This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json) Hash identifier: eGJudsZVyub0wdV95InGLg9nk9W9JO5C27XFNtXLoOg= Subject key identifier: FE:C0:C5:84:15:F5:95:B6:C4:DA:19:C8:BA:97:82:D9:93:60:69:6A Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Certificate serial: 019AF31C9962433CE807205824D05869B788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: 6lKPIqcPrzRWDrfZKjbub/XAyrLSuH1LERpEcIfgycM=) 2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:99:62:43:3c:e8:07:20:58:24:d0:58:69:b7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=fec0c58415f595b6c4da19c8ba9782d99360696a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:fa:c9:fb:5a:0c:3f:f2:de:19:30:a5:67: 4e:a7:2f:44:76:c8:9b:5b:db:e9:3a:8f:ce:7a:b5: 77:a4:49:50:09:24:e8:64:e6:1f:ec:fc:3e:7d:bc: ce:03:1a:2c:2f:cb:0a:07:aa:3e:a5:27:76:b3:0d: 7f:ce:fb:1d:fe:2a:ad:b7:61:11:ce:31:55:69:28: a8:2f:d4:54:ab:7f:2d:82:34:a5:e0:8a:3e:2f:bb: be:ed:4b:06:da:be:b3:84:02:80:9d:f4:be:54:54: b6:b1:df:85:5b:af:f6:b5:01:3d:51:34:68:f1:9a: 1e:85:0d:37:5a:22:0b:ce:6e:c5:aa:a9:d6:31:91: 1c:e1:04:5e:b4:82:e3:71:91:67:89:ff:5c:21:c9: 74:a0:86:07:f1:ab:6d:03:5d:66:89:10:a1:88:54: 62:9b:7b:a1:51:16:11:da:ac:a6:be:69:5e:0a:a9: 85:41:60:5f:d7:53:ad:36:11:38:6f:ff:7e:4a:65: c5:4f:15:09:b6:bb:bc:a0:34:48:ee:f2:fb:dc:8b: 28:8d:6e:28:08:cb:b6:96:4b:0b:ed:91:39:ca:da: a3:90:3f:e3:f0:a5:ab:df:5c:44:0b:eb:ba:8c:60: 8f:f3:82:1b:36:3f:06:46:d9:72:8f:48:c3:6b:d7: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C0:C5:84:15:F5:95:B6:C4:DA:19:C8:BA:97:82:D9:93:60:69:6A X509v3 Authority Key Identifier: keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:de:0c:dd:65:f6:7b:a3:11:03:99:6c:67:fe:68:23:aa:b9: 0b:a2:74:a1:eb:0d:7b:f2:e0:85:dd:be:9b:3f:cf:5f:f9:24: 04:9e:86:0f:2f:af:69:13:26:21:9b:b2:4c:28:68:54:4b:eb: d5:90:1e:5f:f9:d9:c1:a0:06:4e:4e:60:9b:20:bb:4e:d5:ac: aa:81:25:ef:33:82:a2:31:f4:88:10:6e:b6:14:24:6c:9c:48: 50:93:b8:cb:0b:6a:0e:94:5d:c3:92:d9:c9:e5:7f:4f:1f:67: 77:da:a3:27:0f:81:23:5e:5a:71:a2:28:22:64:39:dd:03:7e: 67:18:53:d2:9f:ee:e5:26:7e:46:48:35:31:f9:18:2b:1b:a4: 2b:c2:0d:26:1f:2e:46:3e:fc:ac:81:de:d7:10:cf:16:48:fe: cb:67:3d:a3:ff:ed:9a:54:27:66:50:30:d6:fa:2e:d4:74:95: 58:18:bf:76:98:6d:bc:07:51:b2:cb:91:a7:19:8e:89:b6:b7: 5f:62:a5:0a:4e:5d:1e:47:e2:a6:73:be:a0:b6:10:bc:2c:dd: a8:b8:34:24:81:28:54:36:07:75:f0:6d:5a:53:07:0b:e4:36: 71:eb:6a:c5:6e:3f:a8:a4:ec:7f:94:99:ad:2e:47:be:b5:c9: 30:5d:90:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJliQzzoByBYJNBYabeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZDdmODE3ZDdlNmRlZDU2ZWRlZGM0NDQ4OGNkNDFjMDUy YTBkYzUwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EyhmZWMwYzU4NDE1ZjU5NWI2YzRkYTE5YzhiYTk3ODJkOTkzNjA2OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBH6yftaDD/y3hkwpWdOpy9Edsib W9vpOo/OerV3pElQCSToZOYf7Pw+fbzOAxosL8sKB6o+pSd2sw1/zvsd/iqtt2ER zjFVaSioL9RUq38tgjSl4Io+L7u+7UsG2r6zhAKAnfS+VFS2sd+FW6/2tQE9UTRo 8ZoehQ03WiILzm7FqqnWMZEc4QRetILjcZFnif9cIcl0oIYH8attA11miRChiFRi m3uhURYR2qymvmleCqmFQWBf11OtNhE4b/9+SmXFTxUJtru8oDRI7vL73IsojW4o CMu2lksL7ZE5ytqjkD/j8KWr31xEC+u6jGCP84IbNj8GRtlyj0jDa9fanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7AxYQV9ZW2xNoZyLqXgtmTYGlqMB8GA1UdIwQY MBaAFP7X+BfX5t7Vbt7cREiM1BwFKg3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMt N2NmOWE1ZmI2YTljLzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMtN2NmOWE1ZmI2YTlj LzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA194M3WX2 e6MRA5lsZ/5oI6q5C6J0oesNe/Lghd2+mz/PX/kkBJ6GDy+vaRMmIZuyTChoVEvr 1ZAeX/nZwaAGTk5gmyC7TtWsqoEl7zOCojH0iBButhQkbJxIUJO4ywtqDpRdw5LZ yeV/Tx9nd9qjJw+BI15acaIoImQ53QN+ZxhT0p/u5SZ+Rkg1MfkYKxukK8INJh8u Rj78rIHe1xDPFkj+y2c9o//tmlQnZlAw1vou1HSVWBi/dphtvAdRssuRpxmOiba3 X2KlCk5dHkfipnO+oLYQvCzdqLg0JIEoVDYHdfBtWlMHC+Q2cetqxW4/qKTsf5SZ rS5HvrXJMF2QFA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:24 2025 by rpki-client