This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json) Hash identifier: acgI4hgBosxp1a0T5Xglvnk0dSC3FjPSmnBF+2P8+do= Subject key identifier: 8D:F5:19:54:3B:59:88:A6:DC:BA:DF:25:05:70:84:D1:EC:BD:12:F6 Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Certificate serial: 019AF5E5D9F8994E81E822BC540D532DB82B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 23:01:12 +0000 Manifest this update: Sat 06 Dec 2025 23:01:12 +0000 Manifest next update: Sun 07 Dec 2025 23:01:12 +0000 Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=) 2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: dxAGjR9LKVg8HAGN6AcEAT2LZxhMgZQARFVXYPSJvy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:d9:f8:99:4e:81:e8:22:bc:54:0d:53:2d:b8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Validity Not Before: Dec 6 23:01:12 2025 GMT Not After : Dec 7 23:01:12 2025 GMT Subject: CN=8df519543b5988a6dcbadf25057084d1ecbd12f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:97:43:65:77:df:d9:91:8f:98:c5:72:6d: 55:1c:f0:6b:46:36:10:88:d8:a8:4b:9c:8a:f0:e8: 24:b0:6d:06:d8:bc:cb:ba:a2:dc:a4:ec:9f:45:90: c7:4a:cd:ac:b9:d7:a5:68:9a:e4:ad:f6:33:97:2f: ed:4e:8d:0a:42:d3:5e:7d:12:43:50:f3:b0:7a:5e: a0:de:4f:9e:6c:00:1a:b3:7b:07:ce:60:89:b2:2b: 4a:97:93:98:cf:14:c6:16:47:58:0c:aa:8c:20:11: 97:6a:b5:bc:a8:e6:93:59:74:69:74:18:ee:fc:f5: 9b:bf:4a:d1:54:8a:4e:f3:58:68:1f:c1:43:0b:a3: 3c:c4:ca:61:f8:30:1d:22:31:85:dc:c7:5f:66:9d: 5d:0f:1a:aa:7c:1d:04:9e:d5:92:68:95:ab:53:a7: b6:0d:b0:0c:bd:a7:7d:de:a9:13:dc:d0:b3:f5:77: 55:cc:97:9d:f1:38:c8:98:e0:ca:7d:c3:78:cb:57: d6:49:ae:53:74:8d:fb:32:c4:c2:4d:53:34:ac:ff: 92:c0:9b:92:ed:43:c6:33:88:e1:ff:4b:35:ba:99: d5:8d:62:0d:4d:d9:87:ca:de:a0:94:3e:2d:41:22: 00:63:7a:16:a3:5b:85:42:32:22:90:cc:89:87:b8: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F5:19:54:3B:59:88:A6:DC:BA:DF:25:05:70:84:D1:EC:BD:12:F6 X509v3 Authority Key Identifier: keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:94:03:32:b0:24:0e:31:3b:6c:7e:1b:c2:c7:a9:b7:f4:12: f0:90:bd:3f:50:3d:da:79:af:2d:f8:f5:57:b0:41:7b:df:c0: d4:18:b6:97:11:59:6b:c1:36:bc:3d:87:bc:a7:9a:60:9c:e5: 45:74:13:0b:ce:bc:8d:81:ce:de:f4:52:2d:00:71:f0:c6:ba: 33:40:9a:f6:90:cf:f5:81:05:57:1d:ef:49:7a:cf:29:d0:24: f7:84:10:f7:70:29:5e:e3:c2:f9:89:7e:4b:35:0c:c3:2d:cc: 1a:c4:83:b3:9d:d0:e7:6f:a8:1f:55:a7:67:a6:37:37:d7:64: 8e:b2:90:2c:95:4a:d3:7f:bd:d0:dd:09:ff:d4:cd:06:dc:a5: 5d:9a:21:e2:2e:e2:84:ea:0c:b9:f1:c2:4b:83:b8:c3:07:9f: 6f:82:45:a5:94:3a:8e:d4:70:03:ea:e8:ca:c7:be:d9:59:8b: e5:bc:21:d6:93:ec:b2:1e:da:32:a8:62:24:16:f1:c3:5a:35: b6:57:ac:9e:39:01:1f:68:6c:84:8f:fa:8c:f0:a4:fa:a3:03: ea:7e:5f:da:83:43:c8:ba:49:0f:15:84:c7:83:1b:83:21:b0: 86:93:e0:57:f6:8a:62:3d:f7:4a:96:c4:d5:33:f0:b9:01:10: 0b:af:1b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dn4mU6B6CK8VA1TLbgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZmU2M2VlOGEyM2Y0OTE2ZTQwNTM1MzFlNjk1MGRiNmMz MWU4MDUwHhcNMjUxMjA2MjMwMTEyWhcNMjUxMjA3MjMwMTEyWjAzMTEwLwYDVQQD Eyg4ZGY1MTk1NDNiNTk4OGE2ZGNiYWRmMjUwNTcwODRkMWVjYmQxMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u2XQ2V339mRj5jFcm1VHPBrRjYQ iNioS5yK8OgksG0G2LzLuqLcpOyfRZDHSs2sudelaJrkrfYzly/tTo0KQtNefRJD UPOwel6g3k+ebAAas3sHzmCJsitKl5OYzxTGFkdYDKqMIBGXarW8qOaTWXRpdBju /PWbv0rRVIpO81hoH8FDC6M8xMph+DAdIjGF3MdfZp1dDxqqfB0EntWSaJWrU6e2 DbAMvad93qkT3NCz9XdVzJed8TjImODKfcN4y1fWSa5TdI37MsTCTVM0rP+SwJuS 7UPGM4jh/0s1upnVjWINTdmHyt6glD4tQSIAY3oWo1uFQjIikMyJh7hJ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI31GVQ7WYim3LrfJQVwhNHsvRL2MB8GA1UdIwQY MBaAFLb+Y+6KI/SRbkBTUx5pUNtsMegFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODkt YTNkMzc3YzZmZWVmLzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODktYTNkMzc3YzZmZWVm LzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJQDMrAk DjE7bH4bwsept/QS8JC9P1A92nmvLfj1V7BBe9/A1Bi2lxFZa8E2vD2HvKeaYJzl RXQTC868jYHO3vRSLQBx8Ma6M0Ca9pDP9YEFVx3vSXrPKdAk94QQ93ApXuPC+Yl+ SzUMwy3MGsSDs53Q52+oH1WnZ6Y3N9dkjrKQLJVK03+90N0J/9TNBtylXZoh4i7i hOoMufHCS4O4wwefb4JFpZQ6jtRwA+royse+2VmL5bwh1pPssh7aMqhiJBbxw1o1 tlesnjkBH2hshI/6jPCk+qMD6n5f2oNDyLpJDxWEx4MbgyGwhpPgV/aKYj33SpbE 1TPwuQEQC68b4w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:10:09 2025 by rpki-client