This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json) Hash identifier: mgeWRcqnPFCsWWZpfm6/13PT5zt7CD9H3DW1MIpBLQQ= Subject key identifier: 0D:AD:ED:07:3B:C9:04:CC:C8:F5:B7:48:9A:55:24:C0:CD:2A:FE:C8 Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95 Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95 Certificate serial: 019AF2402A7FD17A906D02FF96D3B49C72EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft Manifest number: 12B0 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=) 2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: E8KzxlXdekEOfNsJYJkPJTwR/IJvJ68pm0pBwjbSlSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2a:7f:d1:7a:90:6d:02:ff:96:d3:b4:9c:72:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=0daded073bc904ccc8f5b7489a5524c0cd2afec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:29:7b:a7:99:45:2b:f3:a8:06:52:98:35: f5:86:0c:b8:23:28:ab:69:2c:05:8b:71:f9:2f:67: f5:2d:e9:72:16:81:de:e3:45:a2:3e:78:7f:2f:1d: b1:ca:f3:cd:4b:71:07:f0:fd:1a:d0:d4:13:0d:95: 0f:31:e3:5f:ab:a5:05:8b:28:08:13:1a:ca:71:c1: 65:2e:24:ff:04:36:bc:6a:08:11:43:f0:d1:16:2e: d7:46:32:97:71:9b:89:0e:60:e6:e6:24:b6:44:1e: cc:b0:99:36:83:ec:ba:32:7e:88:27:95:1a:cf:c7: 67:28:06:dc:eb:6d:35:18:59:70:05:b4:d3:5d:f0: 03:c6:12:1f:63:8c:72:84:64:9a:da:55:bb:e6:3f: 5e:26:0e:74:6d:f7:89:b2:5f:1a:f6:da:df:e2:8a: a4:b2:67:37:07:e8:f7:ff:95:f1:a9:84:e8:f1:d4: cc:33:81:fa:2b:4b:4f:61:53:90:d4:72:a9:6c:09: a5:b0:9a:e5:33:74:6a:57:0f:a0:6a:51:62:0c:eb: b6:ee:16:93:fc:96:6c:75:45:23:5b:6c:0b:4c:78: d1:33:ed:d1:80:e0:8d:b6:e5:a5:e6:80:6c:7c:fe: e4:9e:91:39:69:8e:e8:07:c3:7d:38:47:3b:ff:db: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:ED:07:3B:C9:04:CC:C8:F5:B7:48:9A:55:24:C0:CD:2A:FE:C8 X509v3 Authority Key Identifier: keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:34:a6:4a:11:49:83:9a:db:b2:42:ab:b8:e0:a7:1c:77:02: 5c:b9:05:96:28:d3:e7:16:39:00:6b:9d:bf:b8:16:11:17:66: 34:e5:62:b8:a3:81:65:0f:1c:e1:11:c4:4a:ab:24:da:d1:78: b4:84:e6:6e:db:79:c9:09:76:c7:d8:00:6b:d8:24:d7:c4:2d: 4e:93:a3:ab:a4:63:2c:59:61:a0:3c:94:d9:8e:59:71:1c:f3: 5a:2c:ee:d6:a2:b8:2f:b1:fd:3f:27:8e:91:d8:f5:af:0b:71: a3:2e:cf:0e:b3:08:78:f6:78:51:d1:2a:5d:ab:ae:fc:e3:f4: 69:23:f0:fb:46:6a:be:59:a7:01:f8:1c:cb:62:b2:10:b7:56: 34:b8:34:09:4a:41:3a:17:3c:76:c7:96:76:4b:c9:dd:af:33: d8:e4:6f:8b:2f:d1:6a:dc:39:70:4f:29:e2:d7:85:09:1f:69: dc:71:8b:b7:db:01:1c:8a:3a:02:66:6a:96:4a:cb:fb:8c:3b: 2f:a2:b5:f8:cf:a7:a5:5c:29:90:fb:9f:62:94:4b:fa:11:2f: 64:43:79:45:25:97:b7:c1:03:e0:5e:df:99:f0:77:3a:01:c0: b9:b8:ba:8b:5b:9f:54:2c:f5:46:91:f4:83:c4:99:f7:2e:5f: 86:fe:64:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCp/0XqQbQL/ltO0nHLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTY3ZTdlZTM3ODM4ZjA3NTFjNDljNWU1ZjNlYzAwMDA2 NGFlOTUwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EygwZGFkZWQwNzNiYzkwNGNjYzhmNWI3NDg5YTU1MjRjMGNkMmFmZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Mpe6eZRSvzqAZSmDX1hgy4Iyir aSwFi3H5L2f1LelyFoHe40WiPnh/Lx2xyvPNS3EH8P0a0NQTDZUPMeNfq6UFiygI ExrKccFlLiT/BDa8aggRQ/DRFi7XRjKXcZuJDmDm5iS2RB7MsJk2g+y6Mn6IJ5Ua z8dnKAbc6201GFlwBbTTXfADxhIfY4xyhGSa2lW75j9eJg50bfeJsl8a9trf4oqk smc3B+j3/5XxqYTo8dTMM4H6K0tPYVOQ1HKpbAmlsJrlM3RqVw+galFiDOu27haT /JZsdUUjW2wLTHjRM+3RgOCNtuWl5oBsfP7knpE5aY7oB8N9OEc7/9tmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2t7Qc7yQTMyPW3SJpVJMDNKv7IMB8GA1UdIwQY MBaAFLUWfn7jeDjwdRxJxeXz7AAAZK6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzIt ZTIyYWVkMWYwOGVjLzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzItZTIyYWVkMWYwOGVj LzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzSmShFJ g5rbskKruOCnHHcCXLkFlijT5xY5AGudv7gWERdmNOViuKOBZQ8c4RHESqsk2tF4 tITmbtt5yQl2x9gAa9gk18QtTpOjq6RjLFlhoDyU2Y5ZcRzzWizu1qK4L7H9PyeO kdj1rwtxoy7PDrMIePZ4UdEqXauu/OP0aSPw+0ZqvlmnAfgcy2KyELdWNLg0CUpB Ohc8dseWdkvJ3a8z2ORviy/Ratw5cE8p4teFCR9p3HGLt9sBHIo6AmZqlkrL+4w7 L6K1+M+npVwpkPufYpRL+hEvZEN5RSWXt8ED4F7fmfB3OgHAubi6i1ufVCz1RpH0 g8SZ9y5fhv5kFg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:10 2025 by rpki-client