This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json) Hash identifier: qolti3veTvS1M/K+Sjzh/z+9mmACduacOm7JSLDtVto= Subject key identifier: DF:E9:B1:65:69:90:E6:9F:9A:64:5B:FE:64:A7:6B:D8:81:3C:72:39 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B1C8605D0646A4CFDC181C9E6AECA297A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft Manifest number: 0D24 Signing time: Sun 14 Dec 2025 11:01:43 +0000 Manifest this update: Sun 14 Dec 2025 11:01:43 +0000 Manifest next update: Mon 15 Dec 2025 11:01:43 +0000 Files and hashes: 1: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (hash: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=) 2: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=) 3: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=) 4: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=) 5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: k6JnC+JTZg0ulNr+wLUcJv4rUeo0wKIPTYPBcPNGwIs=) 6: VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa (hash: OfQxpz1wsxm2W2m9x0OXY3aGOD+jsnKHtfm8qwqJi4M=) 7: fdFl2XiI4wH-piEVhk7zyyfq2eg.roa (hash: 5I2+lvYpLwq3Mh4GrkyhIlwpMSOtqZJ0BwNyT92NYLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:86:05:d0:64:6a:4c:fd:c1:81:c9:e6:ae:ca:29:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Dec 14 11:01:43 2025 GMT Not After : Dec 15 11:01:43 2025 GMT Subject: CN=dfe9b1656990e69f9a645bfe64a76bd8813c7239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:5e:bc:19:61:a3:a2:15:4a:82:d2:d3:49: 55:41:86:c8:3c:dd:84:e1:1e:38:cb:80:d7:20:7d: 48:7a:93:e7:0d:8f:e9:ce:c8:db:02:50:de:fa:9c: 15:d7:20:55:7a:ef:db:0f:52:cb:04:1c:32:58:fa: 29:96:59:fd:60:a1:e5:4a:ab:b3:cb:fd:5c:e5:a6: a8:50:94:c2:8c:b3:12:c4:a6:32:24:e4:97:68:5a: 14:bf:0e:2a:72:1c:f1:55:74:87:e5:a6:01:6c:45: 21:23:65:24:ba:19:c2:fb:ea:26:9a:b2:89:ff:a8: cc:c9:3b:b0:0f:81:df:bb:e4:9a:9e:5c:97:38:6b: a9:95:e0:a3:80:1c:96:10:b4:64:d5:a4:44:ed:38: e6:e5:fb:a6:a4:24:2b:0e:3d:40:b1:20:22:ae:96: 67:e1:9c:e6:5b:03:dc:98:83:c3:15:43:1b:1f:30: 08:3b:ba:f0:d3:6d:4e:35:7c:74:97:27:d9:a1:d5: d9:13:7e:d8:ad:22:00:b9:a5:e8:cd:41:ec:3f:b2: fa:2d:9a:1e:8c:43:ff:32:af:19:ca:f1:3b:35:66: fc:c6:00:92:a8:82:fe:b6:0f:9e:36:c7:00:6d:10: 1f:cc:e1:73:0e:77:e8:b6:c7:4d:5d:56:3e:61:40: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:B1:65:69:90:E6:9F:9A:64:5B:FE:64:A7:6B:D8:81:3C:72:39 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:ef:f9:5b:fe:87:7f:ec:55:13:1b:8d:ea:dc:3d:64:1d: 20:93:05:ea:7a:68:4b:40:82:33:85:18:94:8d:f3:3f:fc:b9: 83:5b:e9:67:13:9e:75:b1:20:a3:a9:62:8d:b7:ad:f7:d0:33: d9:2b:7d:81:25:a6:e5:c0:37:3c:4d:09:19:d8:52:c0:bc:f1: 4f:13:94:b0:44:e0:84:5b:8a:f2:65:8d:f5:89:21:f2:43:d0: 5f:06:33:6d:80:1c:2d:37:e3:ae:b4:4e:a0:ee:56:e0:40:71: 15:d3:d6:62:53:9c:5c:30:5d:37:20:f3:34:56:b3:d6:7a:5f: 84:ab:80:ab:44:0d:0a:77:c3:33:d5:d1:88:10:43:01:33:98: e5:7c:70:ab:12:4a:3c:33:75:f4:14:e4:4e:61:54:42:20:07: 0e:a0:e6:b5:65:56:ec:56:cc:8b:7b:35:d3:4e:5c:37:43:1b: cc:ec:c2:4f:e8:44:86:89:88:94:73:bd:f0:88:c3:f0:b3:4e: 9b:b9:42:02:99:ee:7a:59:a8:95:4c:27:5a:d0:7a:69:3f:21: 82:1a:af:9f:a4:b6:e2:81:12:26:ff:00:30:9c:48:10:ae:1e: 3b:33:67:24:73:df:82:57:c0:d0:59:59:77:8e:7f:d5:1f:21: 62:33:1c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschgXQZGpM/cGByeauyil6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjUxMjE0MTEwMTQzWhcNMjUxMjE1MTEwMTQzWjAzMTEwLwYDVQQD EyhkZmU5YjE2NTY5OTBlNjlmOWE2NDViZmU2NGE3NmJkODgxM2M3MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0xevBlho6IVSoLS00lVQYbIPN2E 4R44y4DXIH1IepPnDY/pzsjbAlDe+pwV1yBVeu/bD1LLBBwyWPoplln9YKHlSquz y/1c5aaoUJTCjLMSxKYyJOSXaFoUvw4qchzxVXSH5aYBbEUhI2UkuhnC++ommrKJ /6jMyTuwD4Hfu+SanlyXOGupleCjgByWELRk1aRE7Tjm5fumpCQrDj1AsSAirpZn 4ZzmWwPcmIPDFUMbHzAIO7rw021ONXx0lyfZodXZE37YrSIAuaXozUHsP7L6LZoe jEP/Mq8ZyvE7NWb8xgCSqIL+tg+eNscAbRAfzOFzDnfotsdNXVY+YUAHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/psWVpkOafmmRb/mSna9iBPHI5MB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUbv+Vv+ h3/sVRMbjercPWQdIJMF6npoS0CCM4UYlI3zP/y5g1vpZxOedbEgo6lijbet99Az 2St9gSWm5cA3PE0JGdhSwLzxTxOUsETghFuK8mWN9Ykh8kPQXwYzbYAcLTfjrrRO oO5W4EBxFdPWYlOcXDBdNyDzNFaz1npfhKuAq0QNCnfDM9XRiBBDATOY5XxwqxJK PDN19BTkTmFUQiAHDqDmtWVW7FbMi3s1005cN0MbzOzCT+hEhomIlHO98IjD8LNO m7lCApnuelmolUwnWtB6aT8hghqvn6S24oESJv8AMJxIEK4eOzNnJHPfglfA0FlZ d45/1R8hYjMcsw== -----END CERTIFICATE-----Generated at Sun Dec 14 16:56:11 2025 by rpki-client