This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json) Hash identifier: AACSaNe1yvoEutBySsENX9J8loLCeF7Bt0r6bnmcwTo= Subject key identifier: 07:19:3D:A9:33:6D:46:0C:3B:47:77:BF:83:7A:B5:6B:BC:CF:B4:F3 Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad Certificate serial: 019AAC82BE70F636160AC3C92630FC573AB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft Manifest number: 1259 Signing time: Sat 22 Nov 2025 17:00:40 +0000 Manifest this update: Sat 22 Nov 2025 17:00:40 +0000 Manifest next update: Sun 23 Nov 2025 17:00:40 +0000 Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=) 2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=) 3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: I2sPbCU779f3/1cs358FR+L+ms5rUQU3S5Q2wQDJulM=) 4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:be:70:f6:36:16:0a:c3:c9:26:30:fc:57:3a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad Validity Not Before: Nov 22 17:00:40 2025 GMT Not After : Nov 23 17:00:40 2025 GMT Subject: CN=07193da9336d460c3b4777bf837ab56bbccfb4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:e8:09:47:bd:db:bc:28:6f:0f:95:5f:df: f0:ae:ec:f7:b6:85:a0:ef:92:95:23:ea:01:7c:00: 68:3b:8f:e6:fe:04:d8:9f:0f:9a:38:de:37:79:8f: 55:b2:27:e1:44:12:4d:67:12:f0:fc:6f:a5:e1:c2: 8e:1f:c9:b3:13:1f:03:21:bc:8a:e1:cf:7d:28:d5: 63:d0:1c:2b:fb:a6:7e:59:4b:54:a4:93:a9:34:1d: 0d:ed:05:9e:14:1a:03:ca:cc:a3:b4:d5:8e:8e:b8: f6:4b:7a:61:df:e9:1f:bb:cb:c3:0d:01:a9:2b:9d: 2d:ee:32:c1:9d:fa:bc:50:dd:f8:9d:2a:3e:14:66: 82:c8:b4:6a:7a:cc:8d:0f:05:f8:10:9c:07:37:01: b2:d6:e7:bc:83:25:1c:78:64:8a:a7:a3:87:fc:40: fe:61:bb:8f:3e:26:89:05:1e:18:9d:20:cf:fd:15: 25:35:ff:db:dd:62:36:fd:eb:e7:55:69:f5:d9:6b: 20:67:6e:e1:04:73:9b:a9:57:ec:b3:58:26:02:7f: cc:05:7c:f8:3c:dc:83:a8:5f:bf:60:64:f5:89:3f: 74:29:4b:38:27:c6:d3:f4:ee:78:cc:40:ff:8b:9d: b3:67:4a:97:12:1b:91:43:cf:54:90:2d:c8:09:b1: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:3D:A9:33:6D:46:0C:3B:47:77:BF:83:7A:B5:6B:BC:CF:B4:F3 X509v3 Authority Key Identifier: keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:36:de:d9:ad:d3:d8:fc:48:a4:e9:e4:ea:bc:ad:23:0c:3e: 95:03:89:3d:59:ea:7c:08:f9:36:c9:50:04:fd:9b:13:bf:3c: 50:bd:b9:4a:d7:90:39:c2:05:3f:7c:61:e0:94:5b:bd:c9:da: ef:e0:df:6e:68:93:89:17:00:51:31:ec:20:30:37:4c:93:21: 53:18:2f:38:cb:b1:51:79:19:73:92:45:8c:71:d9:52:25:4d: 19:01:c4:1d:b7:f0:e7:3f:af:d7:cc:1e:a5:96:6f:75:69:8f: 4d:bc:5f:c8:a2:ee:7b:7c:24:e1:95:22:68:c3:73:7b:87:96: 00:01:5b:06:01:d9:ae:d3:9b:35:dd:a6:2c:2a:e6:39:b2:59: db:9b:5c:3c:9a:96:6d:81:13:6c:35:24:ff:3a:4b:c1:82:76: a7:10:b4:e8:6a:90:7f:7c:cf:94:6d:72:4e:eb:d7:8d:98:15: cd:ad:37:29:49:73:58:fd:26:38:38:f8:3c:87:26:c1:de:9a: e3:31:1d:da:c8:7e:8c:e0:b4:3c:05:18:d4:66:f8:b3:4f:99: 97:b1:39:3b:64:4c:30:ed:fa:b1:1c:11:f9:a4:3f:a9:be:e8: 0a:89:dc:e5:55:3c:5f:8e:c5:7e:9b:ea:d5:33:7f:ff:86:05: 16:12:8b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgr5w9jYWCsPJJjD8VzqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx NmYzYWQwHhcNMjUxMTIyMTcwMDQwWhcNMjUxMTIzMTcwMDQwWjAzMTEwLwYDVQQD EygwNzE5M2RhOTMzNmQ0NjBjM2I0Nzc3YmY4MzdhYjU2YmJjY2ZiNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF7oCUe927wobw+VX9/wruz3toWg 75KVI+oBfABoO4/m/gTYnw+aON43eY9VsifhRBJNZxLw/G+l4cKOH8mzEx8DIbyK 4c99KNVj0Bwr+6Z+WUtUpJOpNB0N7QWeFBoDysyjtNWOjrj2S3ph3+kfu8vDDQGp K50t7jLBnfq8UN34nSo+FGaCyLRqesyNDwX4EJwHNwGy1ue8gyUceGSKp6OH/ED+ YbuPPiaJBR4YnSDP/RUlNf/b3WI2/evnVWn12WsgZ27hBHObqVfss1gmAn/MBXz4 PNyDqF+/YGT1iT90KUs4J8bT9O54zED/i52zZ0qXEhuRQ89UkC3ICbGGewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcZPakzbUYMO0d3v4N6tWu8z7TzMB8GA1UdIwQY MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTbe2a3T 2PxIpOnk6rytIww+lQOJPVnqfAj5NslQBP2bE788UL25SteQOcIFP3xh4JRbvcna 7+DfbmiTiRcAUTHsIDA3TJMhUxgvOMuxUXkZc5JFjHHZUiVNGQHEHbfw5z+v18we pZZvdWmPTbxfyKLue3wk4ZUiaMNze4eWAAFbBgHZrtObNd2mLCrmObJZ25tcPJqW bYETbDUk/zpLwYJ2pxC06GqQf3zPlG1yTuvXjZgVza03KUlzWP0mODj4PIcmwd6a 4zEd2sh+jOC0PAUY1Gb4s0+Zl7E5O2RMMO36sRwR+aQ/qb7oConc5VU8X47Ffpvq 1TN//4YFFhKLwQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:28 2025 by rpki-client