This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json) Hash identifier: 5OfE54x/MH+9hBmcD4sc4AcH/90hUn3hUYGAABBm6ps= Subject key identifier: EB:6A:87:56:6E:41:75:25:94:A1:7F:C6:36:B9:08:AA:DE:26:98:EA Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Certificate serial: 019AF08898C71BFEABF91762013F5DA69CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft Manifest number: 108A Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=) 2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: Afa2bHDXLW5nCWIfYaxee5zu+z+79mH4Mh9YLJ+sZzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:98:c7:1b:fe:ab:f9:17:62:01:3f:5d:a6:9c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=eb6a87566e41752594a17fc636b908aade2698ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:78:74:89:83:cf:72:9a:87:19:70:97:15: af:fe:05:75:ee:cc:61:f6:7a:74:12:dd:84:da:d2: 44:d0:7e:f5:b0:a7:ce:77:af:68:17:11:bb:1b:62: 65:e4:01:0f:dc:ed:41:5e:98:4e:df:13:d2:65:f3: 39:f5:b5:4f:37:b4:1e:38:ee:83:5c:ba:24:73:89: 09:4d:4c:4a:a7:83:2d:95:b7:07:99:f5:fc:a3:0a: 13:b4:a2:fd:d5:dc:6a:68:d4:60:d2:30:a6:0e:4d: ff:51:ca:a4:c2:05:f1:71:17:1e:55:bc:ad:9f:95: 8f:bb:0c:e5:aa:a0:76:5b:8a:c3:b4:68:3b:71:b9: 6a:ee:69:ee:5b:bf:89:0d:66:70:fe:66:2e:b5:ff: 73:ca:09:94:83:c8:90:76:a4:3a:b5:34:20:89:41: d6:97:ea:0c:01:c3:f9:1d:9a:69:5e:1b:0f:ab:2e: 15:95:74:d7:71:f0:ec:0b:d7:20:dd:e4:23:3c:77: 42:68:37:a7:69:be:42:72:fe:29:de:30:d6:75:4d: a2:c9:e1:f4:ee:fe:50:50:a3:20:99:1a:88:da:4c: 02:49:8d:3c:e6:9f:0e:71:e6:91:e7:77:bc:e7:af: 42:4a:eb:a4:6a:83:15:d1:b7:1d:7f:91:25:85:b4: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:87:56:6E:41:75:25:94:A1:7F:C6:36:B9:08:AA:DE:26:98:EA X509v3 Authority Key Identifier: keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f9:95:05:30:6f:33:8a:6b:d6:22:11:52:d0:be:2b:53:d4: a3:a1:05:33:e8:9a:94:24:e6:a5:df:cf:99:1b:42:7e:50:06: b4:be:04:f8:d8:5a:6e:60:03:48:60:98:ee:f8:2b:08:b2:57: 69:b4:0b:19:2f:c5:3a:ed:17:44:5d:0f:c8:29:51:1e:9f:03: 36:e8:61:53:33:5d:e1:28:77:c9:e1:bb:f4:2b:94:5a:3d:0b: c0:d7:5d:43:af:cb:38:23:9b:27:38:f3:b3:1a:11:e3:91:9b: 66:bd:bf:88:09:83:c2:ac:77:60:2b:be:7a:b1:e4:73:5f:91: f2:cf:94:d0:df:2e:32:f1:bc:c1:85:7b:14:74:96:cf:b9:d9: 0d:5a:2b:4e:6a:7e:63:36:af:64:4c:b2:cf:a9:28:c9:e9:bf: 8c:5c:a8:c4:94:36:be:b6:38:f0:bd:b7:fa:8b:99:9f:c3:fa: 5c:4c:98:ca:24:56:82:7c:55:dd:f7:23:3e:0a:4d:d6:2f:a9: 42:10:f1:ea:1c:46:71:43:c3:2e:91:9c:43:b9:3a:bd:2f:c9: 32:50:39:42:91:91:1a:08:3b:9f:3b:3d:3d:c8:be:91:e8:33: d9:37:27:20:f5:99:ee:ba:c9:18:16:25:fb:d2:07:61:74:61: a8:f0:95:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJjHG/6r+RdiAT9dppzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0 ZjRkYzAwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD EyhlYjZhODc1NjZlNDE3NTI1OTRhMTdmYzYzNmI5MDhhYWRlMjY5OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHh4dImDz3KahxlwlxWv/gV17sxh 9np0Et2E2tJE0H71sKfOd69oFxG7G2Jl5AEP3O1BXphO3xPSZfM59bVPN7QeOO6D XLokc4kJTUxKp4MtlbcHmfX8owoTtKL91dxqaNRg0jCmDk3/UcqkwgXxcRceVbyt n5WPuwzlqqB2W4rDtGg7cblq7mnuW7+JDWZw/mYutf9zygmUg8iQdqQ6tTQgiUHW l+oMAcP5HZppXhsPqy4VlXTXcfDsC9cg3eQjPHdCaDenab5Ccv4p3jDWdU2iyeH0 7v5QUKMgmRqI2kwCSY085p8OceaR53e8569CSuukaoMV0bcdf5ElhbRSjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtqh1ZuQXUllKF/xja5CKreJpjqMB8GA1UdIwQY MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfmVBTBv M4pr1iIRUtC+K1PUo6EFM+ialCTmpd/PmRtCflAGtL4E+NhabmADSGCY7vgrCLJX abQLGS/FOu0XRF0PyClRHp8DNuhhUzNd4Sh3yeG79CuUWj0LwNddQ6/LOCObJzjz sxoR45GbZr2/iAmDwqx3YCu+erHkc1+R8s+U0N8uMvG8wYV7FHSWz7nZDVorTmp+ YzavZEyyz6koyem/jFyoxJQ2vrY48L23+ouZn8P6XEyYyiRWgnxV3fcjPgpN1i+p QhDx6hxGcUPDLpGcQ7k6vS/JMlA5QpGRGgg7nzs9Pci+kegz2TcnIPWZ7rrJGBYl +9IHYXRhqPCVMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:06 2025 by rpki-client