This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json) Hash identifier: 5qML9zNr9bqh5myfJtETyALViiRdxftqQPF98Q8wZPk= Subject key identifier: 6B:A0:6B:15:9B:44:DF:56:28:85:B9:16:0E:17:39:21:39:6A:5F:53 Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019AF23FB109D8D67A52B201C5BB41C4EA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=) 2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: AAwMhxCHdXoSV1FD4JmaDEVb/5kLxftfgR7Ux5KuFvE=) 3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=) 4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=) 5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:09:d8:d6:7a:52:b2:01:c5:bb:41:c4:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=6ba06b159b44df562885b9160e173921396a5f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:dc:44:b5:54:63:d4:a2:71:70:b6:f3:64: 66:25:89:b4:e8:04:94:ee:e2:5c:3c:e3:d8:87:35: 20:59:0f:b4:c4:b9:3c:6d:11:82:2a:b0:7d:14:01: 68:c2:44:e4:4b:a3:0b:30:93:e1:f2:32:e1:5b:50: da:bf:02:ee:7b:9c:d7:53:ff:47:2e:29:34:5e:c3: 93:b1:0d:8d:54:7a:5a:b8:c1:74:f6:0c:be:26:4f: 86:4e:e3:ef:a7:37:a3:64:cb:ba:23:42:49:01:f6: 68:40:40:d6:68:54:83:fd:69:c7:2c:c4:35:0d:ef: 8f:52:d3:dc:4d:1a:c3:ad:bb:70:55:2b:f6:8f:f5: 22:15:59:04:fa:37:ea:f4:ee:84:ae:3f:4f:05:ae: ba:ec:7e:df:5d:9c:be:06:f7:45:91:fc:d7:be:7a: 6c:b3:aa:50:31:08:aa:aa:a4:d7:e6:b9:97:79:84: 29:58:fe:18:41:25:72:1d:1d:3e:0a:70:41:a7:93: 4b:49:dc:77:d3:08:da:18:65:28:d0:0b:ba:39:78: cf:05:a0:44:95:ec:93:7d:85:cb:c9:c7:be:9b:24: 18:6e:8c:04:97:76:6f:12:9f:6e:21:8b:2b:de:d0: 17:39:42:1f:c5:c6:0d:c2:89:eb:cc:87:d3:50:5a: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A0:6B:15:9B:44:DF:56:28:85:B9:16:0E:17:39:21:39:6A:5F:53 X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a4:89:a6:79:cf:c1:3e:d6:7a:f7:66:26:f9:0f:7e:67:85: 29:2a:a7:7b:28:4b:1a:98:04:43:b8:d5:d5:93:3a:dd:d4:8e: fd:b5:e5:d4:49:a9:be:08:63:65:cf:d0:d3:09:24:ba:32:08: d6:2c:f9:36:5c:f6:27:48:9a:17:90:3f:14:cc:d4:8e:27:13: 6f:03:a5:80:88:e3:19:50:1f:91:a4:a2:8b:b5:07:e5:17:c0: c6:46:b2:8a:41:6a:f0:f6:e6:65:e6:a1:9d:22:4c:a7:20:44: 95:ad:d0:f1:8f:51:7d:4e:c0:77:1f:f6:56:fc:a8:6c:2b:a2: 28:3c:b5:ec:62:89:f4:0f:9f:88:46:46:03:f2:dd:5f:32:91: 40:5b:77:d8:e0:bb:ee:f7:5c:c3:37:3b:61:e0:9d:6b:23:7e: e3:c9:04:90:23:96:e6:15:7a:3f:86:f0:04:57:32:69:d4:05: 29:8a:8a:0e:56:9a:94:e7:78:d6:7d:64:82:37:f4:54:5e:6f: 79:6d:b7:92:98:5c:10:14:8e:1e:e6:e8:84:3c:37:ee:a3:7f: 4c:85:82:d7:8a:82:f9:2a:0e:07:95:b6:a7:76:fb:8f:4a:a9: 77:11:b6:9c:19:99:77:3f:f0:1f:5f:9c:d4:de:29:31:16:60: 9e:68:d5:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7EJ2NZ6UrIBxbtBxOp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg2YmEwNmIxNTliNDRkZjU2Mjg4NWI5MTYwZTE3MzkyMTM5NmE1ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrcRLVUY9SicXC282RmJYm06ASU 7uJcPOPYhzUgWQ+0xLk8bRGCKrB9FAFowkTkS6MLMJPh8jLhW1DavwLue5zXU/9H Lik0XsOTsQ2NVHpauMF09gy+Jk+GTuPvpzejZMu6I0JJAfZoQEDWaFSD/WnHLMQ1 De+PUtPcTRrDrbtwVSv2j/UiFVkE+jfq9O6Erj9PBa667H7fXZy+BvdFkfzXvnps s6pQMQiqqqTX5rmXeYQpWP4YQSVyHR0+CnBBp5NLSdx30wjaGGUo0Au6OXjPBaBE leyTfYXLyce+myQYbowEl3ZvEp9uIYsr3tAXOUIfxcYNwonrzIfTUFovTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGugaxWbRN9WKIW5Fg4XOSE5al9TMB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6SJpnnP wT7WevdmJvkPfmeFKSqneyhLGpgEQ7jV1ZM63dSO/bXl1EmpvghjZc/Q0wkkujII 1iz5Nlz2J0iaF5A/FMzUjicTbwOlgIjjGVAfkaSii7UH5RfAxkayikFq8PbmZeah nSJMpyBEla3Q8Y9RfU7Adx/2VvyobCuiKDy17GKJ9A+fiEZGA/LdXzKRQFt32OC7 7vdcwzc7YeCdayN+48kEkCOW5hV6P4bwBFcyadQFKYqKDlaalOd41n1kgjf0VF5v eW23kphcEBSOHubohDw37qN/TIWC14qC+SoOB5W2p3b7j0qpdxG2nBmZdz/wH1+c 1N4pMRZgnmjVRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:45 2025 by rpki-client