This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json) Hash identifier: tS5RaUu/bB7avbIYKlXnjADaAlkK063p0UA/8GZdCpk= Subject key identifier: CE:80:DE:8B:03:52:35:9E:B3:54:FB:4D:51:5A:BD:52:BB:B5:30:C0 Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525 Certificate serial: 019AF31C5797143B5B43CA8DD71CD43591EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: Sc0LCIq9rYlT9DtTpNI5AzIxTzvtQhuOV2U1DigUNMU=) 2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:57:97:14:3b:5b:43:ca:8d:d7:1c:d4:35:91:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525 Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=ce80de8b0352359eb354fb4d515abd52bbb530c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:aa:c7:13:e9:5f:f2:9e:0a:ff:f2:ad:bf: 6f:73:41:80:fd:7c:44:e1:7b:3e:e7:dd:e4:40:d9: 1e:02:f9:43:a9:92:09:37:23:08:bb:a6:be:df:bf: 31:ef:65:8d:17:22:19:76:5f:3e:60:50:57:63:80: 28:a9:17:03:33:38:e5:67:81:18:e2:16:4c:05:de: 8e:39:37:fe:81:dc:f8:78:c4:46:86:b2:5a:e6:e8: d9:49:b6:dd:6c:8b:60:60:d1:90:d8:4a:a8:74:83: f1:16:d8:e0:fa:6f:29:10:42:99:7f:82:a9:b0:7b: d3:32:07:80:7c:93:c7:6f:c2:c3:b7:97:a0:4d:d7: 83:69:ce:58:6d:b6:28:e4:87:f5:04:5c:bd:ff:0c: 76:e7:df:9c:3a:01:78:ff:03:7f:46:28:b6:e6:af: fd:19:5c:aa:6a:b9:f1:80:d0:27:74:da:3d:93:f6: d3:3b:d6:44:31:1c:c5:43:4b:9f:aa:bb:d9:1e:3c: 6b:cf:aa:f6:0a:63:d4:9c:67:8d:49:30:61:11:db: aa:19:ef:31:fd:39:1a:a9:98:79:42:77:3c:b9:1d: 97:73:8d:d5:4b:38:a0:70:f1:95:4d:c8:62:29:51: f2:b4:6f:ce:78:db:f0:8d:8c:47:e9:fa:72:ef:93: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:80:DE:8B:03:52:35:9E:B3:54:FB:4D:51:5A:BD:52:BB:B5:30:C0 X509v3 Authority Key Identifier: keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:33:92:5b:3b:55:07:c9:8e:3e:cc:c6:b5:7d:20:14:48: 04:ff:cb:ce:73:1c:f8:54:5f:0b:98:19:70:f3:54:36:02:3c: 45:fd:0e:f9:3f:df:4c:6e:1d:72:98:52:76:58:0b:4c:f2:a2: fd:a7:1b:db:4e:96:c2:30:4b:cb:6b:b4:6f:0a:cd:45:f8:a0: bf:16:56:b5:39:99:f7:10:29:b3:8a:a8:95:2f:5e:c8:28:75: 9d:8d:52:ed:54:cd:e6:a2:ca:30:71:05:2c:04:13:e3:12:4b: 4e:91:d0:5e:30:af:8c:2f:2a:12:0f:fc:38:7d:c9:2e:76:42: 66:5d:78:8e:42:fe:c5:01:6c:4a:e2:f4:f0:2d:19:bb:12:5d: d9:af:27:82:19:44:ad:61:2c:13:52:d4:6f:38:e8:bd:9a:01: 06:9f:f9:03:73:a8:c7:85:a2:06:1c:e8:5b:01:69:d5:40:55: 7b:0a:21:7e:69:df:bd:77:23:fd:7c:48:37:e8:b6:d6:03:a9: ce:97:47:71:6c:91:f2:3c:19:b6:98:c7:6b:50:1e:2e:fa:6c: 29:0e:ea:76:d7:e6:08:3c:e9:1b:59:d7:cc:2b:76:a8:78:bc: 62:15:63:ab:72:03:a8:91:91:d2:95:92:b1:d7:00:5e:76:48: 95:65:98:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFeXFDtbQ8qN1xzUNZHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NGY4NTM5MTc0ZDAwYmZhOGJmZGU0OTA0M2Y0ODVjM2E1 ODc1MjUwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD EyhjZTgwZGU4YjAzNTIzNTllYjM1NGZiNGQ1MTVhYmQ1MmJiYjUzMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23GqxxPpX/KeCv/yrb9vc0GA/XxE 4Xs+593kQNkeAvlDqZIJNyMIu6a+378x72WNFyIZdl8+YFBXY4AoqRcDMzjlZ4EY 4hZMBd6OOTf+gdz4eMRGhrJa5ujZSbbdbItgYNGQ2EqodIPxFtjg+m8pEEKZf4Kp sHvTMgeAfJPHb8LDt5egTdeDac5YbbYo5If1BFy9/wx259+cOgF4/wN/Rii25q/9 GVyqarnxgNAndNo9k/bTO9ZEMRzFQ0ufqrvZHjxrz6r2CmPUnGeNSTBhEduqGe8x /TkaqZh5Qnc8uR2Xc43VSzigcPGVTchiKVHytG/OeNvwjYxH6fpy75OnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6A3osDUjWes1T7TVFavVK7tTDAMB8GA1UdIwQY MBaAFLRPhTkXTQC/qL/eSQQ/SFw6WHUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2Qt MzMzZTUzY2ZhMDIxLzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2QtMzMzZTUzY2ZhMDIx LzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYQzkls7 VQfJjj7MxrV9IBRIBP/LznMc+FRfC5gZcPNUNgI8Rf0O+T/fTG4dcphSdlgLTPKi /acb206WwjBLy2u0bwrNRfigvxZWtTmZ9xAps4qolS9eyCh1nY1S7VTN5qLKMHEF LAQT4xJLTpHQXjCvjC8qEg/8OH3JLnZCZl14jkL+xQFsSuL08C0ZuxJd2a8nghlE rWEsE1LUbzjovZoBBp/5A3Oox4WiBhzoWwFp1UBVewohfmnfvXcj/XxIN+i21gOp zpdHcWyR8jwZtpjHa1AeLvpsKQ7qdtfmCDzpG1nXzCt2qHi8YhVjq3IDqJGR0pWS sdcAXnZIlWWYMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:24 2025 by rpki-client