This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json) Hash identifier: WOhFFozDPdEcZkz1aVFV8MYUtT3ffh+6yIga1ss1Mgg= Subject key identifier: C4:E4:43:2F:62:34:FF:3A:C7:06:E0:E0:F1:7D:17:53:BE:80:43:38 Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Certificate serial: 019AF49BF8E59308F9B0895A6FB82B590E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft Manifest number: 0DC6 Signing time: Sat 06 Dec 2025 17:00:53 +0000 Manifest this update: Sat 06 Dec 2025 17:00:53 +0000 Manifest next update: Sun 07 Dec 2025 17:00:53 +0000 Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=) 2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=) 3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: 3OMODNJSDaQQQl0Lk4klVcr+Wj8MYoLem7QdFl5NBBQ=) 4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:f8:e5:93:08:f9:b0:89:5a:6f:b8:2b:59:0e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Validity Not Before: Dec 6 17:00:53 2025 GMT Not After : Dec 7 17:00:53 2025 GMT Subject: CN=c4e4432f6234ff3ac706e0e0f17d1753be804338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0d:34:8a:1e:6f:bb:4b:5c:b2:84:c8:d6:5d: 56:28:5c:e4:bb:6e:f5:15:14:95:7b:22:ee:fe:96: 12:57:1d:0d:7a:56:32:db:e1:07:0b:3c:45:f2:e8: ed:13:e0:b2:01:10:84:0f:c0:03:73:c3:90:fa:1d: ce:00:2b:e8:cb:4f:2a:35:c2:d7:92:98:d0:99:c2: 80:00:24:34:b2:3a:e9:f8:89:ca:d4:a5:a8:f1:6b: 3a:a5:d7:d6:2a:ca:2c:77:69:15:f0:69:f7:17:8b: ec:95:5d:77:cd:42:a8:33:8d:e3:5b:7c:c2:cb:11: 48:11:68:e0:61:7a:98:55:26:dc:84:a4:f2:64:41: 54:c1:57:2e:2a:61:2a:fd:87:03:cd:5d:85:a0:47: 8c:fd:a0:17:ab:a1:f8:bd:6f:f3:f6:f0:31:cb:81: 63:33:b4:c7:74:d4:b1:45:8f:85:3f:c9:06:3d:8f: 12:85:db:ce:46:65:5f:02:ec:4e:ed:3a:7a:3b:48: ca:8d:97:44:07:02:6b:e6:b0:af:22:82:a9:92:f9: 03:ca:3a:c0:7d:ac:ee:99:8c:5e:ae:88:59:56:57: d2:90:29:70:ac:42:6d:2c:da:cd:dc:cc:62:b3:42: 55:87:85:10:8b:2d:42:7c:9d:d7:67:0e:5d:08:23: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E4:43:2F:62:34:FF:3A:C7:06:E0:E0:F1:7D:17:53:BE:80:43:38 X509v3 Authority Key Identifier: keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ff:90:5f:c0:70:ae:00:38:9e:ee:f0:d3:38:b5:ef:8e:fc: 3c:89:0a:7f:ff:68:e0:86:93:f6:75:b6:75:f7:b6:da:94:e9: 8b:1d:6e:78:10:d3:a8:19:4a:14:fb:cb:21:41:04:0e:1b:04: b4:e2:7b:c4:e5:08:fe:a3:49:ab:38:b7:f6:ba:d5:46:29:27: 38:96:6e:7e:48:92:6e:5c:36:78:db:92:25:d6:14:d2:0d:67: 15:18:b9:d2:bf:98:3b:cd:34:f9:42:33:57:4c:95:61:1b:04: 78:ef:c0:f6:54:f8:26:79:d9:dc:59:8b:eb:0f:e9:98:1c:12: 78:14:b2:30:0e:91:89:ee:d6:5a:d5:85:c1:84:31:66:7a:e1: 36:1a:06:9f:94:54:09:f2:62:95:4d:23:c6:e4:98:2c:d5:7f: da:5b:8e:e6:69:3c:a3:b0:20:08:0f:7e:63:b1:a1:56:06:d5: d2:4f:82:05:31:57:e3:7e:c4:ca:65:8e:1e:96:d6:ff:c8:65: f9:db:52:9b:ad:bd:bb:4c:ec:fc:6f:a1:3f:82:34:74:32:0a: 67:55:18:65:99:21:79:96:c5:d0:6b:c8:44:6d:47:e4:e9:c9: 00:72:fc:1e:64:6f:92:93:f5:2f:97:f3:56:dc:cd:9b:56:c1: 36:8f:f8:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/jlkwj5sIlab7grWQ4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy NDE3YmYwHhcNMjUxMjA2MTcwMDUzWhcNMjUxMjA3MTcwMDUzWjAzMTEwLwYDVQQD EyhjNGU0NDMyZjYyMzRmZjNhYzcwNmUwZTBmMTdkMTc1M2JlODA0MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w00ih5vu0tcsoTI1l1WKFzku271 FRSVeyLu/pYSVx0NelYy2+EHCzxF8ujtE+CyARCED8ADc8OQ+h3OACvoy08qNcLX kpjQmcKAACQ0sjrp+InK1KWo8Ws6pdfWKsosd2kV8Gn3F4vslV13zUKoM43jW3zC yxFIEWjgYXqYVSbchKTyZEFUwVcuKmEq/YcDzV2FoEeM/aAXq6H4vW/z9vAxy4Fj M7THdNSxRY+FP8kGPY8ShdvORmVfAuxO7Tp6O0jKjZdEBwJr5rCvIoKpkvkDyjrA fazumYxerohZVlfSkClwrEJtLNrN3Mxis0JVh4UQiy1CfJ3XZw5dCCPd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTkQy9iNP86xwbg4PF9F1O+gEM4MB8GA1UdIwQY MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3 LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/+QX8Bw rgA4nu7w0zi17478PIkKf/9o4IaT9nW2dfe22pTpix1ueBDTqBlKFPvLIUEEDhsE tOJ7xOUI/qNJqzi39rrVRiknOJZufkiSblw2eNuSJdYU0g1nFRi50r+YO800+UIz V0yVYRsEeO/A9lT4JnnZ3FmL6w/pmBwSeBSyMA6Rie7WWtWFwYQxZnrhNhoGn5RU CfJilU0jxuSYLNV/2luO5mk8o7AgCA9+Y7GhVgbV0k+CBTFX437EymWOHpbW/8hl +dtSm629u0zs/G+hP4I0dDIKZ1UYZZkheZbF0GvIRG1H5OnJAHL8HmRvkpP1L5fz VtzNm1bBNo/4RA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:29 2025 by rpki-client