This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json) Hash identifier: 0RL0XVjdGUdoSvKziu2VErRFHESBOFZOHQQMr8VaOys= Subject key identifier: B3:AE:3E:D3:32:DE:59:AE:C2:E6:E8:D2:E3:67:C9:4C:63:D2:2C:C0 Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30 Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130 Certificate serial: 019AF2ADA1EABFFFA233BE4F9E6DF89E1160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=) 2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: OX4C7GtjXZZROhIhbIv/FTaCVAXxPwd5kf8GadgoyC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a1:ea:bf:ff:a2:33:be:4f:9e:6d:f8:9e:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130 Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=b3ae3ed332de59aec2e6e8d2e367c94c63d22cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:56:fa:12:56:5c:35:ed:0f:19:9f:7d:55: fb:67:5f:c0:f4:e2:6d:a6:2c:9c:6d:81:9b:0e:a4: f4:e5:36:66:1e:65:a5:c4:8a:b5:61:3c:66:aa:8c: 6e:95:16:d6:47:a7:db:d1:c4:c8:42:e5:8d:54:f3: b7:de:67:26:58:b7:4b:24:37:11:30:45:04:6b:fa: af:97:76:75:98:0b:b8:9d:a0:45:65:0b:20:54:46: 38:4d:62:73:c4:2c:8b:32:d4:5a:9c:20:0e:6b:5e: 40:67:73:d7:cb:21:af:fa:22:23:40:23:f0:fa:d4: 4f:f1:c6:dc:d7:24:52:bb:bd:74:64:d5:1a:f6:21: 42:f2:54:c7:28:ae:99:b5:64:0f:f3:2a:5b:3a:ea: e2:24:42:72:f2:d3:27:bf:dc:8e:18:bd:5a:39:fe: ec:4b:0b:6d:da:51:2d:cf:f1:b4:c5:78:e8:d5:b8: c6:00:66:6f:20:b0:e3:7a:12:62:77:78:52:5f:4c: dc:b3:76:ae:27:5b:61:a9:92:84:c2:ea:05:c5:45: 92:46:3d:73:6c:08:4d:66:12:94:f3:a1:01:cc:03: d8:fe:55:ca:56:12:a7:ab:ce:dc:d0:c5:fc:9e:d3: 4d:42:5a:32:21:1e:34:48:d3:56:03:99:07:ea:53: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AE:3E:D3:32:DE:59:AE:C2:E6:E8:D2:E3:67:C9:4C:63:D2:2C:C0 X509v3 Authority Key Identifier: keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:79:ef:44:a7:17:d4:3a:c1:30:07:8f:42:96:ac:51:e4: f5:29:19:23:d2:7f:30:e5:13:9c:69:4f:19:b0:be:2e:0f:bd: a6:6f:3a:6f:2e:19:7e:48:46:90:d7:0d:e8:ee:8a:bd:b8:40: 0e:35:89:b5:f1:04:8c:fd:5b:20:78:44:a6:6f:1e:43:83:cd: af:1c:b4:80:e0:e2:84:e3:2a:ab:70:bc:83:14:1d:32:77:f4: 0e:34:4e:57:e5:69:c4:e7:44:5b:e5:6f:76:d7:d7:9e:f2:4f: 08:19:f8:9e:d2:50:7b:2b:60:c4:fa:fe:2e:67:0c:be:17:3f: c4:24:8d:8f:07:82:2d:53:26:23:f3:37:5b:00:1f:60:2b:32: 07:25:f9:5f:b4:14:86:e0:7f:d1:75:be:ca:52:3c:f2:33:00: 27:2b:62:92:f1:9d:1b:32:f6:65:bc:1c:03:29:7e:56:59:b9: 26:14:d2:47:5b:7b:a0:d0:7d:fd:c4:0c:e4:ee:93:e7:1c:fd: 61:c7:35:c4:eb:52:12:69:fb:6a:57:01:81:56:7f:39:e6:a9: 95:6f:92:50:e0:f0:11:2f:24:85:5e:e2:c1:73:b7:12:14:aa: 97:c9:87:8c:be:af:aa:d5:b0:e4:b0:64:29:ef:e0:b3:4b:00: 81:e3:51:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraHqv/+iM75Pnm34nhFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz OWYxMzAwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhiM2FlM2VkMzMyZGU1OWFlYzJlNmU4ZDJlMzY3Yzk0YzYzZDIyY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7BW+hJWXDXtDxmffVX7Z1/A9OJt piycbYGbDqT05TZmHmWlxIq1YTxmqoxulRbWR6fb0cTIQuWNVPO33mcmWLdLJDcR MEUEa/qvl3Z1mAu4naBFZQsgVEY4TWJzxCyLMtRanCAOa15AZ3PXyyGv+iIjQCPw +tRP8cbc1yRSu710ZNUa9iFC8lTHKK6ZtWQP8ypbOuriJEJy8tMnv9yOGL1aOf7s Swtt2lEtz/G0xXjo1bjGAGZvILDjehJid3hSX0zcs3auJ1thqZKEwuoFxUWSRj1z bAhNZhKU86EBzAPY/lXKVhKnq87c0MX8ntNNQloyIR40SNNWA5kH6lOv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOuPtMy3lmuwubo0uNnyUxj0izAMB8GA1UdIwQY MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8J570Sn F9Q6wTAHj0KWrFHk9SkZI9J/MOUTnGlPGbC+Lg+9pm86by4ZfkhGkNcN6O6KvbhA DjWJtfEEjP1bIHhEpm8eQ4PNrxy0gODihOMqq3C8gxQdMnf0DjROV+VpxOdEW+Vv dtfXnvJPCBn4ntJQeytgxPr+LmcMvhc/xCSNjweCLVMmI/M3WwAfYCsyByX5X7QU huB/0XW+ylI88jMAJytikvGdGzL2ZbwcAyl+Vlm5JhTSR1t7oNB9/cQM5O6T5xz9 Ycc1xOtSEmn7alcBgVZ/OeaplW+SUODwES8khV7iwXO3EhSql8mHjL6vqtWw5LBk Ke/gs0sAgeNRJw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:02 2025 by rpki-client