This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json) Hash identifier: JesAlcEsbmWzkBorFSj0inzkRbAI/TrfdUnKJKN4I+k= Subject key identifier: 5A:B9:85:A9:DA:03:25:14:A6:32:61:B3:9A:94:12:3D:1E:A3:41:31 Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Certificate serial: 019AF35230B98F05CE1774DB6CC4BB21DF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft Manifest number: 072C Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (hash: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=) 2: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (hash: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=) 3: g8C52r-HgjcOKaKK01GccaiLGqY.roa (hash: yFMdULn9+zrpJgeM+fVWlj0c0e8CtPQGd00H0hnJUEs=) 4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: ab1HmLg8RAqpKhkGZz0o+rZReYgPgHB9cz45cZ9UO9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:30:b9:8f:05:ce:17:74:db:6c:c4:bb:21:df:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=5ab985a9da032514a63261b39a94123d1ea34131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:17:34:ef:32:f9:9e:a4:51:02:b0:e6:36: c4:61:07:dd:11:30:3e:6e:c6:2b:b2:f8:7b:c0:5e: da:2b:b2:f5:e0:2c:90:07:9f:95:ac:a5:cc:18:df: a8:ed:41:e7:59:5e:d5:94:f2:a6:13:f3:85:dd:c0: 6d:91:8c:79:e9:0e:26:03:d3:b5:16:d4:6b:e6:47: 4e:15:de:87:23:ba:2e:fb:f8:dc:58:2c:22:db:64: 65:db:df:23:0d:6c:68:27:8b:36:35:48:52:87:9e: 8f:b7:1d:e8:61:01:58:e9:81:d2:b7:30:5c:b8:88: 11:0f:49:95:12:d5:d5:52:d3:62:1b:e2:2d:4f:ec: b4:9c:45:cd:e0:6d:5e:2b:26:93:81:b1:71:1d:ff: 1c:77:de:28:aa:a4:d0:dc:a1:ad:8b:5d:07:ed:68: 65:3d:c0:4f:6b:4b:31:3d:15:02:45:2a:16:e6:c6: e4:77:1b:7b:73:c2:9d:b6:c5:4b:10:7b:f4:59:d4: 85:15:d3:95:b7:9a:6e:8e:f0:fd:a0:6d:f6:0b:91: a5:51:14:46:56:24:d8:13:33:c4:00:c6:25:12:30: 4b:bf:79:ca:9c:78:4d:1f:ee:cd:b4:da:dc:2d:81: bc:d9:7c:6c:5a:4a:67:e2:08:15:e9:fd:1e:87:b6: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:85:A9:DA:03:25:14:A6:32:61:B3:9A:94:12:3D:1E:A3:41:31 X509v3 Authority Key Identifier: keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a0:e5:1c:f1:08:38:4b:ca:2e:2d:cc:f9:39:eb:77:5d:50: bb:5e:ea:d2:e7:1a:df:88:44:14:7c:0d:af:81:f5:2b:cb:79: 13:b2:22:38:4e:db:79:53:0f:32:66:51:66:c3:2e:c4:8a:85: e1:27:13:55:47:42:2e:3f:77:b0:c9:ea:9f:81:6d:5c:41:f8: 2a:a7:c4:86:68:07:2c:a3:d5:d4:35:06:ac:4c:e5:b1:8b:cb: d3:39:ad:33:83:18:8e:c6:1e:85:43:92:5e:31:af:33:dc:50: 45:74:0c:4d:6e:fc:56:45:6c:a0:07:47:f6:be:d6:ca:18:c5: 89:f1:fb:9d:9d:1a:38:d6:a2:a7:c0:15:19:58:0b:51:dd:5b: 7e:c3:38:12:04:be:20:db:f9:da:15:21:05:13:26:49:6e:ef: 2f:d6:94:b9:88:ea:52:c0:90:b7:9f:83:82:3e:a4:a7:39:bc: 7a:51:4c:ee:f6:24:0d:49:0f:74:99:58:01:ab:50:c0:c1:76: f5:a7:c3:fa:94:b0:68:e9:36:e7:52:e2:54:40:8e:68:db:51: 3a:3b:93:10:ac:7f:07:bc:85:66:a0:df:4f:39:a0:9b:ec:93: 32:1d:83:16:16:29:3a:cf:77:1a:fa:47:ae:7f:e7:4e:ed:0c: 85:8c:6b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjC5jwXOF3TbbMS7Id9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy N2FlZGYwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD Eyg1YWI5ODVhOWRhMDMyNTE0YTYzMjYxYjM5YTk0MTIzZDFlYTM0MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0XNO8y+Z6kUQKw5jbEYQfdETA+ bsYrsvh7wF7aK7L14CyQB5+VrKXMGN+o7UHnWV7VlPKmE/OF3cBtkYx56Q4mA9O1 FtRr5kdOFd6HI7ou+/jcWCwi22Rl298jDWxoJ4s2NUhSh56Ptx3oYQFY6YHStzBc uIgRD0mVEtXVUtNiG+ItT+y0nEXN4G1eKyaTgbFxHf8cd94oqqTQ3KGti10H7Whl PcBPa0sxPRUCRSoW5sbkdxt7c8KdtsVLEHv0WdSFFdOVt5pujvD9oG32C5GlURRG ViTYEzPEAMYlEjBLv3nKnHhNH+7NtNrcLYG82XxsWkpn4ggV6f0eh7Z0ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq5hanaAyUUpjJhs5qUEj0eo0ExMB8GA1UdIwQY MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0 LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6DlHPEI OEvKLi3M+Tnrd11Qu17q0uca34hEFHwNr4H1K8t5E7IiOE7beVMPMmZRZsMuxIqF 4ScTVUdCLj93sMnqn4FtXEH4KqfEhmgHLKPV1DUGrEzlsYvL0zmtM4MYjsYehUOS XjGvM9xQRXQMTW78VkVsoAdH9r7WyhjFifH7nZ0aONaip8AVGVgLUd1bfsM4EgS+ INv52hUhBRMmSW7vL9aUuYjqUsCQt5+Dgj6kpzm8elFM7vYkDUkPdJlYAatQwMF2 9afD+pSwaOk251LiVECOaNtROjuTEKx/B7yFZqDfTzmgm+yTMh2DFhYpOs93GvpH rn/nTu0MhYxrCg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:56 2025 by rpki-client