This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: KIJxIC0xTXoCgd/gLom7a/8wSivH8zEmSpOgZ518Gtk= Subject key identifier: 49:9F:B3:B8:57:64:C8:F3:76:B9:3E:CA:08:F6:53:82:73:F3:56:6A Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019AF2090B42BA2A5D5F8CC8EC24FF0FC405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 17BF Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (hash: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8=) 7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: y4RHuUwLrR8INt/5Zyg9EpmCvGmez+02vU2l/qF+hm8=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 15: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0b:42:ba:2a:5d:5f:8c:c8:ec:24:ff:0f:c4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=499fb3b85764c8f376b93eca08f6538273f3566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:32:52:fb:be:98:2b:67:5d:ad:02:53:42: 50:8a:e2:4d:61:4a:83:5c:20:ee:9b:29:de:31:08: 12:da:04:a5:8e:50:08:cf:1e:12:22:58:8b:42:91: 6b:ab:f0:27:10:47:5b:ce:b4:94:1e:fd:e8:3b:42: 56:8d:d9:08:30:9d:1f:99:34:d9:32:26:16:c0:b8: e5:97:8b:da:93:d3:a5:3e:ef:90:4d:d3:03:66:89: 0f:0c:f7:1c:a2:13:88:61:03:13:58:4e:da:0c:61: de:34:48:2b:fa:20:e4:a9:c7:b6:13:46:b9:0e:80: 75:72:28:0c:af:8a:5f:23:04:93:52:ec:77:8c:88: b3:e7:e4:f4:b4:ac:8f:8b:68:80:a6:d5:bc:71:4f: 36:58:90:37:b7:fe:4a:a1:14:d7:c7:83:ef:0b:7c: 29:a5:09:28:d4:23:bb:c9:15:c1:db:8c:30:ee:6d: 56:f4:29:f2:9b:2e:88:c2:b5:8a:19:58:c3:c7:a1: 05:05:6e:c8:11:db:7c:c8:6f:1a:ef:cf:58:46:70: 08:69:70:2c:2f:e7:17:93:08:5c:78:0c:e7:99:59: 04:31:03:62:94:9f:03:a3:bc:b6:96:24:8a:65:9c: b0:a5:50:31:e5:5d:a2:b4:cc:e9:05:f4:62:6e:ba: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9F:B3:B8:57:64:C8:F3:76:B9:3E:CA:08:F6:53:82:73:F3:56:6A X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:1c:f4:5c:a0:d0:43:67:2a:04:90:37:aa:17:03:ce:06:dc: 8c:8d:7a:cd:16:7a:cb:2d:40:70:8a:84:4d:64:aa:fd:32:23: 62:04:3c:cb:f5:ba:1b:c8:66:bd:a6:26:eb:80:e0:52:cb:d8: 70:5e:70:c9:70:e1:02:77:a5:e3:93:29:e4:e7:8e:38:22:68: 97:22:33:0f:8e:25:d0:a3:d1:42:ab:25:7a:2d:cb:48:61:9c: 61:11:5e:eb:34:ff:97:2d:7a:0b:ab:b8:20:72:9c:31:6c:c9: f9:55:89:31:fa:6f:98:f1:25:79:15:d6:61:3c:f5:81:e4:23: f7:b8:3f:41:71:f5:7b:60:b3:13:18:b7:18:d9:48:00:ae:fc: 43:b9:87:f0:a4:08:0d:67:5a:6c:17:f9:95:c5:5a:99:26:f2: db:a3:5f:77:f1:52:82:09:aa:66:6b:26:61:a3:51:f0:56:ce: 20:16:8b:b8:e6:bc:a4:64:80:95:6a:d8:6b:ac:64:77:6b:26: 36:5e:80:68:ba:48:26:5a:1e:3d:ef:d7:92:d7:d4:79:0e:16: 2c:d7:d0:19:74:35:f3:54:e4:ff:50:2a:74:a9:dd:5d:b4:91: b6:82:e3:fc:29:da:42:eb:75:dd:e2:a4:95:0b:1d:c8:2f:a7: 7d:ad:52:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQtCuipdX4zI7CT/D8QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg0OTlmYjNiODU3NjRjOGYzNzZiOTNlY2EwOGY2NTM4MjczZjM1NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlkyUvu+mCtnXa0CU0JQiuJNYUqD XCDumyneMQgS2gSljlAIzx4SIliLQpFrq/AnEEdbzrSUHv3oO0JWjdkIMJ0fmTTZ MiYWwLjll4vak9OlPu+QTdMDZokPDPccohOIYQMTWE7aDGHeNEgr+iDkqce2E0a5 DoB1cigMr4pfIwSTUux3jIiz5+T0tKyPi2iAptW8cU82WJA3t/5KoRTXx4PvC3wp pQko1CO7yRXB24ww7m1W9Cnymy6IwrWKGVjDx6EFBW7IEdt8yG8a789YRnAIaXAs L+cXkwhceAznmVkEMQNilJ8Do7y2liSKZZywpVAx5V2itMzpBfRibroThwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmfs7hXZMjzdrk+ygj2U4Jz81ZqMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Rz0XKDQ Q2cqBJA3qhcDzgbcjI16zRZ6yy1AcIqETWSq/TIjYgQ8y/W6G8hmvaYm64DgUsvY cF5wyXDhAnel45Mp5OeOOCJolyIzD44l0KPRQqslei3LSGGcYRFe6zT/ly16C6u4 IHKcMWzJ+VWJMfpvmPEleRXWYTz1geQj97g/QXH1e2CzExi3GNlIAK78Q7mH8KQI DWdabBf5lcVamSby26Nfd/FSggmqZmsmYaNR8FbOIBaLuOa8pGSAlWrYa6xkd2sm Nl6AaLpIJloePe/XktfUeQ4WLNfQGXQ181Tk/1AqdKndXbSRtoLj/CnaQut13eKk lQsdyC+nfa1Siw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:50 2025 by rpki-client