This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json) Hash identifier: Aa58up2xDyK65OHndeMEWLIHnsqXvSmRDU13wlTTVuQ= Subject key identifier: 1F:33:16:96:E5:CD:FF:3C:28:D4:75:0A:F7:25:C3:34:DA:31:DA:35 Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Certificate serial: 019B0F6E4ED82C2D9460EEF81038CC50EC40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 22:00:45 +0000 Manifest this update: Thu 11 Dec 2025 22:00:45 +0000 Manifest next update: Fri 12 Dec 2025 22:00:45 +0000 Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=) 2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: sHY2+AylpzfcNmxAl7VWWyTpQys9aNFCh6w7jYbW+mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:4e:d8:2c:2d:94:60:ee:f8:10:38:cc:50:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Validity Not Before: Dec 11 22:00:45 2025 GMT Not After : Dec 12 22:00:45 2025 GMT Subject: CN=1f331696e5cdff3c28d4750af725c334da31da35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:04:75:0c:d2:a2:d1:2f:ea:75:e6:39:99: a7:cd:fd:2a:b4:ac:b3:60:1d:1b:2c:fc:55:5b:c3: f3:1d:38:fd:fd:a7:5f:c3:cb:bc:c0:5e:69:b3:3f: eb:c0:ee:ac:61:d5:81:fd:f3:9c:8e:96:ad:7a:de: 4d:89:52:db:ac:ba:46:48:85:72:6b:87:72:cf:b2: 93:7e:f5:54:91:73:dc:44:e3:5a:78:11:0b:7e:f2: 99:96:c3:f1:01:9a:bf:46:56:0d:e0:df:24:15:c3: 6f:9b:f0:16:ee:04:0b:b4:e9:44:2f:a4:53:d6:66: 87:81:b8:a5:7a:c8:a9:12:19:07:ac:62:c9:97:19: 20:6e:ec:90:47:3c:70:84:ac:53:2b:d1:72:93:58: 32:1c:81:e8:6c:f3:85:a7:bf:22:76:a1:cd:a7:0c: f2:45:11:6c:71:0c:26:88:96:59:64:1f:6c:5c:2f: 68:d6:d1:cf:2c:0d:7c:c3:28:ee:17:37:82:08:43: 6c:06:ce:ed:d9:68:31:38:2b:f1:83:16:4e:9a:2e: c7:59:19:18:33:a4:4d:0f:81:f3:a7:7d:e1:1e:db: b6:0e:dd:96:d1:58:82:c6:83:c6:6d:be:6a:19:1b: 96:48:20:56:fc:2c:a1:a2:87:55:80:4b:ce:af:ff: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:16:96:E5:CD:FF:3C:28:D4:75:0A:F7:25:C3:34:DA:31:DA:35 X509v3 Authority Key Identifier: keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:73:05:d1:01:7c:aa:91:35:6f:0d:e5:b8:e3:cc:b0:6c:b7: 6f:36:49:09:73:ab:79:46:9b:33:8b:22:27:e6:24:5a:e8:f3: 49:18:62:e6:b1:81:e8:be:ac:e2:c4:74:3c:1e:a2:70:7c:a2: 95:43:b1:3b:2d:84:ab:de:20:3f:3b:15:28:e9:d5:47:69:ff: c5:ad:9b:b1:3d:1b:85:71:2e:ce:a6:44:6f:36:f0:cb:20:47: f4:61:24:a5:cf:4a:c2:34:03:b4:bb:d6:ae:d0:9b:78:29:bf: 98:b5:8f:92:5a:51:4b:42:7f:cb:6c:fc:2b:0b:d7:c6:2b:aa: 5e:a0:29:f3:2b:3e:d3:63:9b:33:d9:ba:39:af:50:ba:7d:28: ae:23:1c:36:d2:74:d1:a4:46:e5:76:a0:2b:69:89:ff:c8:b7: c7:6e:97:e1:22:2c:9d:c9:ad:31:9d:4e:c6:2b:cc:c6:6f:b3: 06:47:a1:23:95:b1:f3:2f:4d:99:57:03:f2:ce:e3:98:56:56: 78:ee:b3:79:e6:27:e9:e6:9a:6b:e9:a1:e3:df:72:47:27:74: c0:6b:0a:79:61:40:eb:4b:fe:8f:45:90:6a:39:09:b6:e1:fa: 07:d4:1f:ca:c8:8c:e1:89:69:f5:10:c9:b0:06:fd:02:a6:4f: e2:6d:c7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbk7YLC2UYO74EDjMUOxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWQyOGI3ZDAyOGNhYmI5Njg0YTgwZTE0YmFhZjE1Y2E2 ZmQyZjYwHhcNMjUxMjExMjIwMDQ1WhcNMjUxMjEyMjIwMDQ1WjAzMTEwLwYDVQQD EygxZjMzMTY5NmU1Y2RmZjNjMjhkNDc1MGFmNzI1YzMzNGRhMzFkYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz30EdQzSotEv6nXmOZmnzf0qtKyz YB0bLPxVW8PzHTj9/adfw8u8wF5psz/rwO6sYdWB/fOcjpatet5NiVLbrLpGSIVy a4dyz7KTfvVUkXPcRONaeBELfvKZlsPxAZq/RlYN4N8kFcNvm/AW7gQLtOlEL6RT 1maHgbilesipEhkHrGLJlxkgbuyQRzxwhKxTK9Fyk1gyHIHobPOFp78idqHNpwzy RRFscQwmiJZZZB9sXC9o1tHPLA18wyjuFzeCCENsBs7t2WgxOCvxgxZOmi7HWRkY M6RND4Hzp33hHtu2Dt2W0ViCxoPGbb5qGRuWSCBW/CyhoodVgEvOr/+KhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8zFpblzf88KNR1CvclwzTaMdo1MB8GA1UdIwQY MBaAFLadKLfQKMq7loSoDhS6rxXKb9L2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTIt NWM5MzIzOWU1ZTJlLzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTItNWM5MzIzOWU1ZTJl LzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnMF0QF8 qpE1bw3luOPMsGy3bzZJCXOreUabM4siJ+YkWujzSRhi5rGB6L6s4sR0PB6icHyi lUOxOy2Eq94gPzsVKOnVR2n/xa2bsT0bhXEuzqZEbzbwyyBH9GEkpc9KwjQDtLvW rtCbeCm/mLWPklpRS0J/y2z8KwvXxiuqXqAp8ys+02ObM9m6Oa9Qun0oriMcNtJ0 0aRG5XagK2mJ/8i3x26X4SIsncmtMZ1OxivMxm+zBkehI5Wx8y9NmVcD8s7jmFZW eO6zeeYn6eaaa+mh499yRyd0wGsKeWFA60v+j0WQajkJtuH6B9QfysiM4Ylp9RDJ sAb9AqZP4m3HiA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:37:38 2025 by rpki-client