This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json) Hash identifier: QxYGr+VC/mehOwkc6d07czFESXaMSbHCURTxpYakn0g= Subject key identifier: 1D:7E:2D:A1:C8:BD:28:A9:90:E0:CA:F4:75:3F:87:F6:18:D8:13:B3 Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Certificate serial: 019AAC14B9D22BB7C0FE8D79AA0999FBBCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft Manifest number: 0937 Signing time: Sat 22 Nov 2025 15:00:30 +0000 Manifest this update: Sat 22 Nov 2025 15:00:30 +0000 Manifest next update: Sun 23 Nov 2025 15:00:30 +0000 Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=) 2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=) 3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=) 4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: ReY7Ybv5ZvCva3B9pdvFHqXzyrjKajkamwhxH0o2rOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:b9:d2:2b:b7:c0:fe:8d:79:aa:09:99:fb:bc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Validity Not Before: Nov 22 15:00:30 2025 GMT Not After : Nov 23 15:00:30 2025 GMT Subject: CN=1d7e2da1c8bd28a990e0caf4753f87f618d813b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:05:e2:07:eb:ef:7e:25:3f:46:2d:44:0e: ba:b4:00:ee:82:d5:c2:ab:c4:e8:b9:32:2d:7b:2d: a3:5a:51:54:e5:d9:6d:8a:8d:0c:b8:b3:89:f0:65: 56:2f:cb:57:b2:ba:bd:f4:02:c8:8c:c5:2e:01:c7: 7b:52:51:72:71:b5:e3:3a:83:a8:bd:10:b2:f8:b1: e9:56:53:3f:9d:c4:c9:56:fc:12:88:45:13:99:ce: 93:b3:b9:4f:45:76:09:a7:41:6c:3f:8a:51:78:3b: 06:8a:be:5a:02:38:26:13:82:74:e8:6f:08:3c:58: ab:8d:67:98:4a:0d:90:cd:67:9d:15:89:04:fb:0f: 9a:d7:85:c1:2c:29:6d:fc:19:b6:78:fc:90:a8:d3: 3c:f2:82:82:55:bf:e5:38:4d:91:5c:6e:8b:0e:f5: 77:ef:99:2d:9a:97:38:90:c7:fc:a9:6f:2a:a3:9a: 18:4e:60:42:03:9e:46:05:4c:67:31:06:0f:bb:0e: 69:9b:07:41:92:39:89:ac:fa:b0:34:e1:16:c1:0c: c9:e4:b1:dc:ec:39:51:a5:e6:af:ea:65:5b:b4:b4: 18:13:a7:0b:ad:06:fc:8e:85:ac:e4:b7:d1:9d:0f: 7e:b6:b6:00:45:72:4e:52:52:38:b3:1b:d5:11:b3: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:2D:A1:C8:BD:28:A9:90:E0:CA:F4:75:3F:87:F6:18:D8:13:B3 X509v3 Authority Key Identifier: keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:34:1d:e6:ec:90:ac:11:3b:83:d4:51:8c:30:d9:52:46: 37:52:4e:39:ba:28:87:07:59:79:88:58:2b:26:23:68:3e:be: 44:32:6d:5e:17:7b:c5:9f:f1:b3:89:9b:07:86:79:7f:66:10: 5e:88:8a:d9:0d:82:4b:4a:01:1e:88:49:73:35:4a:0b:b0:b5: e5:18:b3:ab:52:27:2f:c2:8d:97:8a:1a:c7:59:d6:72:bc:b9: 98:d4:d8:1f:32:1d:cf:1c:0c:eb:46:8f:8b:a4:aa:24:f4:da: e4:bf:d3:6d:6a:b3:37:13:f5:07:33:f9:29:52:59:55:43:bb: a7:55:d5:f4:56:fb:d6:1c:80:df:fc:3e:33:cc:6a:9f:19:22: 70:c7:b3:0b:70:37:6f:71:53:f6:81:4a:26:c9:cb:8f:38:6c: d3:fc:42:20:22:89:0b:de:03:1a:3d:55:45:48:a0:fc:fa:22: dd:63:ba:64:fb:23:59:78:c4:6e:8b:93:0e:24:24:da:e9:d3: af:73:dd:11:68:f4:f1:69:c2:ba:be:d8:84:5e:a1:e8:64:2b: 62:f0:72:40:95:b8:a4:fc:d5:b2:e6:6c:89:67:57:7a:b1:5e: d6:ac:9e:17:4c:81:00:01:d9:80:d8:fe:b6:2e:3f:3d:5e:86: 91:8c:e9:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFLnSK7fA/o15qgmZ+7yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3 NGYwZmQwHhcNMjUxMTIyMTUwMDMwWhcNMjUxMTIzMTUwMDMwWjAzMTEwLwYDVQQD EygxZDdlMmRhMWM4YmQyOGE5OTBlMGNhZjQ3NTNmODdmNjE4ZDgxM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoUF4gfr734lP0YtRA66tADugtXC q8TouTItey2jWlFU5dltio0MuLOJ8GVWL8tXsrq99ALIjMUuAcd7UlFycbXjOoOo vRCy+LHpVlM/ncTJVvwSiEUTmc6Ts7lPRXYJp0FsP4pReDsGir5aAjgmE4J06G8I PFirjWeYSg2QzWedFYkE+w+a14XBLClt/Bm2ePyQqNM88oKCVb/lOE2RXG6LDvV3 75ktmpc4kMf8qW8qo5oYTmBCA55GBUxnMQYPuw5pmwdBkjmJrPqwNOEWwQzJ5LHc 7DlRpeav6mVbtLQYE6cLrQb8joWs5LfRnQ9+trYARXJOUlI4sxvVEbMC/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1+LaHIvSipkODK9HU/h/YY2BOzMB8GA1UdIwQY MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt Nzc3OTRmYmZkMmU0LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0 LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtQ0Hebs kKwRO4PUUYww2VJGN1JOOboohwdZeYhYKyYjaD6+RDJtXhd7xZ/xs4mbB4Z5f2YQ XoiK2Q2CS0oBHohJczVKC7C15Rizq1InL8KNl4oax1nWcry5mNTYHzIdzxwM60aP i6SqJPTa5L/TbWqzNxP1BzP5KVJZVUO7p1XV9Fb71hyA3/w+M8xqnxkicMezC3A3 b3FT9oFKJsnLjzhs0/xCICKJC94DGj1VRUig/Poi3WO6ZPsjWXjEbouTDiQk2unT r3PdEWj08WnCur7YhF6h6GQrYvByQJW4pPzVsuZsiWdXerFe1qyeF0yBAAHZgNj+ ti4/PV6GkYzpcg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:27 2025 by rpki-client