This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json) Hash identifier: 7/iSpslygNNpuJvoAJYLrT2E96NvxK4bIkqD2Cpq1pk= Subject key identifier: FA:92:BF:89:0D:88:54:65:F4:8D:05:5F:D2:22:7B:41:6C:3E:3E:61 Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Certificate serial: 019AF389D009E286E9E53B0EC889FB191CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft Manifest number: 0E89 Signing time: Sat 06 Dec 2025 12:01:26 +0000 Manifest this update: Sat 06 Dec 2025 12:01:26 +0000 Manifest next update: Sun 07 Dec 2025 12:01:26 +0000 Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=) 2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=) 3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=) 4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: WfaqlTc5mYqFTn2nAq1a1MuEb8DsiqfejiBllmKVsfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d0:09:e2:86:e9:e5:3b:0e:c8:89:fb:19:1c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Validity Not Before: Dec 6 12:01:26 2025 GMT Not After : Dec 7 12:01:26 2025 GMT Subject: CN=fa92bf890d885465f48d055fd2227b416c3e3e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:03:18:23:df:0b:b2:da:89:21:76:d8:87: 28:a3:1a:92:23:a0:33:e1:29:cd:e2:eb:6f:7c:ce: 8c:23:36:d8:65:3a:2e:c8:2c:d4:f7:30:cf:15:12: 35:3a:a3:37:6f:b0:d0:6b:42:60:47:e3:54:6f:48: df:eb:0a:f7:13:44:1f:5f:52:23:3b:8b:65:13:08: 03:bc:7b:09:1b:1f:a0:fe:e9:71:fd:96:a2:ff:4d: d7:5e:72:34:2f:93:06:b9:de:30:3c:68:db:c9:18: 94:67:bb:54:d0:0a:ca:b0:dd:b4:54:79:7d:71:e8: 8c:ce:46:e2:52:20:66:dc:36:b9:6f:a9:c9:aa:c9: 43:12:41:78:34:18:22:d0:1e:af:7d:ec:af:5d:20: ad:6d:01:89:fc:ba:93:31:3b:cb:79:82:bc:77:ae: f2:11:5f:d6:e0:07:8a:27:e7:75:d0:19:57:69:77: 19:23:34:2c:82:81:b5:c7:57:7a:12:ac:21:89:ae: 85:bd:10:12:24:5b:a3:05:01:ce:14:08:09:bb:b4: b0:c1:49:93:43:3d:cd:b4:db:5c:66:05:ab:cd:de: bc:1c:4b:cf:eb:5f:3d:aa:95:f2:62:7f:82:ff:3f: 60:1d:ed:50:60:8e:47:21:0c:71:d0:1f:18:40:2b: 72:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:BF:89:0D:88:54:65:F4:8D:05:5F:D2:22:7B:41:6C:3E:3E:61 X509v3 Authority Key Identifier: keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a2:c5:14:17:37:ca:0a:da:65:5a:7f:a0:49:90:c3:f4:9f: ca:6f:ff:b6:c3:95:d6:37:b3:c7:01:fb:53:0c:bc:ee:27:47: a0:6a:79:63:88:08:b1:19:e0:ec:99:92:51:69:1a:e0:e8:3e: 0f:35:1d:33:20:98:a6:b7:61:fa:e8:83:00:5d:60:52:31:5d: bb:d6:b4:9f:74:cc:30:55:47:ff:b1:54:75:0f:a4:58:78:5f: 22:b5:2c:4a:ad:0f:f7:1f:e5:4b:c2:ca:19:17:44:fa:82:31: 35:bb:45:8b:63:53:76:81:05:85:46:cc:2d:90:6a:08:61:2c: a8:38:82:88:34:59:59:c9:1e:1b:a5:21:4f:cd:10:66:4e:e6: 2a:71:e8:44:b1:09:b9:e3:be:54:4b:c5:62:26:b0:49:76:95: 69:f8:37:cd:f9:40:03:1a:72:b2:27:2b:7a:26:5d:65:79:1d: 1b:7b:87:d5:a5:0b:0f:4e:6e:ca:f0:9c:7a:a0:31:ab:68:cd: 08:a7:39:63:0c:a3:59:0a:04:ed:ae:84:82:1a:30:44:86:f8: 3e:2b:8c:29:7b:20:47:06:27:68:06:75:ac:3c:28:dd:0b:8d: 39:5a:c3:2c:67:7b:02:69:25:ab:6f:b8:1f:fe:f7:59:d9:74: 09:f4:42:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidAJ4obp5TsOyIn7GRyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx ODI1ZWYwHhcNMjUxMjA2MTIwMTI2WhcNMjUxMjA3MTIwMTI2WjAzMTEwLwYDVQQD EyhmYTkyYmY4OTBkODg1NDY1ZjQ4ZDA1NWZkMjIyN2I0MTZjM2UzZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphMDGCPfC7LaiSF22IcooxqSI6Az 4SnN4utvfM6MIzbYZTouyCzU9zDPFRI1OqM3b7DQa0JgR+NUb0jf6wr3E0QfX1Ij O4tlEwgDvHsJGx+g/ulx/Zai/03XXnI0L5MGud4wPGjbyRiUZ7tU0ArKsN20VHl9 ceiMzkbiUiBm3Da5b6nJqslDEkF4NBgi0B6vfeyvXSCtbQGJ/LqTMTvLeYK8d67y EV/W4AeKJ+d10BlXaXcZIzQsgoG1x1d6Eqwhia6FvRASJFujBQHOFAgJu7SwwUmT Qz3NtNtcZgWrzd68HEvP6189qpXyYn+C/z9gHe1QYI5HIQxx0B8YQCtyIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqSv4kNiFRl9I0FX9Iie0FsPj5hMB8GA1UdIwQY MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt NzU0YjYwYzViNTY4LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4 LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6LFFBc3 ygraZVp/oEmQw/Sfym//tsOV1jezxwH7Uwy87idHoGp5Y4gIsRng7JmSUWka4Og+ DzUdMyCYprdh+uiDAF1gUjFdu9a0n3TMMFVH/7FUdQ+kWHhfIrUsSq0P9x/lS8LK GRdE+oIxNbtFi2NTdoEFhUbMLZBqCGEsqDiCiDRZWckeG6UhT80QZk7mKnHoRLEJ ueO+VEvFYiawSXaVafg3zflAAxpysicreiZdZXkdG3uH1aULD05uyvCceqAxq2jN CKc5YwyjWQoE7a6EghowRIb4PiuMKXsgRwYnaAZ1rDwo3QuNOVrDLGd7Amklq2+4 H/73Wdl0CfRCRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:27 2025 by rpki-client