This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json) Hash identifier: 2qC8rmnu6/H1TmijrWyqPF7aoXJhANteR5Dk8j11Yl8= Subject key identifier: 80:0E:2A:7F:A7:66:7D:2D:40:36:3B:09:BD:CC:53:52:3C:D6:00:57 Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019AF19AC19F1B9757DD388E22C6207FD18F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft Manifest number: 1076 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=) 2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=) 3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: ZiGGI0NYIv9U9phpEBcEBDJ7BXbvQLCPDK1nhD+6yOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c1:9f:1b:97:57:dd:38:8e:22:c6:20:7f:d1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=800e2a7fa7667d2d40363b09bdcc53523cd60057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:e3:74:d4:c3:c5:00:00:ad:82:b0:74:39: b1:28:fc:5a:2c:5d:0e:ae:dc:62:75:2b:f5:90:6f: e2:0b:88:15:6e:a7:7a:71:18:67:1c:33:68:4c:f9: e0:59:62:3f:87:3d:90:a1:b2:02:91:d3:13:df:8b: de:96:f4:e5:a3:16:5f:10:dc:3a:45:ee:3d:06:24: be:76:ea:74:ee:05:80:73:83:82:42:56:f0:d9:cb: 43:06:52:81:9b:02:60:fc:67:d3:ec:58:ba:f6:a6: f9:ba:68:3d:6a:23:b0:73:ff:64:b4:40:60:38:4b: 97:9c:c0:45:af:e0:3c:a2:43:4c:d2:32:34:10:71: fd:38:df:a9:ad:38:10:de:b0:97:65:b6:8e:57:34: 22:60:07:63:0f:c5:5d:ac:3d:44:9f:95:ce:ae:d4: 84:5c:3c:09:93:09:13:55:9d:a1:17:b6:b9:9f:84: 85:26:37:be:6e:f2:af:25:3d:d0:22:2c:4c:ba:cd: 99:da:82:89:f5:94:4d:67:ac:ba:b0:60:21:e8:ce: f3:c1:62:28:29:b7:d1:c7:5e:00:b0:27:25:15:cd: 09:30:55:ba:aa:0f:3c:e2:b8:d9:80:8d:39:15:29: fd:a5:52:6f:6f:ed:58:d7:b9:67:e7:05:42:6a:5f: f9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0E:2A:7F:A7:66:7D:2D:40:36:3B:09:BD:CC:53:52:3C:D6:00:57 X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:db:62:f4:33:7a:7e:43:92:89:11:da:1a:58:38:be:f5:96: b4:82:4a:aa:d2:7a:6a:ba:17:dd:35:98:2c:46:02:d1:a4:dd: 09:a0:9c:41:2e:b3:ad:04:1f:e8:cf:ae:8c:ff:fb:59:6f:6a: a7:c6:46:a3:b4:53:71:ff:58:bd:88:a7:d2:d7:f0:34:54:fd: f8:98:b7:e3:12:a4:e9:e1:5f:85:77:0c:0f:e9:6e:78:ea:da: b4:2a:5e:4e:b7:50:a8:e4:1f:6d:65:1a:d1:db:57:c0:11:00: 2a:9e:6c:85:11:be:dd:3e:65:b6:7e:cf:53:49:0e:89:63:46: 49:93:6b:a1:93:50:7e:61:96:1d:b1:b5:d2:a7:a9:13:01:d9: 4d:70:d3:f1:3c:11:bc:93:ce:99:5e:4a:b4:6c:4e:70:53:d9: 17:55:5b:5b:05:64:68:8d:0a:f4:7e:e2:8e:94:70:f7:65:1d: fe:49:9c:2a:a1:51:82:fc:fa:5e:2c:a4:76:05:e3:90:a7:cf: f3:82:ee:0e:d9:72:02:cb:e8:4a:55:a6:86:9b:92:5d:0d:f0: a0:29:d6:a6:91:a4:63:1f:3a:40:54:bb:50:ed:bf:49:ad:b4: 1b:39:ad:3b:94:9d:09:66:f2:97:56:f5:ce:79:4c:2e:74:ed: 57:b2:bb:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsGfG5dX3TiOIsYgf9GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg4MDBlMmE3ZmE3NjY3ZDJkNDAzNjNiMDliZGNjNTM1MjNjZDYwMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJXjdNTDxQAArYKwdDmxKPxaLF0O rtxidSv1kG/iC4gVbqd6cRhnHDNoTPngWWI/hz2QobICkdMT34velvTloxZfENw6 Re49BiS+dup07gWAc4OCQlbw2ctDBlKBmwJg/GfT7Fi69qb5umg9aiOwc/9ktEBg OEuXnMBFr+A8okNM0jI0EHH9ON+prTgQ3rCXZbaOVzQiYAdjD8VdrD1En5XOrtSE XDwJkwkTVZ2hF7a5n4SFJje+bvKvJT3QIixMus2Z2oKJ9ZRNZ6y6sGAh6M7zwWIo KbfRx14AsCclFc0JMFW6qg884rjZgI05FSn9pVJvb+1Y17ln5wVCal/5JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAOKn+nZn0tQDY7Cb3MU1I81gBXMB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdti9DN6 fkOSiRHaGlg4vvWWtIJKqtJ6aroX3TWYLEYC0aTdCaCcQS6zrQQf6M+ujP/7WW9q p8ZGo7RTcf9YvYin0tfwNFT9+Ji34xKk6eFfhXcMD+lueOratCpeTrdQqOQfbWUa 0dtXwBEAKp5shRG+3T5ltn7PU0kOiWNGSZNroZNQfmGWHbG10qepEwHZTXDT8TwR vJPOmV5KtGxOcFPZF1VbWwVkaI0K9H7ijpRw92Ud/kmcKqFRgvz6XiykdgXjkKfP 84LuDtlyAsvoSlWmhpuSXQ3woCnWppGkYx86QFS7UO2/Sa20GzmtO5SdCWbyl1b1 znlMLnTtV7K7xQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client