:8c:8f:cc:33:bb:65: 51:85:07:c3:ee:b9:fc:86:cb:aa:fe:f5:b3:c3:73: 4d:c5:db:2a:cc:61:c9:94:0e:d4:96:8f:a4:ad:ca: 0c:85:20:4b:91:66:c9:25:ed:55:1a:af:cf:ec:48: 47:04:44:a8:6a:c8:03:38:d8:88:d4:61:fa:7b:46: 8e:ad:ce:1b:2c:5f:ab:5b:ef:43:45:1e:7a:fd:eb: 0c:d0:2b:ef:10:13:29:5c:3b:7d:81:67:78:c5:21: 48:60:7b:e3:0f:16:c1:79:55:33:1d:ba:a6:c0:15: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F0:6C:D2:FE:E0:49:7E:BD:50:B7:BF:3B:CE:17:43:56:17:E1:04 X509v3 Authority Key Identifier: keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:01:93:1f:14:28:af:41:62:5a:17:60:48:0d:ca:03:6f:f2: 57:93:b6:7c:bf:91:44:d1:35:de:98:66:14:54:19:d2:80:45: f6:3a:16:03:fe:82:64:1a:fd:89:4f:f4:d7:55:93:d6:20:cd: c8:bc:28:52:d1:86:85:0e:73:f5:eb:72:45:c5:48:e7:58:f5: de:3e:aa:7b:d9:d2:54:ee:8e:1b:74:0b:71:d9:ab:af:bd:d0: 87:eb:86:ff:c7:5f:d4:74:06:08:b5:dc:d2:24:07:b4:a8:dc: ff:0a:55:68:2f:04:ee:c0:25:39:90:19:5d:d3:45:74:3e:bd: 03:88:5d:a0:89:64:e0:64:ba:fc:93:5a:81:ec:90:c1:da:25: e1:5a:66:8e:93:2f:24:26:0c:06:59:8f:dc:94:a8:ac:9f:0c: 97:c9:d9:e9:10:13:e0:80:e4:36:85:56:b2:0b:27:69:0b:9d: 91:83:a3:a2:9b:f5:0c:4b:34:b5:56:85:2a:23:b9:7b:82:5a: 17:bc:2c:29:ea:6f:2f:f8:26:02:8c:ae:1c:75:f8:3a:e3:ea: 0d:2d:9b:f0:aa:9d:5e:38:4b:95:db:96:97:47:52:62:82:af: f3:30:07:9d:e8:c8:6a:87:2f:d2:fa:60:d7:3b:bd:83:9c:04: ef:16:4b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbN6EgzQLIn+ucoqcBnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNGQyYTdkMmYxZWE4OGZmYjVhMDMyNTljYjNmNGVhOGQy ZjU1ZmIwHhcNMjUxMjA2MDUwMTUzWhcNMjUxMjA3MDUwMTUzWjAzMTEwLwYDVQQD EyhmNGYwNmNkMmZlZTA0OTdlYmQ1MGI3YmYzYmNlMTc0MzU2MTdlMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkDY1O8IQ66xBhRlvxfW5jTHU9dc KXOZmI7ydrte927dB/redUTOwcxjS5thgOpPX0QYsR93zVsMypLuuUAX/ArudtZG wpNBYL/zCW30V9ux8Ar+UiivJlbOZ+PnzDGSq3B/CRNOuwxRpbk+S1NHOiuLqiXU E8nhXUSHaTpeUjDfT3CUs5hDVitopTQq23+Mj8wzu2VRhQfD7rn8hsuq/vWzw3NN xdsqzGHJlA7Ulo+krcoMhSBLkWbJJe1VGq/P7EhHBESoasgDONiI1GH6e0aOrc4b LF+rW+9DRR56/esM0CvvEBMpXDt9gWd4xSFIYHvjDxbBeVUzHbqmwBWPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTwbNL+4El+vVC3vzvOF0NWF+EEMB8GA1UdIwQY MBaAFE1NKn0vHqiP+1oDJZyz9OqNL1X7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEt YTZiNTEzYzQ3Zjg1LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEtYTZiNTEzYzQ3Zjg1 LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwGTHxQo r0FiWhdgSA3KA2/yV5O2fL+RRNE13phmFFQZ0oBF9joWA/6CZBr9iU/011WT1iDN yLwoUtGGhQ5z9etyRcVI51j13j6qe9nSVO6OG3QLcdmrr73Qh+uG/8df1HQGCLXc 0iQHtKjc/wpVaC8E7sAlOZAZXdNFdD69A4hdoIlk4GS6/JNageyQwdol4VpmjpMv JCYMBlmP3JSorJ8Ml8nZ6RAT4IDkNoVWsgsnaQudkYOjopv1DEs0tVaFKiO5e4Ja F7wsKepvL/gmAoyuHHX4OuPqDS2b8KqdXjhLlduWl0dSYoKv8zAHnejIaocv0vpg 1zu9g5wE7xZL7A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:57 2025 by rpki-client