This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json) Hash identifier: fyISlsH/dmvMlEzApiF+DV6vfxUS3+jquc5U4iwcJWg= Subject key identifier: 10:FD:A8:5D:3D:65:E9:00:23:44:E2:70:96:EE:F5:86:6F:8D:44:13 Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Certificate serial: 019B48F0AB42C591798D3447EA70A5BFD906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft Manifest number: 61 Signing time: Tue 23 Dec 2025 02:01:30 +0000 Manifest this update: Tue 23 Dec 2025 02:01:30 +0000 Manifest next update: Wed 24 Dec 2025 02:01:30 +0000 Files and hashes: 1: cyBrpEHhqKNbSMHCKzs3cSq3M_g.roa (hash: RzBDnjaJmm2030+8C/HDxAp6HA2Wxhb+u2VbToBRA9U=) 2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: Y1IiA88ibToDJ+C5YEz1Rv8Cn1ofuCGsYQ7ePapWov0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:ab:42:c5:91:79:8d:34:47:ea:70:a5:bf:d9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Validity Not Before: Dec 23 02:01:30 2025 GMT Not After : Dec 24 02:01:30 2025 GMT Subject: CN=10fda85d3d65e9002344e27096eef5866f8d4413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:f6:8a:e9:2d:3e:65:40:6a:f2:94:dc:75: 92:8c:b9:8d:ba:2f:de:dd:a3:72:ae:2a:62:90:67: c1:fc:be:7f:ef:aa:cc:9f:40:d7:0a:10:cf:fb:c5: 05:f9:40:d6:83:cb:ee:c7:da:f9:61:bc:e1:8f:2e: a7:7a:2c:ac:dd:4c:d4:02:da:7a:90:d0:8f:dc:35: d4:66:f6:3a:2e:ff:1c:8f:91:db:8a:17:5d:3b:30: cf:28:2e:ae:5c:30:08:14:e4:27:e4:15:13:d7:0c: 01:5e:b6:10:7e:c2:22:87:5b:cb:15:d5:8d:9a:77: c7:e8:4b:59:99:06:75:7f:05:70:b8:b3:b5:35:5c: 21:7e:c6:31:34:87:3e:5e:e4:ba:0c:4e:25:cb:f2: 51:e8:f4:bb:48:dd:ef:83:bd:58:97:db:85:68:59: b8:e5:80:72:66:08:cc:e5:1b:6b:6f:ea:b1:c3:db: 0b:25:60:fd:cb:a0:8c:e8:06:30:e0:e1:0d:fd:3b: e5:f7:47:d0:ad:39:7f:24:fd:bd:2b:8e:ae:78:43: 49:96:48:62:f9:e2:87:d4:f3:44:17:31:56:a2:d0: 3d:2b:65:76:f9:0e:ac:25:c6:70:cb:98:6b:d5:86: b0:fa:45:94:52:c9:a4:ef:65:b6:79:0f:9c:c0:02: 7a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:A8:5D:3D:65:E9:00:23:44:E2:70:96:EE:F5:86:6F:8D:44:13 X509v3 Authority Key Identifier: keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:25:b4:de:fc:2e:d8:7c:ab:8d:8c:97:10:d7:20:8f:96:37: 77:70:f7:6a:44:ad:fc:e2:7f:35:c4:2e:77:99:8b:3c:56:1f: 74:1a:a4:79:e7:38:31:97:16:10:03:90:0a:c5:6c:b7:5d:38: f6:74:bd:79:05:09:92:42:e9:f2:d4:a3:53:f4:86:fb:52:ff: 68:77:ba:b5:10:e9:4f:fb:99:b5:3b:fe:7c:22:d7:b5:b5:9d: 4c:4e:25:f1:9a:11:b3:ea:70:4b:a5:a0:57:9c:fd:f7:6e:1c: 56:c7:80:63:13:14:01:d9:49:56:07:bb:eb:87:71:01:42:a2: 19:80:90:b7:f5:73:5b:32:c7:22:6a:8a:60:bf:b5:10:19:75: 94:8f:a4:45:00:ac:43:0e:dc:a6:84:c0:46:9e:8f:d0:d4:0d: b7:ea:86:00:0e:f9:cb:1e:c8:b1:e9:e1:a7:b1:ff:ee:b6:c6: db:ca:ca:32:62:63:55:0a:3c:f4:9d:12:17:64:74:c3:8c:7f: c1:8a:39:7e:76:b1:f8:10:e7:9b:c3:1d:b4:4a:ca:a4:c3:25: 9d:89:fb:ef:d1:cc:33:01:db:32:9b:a5:5f:54:05:af:02:ea: b7:e9:f4:58:a8:16:03:47:04:ee:27:d1:95:62:95:18:20:dc: a6:df:31:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8KtCxZF5jTRH6nClv9kGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDMxYmQ3M2UwYTdmMDM3ZGViOTdkODJkMWE5NWZjZDY3 MTA1MWMwHhcNMjUxMjIzMDIwMTMwWhcNMjUxMjI0MDIwMTMwWjAzMTEwLwYDVQQD EygxMGZkYTg1ZDNkNjVlOTAwMjM0NGUyNzA5NmVlZjU4NjZmOGQ0NDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o/2iuktPmVAavKU3HWSjLmNui/e 3aNyripikGfB/L5/76rMn0DXChDP+8UF+UDWg8vux9r5Ybzhjy6neiys3UzUAtp6 kNCP3DXUZvY6Lv8cj5HbihddOzDPKC6uXDAIFOQn5BUT1wwBXrYQfsIih1vLFdWN mnfH6EtZmQZ1fwVwuLO1NVwhfsYxNIc+XuS6DE4ly/JR6PS7SN3vg71Yl9uFaFm4 5YByZgjM5Rtrb+qxw9sLJWD9y6CM6AYw4OEN/Tvl90fQrTl/JP29K46ueENJlkhi +eKH1PNEFzFWotA9K2V2+Q6sJcZwy5hr1Yaw+kWUUsmk72W2eQ+cwAJ6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD9qF09ZekAI0TicJbu9YZvjUQTMB8GA1UdIwQY MBaAFLVDG9c+Cn8DfeuX2C0alfzWcQUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzIt MWZkOWYyYzk4OTU2LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzItMWZkOWYyYzk4OTU2 LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiW03vwu 2HyrjYyXENcgj5Y3d3D3akSt/OJ/NcQud5mLPFYfdBqkeec4MZcWEAOQCsVst104 9nS9eQUJkkLp8tSjU/SG+1L/aHe6tRDpT/uZtTv+fCLXtbWdTE4l8ZoRs+pwS6Wg V5z9924cVseAYxMUAdlJVge764dxAUKiGYCQt/VzWzLHImqKYL+1EBl1lI+kRQCs Qw7cpoTARp6P0NQNt+qGAA75yx7Isenhp7H/7rbG28rKMmJjVQo89J0SF2R0w4x/ wYo5fnax+BDnm8MdtErKpMMlnYn779HMMwHbMpulX1QFrwLqt+n0WKgWA0cE7ifR lWKVGCDcpt8xuw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:39:07 2025 by rpki-client