This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json) Hash identifier: irL3if9KOTg5h7OKiJPcX7Uc6e9OmKteABtbgYxyrig= Subject key identifier: 48:71:CB:C6:80:B7:09:A2:34:E0:35:2E:44:CE:D2:54:7C:00:47:8C Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0 Certificate serial: 019B31FABD852BCBDB1B726A5398C778DDEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft Manifest number: 0934 Signing time: Thu 18 Dec 2025 15:01:14 +0000 Manifest this update: Thu 18 Dec 2025 15:01:14 +0000 Manifest next update: Fri 19 Dec 2025 15:01:14 +0000 Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: d2XRkzTkbKXoTvayIA5PzBC7Du/KF/RZYZ6WuZPqGkQ=) 2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:bd:85:2b:cb:db:1b:72:6a:53:98:c7:78:dd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0 Validity Not Before: Dec 18 15:01:14 2025 GMT Not After : Dec 19 15:01:14 2025 GMT Subject: CN=4871cbc680b709a234e0352e44ced2547c00478c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:cd:6c:2f:8c:b1:c5:fe:f4:7e:06:51:08: 34:2a:c8:2a:6d:6d:57:49:7d:19:37:f9:65:11:23: b8:86:bf:90:62:7c:36:a5:50:8d:1d:85:37:20:6e: e6:f4:7e:4d:66:0f:ea:88:04:c7:01:45:7c:c1:f7: ee:76:83:2b:54:62:8a:ca:41:93:92:b1:b5:42:ca: cf:02:4b:4f:55:e3:d7:24:76:5d:22:a3:05:0e:3f: d2:7b:e1:ab:9e:d3:fc:03:44:45:a6:e9:c2:87:33: 2d:a6:e7:6c:e9:1a:6c:f3:eb:e7:f5:50:08:07:7c: 7f:0c:e8:b3:8b:9e:c0:5f:d9:8c:b3:95:b3:04:c7: 6d:5f:d5:0b:7e:38:6a:ad:2f:bb:d2:0f:e7:4e:47: 2a:db:c7:fd:95:d1:d1:70:97:d1:69:98:f1:1c:67: ce:e1:e6:ff:ff:0e:c0:50:7a:f2:3a:b7:9c:4d:24: 7d:67:36:ac:b0:e8:40:3e:ed:c4:db:68:0f:c6:b4: 48:1b:35:00:42:6e:2c:c1:3c:ac:91:11:dd:60:3e: 52:81:ec:6b:a5:b3:35:ae:31:8a:64:d6:99:73:47: ac:23:f3:db:b5:5d:d4:e3:b4:5d:a0:db:62:c4:b0: 7c:e7:22:b3:0b:b6:4a:0f:d7:ff:fa:75:b0:3b:ba: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:71:CB:C6:80:B7:09:A2:34:E0:35:2E:44:CE:D2:54:7C:00:47:8C X509v3 Authority Key Identifier: keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:33:60:f1:5d:22:36:ce:be:be:18:7f:16:91:17:e1:6e: a7:12:7a:70:27:76:95:35:46:58:94:62:5f:7a:02:86:98:3b: bd:20:0b:b0:6e:1b:a4:94:a6:99:31:a6:df:cc:45:a7:e4:8d: fd:48:50:53:20:5f:1d:cd:de:bf:ec:a3:6a:b1:42:8c:cf:36: b4:04:17:b0:d8:9c:4c:48:bd:3e:0e:94:9b:14:86:cb:b5:c9: 1e:00:94:9a:31:02:b5:b7:ba:97:eb:a9:d5:12:01:0f:81:15: c8:cf:00:bc:d3:6d:ca:c2:5b:b4:81:93:33:3c:23:b4:30:7c: e3:62:55:9d:ed:6c:b8:34:f9:44:3e:38:04:4b:e7:6e:9b:b4: 13:23:08:a3:d2:80:3a:ed:3b:46:b7:be:68:b3:c9:c0:e7:47: 51:22:7c:b9:0f:33:bf:e6:3d:66:d7:aa:36:c5:d5:27:e7:15: 3a:cf:eb:d2:2d:ae:19:0b:11:74:b6:92:af:9e:02:61:f2:60: 04:8e:7b:35:73:3e:0b:36:06:d7:39:57:4c:4e:71:63:d7:4e: ac:e1:a2:24:24:ae:fe:a8:ca:55:5f:e9:05:a9:2f:36:a4:18: 80:99:1d:d9:2b:dd:5c:34:83:2e:a8:ca:f7:d6:3d:31:e8:62: 26:e9:5f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+r2FK8vbG3JqU5jHeN3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz MzZkZDAwHhcNMjUxMjE4MTUwMTE0WhcNMjUxMjE5MTUwMTE0WjAzMTEwLwYDVQQD Eyg0ODcxY2JjNjgwYjcwOWEyMzRlMDM1MmU0NGNlZDI1NDdjMDA0NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08XNbC+MscX+9H4GUQg0KsgqbW1X SX0ZN/llESO4hr+QYnw2pVCNHYU3IG7m9H5NZg/qiATHAUV8wffudoMrVGKKykGT krG1QsrPAktPVePXJHZdIqMFDj/Se+GrntP8A0RFpunChzMtpuds6Rps8+vn9VAI B3x/DOizi57AX9mMs5WzBMdtX9ULfjhqrS+70g/nTkcq28f9ldHRcJfRaZjxHGfO 4eb//w7AUHryOrecTSR9ZzassOhAPu3E22gPxrRIGzUAQm4swTyskRHdYD5Sgexr pbM1rjGKZNaZc0esI/PbtV3U47RdoNtixLB85yKzC7ZKD9f/+nWwO7p42QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhxy8aAtwmiNOA1LkTO0lR8AEeMMB8GA1UdIwQY MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkQzYPFd IjbOvr4YfxaRF+FupxJ6cCd2lTVGWJRiX3oChpg7vSALsG4bpJSmmTGm38xFp+SN /UhQUyBfHc3ev+yjarFCjM82tAQXsNicTEi9Pg6UmxSGy7XJHgCUmjECtbe6l+up 1RIBD4EVyM8AvNNtysJbtIGTMzwjtDB842JVne1suDT5RD44BEvnbpu0EyMIo9KA Ou07Rre+aLPJwOdHUSJ8uQ8zv+Y9ZteqNsXVJ+cVOs/r0i2uGQsRdLaSr54CYfJg BI57NXM+CzYG1zlXTE5xY9dOrOGiJCSu/qjKVV/pBakvNqQYgJkd2SvdXDSDLqjK 99Y9MehiJulfVw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:50 2025 by rpki-client