This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: yZbHCen3uW7SGcNAN7okmDmg3zTYozTLlM4Ld1v/4m0= Subject key identifier: 56:6B:66:37:6D:93:FB:2E:7A:36:D6:BA:85:15:0F:95:BB:95:BC:5F Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B0D80821D4BDE41BA88EC3F0ACB063AB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F87 Signing time: Thu 11 Dec 2025 13:01:24 +0000 Manifest this update: Thu 11 Dec 2025 13:01:24 +0000 Manifest next update: Fri 12 Dec 2025 13:01:24 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 3: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 4: 9ybQ34e8dEmBjQ6HOBBKZDyyZdQ.roa (hash: cdlCSuNwjoKBSHjatuM6HP4m/AWkOkUbKPwUi14aP4g=) 5: GYn3-F2uO_h2EHGbW3621tL76oU.roa (hash: /RXXjZL0Nfv6I7oI+hupErcQ8bgbLDwmluOriUWccuY=) 6: HnAH4hdPwphL9pnrJM2oi5WzFjM.roa (hash: SKK/yufvQ72Law3tDBhQYqMJ7CuB7oHAbYb1kLK3rog=) 7: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 8: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: Hk5+2AYubEpw2ZJXcD07h8krICD72/6Vy/Mvka8mIDw=) 9: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 10: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 11: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:82:1d:4b:de:41:ba:88:ec:3f:0a:cb:06:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Dec 11 13:01:24 2025 GMT Not After : Dec 12 13:01:24 2025 GMT Subject: CN=566b66376d93fb2e7a36d6ba85150f95bb95bc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:e9:e1:b8:40:ee:64:3c:db:11:84:07:14: b5:f0:f2:bf:ac:c9:81:d0:a9:22:ac:2c:60:f9:ca: c2:ba:8c:39:f8:69:e9:94:fc:4f:48:e5:ab:c6:32: 8c:3b:cd:66:e9:4e:d0:b0:a6:0b:4b:01:d0:7a:6a: 44:6c:13:f5:09:b7:3f:5b:64:5f:8f:ba:26:94:71: ef:31:21:6a:cd:3c:11:ea:5c:26:d1:2b:5e:fb:16: b1:ea:35:4d:48:51:28:f8:b8:92:8b:de:bd:83:2a: 54:10:8f:7b:1f:57:64:ab:50:d8:fd:71:f4:c0:86: f4:18:13:6b:da:5f:8a:25:b0:52:48:d6:cc:f9:a7: 04:59:c0:20:c3:d4:cd:91:fc:e7:dc:55:0b:72:28: b1:3e:f0:42:a2:b3:b3:a9:f0:e3:b5:49:b7:a7:c5: 2e:2a:a7:16:4b:fb:9a:bb:09:c5:87:00:37:b1:ad: 7e:14:63:1c:83:29:12:27:2b:01:8b:6e:f8:be:11: 75:e8:fb:78:76:d7:38:1e:03:ae:1c:6a:dc:a8:d4: 23:f6:a0:3e:8b:90:c5:9b:df:d5:7f:1c:08:1d:2a: d7:c9:b4:8e:6c:e2:39:8d:44:21:32:88:47:8a:f2: f3:91:b2:91:bd:e6:df:1c:d2:08:e7:fd:93:a0:b5: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6B:66:37:6D:93:FB:2E:7A:36:D6:BA:85:15:0F:95:BB:95:BC:5F X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c1:59:bb:b7:74:39:2a:6a:f6:a4:54:f8:90:a1:c1:70:3e: 73:6d:04:84:ba:74:a6:4a:0e:19:83:7f:25:b1:1d:c5:c7:74: bf:f8:ee:93:8a:b6:f1:e0:cc:d3:7f:6f:c0:b8:b0:39:87:58: 8d:ae:81:ab:93:e9:9b:25:f3:75:ab:80:02:07:5d:7c:56:30: 8d:a5:93:3e:9a:d6:b8:d9:81:ce:c9:c0:80:d8:f2:c5:ab:a4: 17:56:1a:d6:b6:40:f8:7f:20:bd:c6:7f:61:1a:68:a1:d0:fd: de:c5:d7:4d:61:1b:59:b2:15:77:b1:27:b8:32:e3:93:0e:33: f2:fa:d6:d8:a2:32:a1:ab:2c:00:df:c2:a7:4c:2a:44:40:4d: 81:fb:76:58:79:48:2b:f4:4b:dc:c5:2f:a9:7f:b2:00:b9:2b: c8:5b:a8:62:cb:a5:81:63:9c:2b:a6:85:6c:c4:de:38:e9:8d: e1:41:af:19:75:d3:c9:3c:c6:ed:36:05:16:df:52:e1:2b:8d: 77:f7:d0:6b:e8:00:e2:f8:0a:ff:59:86:21:3d:80:2c:91:f2: 86:6e:de:2b:65:21:30:db:87:a7:26:de:ee:5d:1f:d9:c9:86: f4:30:65:f3:45:d9:14:34:36:03:13:a9:39:c0:1f:39:2b:c8: 03:4b:41:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgIIdS95BuojsPwrLBjqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMjExMTMwMTI0WhcNMjUxMjEyMTMwMTI0WjAzMTEwLwYDVQQD Eyg1NjZiNjYzNzZkOTNmYjJlN2EzNmQ2YmE4NTE1MGY5NWJiOTViYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Lp4bhA7mQ82xGEBxS18PK/rMmB 0KkirCxg+crCuow5+GnplPxPSOWrxjKMO81m6U7QsKYLSwHQempEbBP1Cbc/W2Rf j7omlHHvMSFqzTwR6lwm0Ste+xax6jVNSFEo+LiSi969gypUEI97H1dkq1DY/XH0 wIb0GBNr2l+KJbBSSNbM+acEWcAgw9TNkfzn3FULciixPvBCorOzqfDjtUm3p8Uu KqcWS/uauwnFhwA3sa1+FGMcgykSJysBi274vhF16Pt4dtc4HgOuHGrcqNQj9qA+ i5DFm9/VfxwIHSrXybSObOI5jUQhMohHivLzkbKRvebfHNII5/2ToLUP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZrZjdtk/suejbWuoUVD5W7lbxfMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcFZu7d0 OSpq9qRU+JChwXA+c20EhLp0pkoOGYN/JbEdxcd0v/juk4q28eDM039vwLiwOYdY ja6Bq5PpmyXzdauAAgddfFYwjaWTPprWuNmBzsnAgNjyxaukF1Ya1rZA+H8gvcZ/ YRpoodD93sXXTWEbWbIVd7EnuDLjkw4z8vrW2KIyoassAN/Cp0wqREBNgft2WHlI K/RL3MUvqX+yALkryFuoYsulgWOcK6aFbMTeOOmN4UGvGXXTyTzG7TYFFt9S4SuN d/fQa+gA4vgK/1mGIT2ALJHyhm7eK2UhMNuHpybe7l0f2cmG9DBl80XZFDQ2AxOp OcAfOSvIA0tBNg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:29 2025 by rpki-client