This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json) Hash identifier: pMEeX+zMy1IYK7oCcNzxTAJyvNy43sc1LJ3TdvoiV+Q= Subject key identifier: E6:EB:17:5F:A0:5C:47:EB:62:B8:26:D6:5A:69:02:67:86:82:79:F8 Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Certificate serial: 019AF509B7EA4FA0ADA1E4926B54E3C72534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft Manifest number: 0D28 Signing time: Sat 06 Dec 2025 19:00:45 +0000 Manifest this update: Sat 06 Dec 2025 19:00:45 +0000 Manifest next update: Sun 07 Dec 2025 19:00:45 +0000 Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=) 2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 6XPDRYG1gGDneVgqzkm3bXtxlpD/tcyRmbj3PCDbV+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b7:ea:4f:a0:ad:a1:e4:92:6b:54:e3:c7:25:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Validity Not Before: Dec 6 19:00:45 2025 GMT Not After : Dec 7 19:00:45 2025 GMT Subject: CN=e6eb175fa05c47eb62b826d65a690267868279f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8d:c4:5c:71:55:4e:9d:3b:94:64:f8:3f:1a: 67:43:7d:c8:ab:d4:ff:28:51:0f:65:94:23:76:91: ab:09:20:3b:d3:07:bd:c5:6d:a8:98:59:a5:7e:88: 90:2a:ba:a3:c0:68:66:6f:fd:81:38:2c:ca:f4:94: 01:85:1f:eb:81:ec:5b:c4:06:8f:39:29:48:66:00: 1e:6f:76:f9:66:47:ac:92:c4:76:30:27:1e:47:9d: 8b:b0:27:d7:b3:37:24:e1:9b:aa:ed:a0:f1:d8:91: a4:fe:d9:90:4e:c0:c2:f9:4d:08:c1:84:ab:02:1c: 9c:38:d3:12:38:5f:64:01:0a:49:23:b8:8c:43:15: 11:a0:15:f7:af:13:98:6a:cc:ac:25:22:a2:bc:aa: 96:2b:99:d6:01:6a:b8:d2:f4:88:34:60:32:fb:2c: 02:ef:18:5d:4c:30:85:80:cc:2e:2b:fd:c3:b0:b4: c2:f9:f2:55:c0:99:3a:4e:29:e0:61:24:48:9e:bd: 1e:c3:98:7c:8b:80:de:63:fe:b9:b2:f8:a9:42:5e: 73:c2:ae:98:aa:19:d0:a2:3d:f8:6d:7e:2f:4e:9d: e2:ad:c4:a4:64:32:6d:6a:71:cd:05:38:ed:ea:69: 45:9a:71:20:17:99:c9:8c:db:43:19:0a:5e:a9:40: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EB:17:5F:A0:5C:47:EB:62:B8:26:D6:5A:69:02:67:86:82:79:F8 X509v3 Authority Key Identifier: keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:94:89:e9:6e:6e:40:5d:e2:4e:0b:c1:bb:e6:a5:13:9f:af: ac:90:7e:ce:6f:b8:44:8f:0e:d7:3a:8b:4e:f0:a2:1d:8d:3c: 0e:c2:a6:e3:67:c6:36:7e:57:dd:c2:99:9a:65:80:ad:47:f9: 2b:11:af:ee:e4:41:71:fa:5a:6b:ee:c4:d1:10:d4:09:dc:d2: 5a:5d:e7:d0:1b:1c:d1:6e:e9:81:93:bc:42:e9:a9:b2:13:c5: 0f:d7:55:43:9a:20:76:15:07:e1:b6:53:66:13:be:fb:ab:09: 90:b8:d8:ea:c4:50:50:c0:4a:6c:42:a2:a3:92:8e:0b:29:85: f0:3b:18:28:24:f2:9d:7a:0a:68:30:9e:ba:a0:10:40:c8:c4: 52:a4:11:73:4e:70:59:f2:a0:63:60:03:1b:ec:f2:15:df:a2: a9:c2:1a:7e:bc:2c:f6:40:b9:bc:6b:8f:70:e4:f7:2b:da:b5: aa:61:10:1d:d7:16:8e:b7:36:45:76:20:6f:99:0e:d5:5d:93: 12:a3:a0:01:c7:f9:25:19:04:2d:f9:1a:a4:f3:00:87:ed:ae: cd:21:47:6c:69:c6:72:bc:fd:4c:1c:d2:a5:4b:b4:d8:e4:6f: ca:17:96:af:ed:95:90:7f:99:59:c8:52:fc:30:f9:93:9a:e8: cb:23:5d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbfqT6CtoeSSa1TjxyU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3 MDM5OGMwHhcNMjUxMjA2MTkwMDQ1WhcNMjUxMjA3MTkwMDQ1WjAzMTEwLwYDVQQD EyhlNmViMTc1ZmEwNWM0N2ViNjJiODI2ZDY1YTY5MDI2Nzg2ODI3OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o3EXHFVTp07lGT4PxpnQ33Iq9T/ KFEPZZQjdpGrCSA70we9xW2omFmlfoiQKrqjwGhmb/2BOCzK9JQBhR/rgexbxAaP OSlIZgAeb3b5ZkesksR2MCceR52LsCfXszck4Zuq7aDx2JGk/tmQTsDC+U0IwYSr AhycONMSOF9kAQpJI7iMQxURoBX3rxOYasysJSKivKqWK5nWAWq40vSINGAy+ywC 7xhdTDCFgMwuK/3DsLTC+fJVwJk6TingYSRInr0ew5h8i4DeY/65svipQl5zwq6Y qhnQoj34bX4vTp3ircSkZDJtanHNBTjt6mlFmnEgF5nJjNtDGQpeqUB0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObrF1+gXEfrYrgm1lppAmeGgnn4MB8GA1UdIwQY MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4 LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5SJ6W5u QF3iTgvBu+alE5+vrJB+zm+4RI8O1zqLTvCiHY08DsKm42fGNn5X3cKZmmWArUf5 KxGv7uRBcfpaa+7E0RDUCdzSWl3n0Bsc0W7pgZO8QumpshPFD9dVQ5ogdhUH4bZT ZhO++6sJkLjY6sRQUMBKbEKio5KOCymF8DsYKCTynXoKaDCeuqAQQMjEUqQRc05w WfKgY2ADG+zyFd+iqcIafrws9kC5vGuPcOT3K9q1qmEQHdcWjrc2RXYgb5kO1V2T EqOgAcf5JRkELfkapPMAh+2uzSFHbGnGcrz9TBzSpUu02ORvyheWr+2VkH+ZWchS /DD5k5royyNdNg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:51 2025 by rpki-client