This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json) Hash identifier: MrNPqIWuOn8PqPXqgVk/MA3wOZ3RxxDq2nWJ8TpxIhY= Subject key identifier: 95:46:9D:AD:66:6F:D4:84:62:78:D6:60:27:8A:69:CE:CF:62:ED:9C Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c Certificate serial: 019B1B724DD9B5AAAECE37CC17D8EC270635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft Manifest number: 04F2 Signing time: Sun 14 Dec 2025 06:00:34 +0000 Manifest this update: Sun 14 Dec 2025 06:00:34 +0000 Manifest next update: Mon 15 Dec 2025 06:00:34 +0000 Files and hashes: 1: e24B7HUjem2EcUgVIiWCP9iwbs8.roa (hash: NqLDz/MGE43z7asDnz2IcWTOaDhJNwXlKh8N6TqUooc=) 2: j4i_lEr0ea0rf8oMcqwCbevGHbI.roa (hash: m0Ro3O0JJKs4a9J3JyICkVruy1q5dBuVu7UD/uXkWv8=) 3: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: nlO3lAewzhz0WgqdOBfJNY8L+HWMgigdgp73l3cDPDE=) 4: xw6VI0SfTqgX1Ykal0pt0rqVfPs.roa (hash: +mo5fxF621tUv4Tlvitq33EyXbo2V/p/J1JdJ2mFmTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:72:4d:d9:b5:aa:ae:ce:37:cc:17:d8:ec:27:06:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c Validity Not Before: Dec 14 06:00:34 2025 GMT Not After : Dec 15 06:00:34 2025 GMT Subject: CN=95469dad666fd4846278d660278a69cecf62ed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:55:70:c7:8f:0f:cb:b9:db:70:c6:f5:22: 46:ee:e9:86:7d:37:5a:29:b9:71:44:e4:40:6f:85: a1:2f:1f:14:37:3f:c3:d2:bc:d1:0c:20:2c:f5:ce: 06:c0:58:68:8e:3b:e1:c1:80:54:68:6e:10:70:21: 17:50:7d:e9:ae:fc:0d:6c:80:1b:29:a6:42:33:92: a5:dc:22:b3:68:63:57:dc:ec:da:55:4b:2c:47:54: 45:77:27:81:b2:34:a8:8e:7f:22:8b:c1:10:e8:26: e1:3b:38:4b:de:aa:99:b9:e8:c8:cd:2e:86:5a:01: a2:a6:22:9c:90:a4:ff:d5:63:fb:3b:f2:2c:09:1f: f4:77:23:35:3f:2a:65:75:8b:8d:be:b7:c0:d5:de: 52:2d:fc:9c:1f:11:01:e4:d2:24:1e:bf:60:a4:de: 1f:17:4b:1b:35:05:4c:46:28:55:f0:91:c2:80:ae: 7f:05:67:10:b1:e6:37:5b:c0:69:b2:68:55:ae:5f: fe:29:8d:c6:51:c4:7f:34:53:b4:5d:a8:1b:46:09: fd:c3:24:fe:44:a6:8b:cc:71:b0:8c:05:77:fc:79: d1:82:cb:d0:19:f7:18:36:fe:44:8e:2c:ab:e9:57: 87:32:76:56:6a:ed:7a:39:86:88:42:32:c2:8b:e0: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:9D:AD:66:6F:D4:84:62:78:D6:60:27:8A:69:CE:CF:62:ED:9C X509v3 Authority Key Identifier: keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b1:1c:1b:b4:a1:b0:17:4a:52:bf:aa:22:94:e3:c4:ed:36: de:14:9b:54:d7:ea:a3:ee:77:71:ba:5e:b1:f3:a7:4b:3b:04: 99:d2:b2:8f:07:de:19:8f:a3:5f:59:56:69:d4:fe:f2:0e:75: 70:c7:5c:a7:c0:3d:a1:02:d0:ae:c7:1a:52:a9:0a:dc:f2:ab: 66:69:a6:b8:c5:d8:f0:2e:1a:a5:63:e9:f9:95:79:e5:94:e2: a7:06:40:e2:dd:94:44:21:19:de:ae:93:a9:8d:8a:e0:92:98: ed:7d:9d:36:5c:bb:04:d3:52:96:bf:9a:32:5f:2f:39:9e:0d: 43:ec:31:35:0e:c0:e1:55:40:1e:65:c9:b6:19:24:da:6b:d4: 34:26:dc:61:b6:2f:7f:30:eb:58:2d:e8:25:ab:aa:34:8d:1c: 18:d4:32:59:84:96:38:ab:14:bf:d2:de:77:42:69:b3:e0:51: 37:85:81:39:f5:e6:23:79:19:91:cd:fb:0a:b3:ad:00:1c:8a: 48:4a:b6:63:3e:d8:c7:80:8a:36:6f:78:7f:0c:5a:46:46:65: f4:47:df:e4:17:0d:db:29:d7:34:51:96:35:03:4d:2f:8e:67: cc:5b:dc:a6:e3:22:d7:5d:7f:d8:4f:0b:6b:c0:98:a5:66:43: 39:8c:2b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbck3ZtaquzjfMF9jsJwY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3 ZjAxOGMwHhcNMjUxMjE0MDYwMDM0WhcNMjUxMjE1MDYwMDM0WjAzMTEwLwYDVQQD Eyg5NTQ2OWRhZDY2NmZkNDg0NjI3OGQ2NjAyNzhhNjljZWNmNjJlZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqpVcMePD8u523DG9SJG7umGfTda KblxRORAb4WhLx8UNz/D0rzRDCAs9c4GwFhojjvhwYBUaG4QcCEXUH3prvwNbIAb KaZCM5Kl3CKzaGNX3OzaVUssR1RFdyeBsjSojn8ii8EQ6CbhOzhL3qqZuejIzS6G WgGipiKckKT/1WP7O/IsCR/0dyM1PypldYuNvrfA1d5SLfycHxEB5NIkHr9gpN4f F0sbNQVMRihV8JHCgK5/BWcQseY3W8BpsmhVrl/+KY3GUcR/NFO0XagbRgn9wyT+ RKaLzHGwjAV3/HnRgsvQGfcYNv5Ejiyr6VeHMnZWau16OYaIQjLCi+CVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVGna1mb9SEYnjWYCeKac7PYu2cMB8GA1UdIwQY MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt YWY2MGZkNWYwNmIxLzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7EcG7Sh sBdKUr+qIpTjxO023hSbVNfqo+53cbpesfOnSzsEmdKyjwfeGY+jX1lWadT+8g51 cMdcp8A9oQLQrscaUqkK3PKrZmmmuMXY8C4apWPp+ZV55ZTipwZA4t2URCEZ3q6T qY2K4JKY7X2dNly7BNNSlr+aMl8vOZ4NQ+wxNQ7A4VVAHmXJthkk2mvUNCbcYbYv fzDrWC3oJauqNI0cGNQyWYSWOKsUv9Led0Jps+BRN4WBOfXmI3kZkc37CrOtAByK SEq2Yz7Yx4CKNm94fwxaRkZl9Eff5BcN2ynXNFGWNQNNL45nzFvcpuMi111/2E8L a8CYpWZDOYwrwQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:21 2025 by rpki-client