This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json) Hash identifier: D0W4K0pAhdheF4vXDpIfBYtg3LiGzyk86AhYr6yL4S8= Subject key identifier: CA:F0:2C:62:EE:6E:F2:F6:11:C2:37:83:F7:C1:61:7B:F6:2F:9E:21 Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e Certificate serial: 019AF19B8F8BB7910DDB2207B39F13CC3962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft Manifest number: 0FF6 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=) 2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: /SlA7HhM4kQjyOAoxpfriDQb+cUmeRoOaYm0e+0CDbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8f:8b:b7:91:0d:db:22:07:b3:9f:13:cc:39:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=caf02c62ee6ef2f611c23783f7c1617bf62f9e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:d5:43:0d:4c:9c:b8:98:3c:ec:7b:e2:85: cb:99:32:38:3f:1e:a9:19:43:bf:7c:30:0f:1b:94: 4e:d2:e5:dd:2b:8a:52:e8:d2:0b:36:06:54:97:7c: 9f:05:33:bb:b1:86:53:2e:63:b5:4f:17:fc:f8:6c: 75:36:df:7a:54:ce:e5:b9:94:3b:d2:74:79:34:47: 24:d6:21:40:57:8a:a2:78:a0:13:27:44:b8:b8:f1: 23:80:f8:70:51:ae:0a:bb:c1:8d:1f:4c:44:e7:76: a1:34:e5:16:c5:e2:5c:64:b4:ab:73:f2:1c:30:d0: 77:09:d7:0d:39:69:db:14:95:7b:ca:30:c3:78:95: f4:8d:51:2c:82:54:4f:04:38:b2:d5:1f:60:03:c8: bb:2c:ac:61:f1:05:3a:29:8c:f6:a6:59:68:8e:34: 2a:3d:52:fc:61:37:60:88:cf:07:9b:b8:ad:d4:8d: f1:92:f8:f8:f5:94:2e:fa:dc:c2:ff:cf:fd:f7:62: b0:fe:ca:2f:58:8d:25:25:df:cc:c3:7c:ee:db:40: 55:47:35:90:98:27:f3:ac:88:3a:da:6b:99:95:61: e1:fc:b8:43:58:6c:3b:d5:59:6c:a2:71:6b:e4:67: 1e:21:05:88:9d:c0:c5:4c:50:10:db:ac:7f:53:b0: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:2C:62:EE:6E:F2:F6:11:C2:37:83:F7:C1:61:7B:F6:2F:9E:21 X509v3 Authority Key Identifier: keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:39:61:64:02:27:ee:a3:4a:5c:fd:22:e3:74:ed:15:c8:31: ce:49:76:54:38:5b:62:5d:6d:81:68:db:f0:f2:a6:78:b4:c9: 9c:fb:0f:ff:f5:48:ef:5a:f0:52:76:c4:34:52:3d:c4:bc:a5: 01:2a:34:e7:5a:cf:7c:a4:7d:ef:71:4e:16:01:18:9b:33:a0: a8:c0:46:0a:fb:47:cd:c1:32:d4:2d:de:b3:49:ed:ec:93:d4: 71:47:94:69:a6:a0:3f:8c:6c:76:1b:b1:9a:6e:fe:99:e2:ad: 5b:c8:eb:04:8e:62:be:89:55:10:2a:34:fe:47:d6:ce:eb:c3: d2:aa:dc:e6:a9:83:ea:7f:59:19:35:d3:f6:ee:73:a2:a2:02: 4c:ad:b8:12:f8:a3:29:2d:32:d1:0e:0f:8a:a4:95:f4:12:7b: 97:6b:33:c1:a3:06:1f:9f:70:6e:25:fb:db:ef:c2:09:32:6b: 34:b8:33:4c:25:9f:cc:f2:d5:99:86:3f:3b:a7:6d:16:10:d7: 8f:b5:42:ad:c7:17:30:cf:5e:81:8c:e5:ee:63:bd:55:67:2d: 99:a0:c6:b2:d9:38:76:12:27:e8:bb:e8:23:11:c2:d8:f0:e2: 17:6c:09:a4:71:c0:16:8c:09:e4:de:df:1e:b3:74:b0:b2:11: 92:d4:21:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4+Lt5EN2yIHs58TzDliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk MmNkMGUwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EyhjYWYwMmM2MmVlNmVmMmY2MTFjMjM3ODNmN2MxNjE3YmY2MmY5ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmnVQw1MnLiYPOx74oXLmTI4Px6p GUO/fDAPG5RO0uXdK4pS6NILNgZUl3yfBTO7sYZTLmO1Txf8+Gx1Nt96VM7luZQ7 0nR5NEck1iFAV4qieKATJ0S4uPEjgPhwUa4Ku8GNH0xE53ahNOUWxeJcZLSrc/Ic MNB3CdcNOWnbFJV7yjDDeJX0jVEsglRPBDiy1R9gA8i7LKxh8QU6KYz2pllojjQq PVL8YTdgiM8Hm7it1I3xkvj49ZQu+tzC/8/992Kw/sovWI0lJd/Mw3zu20BVRzWQ mCfzrIg62muZlWHh/LhDWGw71VlsonFr5GceIQWIncDFTFAQ26x/U7ActwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrwLGLubvL2EcI3g/fBYXv2L54hMB8GA1UdIwQY MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0 LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzlhZAIn 7qNKXP0i43TtFcgxzkl2VDhbYl1tgWjb8PKmeLTJnPsP//VI71rwUnbENFI9xLyl ASo051rPfKR973FOFgEYmzOgqMBGCvtHzcEy1C3es0nt7JPUcUeUaaagP4xsdhux mm7+meKtW8jrBI5ivolVECo0/kfWzuvD0qrc5qmD6n9ZGTXT9u5zoqICTK24Evij KS0y0Q4PiqSV9BJ7l2szwaMGH59wbiX72+/CCTJrNLgzTCWfzPLVmYY/O6dtFhDX j7VCrccXMM9egYzl7mO9VWctmaDGstk4dhIn6LvoIxHC2PDiF2wJpHHAFowJ5N7f HrN0sLIRktQhIA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:29 2025 by rpki-client