This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: MmYbkHp5QuUmifMIg+6o5d77lsY5x24b89iny64da48= Subject key identifier: 06:36:F9:DA:3D:BC:96:9C:20:35:19:82:C4:6B:54:2C:DB:AA:31:73 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B24AC53B7CF332B6CFB17B591E1F969C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F93 Signing time: Tue 16 Dec 2025 01:00:31 +0000 Manifest this update: Tue 16 Dec 2025 01:00:31 +0000 Manifest next update: Wed 17 Dec 2025 01:00:31 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 3: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 4: 9ybQ34e8dEmBjQ6HOBBKZDyyZdQ.roa (hash: cdlCSuNwjoKBSHjatuM6HP4m/AWkOkUbKPwUi14aP4g=) 5: GYn3-F2uO_h2EHGbW3621tL76oU.roa (hash: /RXXjZL0Nfv6I7oI+hupErcQ8bgbLDwmluOriUWccuY=) 6: HnAH4hdPwphL9pnrJM2oi5WzFjM.roa (hash: SKK/yufvQ72Law3tDBhQYqMJ7CuB7oHAbYb1kLK3rog=) 7: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 8: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: WekKr5GzqW2JSCSMWwNZCPRN46GYzD+XopvxH32WALw=) 9: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 10: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 11: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:53:b7:cf:33:2b:6c:fb:17:b5:91:e1:f9:69:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Dec 16 01:00:31 2025 GMT Not After : Dec 17 01:00:31 2025 GMT Subject: CN=0636f9da3dbc969c20351982c46b542cdbaa3173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:c2:42:e4:ad:71:a6:25:54:af:da:ce:3f: a3:e3:4c:6f:5e:9d:6b:a1:b5:9e:97:15:f7:99:da: 6a:12:b9:9d:ad:09:03:4b:d8:65:b8:f1:05:7f:8b: 0c:85:f7:16:af:18:79:07:fd:52:f2:80:d6:0c:8b: c9:46:ef:f3:ab:a4:70:68:ea:9e:55:31:f0:db:00: 7c:68:2a:4e:10:a5:53:b2:3e:37:00:08:ce:83:1b: f3:08:f7:bd:3f:03:4a:be:a9:01:9e:24:f9:e6:0f: a7:07:51:63:c7:a2:d5:16:16:13:83:6e:a2:80:b3: 7f:60:e4:b8:5a:65:e6:37:e0:48:57:91:4f:3c:ce: 3f:08:75:53:c8:d3:c8:c2:11:d1:7b:e3:1d:79:97: c8:a3:73:7c:b5:6a:ae:50:ad:74:3b:37:4c:ef:14: 0e:e9:06:ad:21:9c:b8:88:c8:66:30:58:74:72:91: 64:02:9d:e1:b5:a0:da:cc:a0:f2:22:08:00:52:41: 29:ae:22:dc:3a:79:be:43:9e:dc:20:a1:11:62:75: 2b:70:8c:94:5a:2d:37:e0:68:e0:df:40:52:bc:b3: 3a:ef:99:a2:72:0f:59:f6:b7:05:e5:ab:dc:33:43: 14:b4:83:68:3e:5d:4f:01:34:da:fa:62:fb:0f:56: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:F9:DA:3D:BC:96:9C:20:35:19:82:C4:6B:54:2C:DB:AA:31:73 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2e:e4:64:eb:69:be:36:2d:8c:33:8e:ec:a3:ab:02:09:e9: fb:08:0c:cb:7f:08:f1:c1:59:72:fd:bf:a0:53:65:95:b4:21: a5:6f:5e:ad:43:94:e8:49:ec:82:57:a9:ee:93:ed:f8:f7:8a: a8:85:05:fb:6f:98:79:79:d4:c0:ba:70:19:8d:8a:75:f1:48: b8:94:4e:47:8c:3a:56:87:43:9b:b9:96:91:23:cc:47:20:de: bd:87:19:97:fd:c3:98:b3:7a:20:85:8c:09:90:72:4e:49:33: 13:a8:7c:f8:4b:c5:d5:5e:59:27:5a:cc:7f:09:41:68:14:81: c1:d7:1c:be:68:9f:b7:86:b1:1b:62:5c:fb:1a:59:0f:8d:c0: 8f:69:09:5f:72:2f:42:0d:e3:d2:be:ff:f9:29:6f:75:14:78: a4:e2:33:7c:2c:65:8e:3a:a8:58:8a:f2:5b:63:59:74:7c:cf: bf:38:1e:28:be:f4:a1:48:d2:69:37:ea:b8:32:61:d9:8d:5d: 84:81:e8:2c:08:4e:18:5b:02:32:b2:a7:ce:83:7e:3e:43:bb: c5:a2:a7:e6:3e:6a:03:df:f9:71:ba:7d:f7:6c:97:71:96:c0: af:cb:2e:0b:31:d3:c3:04:86:07:9c:07:ef:95:cb:a7:2c:2d: d5:91:ae:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrFO3zzMrbPsXtZHh+WnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMjE2MDEwMDMxWhcNMjUxMjE3MDEwMDMxWjAzMTEwLwYDVQQD EygwNjM2ZjlkYTNkYmM5NjljMjAzNTE5ODJjNDZiNTQyY2RiYWEzMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshLCQuStcaYlVK/azj+j40xvXp1r obWelxX3mdpqErmdrQkDS9hluPEFf4sMhfcWrxh5B/1S8oDWDIvJRu/zq6RwaOqe VTHw2wB8aCpOEKVTsj43AAjOgxvzCPe9PwNKvqkBniT55g+nB1Fjx6LVFhYTg26i gLN/YOS4WmXmN+BIV5FPPM4/CHVTyNPIwhHRe+MdeZfIo3N8tWquUK10OzdM7xQO 6QatIZy4iMhmMFh0cpFkAp3htaDazKDyIggAUkEpriLcOnm+Q57cIKERYnUrcIyU Wi034Gjg30BSvLM675micg9Z9rcF5avcM0MUtINoPl1PATTa+mL7D1bGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY2+do9vJacIDUZgsRrVCzbqjFzMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC7kZOtp vjYtjDOO7KOrAgnp+wgMy38I8cFZcv2/oFNllbQhpW9erUOU6Ensglep7pPt+PeK qIUF+2+YeXnUwLpwGY2KdfFIuJROR4w6VodDm7mWkSPMRyDevYcZl/3DmLN6IIWM CZByTkkzE6h8+EvF1V5ZJ1rMfwlBaBSBwdccvmift4axG2Jc+xpZD43Aj2kJX3Iv Qg3j0r7/+SlvdRR4pOIzfCxljjqoWIryW2NZdHzPvzgeKL70oUjSaTfquDJh2Y1d hIHoLAhOGFsCMrKnzoN+PkO7xaKn5j5qA9/5cbp992yXcZbAr8suCzHTwwSGB5wH 75XLpywt1ZGuSw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:24 2025 by rpki-client