This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: WYyumrrHspLRS5pcfTxweAMttxMDBI5gvDqW5PTfrPE= Subject key identifier: 70:B4:46:64:14:81:65:C9:39:1C:00:24:DD:54:8F:8C:6B:D4:01:65 Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019AEFACEF261B929517927C91D500A4636F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0EE8 Signing time: Fri 05 Dec 2025 18:01:19 +0000 Manifest this update: Fri 05 Dec 2025 18:01:19 +0000 Manifest next update: Sat 06 Dec 2025 18:01:19 +0000 Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=) 2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=) 3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=) 4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: Vyke7Kay/s+0/3knfc2ljiY2/QCg+PUhTBonwsA7uE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:ef:26:1b:92:95:17:92:7c:91:d5:00:a4:63:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Dec 5 18:01:19 2025 GMT Not After : Dec 6 18:01:19 2025 GMT Subject: CN=70b44664148165c9391c0024dd548f8c6bd40165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:09:f9:2d:e5:f1:51:4a:67:fc:4b:4d:63: 5c:c0:4b:02:90:87:80:62:52:c2:67:a8:f7:7e:ee: 23:5f:51:5f:12:7a:3a:6d:26:26:f9:ee:30:35:ef: 3c:51:12:df:4a:2a:a8:0a:f4:38:6a:4e:44:76:b1: 4b:25:ce:6b:b8:b5:65:fd:db:1a:5e:7d:ca:1e:2a: 85:fe:f0:71:92:e5:b9:04:ad:c5:08:6c:76:ea:1f: f2:e7:3f:29:6d:52:46:6c:88:d9:6b:9b:a9:d1:3e: 72:27:cd:af:40:0d:27:bc:3e:e3:73:1b:db:ed:ea: 74:a4:0f:63:15:11:a0:79:93:b0:dc:12:1e:fb:e5: bf:0a:18:12:f6:d3:a1:85:18:ee:f0:22:27:0c:3f: 1e:b3:7b:87:e3:a2:cb:ed:ef:b1:b7:05:5c:52:ae: 55:22:53:f8:f0:72:67:05:54:c2:f4:02:58:8c:26: 59:07:63:53:a4:6c:fa:fe:58:bf:ce:d4:7b:38:9a: 40:07:2f:af:2e:3f:6a:97:7c:ed:ac:e4:51:1e:8d: 17:89:59:7f:ac:8a:63:cd:25:a2:c6:40:e4:e6:9d: 9f:5f:9e:69:2a:14:a6:98:0d:e7:f3:a6:4b:25:93: 05:5f:05:94:45:61:77:04:93:4c:21:44:d1:f7:cb: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:46:64:14:81:65:C9:39:1C:00:24:DD:54:8F:8C:6B:D4:01:65 X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:21:a6:5c:4a:eb:45:7c:be:86:ff:e5:f8:5a:72:fd:1f: 88:ef:9e:fa:cd:8b:6b:8f:0f:07:9f:58:8d:71:28:7b:e5:af: 13:67:cf:c2:96:0f:1c:84:87:7b:10:4f:7a:f3:e6:cd:ee:15: 3f:84:1b:0d:0e:d2:b4:ec:2a:ba:43:b9:77:ad:a2:72:26:eb: 6a:58:ec:5e:34:98:8f:39:49:ad:a1:12:1b:18:cd:b0:da:66: 76:f4:29:3a:bd:c5:7d:74:f2:b9:9c:b9:64:39:23:6a:41:92: 4b:dd:8a:ba:72:84:8b:81:2f:7e:b1:97:34:7c:14:2b:07:2a: dc:2f:2c:14:1c:52:da:d4:f7:e9:94:3a:7d:89:10:ea:9f:af: d0:9f:04:55:a2:f0:e6:6a:06:06:c8:99:b2:15:92:96:40:a1: d7:84:2d:a5:6b:84:40:b2:e1:6c:21:dc:07:91:86:2c:16:b8: 12:46:b6:e2:4c:be:f3:f2:6a:f9:70:66:93:08:a9:30:29:8a: 28:62:dd:82:85:39:cd:b3:d8:e0:ac:37:c5:db:79:96:b1:14: 85:68:bb:dc:be:fe:9c:88:d1:c1:dd:cf:f3:17:4a:49:ec:c8: 24:c1:93:76:6b:80:62:95:70:1d:a3:26:d1:39:50:02:ae:41: 1d:28:45:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrO8mG5KVF5J8kdUApGNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjUxMjA1MTgwMTE5WhcNMjUxMjA2MTgwMTE5WjAzMTEwLwYDVQQD Eyg3MGI0NDY2NDE0ODE2NWM5MzkxYzAwMjRkZDU0OGY4YzZiZDQwMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MoJ+S3l8VFKZ/xLTWNcwEsCkIeA YlLCZ6j3fu4jX1FfEno6bSYm+e4wNe88URLfSiqoCvQ4ak5EdrFLJc5ruLVl/dsa Xn3KHiqF/vBxkuW5BK3FCGx26h/y5z8pbVJGbIjZa5up0T5yJ82vQA0nvD7jcxvb 7ep0pA9jFRGgeZOw3BIe++W/ChgS9tOhhRju8CInDD8es3uH46LL7e+xtwVcUq5V IlP48HJnBVTC9AJYjCZZB2NTpGz6/li/ztR7OJpABy+vLj9ql3ztrORRHo0XiVl/ rIpjzSWixkDk5p2fX55pKhSmmA3n86ZLJZMFXwWURWF3BJNMIUTR98sVZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC0RmQUgWXJORwAJN1Uj4xr1AFlMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIAhplxK 60V8vob/5fhacv0fiO+e+s2La48PB59YjXEoe+WvE2fPwpYPHISHexBPevPmze4V P4QbDQ7StOwqukO5d62icibraljsXjSYjzlJraESGxjNsNpmdvQpOr3FfXTyuZy5 ZDkjakGSS92KunKEi4EvfrGXNHwUKwcq3C8sFBxS2tT36ZQ6fYkQ6p+v0J8EVaLw 5moGBsiZshWSlkCh14QtpWuEQLLhbCHcB5GGLBa4Eka24ky+8/Jq+XBmkwipMCmK KGLdgoU5zbPY4Kw3xdt5lrEUhWi73L7+nIjRwd3P8xdKSezIJMGTdmuAYpVwHaMm 0TlQAq5BHShFtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:05 2025 by rpki-client