This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json) Hash identifier: 21Dl1TUrTwZA99CXQUBKOpnPB/eAq/s5QaOm+qv0Gis= Subject key identifier: CF:06:7E:98:26:B7:A7:B7:31:BB:91:90:29:60:39:6C:92:CC:E3:42 Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Certificate serial: 019AF19A95D6DCBE199E60BB26A09D0A669A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft Manifest number: 0299 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=) 2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: KeegUE1wKgdwqTk47BpDkd64QsJefPcxhY7XANIjE3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:d6:dc:be:19:9e:60:bb:26:a0:9d:0a:66:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=cf067e9826b7a7b731bb91902960396c92cce342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:75:8a:44:fc:e3:64:d6:75:c3:9c:53:0c: 65:38:2f:41:3e:08:87:95:49:47:4c:88:5c:9a:76: 44:67:f5:e0:4e:04:b3:f1:eb:95:32:c4:4a:03:1a: 06:43:f5:1e:b0:12:e5:d7:b6:e7:30:20:60:c9:82: fe:5b:71:e4:8e:d2:cc:8a:b8:81:43:d5:0f:c2:65: 66:35:40:70:22:6a:e6:04:48:43:c6:67:8f:66:4f: 05:cd:83:71:3c:aa:4d:fe:de:1d:4e:29:15:9e:7b: bd:e8:c0:56:44:b9:06:4a:7d:c2:40:ad:b6:80:7c: ba:e8:28:53:66:07:e7:8b:55:6f:04:9f:a3:1b:30: ca:72:4d:63:55:d0:f3:c4:07:17:5b:98:a5:53:52: 0a:6d:17:0f:9e:0d:9b:37:15:6d:cb:f6:b6:20:63: b0:9a:61:6b:b8:d5:68:26:d3:43:f9:bc:92:61:e2: 5d:79:76:ec:58:ef:6a:5d:d8:ff:5d:06:34:fc:79: c0:22:8b:b2:8b:8e:e7:c3:38:04:56:79:26:6d:22: ff:de:46:e8:2a:6f:ac:c4:4a:7b:49:81:70:15:e0: db:52:ad:e0:c6:1f:05:9b:00:65:60:f2:1b:c8:80: 59:c9:8f:6c:07:df:e7:a6:22:8e:f7:cd:21:01:87: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:7E:98:26:B7:A7:B7:31:BB:91:90:29:60:39:6C:92:CC:E3:42 X509v3 Authority Key Identifier: keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8e:f8:87:78:ab:74:7a:f3:54:5f:b5:40:b0:e0:7e:42:d7: 5b:ed:92:14:68:15:7e:c1:de:db:8f:6c:10:51:b7:0d:68:a8: 26:c5:d8:75:d7:f9:7d:37:2e:ad:37:3d:5d:2e:18:ad:be:a8: 2f:2d:c8:ec:48:16:d5:ba:f4:00:f7:8d:b6:3f:31:4e:16:17: ab:db:14:f2:80:1f:78:32:fc:0d:4f:9f:f4:bf:21:80:51:2b: 70:d0:8e:49:37:cc:46:46:27:22:92:83:a4:54:ef:0c:39:b1: 20:3c:e1:2a:78:9e:2b:7e:76:0a:0c:51:76:e1:56:cc:b3:e7: c6:57:d4:b3:ac:96:37:63:9a:d5:d7:d1:0b:f7:94:16:4e:a5: c0:48:fd:14:38:7a:6f:d3:f4:1a:9f:ee:8e:0e:ad:0a:8f:28: 47:9e:20:23:d5:b1:fa:f9:cb:f4:11:25:58:84:82:55:7b:a4: ae:89:a2:4a:c5:a7:4f:80:7b:db:18:35:aa:9a:3f:d0:f2:52: 11:83:26:0b:38:00:ca:65:fe:a5:86:d3:45:e2:0a:39:0c:a4: 89:5a:40:8a:f4:b8:c8:fb:94:2d:b7:18:e3:94:aa:9b:f8:84: 4f:09:2b:6b:3c:e5:fb:7a:ae:49:92:0e:0c:88:19:d8:66:ce: 01:92:df:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpXW3L4ZnmC7JqCdCmaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTM0M2FhMjFjNzRhMzlmY2Q1MTgzZjRmZGY1NWRjNDY3 OWU4M2QwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhjZjA2N2U5ODI2YjdhN2I3MzFiYjkxOTAyOTYwMzk2YzkyY2NlMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ft1ikT842TWdcOcUwxlOC9BPgiH lUlHTIhcmnZEZ/XgTgSz8euVMsRKAxoGQ/UesBLl17bnMCBgyYL+W3HkjtLMiriB Q9UPwmVmNUBwImrmBEhDxmePZk8FzYNxPKpN/t4dTikVnnu96MBWRLkGSn3CQK22 gHy66ChTZgfni1VvBJ+jGzDKck1jVdDzxAcXW5ilU1IKbRcPng2bNxVty/a2IGOw mmFruNVoJtND+bySYeJdeXbsWO9qXdj/XQY0/HnAIouyi47nwzgEVnkmbSL/3kbo Km+sxEp7SYFwFeDbUq3gxh8FmwBlYPIbyIBZyY9sB9/npiKO980hAYcatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8Gfpgmt6e3MbuRkClgOWySzONCMB8GA1UdIwQY MBaAFLVTQ6ohx0o5/NUYP0/fVdxGeeg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWIt NGVjN2I1ZWZhZTM3LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWItNGVjN2I1ZWZhZTM3 LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI74h3ir dHrzVF+1QLDgfkLXW+2SFGgVfsHe249sEFG3DWioJsXYddf5fTcurTc9XS4Yrb6o Ly3I7EgW1br0APeNtj8xThYXq9sU8oAfeDL8DU+f9L8hgFErcNCOSTfMRkYnIpKD pFTvDDmxIDzhKnieK352CgxRduFWzLPnxlfUs6yWN2Oa1dfRC/eUFk6lwEj9FDh6 b9P0Gp/ujg6tCo8oR54gI9Wx+vnL9BElWISCVXukromiSsWnT4B72xg1qpo/0PJS EYMmCzgAymX+pYbTReIKOQykiVpAivS4yPuULbcY45Sqm/iETwkrazzl+3quSZIO DIgZ2GbOAZLfHg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:51 2025 by rpki-client