This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json) Hash identifier: 7VFkcvONXrKWG1QeaCHy1X767K5jzKE7luTOppLrCZ4= Subject key identifier: B7:1F:0B:1E:4D:84:87:6F:9F:AB:F6:29:C9:F9:79:B8:0B:06:05:8F Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Certificate serial: 019AAC4C0B75BEC78F5D6DC9BD689DF291C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft Manifest number: 1580 Signing time: Sat 22 Nov 2025 16:00:55 +0000 Manifest this update: Sat 22 Nov 2025 16:00:55 +0000 Manifest next update: Sun 23 Nov 2025 16:00:55 +0000 Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=) 2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=) 3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: bApUS0RzTL7KEwDuHm6UoJCx6sLJDyLE2k3bJrpHb+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4c:0b:75:be:c7:8f:5d:6d:c9:bd:68:9d:f2:91:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Validity Not Before: Nov 22 16:00:55 2025 GMT Not After : Nov 23 16:00:55 2025 GMT Subject: CN=b71f0b1e4d84876f9fabf629c9f979b80b06058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:d5:39:ae:91:ea:48:20:8c:5a:c8:25:24: 63:39:9c:d5:43:e7:3c:80:58:37:5c:c5:24:af:7c: e5:e3:44:e2:83:de:a1:c1:0b:ed:66:f7:94:76:6f: 47:23:e3:32:f5:05:e8:73:da:43:06:74:f1:8f:81: 38:a7:f2:25:dc:71:8c:1a:bd:3b:3b:50:68:22:bf: dd:d4:a3:aa:5c:ea:8c:db:20:ae:8c:89:00:e6:cd: bd:a2:45:19:07:5a:01:1a:5f:dc:95:0b:b3:fb:17: 59:42:ab:a4:6d:75:67:8e:36:45:fd:65:a0:7e:3e: 07:bd:73:6c:7d:cc:7b:15:2f:c2:5c:20:e1:58:77: fc:89:86:16:4d:0a:72:96:bc:59:06:f7:56:15:f1: d8:d1:ac:76:bc:7b:e0:6e:6f:64:07:f5:d6:f0:2f: 26:cc:68:85:24:5f:84:c1:07:fb:16:ef:e2:a9:76: 1c:d2:10:1e:7b:77:c5:a5:f0:ae:60:5f:99:9c:ba: 63:54:15:b3:b2:be:86:3d:cd:72:89:f2:a2:c4:ae: 0c:c1:06:dc:96:dc:af:91:00:36:a8:ed:ea:8e:71: 44:4b:fb:0b:8d:5d:1a:90:82:0c:05:ee:b1:51:7f: 2e:b3:ee:5e:a9:d3:89:b9:fc:d6:67:86:0a:26:2a: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:0B:1E:4D:84:87:6F:9F:AB:F6:29:C9:F9:79:B8:0B:06:05:8F X509v3 Authority Key Identifier: keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:22:07:9e:6d:74:4e:25:c6:95:97:f9:b0:49:0e:67:8f:52: 70:e9:58:83:7d:5b:0a:a0:80:96:03:05:88:7e:72:d8:42:a5: 3c:30:13:24:56:74:bd:b0:53:56:ef:8b:46:e2:cf:44:13:37: f1:0e:b8:5d:a5:fa:bd:e3:76:77:f9:6b:2c:f9:7c:a1:db:5b: e3:41:27:fe:e5:37:55:e6:60:3d:70:11:90:6b:e4:7f:34:d6: bf:51:ab:eb:74:02:f0:7a:36:d1:3b:d8:52:9c:0b:1d:43:78: dc:ac:2c:fc:68:52:0e:00:d8:3b:c8:c3:2c:b2:2f:48:5c:59: 6d:a8:25:e8:c2:42:05:a0:4a:cc:bd:8c:f6:d5:6e:6b:46:54: c0:2f:ca:56:e7:a6:ad:35:43:44:62:0f:a0:c2:66:97:45:ec: 8b:2f:85:e3:d3:23:1c:5a:bd:ce:09:91:85:31:1c:18:4d:f5: d6:f7:cf:16:6c:9c:36:fc:cd:48:75:6b:b9:94:17:0d:05:ec: 1b:70:ff:aa:81:7f:7b:a9:43:db:d1:06:28:f1:d5:4a:3e:fe: 64:f7:ac:28:12:84:93:b7:25:79:b5:14:db:e3:6c:a3:58:2e: 8c:3a:d4:c0:ac:7a:a8:cd:b9:a8:55:1f:d4:50:45:91:6a:74: e2:b6:01:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsTAt1vsePXW3JvWid8pHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4 MzIwYzUwHhcNMjUxMTIyMTYwMDU1WhcNMjUxMTIzMTYwMDU1WjAzMTEwLwYDVQQD EyhiNzFmMGIxZTRkODQ4NzZmOWZhYmY2MjljOWY5NzliODBiMDYwNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8PVOa6R6kggjFrIJSRjOZzVQ+c8 gFg3XMUkr3zl40Tig96hwQvtZveUdm9HI+My9QXoc9pDBnTxj4E4p/Il3HGMGr07 O1BoIr/d1KOqXOqM2yCujIkA5s29okUZB1oBGl/clQuz+xdZQqukbXVnjjZF/WWg fj4HvXNsfcx7FS/CXCDhWHf8iYYWTQpylrxZBvdWFfHY0ax2vHvgbm9kB/XW8C8m zGiFJF+EwQf7Fu/iqXYc0hAee3fFpfCuYF+ZnLpjVBWzsr6GPc1yifKixK4MwQbc ltyvkQA2qO3qjnFES/sLjV0akIIMBe6xUX8us+5eqdOJufzWZ4YKJirsXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcfCx5NhIdvn6v2Kcn5ebgLBgWPMB8GA1UdIwQY MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSIHnm10 TiXGlZf5sEkOZ49ScOlYg31bCqCAlgMFiH5y2EKlPDATJFZ0vbBTVu+LRuLPRBM3 8Q64XaX6veN2d/lrLPl8odtb40En/uU3VeZgPXARkGvkfzTWv1Gr63QC8Ho20TvY UpwLHUN43Kws/GhSDgDYO8jDLLIvSFxZbagl6MJCBaBKzL2M9tVua0ZUwC/KVuem rTVDRGIPoMJml0Xsiy+F49MjHFq9zgmRhTEcGE311vfPFmycNvzNSHVruZQXDQXs G3D/qoF/e6lD29EGKPHVSj7+ZPesKBKEk7clebUU2+Nso1gujDrUwKx6qM25qFUf 1FBFkWp04rYBDQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:31 2025 by rpki-client