This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json) Hash identifier: 8i2J8iTQriFRx//UEChYyOqhBot1fVZRpgNAiDMKxzw= Subject key identifier: 90:7D:21:53:2E:51:85:B5:94:34:17:77:66:93:52:A2:16:32:D0:B5 Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635 Certificate serial: 019AF12DF3AEC2B33EC49E93340BADB141EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft Manifest number: 0FAA Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=) 2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: /xJ8ZtPdGyjZkQY+IWMNKGtvX8J2LH4PPg3+J+HXTlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f3:ae:c2:b3:3e:c4:9e:93:34:0b:ad:b1:41:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=907d21532e5185b594341777669352a21632d0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:b8:4a:f9:71:28:b9:ea:ea:8f:15:5b:9d: 7b:22:f2:f8:4e:a4:15:b8:c3:2a:56:81:c1:4b:85: 1c:63:ae:5e:78:09:63:a6:6a:b2:32:67:e4:71:bb: 86:a7:44:25:d6:7a:47:05:29:ed:13:28:11:1f:87: 3d:09:e0:e5:74:c0:11:d1:14:2a:c8:43:bc:47:b1: 78:3d:1f:59:fc:1c:bb:00:6a:57:8f:7d:39:41:de: 6e:e4:41:26:e6:f8:fe:92:cd:bf:94:7c:51:08:4b: 1c:9d:75:88:07:7d:d6:e9:4d:99:a6:d8:e8:68:03: 0a:54:e5:f3:7f:2b:d5:8f:20:05:47:65:ed:7a:7e: 34:a7:fa:c9:32:80:41:02:c1:d0:25:64:75:a4:18: d8:1d:02:95:e6:7c:b2:4e:3d:a3:da:4e:92:d6:0f: ec:59:40:fd:f1:9b:cb:16:db:ac:9c:ed:76:e5:96: f7:19:6e:c9:c2:e4:f5:31:7e:d3:b7:30:d4:fe:61: 79:70:36:a1:89:6b:66:13:b2:10:4e:2e:f9:c8:1e: 9e:18:11:35:39:1b:29:2d:35:29:a9:8b:b3:90:fa: c0:ec:ce:33:eb:aa:dc:a5:b6:b4:78:a9:aa:14:c7: 05:35:2e:64:50:5f:cc:2e:99:b7:27:bb:85:35:01: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7D:21:53:2E:51:85:B5:94:34:17:77:66:93:52:A2:16:32:D0:B5 X509v3 Authority Key Identifier: keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:07:27:21:7b:07:70:25:3f:0d:32:f6:1e:29:20:d4:bf:23: be:46:9c:0a:94:d9:e1:a3:21:dd:b3:e3:13:46:c4:28:61:d9: 9a:8c:29:24:70:88:d9:d5:f1:b4:ec:f3:54:9f:fc:8a:36:ec: 6e:06:f5:d4:ce:5e:e9:b4:c5:a4:3a:c2:fc:84:9d:64:e3:ba: f3:0f:38:f8:dc:d8:05:fc:6c:61:5b:82:d6:fa:eb:bb:90:0b: 8c:ee:94:b3:db:ac:a6:06:3b:bd:fa:8d:28:59:35:07:67:25: 5e:0b:c2:0c:71:9d:42:81:c9:f2:ff:8d:17:e7:25:d7:9f:21: a6:e8:ae:71:fa:e1:b7:a3:0f:30:cc:30:96:d1:2e:11:5f:41: 65:18:c9:c4:65:51:a4:6d:69:28:c7:f9:9e:6c:80:b9:87:85: ca:45:01:cf:c1:9c:00:e6:db:8e:bd:5c:8c:f8:6a:b5:3a:54: 53:f7:63:17:7c:e6:cf:10:43:84:ee:b2:d4:09:88:31:61:8c: 73:d1:6d:96:b3:49:dd:1c:a2:78:83:21:ca:b1:c4:ab:22:5a: 81:37:11:23:7c:df:b7:57:f3:e4:9d:c6:c4:4d:53:78:51:4d: 29:2b:1e:d2:f3:7c:49:b8:f4:2b:92:48:74:d1:f4:d7:99:1d: ec:7d:cf:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfOuwrM+xJ6TNAutsUHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx ODM2MzUwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD Eyg5MDdkMjE1MzJlNTE4NWI1OTQzNDE3Nzc2NjkzNTJhMjE2MzJkMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcS4SvlxKLnq6o8VW517IvL4TqQV uMMqVoHBS4UcY65eeAljpmqyMmfkcbuGp0Ql1npHBSntEygRH4c9CeDldMAR0RQq yEO8R7F4PR9Z/By7AGpXj305Qd5u5EEm5vj+ks2/lHxRCEscnXWIB33W6U2Zptjo aAMKVOXzfyvVjyAFR2Xten40p/rJMoBBAsHQJWR1pBjYHQKV5nyyTj2j2k6S1g/s WUD98ZvLFtusnO125Zb3GW7JwuT1MX7TtzDU/mF5cDahiWtmE7IQTi75yB6eGBE1 ORspLTUpqYuzkPrA7M4z66rcpba0eKmqFMcFNS5kUF/MLpm3J7uFNQF7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB9IVMuUYW1lDQXd2aTUqIWMtC1MB8GA1UdIwQY MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4 LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAcnIXsH cCU/DTL2Hikg1L8jvkacCpTZ4aMh3bPjE0bEKGHZmowpJHCI2dXxtOzzVJ/8ijbs bgb11M5e6bTFpDrC/ISdZOO68w84+NzYBfxsYVuC1vrru5ALjO6Us9uspgY7vfqN KFk1B2clXgvCDHGdQoHJ8v+NF+cl158hpuiucfrht6MPMMwwltEuEV9BZRjJxGVR pG1pKMf5nmyAuYeFykUBz8GcAObbjr1cjPhqtTpUU/djF3zmzxBDhO6y1AmIMWGM c9FtlrNJ3RyieIMhyrHEqyJagTcRI3zft1fz5J3GxE1TeFFNKSse0vN8Sbj0K5JI dNH015kd7H3PIA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:19 2025 by rpki-client