This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json) Hash identifier: 2zIJjoqlEJv1o02WvxlvUjsUQlRH+XWjRUMHC1MdptA= Subject key identifier: C2:7F:61:58:CD:DA:CC:54:CE:6A:E8:5E:8F:02:0E:53:C6:07:64:E6 Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Certificate serial: 019AF19AC850D17C9A5D60A7B24EA6BDBCBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=) 2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: ypiuMDcDMKDuvgYm8+6sa7I60mI5Ivc0JXKnY6UNRIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c8:50:d1:7c:9a:5d:60:a7:b2:4e:a6:bd:bc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=c27f6158cddacc54ce6ae85e8f020e53c60764e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:f2:11:ca:ac:15:76:57:cc:6d:c6:11:95: e4:f3:53:82:bf:91:dd:eb:a7:37:35:3d:b7:15:ba: b3:21:99:12:15:2a:6a:95:bc:c7:ef:9f:12:5e:b2: ae:f1:9d:29:52:9a:46:97:3e:99:5b:e3:93:a5:3e: 12:2b:fa:d8:ed:46:4d:de:21:19:82:0f:3f:35:cb: d8:3e:db:26:65:f2:89:e7:42:b6:2e:5e:0d:d2:f5: fe:f4:98:b4:d7:69:d1:56:9a:a8:d7:a2:2c:c3:6f: ea:5c:5f:99:f8:c9:c5:3c:67:b3:e6:6e:80:f2:e9: 38:0c:71:16:b3:2d:07:0f:72:b1:d8:45:ea:61:54: 50:d5:cb:11:20:78:3f:79:ec:29:a7:f0:5c:3e:55: d5:5e:88:0b:bf:a4:15:f6:53:bc:84:94:ef:a1:79: 53:92:84:86:82:05:59:2d:a9:16:6d:00:1e:7a:6d: bb:fa:93:7b:27:3d:85:d7:37:86:42:74:34:00:d4: 63:00:30:96:7e:6b:89:b5:6d:32:5f:b1:76:a1:3f: 9a:51:fc:05:2e:ef:78:58:56:18:82:52:1e:50:92: 0c:bc:a0:ce:70:b6:41:09:e7:2e:da:2e:96:da:97: c0:a8:53:cf:d0:f6:3a:5c:7c:51:f8:02:e9:a1:52: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7F:61:58:CD:DA:CC:54:CE:6A:E8:5E:8F:02:0E:53:C6:07:64:E6 X509v3 Authority Key Identifier: keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:79:27:29:83:f2:3f:2f:ee:f6:09:f3:ae:b3:64:f5:f9: 2f:e0:51:ee:b5:79:9b:88:95:eb:71:c8:79:da:30:91:ec:db: e7:85:5c:9b:6d:78:7a:03:8f:be:b3:e8:83:0a:ff:8b:8a:ea: 3a:1a:44:a4:d3:98:8d:25:af:d9:fe:58:4b:fe:e8:84:0e:b9: 0d:85:92:2f:0f:70:f3:d1:b1:25:b1:db:4e:0e:f6:96:62:03: 16:19:33:29:1e:db:7a:d8:66:ef:e3:d4:13:19:ff:b3:25:65: 84:1c:20:07:de:cb:50:f4:e4:b1:38:63:09:54:a9:be:86:83: 9d:0c:8e:6f:9e:4b:2e:03:32:f9:1f:e3:20:97:95:0f:63:91: 2a:5b:b1:4e:03:fa:78:1f:97:27:54:b3:df:d0:9b:be:3c:80: 96:fb:5b:68:d6:17:86:62:d8:eb:88:1a:39:97:58:7d:e4:b2: 8a:73:c4:84:a8:de:0c:18:c7:37:d6:ae:58:70:71:61:31:34: cc:15:f7:ad:ee:e9:22:16:9f:69:d4:3b:fa:30:54:98:cb:05: 81:49:0e:60:03:3b:a8:98:72:34:9b:63:2e:ee:cc:97:55:ca: e3:9b:63:0e:4c:db:8c:75:b0:35:4d:83:bf:97:d7:66:2a:ce: b3:bc:d4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmshQ0XyaXWCnsk6mvby6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx ZDcxYWUwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EyhjMjdmNjE1OGNkZGFjYzU0Y2U2YWU4NWU4ZjAyMGU1M2M2MDc2NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41jyEcqsFXZXzG3GEZXk81OCv5Hd 66c3NT23FbqzIZkSFSpqlbzH758SXrKu8Z0pUppGlz6ZW+OTpT4SK/rY7UZN3iEZ gg8/NcvYPtsmZfKJ50K2Ll4N0vX+9Ji012nRVpqo16Isw2/qXF+Z+MnFPGez5m6A 8uk4DHEWsy0HD3Kx2EXqYVRQ1csRIHg/eewpp/BcPlXVXogLv6QV9lO8hJTvoXlT koSGggVZLakWbQAeem27+pN7Jz2F1zeGQnQ0ANRjADCWfmuJtW0yX7F2oT+aUfwF Lu94WFYYglIeUJIMvKDOcLZBCecu2i6W2pfAqFPP0PY6XHxR+ALpoVJpawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ/YVjN2sxUzmroXo8CDlPGB2TmMB8GA1UdIwQY MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt ODYzZGFlY2ZjMmU4LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4 LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfl5JymD 8j8v7vYJ866zZPX5L+BR7rV5m4iV63HIedowkezb54Vcm214egOPvrPogwr/i4rq OhpEpNOYjSWv2f5YS/7ohA65DYWSLw9w89GxJbHbTg72lmIDFhkzKR7bethm7+PU Exn/syVlhBwgB97LUPTksThjCVSpvoaDnQyOb55LLgMy+R/jIJeVD2ORKluxTgP6 eB+XJ1Sz39CbvjyAlvtbaNYXhmLY64gaOZdYfeSyinPEhKjeDBjHN9auWHBxYTE0 zBX3re7pIhafadQ7+jBUmMsFgUkOYAM7qJhyNJtjLu7Ml1XK45tjDkzbjHWwNU2D v5fXZirOs7zUAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:03 2025 by rpki-client