This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft File: tPljRdPyLts5XSR_e4bS1z5KAJE.mft (raw, json) Hash identifier: fZa+FSG+dyaT0Q8TjDY54HJn34L0o6wxPZzsqeEzu3w= Subject key identifier: DE:55:85:42:7C:BD:F3:24:D3:5B:11:0E:AC:38:FE:FB:AC:67:48:45 Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Certificate serial: 019AF6F891D79709A019BA64AFDF0B38A698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft Manifest number: 13EE Signing time: Sun 07 Dec 2025 04:01:16 +0000 Manifest this update: Sun 07 Dec 2025 04:01:16 +0000 Manifest next update: Mon 08 Dec 2025 04:01:16 +0000 Files and hashes: 1: 7DedS6FKqqRxhMQdTMsredCO-ec.roa (hash: UwXIiKkoxxbOonWsbkKsBFAofpKEdgb0a8h9Hm8rEFk=) 2: BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa (hash: WMiILjjnrmajQgVmU1EugIe9vhf+6CD9w7bhvMc/t+k=) 3: DQvnB8g8ydfr1eRuAPBU05IBCSY.roa (hash: 3PoHiqHAODeR+6H4KfoCCFru1dqX91tPZMvp0yS6YsQ=) 4: DefjgqgW3k0sn_tO0MEiDyeFL90.roa (hash: +8yaQDhhnZ95vny+dtdrD/Qy2l/JoW7VG40b+SfRWeM=) 5: Gg6X3rP4M_HU28IjArylySmkiPs.roa (hash: re0xx12aRVyU3Oz5YoKZNUQdKDWH3+edRSy/XUXja/E=) 6: Ng9Th0WDUlHnwzKfFfciBEcUafA.roa (hash: eNw7usxld6+OlHNgMwiycOJ5x4cMD7CEt+8UU1lok4E=) 7: Te45-h1SuAziXt4gVKN1aT8O4hM.roa (hash: r0d2Q2QSYYn2bF4r/tEM54zYpJ86K8TqM7RMI3N+2F4=) 8: tAGyNizHA9sFqrgwZZwFr5MvlyU.roa (hash: Y4agyqG7qiLYbwUkz0iIRFGAZQO0vld2Qe+1AH++h04=) 9: tPljRdPyLts5XSR_e4bS1z5KAJE.crl (hash: lgelGEDJz+cOrq9rmaLGK5WRf5/6Lrm4R3JnKt3BMzE=) 10: taNbwNau2XMQKfIJe9yRvRtEQBY.roa (hash: vkYzoX5sZUla1YZ3xFWl02lzIlXI/hyjdmA2wlgSifs=) 11: xOyDXDSjlESISzzf5hUO9Zxj8rA.roa (hash: CFmR+zkfzBWyhYtIYt+hp8mhkI6GySeOyqTa7/nfcIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:91:d7:97:09:a0:19:ba:64:af:df:0b:38:a6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Validity Not Before: Dec 7 04:01:16 2025 GMT Not After : Dec 8 04:01:16 2025 GMT Subject: CN=de5585427cbdf324d35b110eac38fefbac674845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:66:67:e3:70:7b:5b:12:11:e0:a0:27:39: 3f:99:41:68:4a:52:c0:18:b3:90:c9:39:53:a3:96: 70:1c:ce:0b:2e:6c:aa:57:b3:5e:14:1d:45:fe:49: 07:c8:4f:be:6f:56:c3:d2:8f:0e:a9:0a:d6:79:4b: aa:eb:76:b5:dc:d3:65:21:64:6d:c5:37:93:d4:57: ea:15:49:e4:12:be:bf:d9:12:f3:00:75:75:14:20: d8:b1:83:e7:b5:53:c1:b5:93:76:c1:57:49:7f:27: 8b:f2:10:88:0c:60:9e:fe:21:58:12:51:c3:77:43: 6c:96:21:88:4e:f7:05:da:f0:ff:97:53:61:7b:2e: a4:4c:13:f9:a3:33:ee:03:15:75:41:ce:50:74:c0: 28:f7:25:26:0d:4b:7c:fc:9f:9e:4d:07:dd:2f:c3: 8f:67:51:fe:85:05:9e:97:a3:c9:77:c2:cf:a9:c8: a5:42:f9:7e:6c:3b:65:6a:d5:c2:70:40:0c:4e:2f: b9:51:61:f1:af:27:f4:a8:8d:14:a6:48:6f:f3:bd: 20:8d:f8:5c:7d:bc:62:fd:65:b3:df:05:26:56:51: bc:76:37:77:3f:eb:d1:3f:a0:2c:ec:fd:e8:97:8f: 36:32:d4:19:e7:d1:a5:74:a1:6e:97:ca:5d:55:f5: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:55:85:42:7C:BD:F3:24:D3:5B:11:0E:AC:38:FE:FB:AC:67:48:45 X509v3 Authority Key Identifier: keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2c:ad:db:f9:c6:93:be:5b:93:ea:e7:3f:9f:00:7e:95:3d: d8:67:a0:23:7c:50:00:72:5b:58:75:6e:02:c3:1b:f9:eb:11: f3:42:b9:66:d1:65:73:a1:e4:5d:54:a8:27:f0:d4:74:cc:22: 89:e8:18:db:6f:12:2e:62:19:4e:db:23:d5:92:d5:97:43:a3: 86:b0:a3:e2:7b:89:51:46:17:88:ae:14:16:f7:1f:1c:09:0d: 1e:a2:0d:68:f9:df:22:f7:62:1b:f2:09:22:f0:d6:af:f0:ea: 99:f9:59:cb:2b:7e:9e:90:0c:67:2f:24:61:03:cb:e5:27:fa: 43:c3:e7:8f:29:5b:24:7f:f8:9b:51:af:7d:14:26:3b:91:23: 87:54:50:b5:12:24:3f:fe:ce:ef:0a:68:f8:e9:3c:b5:30:52: e4:23:18:c5:fb:0d:f4:ba:3e:68:b8:8e:60:09:86:ec:c8:02: 53:93:c8:d4:cb:6c:b5:3c:3e:69:b6:ff:02:05:bc:82:2f:cf: f5:df:9e:16:10:a5:66:ef:0b:87:49:55:18:45:ac:2d:8c:a3: 0c:84:fb:aa:13:ae:8e:a2:39:00:3f:f1:fd:31:06:b8:f8:ef: 3a:9d:ff:7c:66:af:99:a2:ee:a8:e8:7e:ed:57:a7:69:49:cf: 5a:82:e5:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+JHXlwmgGbpkr98LOKaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0 YTAwOTEwHhcNMjUxMjA3MDQwMTE2WhcNMjUxMjA4MDQwMTE2WjAzMTEwLwYDVQQD EyhkZTU1ODU0MjdjYmRmMzI0ZDM1YjExMGVhYzM4ZmVmYmFjNjc0ODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVmZ+Nwe1sSEeCgJzk/mUFoSlLA GLOQyTlTo5ZwHM4LLmyqV7NeFB1F/kkHyE++b1bD0o8OqQrWeUuq63a13NNlIWRt xTeT1FfqFUnkEr6/2RLzAHV1FCDYsYPntVPBtZN2wVdJfyeL8hCIDGCe/iFYElHD d0NsliGITvcF2vD/l1Nhey6kTBP5ozPuAxV1Qc5QdMAo9yUmDUt8/J+eTQfdL8OP Z1H+hQWel6PJd8LPqcilQvl+bDtlatXCcEAMTi+5UWHxryf0qI0Upkhv870gjfhc fbxi/WWz3wUmVlG8djd3P+vRP6As7P3ol482MtQZ59GldKFul8pdVfV0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5VhUJ8vfMk01sRDqw4/vusZ0hFMB8GA1UdIwQY MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt NmZjMzQzZDc3Y2QyLzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyyt2/nG k75bk+rnP58AfpU92GegI3xQAHJbWHVuAsMb+esR80K5ZtFlc6HkXVSoJ/DUdMwi iegY228SLmIZTtsj1ZLVl0OjhrCj4nuJUUYXiK4UFvcfHAkNHqINaPnfIvdiG/IJ IvDWr/DqmflZyyt+npAMZy8kYQPL5Sf6Q8PnjylbJH/4m1GvfRQmO5Ejh1RQtRIk P/7O7wpo+Ok8tTBS5CMYxfsN9Lo+aLiOYAmG7MgCU5PI1MtstTw+abb/AgW8gi/P 9d+eFhClZu8Lh0lVGEWsLYyjDIT7qhOujqI5AD/x/TEGuPjvOp3/fGavmaLuqOh+ 7VenaUnPWoLlDw== -----END CERTIFICATE-----Generated at Sun Dec 7 11:41:51 2025 by rpki-client