This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json) Hash identifier: 9//wBymIKk9oHUxi4ZGq1AOu6ZFfXmSunbk/xXKOmlY= Subject key identifier: BD:04:0F:61:AC:0A:62:F9:F2:13:F6:94:C9:1C:3D:2D:51:4F:13:FE Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Certificate serial: 019AF31B99A8D3738B7DED48C1D6F5F9498B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft Manifest number: 0DE2 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=) 2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: IWqYVyO+NynGfeXuG5AicrfJiBVXVCsgqX1c5aLUHYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:99:a8:d3:73:8b:7d:ed:48:c1:d6:f5:f9:49:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=bd040f61ac0a62f9f213f694c91c3d2d514f13fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:79:f0:bd:f9:6e:a0:37:92:5c:4d:83:3f: e1:bf:54:f3:01:2e:c9:69:ae:f3:61:09:f8:58:55: bf:c9:f4:99:e4:94:70:c0:90:b7:99:48:7b:d9:49: 96:d6:4f:12:3f:8b:69:99:44:ad:bf:2e:ca:da:da: 46:4f:05:82:cb:3e:a6:56:66:ab:25:43:80:bd:50: 6c:79:82:33:62:3b:a1:bb:2e:61:1d:fc:53:7f:7b: 2f:17:3e:25:69:5e:77:e2:7a:ed:a5:d5:c7:af:27: d1:ca:73:f5:8e:e7:03:5f:be:1a:26:e3:c3:b8:96: 41:f7:31:4c:fe:8c:5f:f4:3e:e8:f3:05:2e:a5:4c: c0:3b:e5:0d:26:63:ab:c9:71:60:0a:c7:f5:96:f4: 16:17:7f:c4:33:c1:23:0e:ec:34:f1:97:ef:d9:80: c9:d9:15:9a:a4:13:c2:20:26:08:62:c1:02:78:e4: 2c:be:be:31:aa:25:45:13:9a:45:67:2c:40:0f:b8: 02:e8:dd:dd:86:a7:ba:47:69:31:55:4c:c3:bb:44: 9b:f3:10:55:3e:cc:81:f8:5e:5d:9b:fc:a1:50:1a: ed:84:d3:e1:f5:79:49:b8:62:79:fb:4c:45:bf:4b: c5:ea:15:a2:75:00:80:b0:b8:7d:03:de:2e:98:45: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:0F:61:AC:0A:62:F9:F2:13:F6:94:C9:1C:3D:2D:51:4F:13:FE X509v3 Authority Key Identifier: keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c4:11:86:77:26:de:aa:a1:f0:dc:df:3a:73:85:69:3c:6e: 32:4f:46:3e:1b:f2:57:83:c8:6b:b8:b9:41:ef:2b:e2:52:82: 39:76:1a:43:5e:6c:39:b6:b2:ec:ad:ad:69:c9:dd:93:8f:47: 4d:bf:a7:3a:4e:62:92:a8:86:fd:4b:38:06:da:70:16:68:b4: c8:b3:08:35:ca:4b:8e:f3:46:e1:b2:3c:26:dd:99:91:d2:09: c1:1b:e6:48:dd:27:be:38:47:83:7e:1b:f9:5a:d4:1b:9e:6e: 77:b5:0d:bc:77:3b:39:8e:67:5f:03:e3:66:81:99:ea:4c:f5: de:3a:e8:ac:c4:79:95:73:de:ff:f4:ac:de:64:a1:30:32:f6: f2:c7:b8:9a:e1:da:b8:7a:dc:1e:d8:4d:b0:5d:80:26:6f:58: 41:17:a9:7b:45:cb:7b:49:b2:e2:76:c7:51:07:0b:3f:0f:50: 32:72:96:72:d5:68:59:f5:45:4c:64:fb:52:36:44:ed:3b:97: 4a:83:d8:a2:35:34:d3:ad:89:6b:ce:d4:89:a8:fd:30:43:0f: 22:c7:ff:3a:6a:24:4f:b6:20:eb:f7:6a:d2:e6:2e:9b:36:52: 39:b8:91:9f:ca:16:81:f0:a8:8d:04:ea:c4:69:6d:02:d6:e2: f1:24:09:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5mo03OLfe1Iwdb1+UmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTA2NGMxYWM4NjkwZTJjNzdhOTU5YTUwMjU0NmU5OGJj ZDM3MjcwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EyhiZDA0MGY2MWFjMGE2MmY5ZjIxM2Y2OTRjOTFjM2QyZDUxNGYxM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEJ58L35bqA3klxNgz/hv1TzAS7J aa7zYQn4WFW/yfSZ5JRwwJC3mUh72UmW1k8SP4tpmUStvy7K2tpGTwWCyz6mVmar JUOAvVBseYIzYjuhuy5hHfxTf3svFz4laV534nrtpdXHryfRynP1jucDX74aJuPD uJZB9zFM/oxf9D7o8wUupUzAO+UNJmOryXFgCsf1lvQWF3/EM8EjDuw08Zfv2YDJ 2RWapBPCICYIYsECeOQsvr4xqiVFE5pFZyxAD7gC6N3dhqe6R2kxVUzDu0Sb8xBV PsyB+F5dm/yhUBrthNPh9XlJuGJ5+0xFv0vF6hWidQCAsLh9A94umEUoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0ED2GsCmL58hP2lMkcPS1RTxP+MB8GA1UdIwQY MBaAFLRQZMGshpDix3qVmlAlRumLzTcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEt MGI3YTMzZGQ1YjU2LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEtMGI3YTMzZGQ1YjU2 LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosQRhncm 3qqh8NzfOnOFaTxuMk9GPhvyV4PIa7i5Qe8r4lKCOXYaQ15sObay7K2tacndk49H Tb+nOk5ikqiG/Us4BtpwFmi0yLMINcpLjvNG4bI8Jt2ZkdIJwRvmSN0nvjhHg34b +VrUG55ud7UNvHc7OY5nXwPjZoGZ6kz13jrorMR5lXPe//Ss3mShMDL28se4muHa uHrcHthNsF2AJm9YQRepe0XLe0my4nbHUQcLPw9QMnKWctVoWfVFTGT7UjZE7TuX SoPYojU0062Ja87Uiaj9MEMPIsf/OmokT7Yg6/dq0uYumzZSObiRn8oWgfCojQTq xGltAtbi8SQJaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:13 2025 by rpki-client