This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json) Hash identifier: 6ImGcKIWhAPHvvYvBbKt0EHpa334dnvKax4KPyK4a/c= Subject key identifier: F0:B0:3E:97:9D:1D:A4:B8:97:8D:63:AF:94:4B:25:C7:44:68:CA:3F Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93 Certificate serial: 019AF31C35A276BD0C278C650BB5F301CF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft Manifest number: 0832 Signing time: Sat 06 Dec 2025 10:01:43 +0000 Manifest this update: Sat 06 Dec 2025 10:01:43 +0000 Manifest next update: Sun 07 Dec 2025 10:01:43 +0000 Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=) 2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: +I1cGkNWUR+vNftC0xmIH5LqOau7EnvJHRR9plD3Obw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:35:a2:76:bd:0c:27:8c:65:0b:b5:f3:01:cf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93 Validity Not Before: Dec 6 10:01:43 2025 GMT Not After : Dec 7 10:01:43 2025 GMT Subject: CN=f0b03e979d1da4b8978d63af944b25c74468ca3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:6e:d2:7c:16:8f:98:7c:e9:9b:8e:97:bf: 4b:c7:ae:fe:5b:24:24:2d:51:63:19:9a:1b:c1:0c: 15:ca:8c:c6:b2:95:7d:fd:13:5d:e1:04:e2:13:c0: 90:0b:aa:0f:9b:c6:73:1f:53:7f:d4:49:a6:ab:7b: 79:07:9d:bc:f2:f6:40:4a:af:2f:46:a4:8a:75:13: f0:6a:01:71:0d:9a:ee:66:7d:eb:13:c2:a1:b3:31: 8b:d4:6c:e8:d2:28:24:a6:3f:e3:95:0a:5a:32:5e: 71:2c:16:ae:3e:cf:23:37:1b:5f:99:f5:e7:e5:84: 08:fd:08:d3:c1:b5:63:da:16:4c:a8:fa:2e:d1:23: 1b:cf:56:ff:5c:42:2f:a5:8a:12:a4:8e:1a:28:4c: 7b:31:2e:58:f8:36:68:35:88:a8:cc:db:48:0b:6d: c6:63:fd:95:06:f0:0f:dd:b2:6f:45:71:df:56:2e: 59:eb:df:24:3a:e5:b3:a3:e8:94:34:b9:d0:a2:56: 58:0f:f7:c6:1e:a9:c3:86:57:a0:3a:46:4e:78:c8: 7d:be:c8:ae:90:23:6a:9e:3c:e0:e2:36:d8:21:d9: f0:c6:3a:48:8c:80:3a:06:94:97:5d:af:e5:0d:59: 1d:54:26:1a:6a:e6:21:12:0a:06:a0:0b:8f:8d:40: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B0:3E:97:9D:1D:A4:B8:97:8D:63:AF:94:4B:25:C7:44:68:CA:3F X509v3 Authority Key Identifier: keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:88:62:64:2b:ab:3b:0c:88:2e:34:21:8b:da:06:78:c9:2e: 87:55:87:60:b0:5d:34:43:2a:16:9d:fd:03:77:8a:11:43:f4: cd:06:fe:f9:ee:32:9b:e8:d0:9a:d4:6b:84:8a:40:01:f5:d8: 5b:33:ee:91:63:2f:fd:87:21:6f:9f:2d:75:4e:90:c0:54:d1: a4:07:6b:7f:70:30:1d:2d:50:db:5d:eb:b3:e9:31:2e:d7:6e: 60:21:ec:b1:04:9b:4a:e5:f4:be:f8:b7:f2:37:44:bb:ae:be: b8:69:fa:b0:70:af:9e:62:e6:f3:b4:13:12:ba:58:ea:00:0d: 04:de:23:7c:17:5f:5c:30:a1:c0:64:28:df:78:59:b9:58:d0: 78:cc:87:37:1f:44:9b:79:7a:62:9e:00:66:30:f6:52:02:24: f8:cc:98:f2:7e:af:9d:5a:72:11:9e:47:d0:b2:21:d5:34:e3: 09:d3:e4:6c:77:1a:3e:2b:ca:d1:b8:f8:02:29:1a:9d:f8:49: 4f:be:ac:0b:4c:43:3c:89:c3:bf:12:7b:a2:6f:b6:17:6d:7c: 83:e4:53:d5:e5:51:88:db:06:91:e4:28:86:ef:ff:3a:a9:cf: 82:f2:f9:c5:8a:da:69:a5:27:cf:0b:49:48:5a:ce:1b:fe:fe: f3:5b:fa:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDWidr0MJ4xlC7XzAc9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjU3NzFmOTkyZmQ3NGRmYjA3MzZlNjk1YWViNTljNmFm NjdlOTMwHhcNMjUxMjA2MTAwMTQzWhcNMjUxMjA3MTAwMTQzWjAzMTEwLwYDVQQD EyhmMGIwM2U5NzlkMWRhNGI4OTc4ZDYzYWY5NDRiMjVjNzQ0NjhjYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI9u0nwWj5h86ZuOl79Lx67+WyQk LVFjGZobwQwVyozGspV9/RNd4QTiE8CQC6oPm8ZzH1N/1Emmq3t5B5288vZASq8v RqSKdRPwagFxDZruZn3rE8KhszGL1Gzo0igkpj/jlQpaMl5xLBauPs8jNxtfmfXn 5YQI/QjTwbVj2hZMqPou0SMbz1b/XEIvpYoSpI4aKEx7MS5Y+DZoNYiozNtIC23G Y/2VBvAP3bJvRXHfVi5Z698kOuWzo+iUNLnQolZYD/fGHqnDhlegOkZOeMh9vsiu kCNqnjzg4jbYIdnwxjpIjIA6BpSXXa/lDVkdVCYaauYhEgoGoAuPjUA/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCwPpedHaS4l41jr5RLJcdEaMo/MB8GA1UdIwQY MBaAFLQldx+ZL9dN+wc25pWutZxq9n6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAt OGE4NTY0YmEzYzhjLzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAtOGE4NTY0YmEzYzhj LzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIhiZCur OwyILjQhi9oGeMkuh1WHYLBdNEMqFp39A3eKEUP0zQb++e4ym+jQmtRrhIpAAfXY WzPukWMv/Ychb58tdU6QwFTRpAdrf3AwHS1Q213rs+kxLtduYCHssQSbSuX0vvi3 8jdEu66+uGn6sHCvnmLm87QTErpY6gANBN4jfBdfXDChwGQo33hZuVjQeMyHNx9E m3l6Yp4AZjD2UgIk+MyY8n6vnVpyEZ5H0LIh1TTjCdPkbHcaPivK0bj4AikanfhJ T76sC0xDPInDvxJ7om+2F218g+RT1eVRiNsGkeQohu//OqnPgvL5xYraaaUnzwtJ SFrOG/7+81v6zw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:37:48 2025 by rpki-client