This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json) Hash identifier: 9ELp75xzGx2BE3nWzo4fBEPBbqnBVsAvR8AGN3TADsE= Subject key identifier: 18:D2:0E:75:F6:84:83:21:03:9C:17:52:D6:3B:77:51:9B:C7:29:76 Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a Certificate serial: 019AF12CF00DE2AA9306E649DB5F80307650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft Manifest number: 1309 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: nqRmyRsi2-hKiZqffDikHhIZIA8.roa (hash: vx+mbFW9leAh9kJ2X2Cv3OUNnkvDKbo77etkxvxrmFM=) 2: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: SqSMppMXFZp0IIhynSBf6eaffxp7WYeEd6pVE9DKREU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f0:0d:e2:aa:93:06:e6:49:db:5f:80:30:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=18d20e75f6848321039c1752d63b77519bc72976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:b6:b5:c6:15:8a:b2:a5:54:79:5e:68:a1: 1b:3f:95:c7:9c:17:ff:bf:c5:a5:06:64:cd:2c:b0: 0d:e3:f8:50:a8:81:d7:80:80:31:00:38:95:3d:c6: 7b:c9:a5:2d:47:56:59:2a:1a:a7:e8:a9:79:72:4e: c7:d8:47:18:dd:02:b3:8f:89:07:30:c5:c1:33:1e: af:f0:18:f0:3e:6e:b4:7c:96:42:cc:84:d2:5f:c0: 72:5c:70:57:f9:3a:3f:dc:f4:32:e6:73:e4:01:96: 13:f9:64:6c:2f:bf:c1:de:b6:b1:95:7d:a5:e2:67: 55:86:4e:d8:44:79:ea:c7:6c:e7:da:ba:e5:a1:77: 81:2b:37:d6:da:95:52:d6:1f:6b:d7:53:77:ff:66: eb:57:8c:0b:cc:da:da:02:12:fe:67:78:b6:fb:c7: ff:1d:1f:80:3a:f7:35:03:1e:9f:ab:02:dc:5f:59: d8:26:73:6c:46:03:dc:fb:d6:d8:8c:b3:d3:9a:d0: 2e:85:47:55:fc:30:85:18:81:b2:c6:9c:bc:87:85: 6e:5f:90:f1:60:40:6b:ab:e6:1d:3d:36:cf:2c:45: 54:d4:e8:44:80:9f:13:e2:4e:28:8e:f9:c8:9b:1e: f1:7a:6f:00:ea:22:65:b2:b7:ff:ba:48:61:72:08: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D2:0E:75:F6:84:83:21:03:9C:17:52:D6:3B:77:51:9B:C7:29:76 X509v3 Authority Key Identifier: keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:20:e1:3d:a2:f8:c4:a3:93:fa:4b:bf:07:53:bd:ea:1a:83: 42:d2:4c:7d:39:7d:3d:f2:fe:92:8b:09:ea:fe:92:5a:1e:73: d4:41:47:b8:5a:68:49:6a:01:b2:6c:28:f0:3f:0d:ce:c7:46: 74:d8:c4:14:6d:e2:be:b1:78:77:8a:42:e8:2d:33:9d:ca:c1: 41:5e:2b:ea:70:19:c2:65:ba:4c:d9:5a:76:3a:74:01:c5:3c: 42:ca:19:f0:a6:9a:30:47:db:30:bb:bd:90:aa:32:1e:0c:95: 4e:04:b4:2f:eb:95:6c:6e:7a:b8:25:da:73:bc:a0:6f:8a:1c: 8e:0d:ce:f0:74:20:3b:77:a5:74:47:61:eb:92:40:24:b7:f4: f1:4d:42:07:3f:45:24:71:52:9e:3e:21:5d:16:d2:62:fa:ca: af:0f:f4:c2:c2:38:12:f5:ad:9a:24:aa:e4:80:4f:87:71:8c: a2:5d:7e:ad:2a:ae:b6:14:16:c4:45:fc:9c:3f:90:57:d9:6d: 20:b8:5c:26:74:0b:6e:2f:77:80:1d:0c:cc:0b:4c:be:ff:65: 67:e9:96:67:dd:bc:8e:b9:60:a7:d2:25:c9:07:fc:35:00:60: 7f:3a:b9:d4:bc:64:dc:a4:5e:51:ed:b3:e4:ea:b5:be:16:50: 3c:2c:d2:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPAN4qqTBuZJ21+AMHZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZDhiMjdhYWE1NWU1MWEzNDVmNmE0NTE5ZTM2Nzk1NTA0 NmMzMGEwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EygxOGQyMGU3NWY2ODQ4MzIxMDM5YzE3NTJkNjNiNzc1MTliYzcyOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6C2tcYVirKlVHleaKEbP5XHnBf/ v8WlBmTNLLAN4/hQqIHXgIAxADiVPcZ7yaUtR1ZZKhqn6Kl5ck7H2EcY3QKzj4kH MMXBMx6v8BjwPm60fJZCzITSX8ByXHBX+To/3PQy5nPkAZYT+WRsL7/B3raxlX2l 4mdVhk7YRHnqx2zn2rrloXeBKzfW2pVS1h9r11N3/2brV4wLzNraAhL+Z3i2+8f/ HR+AOvc1Ax6fqwLcX1nYJnNsRgPc+9bYjLPTmtAuhUdV/DCFGIGyxpy8h4VuX5Dx YEBrq+YdPTbPLEVU1OhEgJ8T4k4ojvnImx7xem8A6iJlsrf/ukhhcgjGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjSDnX2hIMhA5wXUtY7d1Gbxyl2MB8GA1UdIwQY MBaAFLTYsnqqVeUaNF9qRRnjZ5VQRsMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMt Yzc1ODYyODJmZTEzLzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMtYzc1ODYyODJmZTEz LzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyDhPaL4 xKOT+ku/B1O96hqDQtJMfTl9PfL+kosJ6v6SWh5z1EFHuFpoSWoBsmwo8D8NzsdG dNjEFG3ivrF4d4pC6C0zncrBQV4r6nAZwmW6TNladjp0AcU8QsoZ8KaaMEfbMLu9 kKoyHgyVTgS0L+uVbG56uCXac7ygb4ocjg3O8HQgO3eldEdh65JAJLf08U1CBz9F JHFSnj4hXRbSYvrKrw/0wsI4EvWtmiSq5IBPh3GMol1+rSquthQWxEX8nD+QV9lt ILhcJnQLbi93gB0MzAtMvv9lZ+mWZ928jrlgp9IlyQf8NQBgfzq51Lxk3KReUe2z 5Oq1vhZQPCzSuw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:22 2025 by rpki-client