This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json) Hash identifier: TcWVk0woSIMkxJ4LlJ21VOixSovQKGi2siD9bmBMaRg= Subject key identifier: A7:DC:D5:84:76:1D:D0:CC:C2:06:36:1B:70:CD:E6:43:F4:B9:39:E2 Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Certificate serial: 019AF87882C6D3E4E0EB7BD3C03F36189F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft Manifest number: 0A Signing time: Sun 07 Dec 2025 11:00:38 +0000 Manifest this update: Sun 07 Dec 2025 11:00:38 +0000 Manifest next update: Mon 08 Dec 2025 11:00:38 +0000 Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=) 2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: 0XWd1kpc5OMg20zDV+kA+6bDqNT8o0j2Q0uXsdrJEsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:82:c6:d3:e4:e0:eb:7b:d3:c0:3f:36:18:9f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Validity Not Before: Dec 7 11:00:38 2025 GMT Not After : Dec 8 11:00:38 2025 GMT Subject: CN=a7dcd584761dd0ccc206361b70cde643f4b939e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:c2:c7:a4:04:06:9e:ac:0c:73:e1:fc:48: 49:3c:08:b1:65:ef:f2:64:79:2f:c6:d3:ef:0d:b5: 5c:4d:8b:13:bd:e7:f4:ee:58:8c:7e:4a:6e:47:19: 6b:3a:1a:ae:c0:eb:e4:ad:9c:79:4d:99:8f:4b:0e: 43:ee:54:70:a9:ea:42:14:0c:7e:68:b1:6a:4e:3a: a9:2a:46:e8:e4:73:ce:68:6f:aa:eb:91:91:13:6d: 40:ca:b2:ad:a8:aa:0f:e4:40:7c:70:50:66:60:5e: b1:0f:97:78:f8:53:94:1a:57:ed:ba:ec:ae:4d:56: 1f:e1:ca:c3:dc:4a:49:65:f9:f3:30:3c:44:18:5d: b7:3d:01:d9:97:52:da:8a:eb:4b:06:5e:42:a8:94: d0:a8:f9:a0:96:0e:df:b7:99:80:a0:eb:d0:51:d2: cc:11:e3:3a:dc:bc:dc:d2:bf:7c:f5:51:ff:34:51: 79:b5:7c:a4:46:c6:4c:ea:b1:56:60:17:8a:a8:87: 40:d4:92:00:49:15:e6:1b:e6:59:4a:34:2b:e6:1a: 3e:43:a4:ae:5b:6a:0c:97:87:9f:9f:86:e6:47:4e: 39:63:a6:d8:c4:29:61:64:db:33:3e:bb:6a:22:44: 46:06:0f:3a:0e:5b:77:82:d4:3a:21:24:86:8b:61: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:D5:84:76:1D:D0:CC:C2:06:36:1B:70:CD:E6:43:F4:B9:39:E2 X509v3 Authority Key Identifier: keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:26:64:58:f5:9e:dc:23:3e:5d:fb:db:e2:26:d0:88:9f:21: b1:8e:39:ac:a5:a0:ca:16:41:77:8a:c5:50:a4:25:88:bc:07: b6:cc:63:40:cb:45:c3:b0:7e:2c:6c:39:e4:fa:95:7c:20:13: 0c:a1:7e:3c:44:96:a6:7d:1b:53:74:cf:29:c8:fc:73:cf:ab: d2:c6:ae:22:25:c7:b2:10:1f:f1:66:ea:3d:0c:ef:4a:bb:2f: e8:86:a2:40:c4:51:17:6b:a9:ee:b6:da:a2:45:99:08:de:41: 65:84:e2:c8:3e:f2:28:39:fb:47:b3:20:40:45:04:89:38:34: d3:e9:44:79:67:4a:e8:c8:10:67:57:a9:2d:fc:52:2f:1f:67: 73:fa:2f:e1:97:84:4f:80:b7:85:3f:f5:cf:c4:b6:3f:d2:ea: 25:30:10:1b:7b:2a:a7:f7:68:df:ac:ce:21:90:12:3f:22:4c: 66:6b:29:62:df:8e:28:ad:75:fe:31:c2:fa:b2:f0:4d:50:fd: 06:72:dd:89:e9:8a:66:72:22:3c:f9:ba:86:c8:41:0f:54:8b: 40:19:13:cb:f4:c2:76:19:13:0f:d1:93:2a:51:a3:e2:7a:41: 0d:49:f7:e7:3a:84:11:20:c4:6e:39:71:44:23:fc:84:2b:d6: b6:ef:04:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eILG0+Tg63vTwD82GJ93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzAwZGQ2YjEzOGQ2YWRiOGY3Yzg0MzhkZDBiMmQ4NTgz ZGM1NjYwHhcNMjUxMjA3MTEwMDM4WhcNMjUxMjA4MTEwMDM4WjAzMTEwLwYDVQQD EyhhN2RjZDU4NDc2MWRkMGNjYzIwNjM2MWI3MGNkZTY0M2Y0YjkzOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRrCx6QEBp6sDHPh/EhJPAixZe/y ZHkvxtPvDbVcTYsTvef07liMfkpuRxlrOhquwOvkrZx5TZmPSw5D7lRwqepCFAx+ aLFqTjqpKkbo5HPOaG+q65GRE21AyrKtqKoP5EB8cFBmYF6xD5d4+FOUGlftuuyu TVYf4crD3EpJZfnzMDxEGF23PQHZl1LaiutLBl5CqJTQqPmglg7ft5mAoOvQUdLM EeM63Lzc0r989VH/NFF5tXykRsZM6rFWYBeKqIdA1JIASRXmG+ZZSjQr5ho+Q6Su W2oMl4efn4bmR045Y6bYxClhZNszPrtqIkRGBg86Dlt3gtQ6ISSGi2HW9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfc1YR2HdDMwgY2G3DN5kP0uTniMB8GA1UdIwQY MBaAFLbADdaxONatuPfIQ43QsthYPcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUt NTY0ZDE4YzY4NjJiLzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUtNTY0ZDE4YzY4NjJi LzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyZkWPWe 3CM+Xfvb4ibQiJ8hsY45rKWgyhZBd4rFUKQliLwHtsxjQMtFw7B+LGw55PqVfCAT DKF+PESWpn0bU3TPKcj8c8+r0sauIiXHshAf8WbqPQzvSrsv6IaiQMRRF2up7rba okWZCN5BZYTiyD7yKDn7R7MgQEUEiTg00+lEeWdK6MgQZ1epLfxSLx9nc/ov4ZeE T4C3hT/1z8S2P9LqJTAQG3sqp/do36zOIZASPyJMZmspYt+OKK11/jHC+rLwTVD9 BnLdiemKZnIiPPm6hshBD1SLQBkTy/TCdhkTD9GTKlGj4npBDUn35zqEESDEbjlx RCP8hCvWtu8EkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 17:15:45 2025 by rpki-client